{"metadata": {"vulnerability": "CVE-2020-28595", "count": 19, "kinds": {"milestone": 5, "sighting": 4, "kev": 0, "other": 10}}, "data": [{"timestamp": "2020-11-13T00:00:00Z", "date_only": false, "value": "2020-11-13T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-28595", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-02-10T21:51:37Z", "date_only": false, "value": "2021-02-10T21:51:37.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-28595", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-02-10T21:51:37Z", "date_only": false, "value": "2021-02-10T21:51:37.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / talos", "record": "CVE-2020-28595", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-02-10T22:15:00Z", "date_only": false, "value": "2021-02-10T22:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M2F3-4GC2-3WCW", "record": "GHSA-M2F3-4GC2-3WCW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-02-10T22:15:00Z", "date_only": false, "value": "2021-02-10T22:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2020-28595", "record": "UBUNTU-CVE-2020-28595", "field": "published"}, {"timestamp": "2021-02-10T22:15:00Z", "date_only": false, "value": "2021-02-10T22:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-28595", "record": "GSD-2020-28595", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-02-10T22:15:13.470Z", "date_only": false, "value": "2021-02-10T22:15:13.470", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-28595", "record": "FKIE_CVE-2020-28595", "field": "published"}, {"timestamp": "2021-02-11T00:41:53Z", "date_only": false, "value": "2021-02-11T00:41:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/23417", "record": "CVE-2020-28595", "field": "creation_timestamp", "uuid": "d7ac2e18-304d-4352-96f6-d6d4ebea00dc", "content": "\u203c CVE-2020-28595 \u203c\n\nAn out-of-bounds write vulnerability exists in the Obj.cpp load_obj() functionality of Prusa Research PrusaSlicer 2.2.0 and Master (commit 4b040b856). A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/23417"}, {"timestamp": "2022-05-24T17:41:42Z", "date_only": false, "value": "2022-05-24T17:41:42Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M2F3-4GC2-3WCW", "record": "GHSA-M2F3-4GC2-3WCW", "field": "published"}, {"timestamp": "2022-05-24T17:41:42Z", "date_only": false, "value": "2022-05-24T17:41:42Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M2F3-4GC2-3WCW", "record": "GHSA-M2F3-4GC2-3WCW", "field": "modified"}, {"timestamp": "2022-08-31T18:49:00Z", "date_only": false, "value": "2022-08-31T18:49Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-28595", "record": "GSD-2020-28595", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-04-11T02:23:08Z", "date_only": false, "value": "2023-04-11T02:23:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/2560", "record": "CVE-2020-28595", "field": "creation_timestamp", "uuid": "dc105eb4-7c25-44d5-8c65-c2f22a93c5bf", "content": "#exploit\nMultiple vulnerabilities in PrusaSlicer\n(open-source 3-D printer)\n\n1. CVE-2020-28595:\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1219\n\n2. CVE-2020-28596:\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1220", "url": "https://t.me/CyberSecurityTechnologies/2560"}, {"timestamp": "2023-12-13T01:22:01.734Z", "date_only": false, "value": "2023-12-13T01:22:01.734376Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-28595", "record": "GSD-2020-28595", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T16:40:59.620Z", "date_only": false, "value": "2024-08-04T16:40:59.620Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-28595", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T16:40:59.620Z", "date_only": false, "value": "2024-08-04T16:40:59.620Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-28595", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T03:10:35.300Z", "date_only": false, "value": "2026-06-17T03:10:35.300", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-28595", "record": "FKIE_CVE-2020-28595", "field": "lastModified"}, {"timestamp": "2026-09-01T17:01:05.102Z", "date_only": false, "value": "2026-09-01T17:01:05.102383Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/2196", "record": "CVE-2020-28595", "field": "creation_timestamp", "uuid": "a8c1d6df-3d4c-439b-bc68-cec86b1bad5c", "content": "1. Playing with Process Memory Integrity on Linux\nhttps://redcanary.com/blog/process-memory-integrity-linux\n2. Security Advisory: MSRPC Printer Spooler Relay (CVE-2021-1678)\nhttps://www.crowdstrike.com/blog/cve-2021-1678-printer-spooler-relay-security-advisory\n\n\nBreaking Python 3 eval protections\nhttps://netsec.expert/posts/breaking-python3-eval-protections\n\nMultiple vulnerabilities in PrusaSlicer\n(open-source 3-D printer slicing program)\nCVE-2020-28595 (PoC):\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1219\nCVE-2020-28596 (PoC):\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1220\n\n1. Analyzing OOXML Files for URLs\nhttps://isc.sans.edu/forums/diary/CyberChef+Analyzing+OOXML+Files+for+URLs/27020\n2. Analysing a Lazarus Shellcode Execution Method\nhttps://research.nccgroup.com/2021/01/23/rift-analysing-a-lazarus-shellcode-execution-method", "url": "https://t.me/cissp/2196"}, {"timestamp": "2026-09-11T20:00:06.732Z", "date_only": false, "value": "2026-09-11T20:00:06.732099Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/2196", "record": "CVE-2020-28595", "field": "creation_timestamp", "uuid": "a7f30db4-4e1c-4777-a7c5-42490af001f4", "content": "1. Playing with Process Memory Integrity on Linux\nhttps://redcanary.com/blog/process-memory-integrity-linux\n2. Security Advisory: MSRPC Printer Spooler Relay (CVE-2021-1678)\nhttps://www.crowdstrike.com/blog/cve-2021-1678-printer-spooler-relay-security-advisory\n\n\nBreaking Python 3 eval protections\nhttps://netsec.expert/posts/breaking-python3-eval-protections\n\nMultiple vulnerabilities in PrusaSlicer\n(open-source 3-D printer slicing program)\nCVE-2020-28595 (PoC):\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1219\nCVE-2020-28596 (PoC):\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1220\n\n1. Analyzing OOXML Files for URLs\nhttps://isc.sans.edu/forums/diary/CyberChef+Analyzing+OOXML+Files+for+URLs/27020\n2. Analysing a Lazarus Shellcode Execution Method\nhttps://research.nccgroup.com/2021/01/23/rift-analysing-a-lazarus-shellcode-execution-method", "url": "https://t.me/cissp/2196"}, {"timestamp": "2026-10-17T09:07:41Z", "date_only": false, "value": "2026-10-17T09:07:41Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2020-28595", "record": "UBUNTU-CVE-2020-28595", "field": "modified"}]}
