{"vulnerability": "CVE-2020-2899", "sightings": [{"uuid": "c3447f23-44bd-44a8-9854-8cbbbe6f402c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28994", "type": "seen", "source": "https://t.me/cibsecurity/16793", "content": "\u203c CVE-2020-28994 \u203c\n\nA SQL injection vulnerability was discovered in Karenderia Multiple Restaurant System, affecting versions 5.4.2 and below. The vulnerability allows for an unauthenticated attacker to perform various tasks such as modifying and leaking all contents of the database.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-24T20:46:54.000000Z"}, {"uuid": "0d952dfe-3726-4ae9-b528-b25ee7e76a1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28991", "type": "seen", "source": "https://t.me/cibsecurity/16762", "content": "\u203c CVE-2020-28991 \u203c\n\nGitea 0.9.99 through 1.12.x before 1.12.6 does not prevent a git protocol path that specifies a TCP port number and also contains newlines (with URL encoding) in ParseRemoteAddr in modules/auth/repo_form.go.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-24T07:46:20.000000Z"}, {"uuid": "ea5523e3-f4c1-403e-a45d-4a0f5615be6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28993", "type": "seen", "source": "https://t.me/cibsecurity/16985", "content": "\u203c CVE-2020-28993 \u203c\n\nA Directory Traversal vulnerability exists in ATX miniCMTS200a Broadband Gateway through 2.0 and Pico CMTS through 2.0. Successful exploitation of this vulnerability would allow an unauthenticated attacker to retrieve administrator credentials by sending a malicious POST request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-01T18:54:07.000000Z"}]}