{"uuid": "7a2a481a-7c76-41cd-9935-78342b584cc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-25860", "type": "seen", "source": "https://t.me/cissp/2061", "content": "Sunburst Backdoor\nPart 1: A Deeper Look Into The SolarWinds' Supply Chain Malware\nhttps://blog.prevasio.com/2020/12/sunburst-backdoor-deeper-look-into.html?m=1\nPart 2: DGA & The List of Victims\nhttps://blog.prevasio.com/2020/12/sunburst-backdoor-part-ii-dga-list-of.html?m=1\nPart 3: DGA & Security Software\nhttps://blog.prevasio.com/2020/12/sunburst-backdoor-part-iii-dga-security.html\n\n1. CVE-2020-35606 - Arbitrary Command Execution Vulnerability in Webmin\n// This vulnerability is bypassing the measure taken for CVE-2019-12840 and converting it into a new vector\nhttps://www.pentest.com.tr/exploits/Webmin-1962-PU-Escape-Bypass-Remote-Command-Execution.html\n\n2. SUNBURST, TEARDROP and the NetSec New Normal\nhttps://research.checkpoint.com/2020/sunburst-teardrop-and-the-netsec-new-normal\n\n3. CyRC analysis: Authentication bypass vulnerability in Java Bouncy Castle (PoC for CVE-2020-28052)\nhttps://www.synopsys.com/blogs/software-security/cve-2020-28052-bouncy-castle\n\n1. Signature bypass in RAUC embedded Linux firmware updater (PoC for CVE-2020-25860)\n\n2. A post-exploitation technique - Locating the kernel PGD on Android/aarch64\nhttps://duasynt.com/blog/android-pgd-page-tables\n\n3. Reading/writing memory of other processes using fasttrap (PoC for CVE-2020-27949)\nhttps://github.com/seemoo-lab/dtrace-memaccess_cve-2020-27949\n\nRCE when open a project in android studio that google refused to fix (still 0day) (PoC)\nhttps://seclists.org/fulldisclosure/2020/Dec/43", "creation_timestamp": "2026-09-01T17:01:07.732752Z"}