{"vulnerability": "cve-2020-2716", "sightings": [{"uuid": "65f25281-986b-4a05-8843-afc5abd5a22d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27161", "type": "seen", "source": "https://t.me/N0iSeBit/508", "content": "\u041d\u0430\u0439\u0434\u0435\u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Jitsi Meet:\n\n- Arbitrary Client Remote Code Execution (CVE-2020-27162)    \n- Limited Certificate Validation Bypass (CVE-2020-27161)\n\nhttps://research.nccgroup.com/2020/10/23/technical-advisory-jitsi-meet-electron-arbitrary-client-remote-code-execution-cve-2020-27162/", "creation_timestamp": "2020-10-23T21:06:54.000000Z"}, {"uuid": "e001a716-15e6-4c52-851c-621370f62283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27162", "type": "seen", "source": "https://t.me/N0iSeBit/508", "content": "\u041d\u0430\u0439\u0434\u0435\u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Jitsi Meet:\n\n- Arbitrary Client Remote Code Execution (CVE-2020-27162)    \n- Limited Certificate Validation Bypass (CVE-2020-27161)\n\nhttps://research.nccgroup.com/2020/10/23/technical-advisory-jitsi-meet-electron-arbitrary-client-remote-code-execution-cve-2020-27162/", "creation_timestamp": "2020-10-23T21:06:54.000000Z"}, {"uuid": "14316154-5564-48cd-a43a-82501890b111", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27162", "type": "published-proof-of-concept", "source": "https://t.me/binary_xor/447", "content": "\u041d\u0430\u0439\u0434\u0435\u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Jitsi Meet:\n\n- Arbitrary Client Remote Code Execution (CVE-2020-27162)    \n- Limited Certificate Validation Bypass (CVE-2020-27161)\n\nhttps://research.nccgroup.com/2020/10/23/technical-advisory-jitsi-meet-electron-arbitrary-client-remote-code-execution-cve-2020-27162/", "creation_timestamp": "2020-10-27T03:51:47.000000Z"}, {"uuid": "7d8a0fbe-1b0e-4b6d-9f5a-12fc05653dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27161", "type": "published-proof-of-concept", "source": "https://t.me/binary_xor/447", "content": "\u041d\u0430\u0439\u0434\u0435\u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Jitsi Meet:\n\n- Arbitrary Client Remote Code Execution (CVE-2020-27162)    \n- Limited Certificate Validation Bypass (CVE-2020-27161)\n\nhttps://research.nccgroup.com/2020/10/23/technical-advisory-jitsi-meet-electron-arbitrary-client-remote-code-execution-cve-2020-27162/", "creation_timestamp": "2020-10-27T03:51:47.000000Z"}, {"uuid": "4f8b4b97-a0aa-48d5-b89e-ada0c132222c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27163", "type": "seen", "source": "https://t.me/cibsecurity/15310", "content": "\u203c CVE-2020-27163 \u203c\n\nphpRedisAdmin before 1.13.2 allows XSS via the login.php username parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-10-16T07:41:48.000000Z"}, {"uuid": "1f08df5a-26cb-4a82-92f8-dd6d913fa28b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27160", "type": "seen", "source": "https://t.me/cibsecurity/15656", "content": "\u203c CVE-2020-27160 \u203c\n\nAddressed remote code execution vulnerability in AvailableApps.php that allowed escalation of privileges in Western Digital My Cloud NAS devices prior to 5.04.114 (issue 3 of 3).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-10-27T23:44:11.000000Z"}, {"uuid": "d8d2d5e6-de14-47c0-9d97-e6f9af8f97c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27165", "type": "seen", "source": "https://t.me/cibsecurity/16128", "content": "\u203c CVE-2020-27165 \u203c\n\n** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-28050. Reason: This candidate is a reservation duplicate of CVE-2020-28050. Notes: All CVE users should reference CVE-2020-28050 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-10T22:27:58.000000Z"}]}