{"vulnerability": "CVE-2020-2809", "sightings": [{"uuid": "43f35d33-02ed-4a09-b454-9f305a6eb8c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28097", "type": "seen", "source": "https://t.me/cibsecurity/25676", "content": "\u203c CVE-2020-28097 \u203c\n\nThe vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback. There is a vgacon_scrolldelta out-of-bounds read, aka CID-973c096f6a85.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-06-24T16:18:26.000000Z"}, {"uuid": "fa669ed5-5579-4059-83c9-d40548832121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28093", "type": "seen", "source": "https://t.me/cibsecurity/21337", "content": "\u203c CVE-2020-28093 \u203c\n\nOn Tenda AC1200 (Model AC6) 15.03.06.51_multi devices, admin, support, user, and nobody have a password of 1234.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-28T12:28:29.000000Z"}, {"uuid": "4ff5d0b1-2ffe-4220-9029-d89d7517ba82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28095", "type": "seen", "source": "https://t.me/cibsecurity/21434", "content": "\u203c CVE-2020-28095 \u203c\n\nOn Tenda AC1200 (Model AC6) 15.03.06.51_multi devices, a large HTTP POST request sent to the change password API will trigger the router to crash and enter an infinite boot loop.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-31T00:30:52.000000Z"}, {"uuid": "0a2818b8-b7cb-45a2-b97b-cdfa01a17b4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28094", "type": "seen", "source": "https://t.me/cibsecurity/21344", "content": "\u203c CVE-2020-28094 \u203c\n\nOn Tenda AC1200 (Model AC6) 15.03.06.51_multi devices, the default settings for the router speed test contain links to download malware named elive or CNKI E-Learning.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-28T12:28:37.000000Z"}, {"uuid": "67b44f1d-6aa9-4562-bbf0-4584113bf90b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28096", "type": "seen", "source": "https://t.me/cibsecurity/21332", "content": "\u203c CVE-2020-28096 \u203c\n\nFOSCAM FHD X1 1.14.2.4 devices allow attackers (with physical UART access) to login via the ipc.fos~ password.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-28T12:28:24.000000Z"}, {"uuid": "a139c6a8-9b88-49dd-b84c-79dc6cd2412d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28092", "type": "seen", "source": "https://t.me/cibsecurity/16486", "content": "\u203c CVE-2020-28092 \u203c\n\nPESCMS Team 2.3.2 has multiple reflected XSS via the id parameter:?g=Team&m=Task&a=my&status=3&id=,?g=Team&m=Task&a=my&status=0&id=,?g=Team&m=Task&a=my&status=1&id=,?g=Team&m=Task&a=my&status=10&id=\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-18T00:39:33.000000Z"}, {"uuid": "71c3661d-85a5-4e71-a9de-34b632b972b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28091", "type": "seen", "source": "https://t.me/cibsecurity/16531", "content": "\u203c CVE-2020-28091 \u203c\n\ncxuucms v3 has a SQL injection vulnerability, which can lead to the leakage of all database data via the keywords parameter via search.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-18T20:40:43.000000Z"}]}