{"uuid": "57a9ffcf-ef87-47b3-99c6-fed4c85ee138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-2771", "type": "seen", "source": "https://t.me/cissp/2280", "content": "SCADA Security\nThe Rockwell Automation Allen-Bradley Flex I/O input/output device is vulnerable to a denial-of-service vulnerability (PoC for CVE-2020-6088)\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1008\n\nMalware analysis\n1. Excel spreadsheets push SystemBC malware\nhttps://isc.sans.edu/diary/rss/27060\n2. New Example of XSL Script Processing aka \"Mitre T1220\"\nhttps://isc.sans.edu/forums/diary/New+Example+of+XSL+Script+Processing+aka+Mitre+T1220/27056\n3. Backdoored Browser Extensions Hid Malicious Traffic in Analytics Requests\nhttps://decoded.avast.io/janvojtesek/backdoored-browser-extensions-hid-malicious-traffic-in-analytics-requests\n4. Kobalos - A complex Linux threat to high performance computing infrastructure\nhttps://www.welivesecurity.com/2021/02/02/kobalos-complex-linux-threat-high-performance-computing-infrastructure\n]-> Report in .pdf:\nhttps://www.welivesecurity.com/wp-content/uploads/2021/01/ESET_Kobalos.pdf\n\nThe INFILTRATE effect: 6 bugs in 6 months (PoCs):\n- LPE via xscreensaver (CVE-2019-3010);\n- Low impact information disclosure via Solaris xlock (CVE-2020-2656);\n- LPE via CDE (CVE-2020-2696, CVE-2020-2944);\n- Stack-based buffer overflow in CDE libDtSvc (CVE-2020-2851);\n- Heap-based buffer overflow in Solaris whodo and w commands (CVE-2020-2771)\nhttps://github.com/0xdea/raptor_infiltrate20\n\nCVE-2021-1791:\nApple macOS - Fairplay OOB Read PoC\nhttps://gist.github.com/pwn0rz/e34ab9f6e46956621a9d4f98cf222320\n\nThreat Research\n1. Spoofing and Attacking With Skype (PoC):\n- Spoofing Links/File Names/File Size/Shared Contacts\n- Crash Skype For Any User\n- Spear Phishing With Skype\u2019s Domain\n- Breaking Out Of The Chat Bubble\nhttps://blog.thecybersecuritytutor.com/spoofing-and-attacking-with-skype\n2. The State of 0-day In the Wild Exploitation\nhttps://github.com/maddiestone/ConPresentations/blob/master/Enigma2021.StateOf0day.pdf", "creation_timestamp": "2026-09-02T01:04:53.314512Z"}