{"uuid": "f866566b-e259-4a25-8ba2-0314bc9052d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9715", "type": "seen", "source": "https://t.me/cissp/1801", "content": "Red team:\n1. PowerShell obfuscation script to bypass AMSI and commercial antivirus solutions\nhttps://github.com/tokyoneon/Chimera\n\n2. JavaScript Engine Fuzzing and Exploitation Reading List\nhttps://zon8.re/posts/javascript-engine-fuzzing-and-exploitation-reading-list/\n\n3. WSUS Attacks. Part 1 - Introducing PyWSUS\nhttps://www.gosecure.net/blog/2020/09/03/wsus-attacks-part-1-introducing-pywsus/\n\n4.CVE-2020-9839:\nmacOS <10.15.4 cfprefsd Arbitrary File Write/Local Privilege Escalation (PoC)\nhttps://packetstormsecurity.com/files/159084/cfprefsd_race_condition.rb.txt\n\n5.CVE-2020-15704:\nUbuntu Desktop 20.04 - A local non-root attacker could exploit the MODPROBE_OPTIONS environment variable\nto read arbitrary root files\nhttps://www.synacktiv.com/en/publications/ubuntu-ppps-cve-2020-15704-wrap-up.html\n\n6.Simple Bugs With Complex Exploits (PoCs)\n// This post explores Project Zero Issue 2046, a seemingly unexploitable and simple bug that turns out to be exploitable in a very complex manner...\nhttps://www.elttam.com/blog/simple-bugs-with-complex-exploits/#content\n\n7.Maltego <4.2.12 XXE Analysis (CVE-2020-24656)\nhttps://www.hackersforchange.com/post/maltego-cve-2020-24656-analysis\n\n8.CVE-2020-9715: \nExploiting a Use-After-Free in Adobe Reader (PoC)\nhttps://www.zerodayinitiative.com/blog/2020/9/2/cve-2020-9715-exploiting-a-use-after-free-in-adobe-reader", "creation_timestamp": "2026-09-01T17:01:09.926799Z"}