{"vulnerability": "CVE-2020-2954", "sightings": [{"uuid": "3d1fe88d-4d37-45a6-b7cc-e69d7f29c1a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29547", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1546", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2020-29547\n\ud83d\udd39 Description: An issue was discovered in Citadel through webcit-926. Meddler-in-the-middle attackers can pipeline commands after POP3 STLS, IMAP STARTTLS, or SMTP STARTTLS commands, injecting cleartext commands into an encrypted user session. This can lead to credential disclosure.\n\ud83d\udccf Published: 2023-05-29T00:00:00\n\ud83d\udccf Modified: 2025-01-14T17:52:53.266Z\n\ud83d\udd17 References:\n1. http://uncensored.citadel.org/msg/4576039\n2. http://uncensored.citadel.org/dotgoto?room=Citadel%20Security", "creation_timestamp": "2025-01-14T18:09:12.000000Z"}, {"uuid": "abdab1ef-9e70-4d94-96d0-3fc1a7f1bc75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29548", "type": "seen", "source": "https://t.me/cibsecurity/27456", "content": "\u203c CVE-2020-29548 \u203c\n\nAn issue was discovered in SmarterTools SmarterMail through 100.0.7537. Meddler-in-the-middle attackers can pipeline commands after a POP3 STLS command, injecting plaintext commands into an encrypted user session.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-17T22:16:11.000000Z"}, {"uuid": "0d72a9a3-15a0-4c98-b7a0-99e9752d23ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-29540", "type": "seen", "source": "https://t.me/cibsecurity/17237", "content": "\u203c CVE-2020-29540 \u203c\n\nAPI calls in the Translation API feature in Systran Pure Neural Server before 9.7.0 allow a threat actor to use the Systran Pure Neural Server as a Denial-of-Service proxy by sending a large amount of translation requests to a destination host on any given TCP port regardless of whether a web service is running on the destination port.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-08T16:30:57.000000Z"}]}