{"uuid": "69992547-ebd4-423d-a98a-abb2608bedad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9054", "type": "exploited", "source": "https://t.me/hacking_Attack/9638", "content": "f525.png https://s.w.org/images/core/emoji/13.0.1/72x72/1f525.png pic.twitter.com/yzgUs2CQO5\n\n\u2014 Axel Souchet (@0vercl0k) May 16, 2021 And Thus Does the Exploit Lifecycle Crank Up AgainThe publishing of a PoC code like this is typically the first step in the lifecycle of an exploit. As explained by Trend Micro\u2019s Mayra Rosario Fuentes at the RSA Conference 2021 on Monday, the next step in that lifecycle is for crooks to sell it.\n\nAfter it\u2019s in the wild, a vulnerability moves into the stage of public disclosure. Next, the vendor patches the vulnerability. Finally, that vulnerability goes down two paths: If it\u2019s patched, that\u2019s it, end of life. If not, the exploit\u2019s still there, waiting to be purchased on underground forums and set free on whichever unlucky victims haven\u2019t yet patched.\n\nOne example is the eight-month lifecycle of CVE-2020-9054: an exploit sold on the XSS cybercriminal forum for $20,000 in February 2020 that got written up by cybersecurity journalist Brian Krebs, was publicly disclosed and patched by Microsoft in March 2020, and wound up being exploited by a botnet a month later. That botnet, a variant of the Mirai botnet\u00a0named Mukashi that targeted Zyxel network-attached storage (NAS) devices, allowed threat actors to remotely compromise and control devices. See Also: Hacking Stories: Xbox UndergroundFive months after it was patched, in August 2020, another forum post requested an exploit, offering a bargain basement payment of $2,000. It\u2019s a tenth of the original exploit, but a solid indication that some vulnerabilities have a long shelf life \u2013 most particularly if they\u2019re used to crack open Microsoft products. Microsoft exploits, after all, are by far the most-requested\u00a0and the most-sold exploit flavors on the underground market: All the more reason to heed Microsoft\u2019s advice to prioritize patching for this one.\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Untitled-design-3-1-90x90.png Microsoft, Google Clouds Hijacked for Gobs of Phishing1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Untitled-design-2-2-90x90.png Microsoft, Adobe Exploits Top List of Crooks\u2019 Wish List2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Untitled-design-3-90x90.png Bizarro Banking Trojan Sports Sophisticated Backdoor3 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Safari_Browser-90x90.jpg \u2018Scheme Flooding\u2019 Allows Websites to Track Users Across Browsers4 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Mac-Malware-90x90.jpg Apple\u2019s \u2018Find My\u2019 Network Exploited via Bluetooth7 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Untitled-design-2-1-90x90.png GitHub Prepares to Move Beyond Passwords1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Untitled-design-2-90x90.png Wormable Windows Bug Opens Door to DoS, RCE1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Yellow-Duck-Malware-90x90.jpg Lemon Duck Cryptojacking Botnet Changes Up Tactics1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/iPhone-Jailbreak-90x90.jpg iPhone Hack Allegedly Used to Spy on China\u2019s Uyghurs2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/cisco-jabber-90x90.jpg Critical Cisco SD-WAN, HyperFlex Bugs Threaten Corporate Networks2 weeks ago\nThe post Windows PoC Exploit Released for Wormable RCE first appeared on Black Hat Ethical Hacking.\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-09T00:00:39.741729Z"}