{"vulnerability": "CVE-2020-2787", "sightings": [{"uuid": "ec3a87e9-686e-4880-9fc1-8423f7125c79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27870", "type": "seen", "source": "https://t.me/cibsecurity/23424", "content": "\u203c CVE-2020-27870 \u203c\n\nThis vulnerability allows remote attackers to disclose sensitive information on affected installations of SolarWinds Orion Platform 2020.2.1. Authentication is required to exploit this vulnerability. The specific flaw exists within ExportToPDF.aspx. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose information in the context of SYSTEM. Was ZDI-CAN-11917.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-17T18:22:56.000000Z"}, {"uuid": "f3da96b3-d6a9-4263-9386-61f4ff1574e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27874", "type": "seen", "source": "https://t.me/cibsecurity/23423", "content": "\u203c CVE-2020-27874 \u203c\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM Decoder. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-11580.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-11T02:47:14.000000Z"}, {"uuid": "b48c5181-5097-4896-b73e-015e5539bb9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27871", "type": "seen", "source": "https://t.me/cibsecurity/23422", "content": "\u203c CVE-2020-27871 \u203c\n\nThis vulnerability allows remote attackers to create arbitrary files on affected installations of SolarWinds Orion Platform 2020.2.1. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within VulnerabilitySettings.aspx. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-11902.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-11T02:47:13.000000Z"}, {"uuid": "9e9dacf6-7bc2-4d3e-bb32-eaa8fbfea266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27873", "type": "seen", "source": "https://t.me/cibsecurity/23089", "content": "\u203c CVE-2020-27873 \u203c\n\nThis vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SOAP API endpoint, which listens on TCP port 80 by default. The issue results from the lack of proper access control. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-11559.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-04T20:34:40.000000Z"}, {"uuid": "ff4e5329-767f-4fe3-83ad-90e093e2fb4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27872", "type": "seen", "source": "https://t.me/cibsecurity/23080", "content": "\u203c CVE-2020-27872 \u203c\n\nThis vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the mini_httpd service, which listens on TCP port 80 by default. The issue results from improper state tracking in the password recovery process. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-11365.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-04T20:34:30.000000Z"}, {"uuid": "c696429c-cb9c-4b58-929f-187a5423e3a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27870", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2696", "content": "#Threat_Research:\n1. CVE-2020-35700:\nExploiting a Second-Order SQL Injection in LibreNMS < 21.1.0 (PoC)\nhttps://www.horizon3.ai/disclosures/librenms-second-order-sqli\n2. CVE-2020-27870:\nDirectory Traversal leading to arbitrary file read\nhttps://www.zerodayinitiative.com/blog/2021/2/11/three-more-bugs-in-orions-belt", "creation_timestamp": "2021-02-13T20:36:37.000000Z"}]}