{"uuid": "b2e05bf1-41eb-464c-9029-a0ae762c0bac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-29583", "type": "seen", "source": "https://t.me/cissp/1993", "content": "1. DNS Vulnerabilities and the Cloud\nhttps://unit42.paloaltonetworks.com/dns-vulnerabilities\n\n2. Operation SignSight: Supply\u2011chain \ud83e\udd2aattack against a certification authority in Southeast Asia\nhttps://www.welivesecurity.com/2020/12/17/operation-signsight-supply-chain-attack-southeast-asia\n\n1. Automation for internal Windows Penetrationtest/AD-Security\nhttps://github.com/S3cur3Th1sSh1t/WinPwn\n\n2. A Visual Studio Code Extension agent for Mythic C2\nhttps://github.com/MythicAgents/venus\n]-> Harvis to automate C2 Infrastructure\nhttps://github.com/thiagomayllart/Harvis\n\n1. SearchDimension search hijackers: An overview of developments\nhttps://blog.malwarebytes.com/adware/2020/12/searchdimension-search-hijackers\n\n2. AutoHotKey Credential Stealer\nhttps://www.trendmicro.com/en_us/research/20/l/stealth-credential-stealer-targets-us-canadian-bank-customers.html\n\n3. New Golang Worm Drops XMRig Miner on Servers\nhttps://www.intezer.com/blog/research/new-golang-worm-drops-xmrig-miner-on-servers/?fbclid=IwAR3eFiHCNoqr5mc2UAOcm8nocjUOjZn0cpcAiSoYmn__JtJfBbjqUUT1OwQ\n\n4.A detailed analysis of Derusbi DLL Backdoor\nhttps://cybergeeks.tech/analyzing-apt19-malware-using-a-step-by-step-method\n\n5.Ransomware-Reports\nhttps://github.com/d4rk-d4nph3/Ransomware-Reports\n\n\n1. Account Takeover (ATO) and Email verification bypass\nhttps://medium.com/@karthiksoft007/account-takeover-ato-and-email-verification-bypass-in-2mins-5a6c8cb692a7\n\n2. Troubleshooting Empire and PoshC2_Python HTTPS Connections\nhttps://www.attackdebris.com/?p=515\n\nDeep Dive into Site Isolation\nPart 1:\nhttps://microsoftedge.github.io/edgevr/posts/deep-dive-into-site-isolation-part-1\nPart 2:\nhttps://microsoftedge.github.io/edgevr/posts/deep-dive-into-site-isolation-part-2\n\nGoogle Docs Vulnerability (PoC)\nhttps://savebreach.com/stealing-private-documents-through-a-google-docs-bug\n\nCVE-2020-10148 (local file disclosure PoC for SolarWinds Orion aka door to SuperNova)\nhttps://gist.github.com/0xsha/75616ef6f24067c4fb5b320c5dfa4965\n\nUndocumented user account in Zyxel USG/USG FLEX, ATP, VPN, ZyWALL (CVE-2020-29583)\nhttps://www.eyecontrol.nl/blog/undocumented-user-account-in-zyxel-products.html\nPoC:\nUsername: zyfwp\nPassword: PrOw!aN_fXp\n\nExamining CVE-2020-27932 on macOS 10.15.7\nhttps://worthdoingbadly.com/specialreply\nPoC:\nhttps://gist.github.com/zhuowei/861fd8878397d9696303259f40cb01b3", "creation_timestamp": "2026-09-02T01:04:58.434153Z"}