{"metadata": {"vulnerability": "CVE-2020-6107", "count": 19, "kinds": {"milestone": 5, "sighting": 4, "kev": 0, "other": 10}}, "data": [{"timestamp": "2020-01-07T00:00:00Z", "date_only": false, "value": "2020-01-07T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-6107", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-10-15T14:45:08Z", "date_only": false, "value": "2020-10-15T14:45:08.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-6107", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-10-15T15:15:00Z", "date_only": false, "value": "2020-10-15T15:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-25X6-6C2H-M4MM", "record": "GHSA-25X6-6C2H-M4MM", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-10-15T15:15:00Z", "date_only": false, "value": "2020-10-15T15:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2020-6107", "record": "UBUNTU-CVE-2020-6107", "field": "published"}, {"timestamp": "2020-10-15T15:15:00Z", "date_only": false, "value": "2020-10-15T15:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-6107", "record": "GSD-2020-6107", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-10-15T15:15:11.763Z", "date_only": false, "value": "2020-10-15T15:15:11.763", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-6107", "record": "FKIE_CVE-2020-6107", "field": "published"}, {"timestamp": "2020-10-15T18:40:43Z", "date_only": false, "value": "2020-10-15T18:40:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/15294", "record": "CVE-2020-6107", "field": "creation_timestamp", "uuid": "dcd19abf-ce19-4459-82c5-9ee91b2588e9", "content": "\u203c CVE-2020-6107 \u203c\n\nAn exploitable information disclosure vulnerability exists in the dev_read functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause an uninitialized read resulting in an information disclosure. An attacker can provide a malicious file to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/15294"}, {"timestamp": "2021-01-26T02:06:12Z", "date_only": false, "value": "2021-01-26T02:06:12.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / talos", "record": "CVE-2020-6107", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-05-12T17:39:00Z", "date_only": false, "value": "2022-05-12T17:39Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-6107", "record": "GSD-2020-6107", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-24T17:30:46Z", "date_only": false, "value": "2022-05-24T17:30:46Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-25X6-6C2H-M4MM", "record": "GHSA-25X6-6C2H-M4MM", "field": "published"}, {"timestamp": "2022-05-24T17:30:46Z", "date_only": false, "value": "2022-05-24T17:30:46Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-25X6-6C2H-M4MM", "record": "GHSA-25X6-6C2H-M4MM", "field": "modified"}, {"timestamp": "2022-06-08T21:16:15Z", "date_only": false, "value": "2022-06-08T21:16:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/1925", "record": "CVE-2020-6107", "field": "creation_timestamp", "uuid": "6c52f717-2cb4-4102-b025-c440ae0ed77e", "content": "Vulnerability Spotlight in F2FS toolset (PoC): \nCode execution & information disclosure vulnerabilities (CVE-2020-6104, CVE-2020-6105, CVE-2020-6106, CVE-2020-6107, CVE-2020-6108)\nhttps://blog.talosintelligence.com/2020/10/vuln-spotlight-f2fs-tools-.html", "url": "https://t.me/CyberSecurityTechnologies/1925"}, {"timestamp": "2023-12-13T01:21:55.348Z", "date_only": false, "value": "2023-12-13T01:21:55.348659Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-6107", "record": "GSD-2020-6107", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T08:47:41.223Z", "date_only": false, "value": "2024-08-04T08:47:41.223Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-6107", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T08:47:41.223Z", "date_only": false, "value": "2024-08-04T08:47:41.223Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-6107", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T03:22:41.993Z", "date_only": false, "value": "2026-06-17T03:22:41.993", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-6107", "record": "FKIE_CVE-2020-6107", "field": "lastModified"}, {"timestamp": "2026-09-01T17:01:08.868Z", "date_only": false, "value": "2026-09-01T17:01:08.868667Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/1991", "record": "CVE-2020-6107", "field": "creation_timestamp", "uuid": "e805264d-baaa-4eb9-a97f-4f609fe361c5", "content": "1.The State of Exploit Development:\n80% of Exploits Publish Faster than CVEs\", 2020.\nhttps://unit42.paloaltonetworks.com/state-of-exploit-development\n\n2.CVE-2020-12928:\nPrivilege Escalation in a dynamically loaded AMD driver (AMDRyzenMasterDriver.sys) in AMD Ryzen Master V15 (Exploit PoC)\nhttps://h0mbre.github.io/RyzenMaster_CVE/#\n\n3.Vulnerability Spotlight in F2FS toolset (PoC): \nCode execution & information disclosure vulnerabilities (CVE-2020-6104, CVE-2020-6105, CVE-2020-6106, CVE-2020-6107, CVE-2020-6108)\nhttps://blog.talosintelligence.com/2020/10/vuln-spotlight-f2fs-tools-.html?m=1\n\n4.CVE-2020-16947:\nMicrosoft Outlook 2019 (16.0.13231.20262) installed on Windows 10 1909 x64 - RCE vulnerablility (Exploit PoC)\nhttps://github.com/0neb1n/CVE-2020-16947\n\n1. More TA551 (Shathak) Word docs push IcedID (Bokbot)\nhttps://isc.sans.edu/diary/rss/26674\n\n2. Nicely Obfuscated Python RAT\nhttps://isc.sans.edu/diary/rss/26680\n\n3. Collection of malware source code for a variety of platforms in an array of different programming languages\nhttps://github.com/vxunderground/MalwareSourceCode\n\nUse AWS Firewall Manager to deploy protection at scale in AWS Organizations\nhttps://aws.amazon.com/ru/blogs/security/use-aws-firewall-manager-to-deploy-protection-at-scale-in-aws-organizations\n\nDOS2RCE - A New Technique to Exploit V8 NULL Pointer Dereference Bug (+ PoC on Chrome ver.77)\nhttps://blog.br0vvnn.io/pages/blogpost.aspx?id=1&ln=0\n\nPart 1. AMSI Evasion\nhttps://0xdarkvortex.dev/index.php/2019/07/17/red-team-ttps-part-1-amsi-evasion\n\nPart 2. PUSH 0xPE, CALL 0xLOADER\nhttps://0xdarkvortex.dev/index.php/2020/10/08/red-team-ttps-part-2-push-0xpe-call-0xloader", "url": "https://t.me/cissp/1991"}, {"timestamp": "2026-09-11T22:00:04.985Z", "date_only": false, "value": "2026-09-11T22:00:04.985654Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/1991", "record": "CVE-2020-6107", "field": "creation_timestamp", "uuid": "0db9533c-4a2b-4c1b-9b0d-b49205fcc149", "content": "1.The State of Exploit Development:\n80% of Exploits Publish Faster than CVEs\", 2020.\nhttps://unit42.paloaltonetworks.com/state-of-exploit-development\n\n2.CVE-2020-12928:\nPrivilege Escalation in a dynamically loaded AMD driver (AMDRyzenMasterDriver.sys) in AMD Ryzen Master V15 (Exploit PoC)\nhttps://h0mbre.github.io/RyzenMaster_CVE/#\n\n3.Vulnerability Spotlight in F2FS toolset (PoC): \nCode execution & information disclosure vulnerabilities (CVE-2020-6104, CVE-2020-6105, CVE-2020-6106, CVE-2020-6107, CVE-2020-6108)\nhttps://blog.talosintelligence.com/2020/10/vuln-spotlight-f2fs-tools-.html?m=1\n\n4.CVE-2020-16947:\nMicrosoft Outlook 2019 (16.0.13231.20262) installed on Windows 10 1909 x64 - RCE vulnerablility (Exploit PoC)\nhttps://github.com/0neb1n/CVE-2020-16947\n\n1. More TA551 (Shathak) Word docs push IcedID (Bokbot)\nhttps://isc.sans.edu/diary/rss/26674\n\n2. Nicely Obfuscated Python RAT\nhttps://isc.sans.edu/diary/rss/26680\n\n3. Collection of malware source code for a variety of platforms in an array of different programming languages\nhttps://github.com/vxunderground/MalwareSourceCode\n\nUse AWS Firewall Manager to deploy protection at scale in AWS Organizations\nhttps://aws.amazon.com/ru/blogs/security/use-aws-firewall-manager-to-deploy-protection-at-scale-in-aws-organizations\n\nDOS2RCE - A New Technique to Exploit V8 NULL Pointer Dereference Bug (+ PoC on Chrome ver.77)\nhttps://blog.br0vvnn.io/pages/blogpost.aspx?id=1&ln=0\n\nPart 1. AMSI Evasion\nhttps://0xdarkvortex.dev/index.php/2019/07/17/red-team-ttps-part-1-amsi-evasion\n\nPart 2. PUSH 0xPE, CALL 0xLOADER\nhttps://0xdarkvortex.dev/index.php/2020/10/08/red-team-ttps-part-2-push-0xpe-call-0xloader", "url": "https://t.me/cissp/1991"}, {"timestamp": "2026-10-17T09:07:04Z", "date_only": false, "value": "2026-10-17T09:07:04Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2020-6107", "record": "UBUNTU-CVE-2020-6107", "field": "modified"}]}