{"uuid": "5a4a3c3c-0ca4-4aeb-9e79-179489a15610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-26262", "type": "seen", "source": "https://t.me/cissp/2135", "content": "Android Penetration Testing: WebView Attacks\nhttps://www.hackingarticles.in/android-penetration-testing-webview-attacks\n\nUnvalidated User Input in MS SharePoint 2019\n(PoC for CVE-2020-1456)\n// Potential Damage/Attack Scenarios:\n- DoS/DDoS;\n- Tracking (GDPR);\n- Internal path disclosure;\n- Obfuscate attacks;\n- Reputation damage.\nhttps://slashcrypto.org/2021/01/15/CVE-2020-1456\n\n1. Sailing Past Security Measures In AD\nhttps://luemmelsec.github.io/Circumventing-Countermeasures-In-AD\n\n2. A cli for cracking, testing vulnerabilities on Json Web Token (JWT)\nhttps://github.com/mBouamama/MyJWT\n\n3. Bypass of Coturn's default access control protection\nhttps://www.rtcsec.com/post/2021/01/details-about-cve-2020-26262-bypass-of-coturns-default-access-control-protection\n\nAbusing cloud services to fly under the radar\nhttps://blog.fox-it.com/2021/01/12/abusing-cloud-services-to-fly-under-the-radar", "creation_timestamp": "2026-09-01T17:01:05.582989Z"}