{"vulnerability": "CVE-2020-1149", "sightings": [{"uuid": "dcedc6ca-aeaa-4cd4-ba65-47e0ed17dc52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-11491", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:58.000000Z"}, {"uuid": "76ed987c-9d83-4cfb-96b9-abd0a00b020d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-11491", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/zenload_balancer_traversal.rb", "content": "", "creation_timestamp": "2020-04-16T16:13:04.000000Z"}, {"uuid": "f92004fd-b09d-4356-9850-58a781c93419", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-11493", "type": "seen", "source": "https://t.me/cibsecurity/14476", "content": "ATENTION\u203c New - CVE-2020-11493\n\nIn Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information about an uninitialized object because of direct transformation from PDF Object to Stream without concern for a crafted XObject.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-09-04T07:55:35.000000Z"}, {"uuid": "e899b1fb-be79-4a9c-8084-39f7b8df50f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-11491", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/zenload_balancer_traversal.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Basim Alabdullah\", \"Dhiraj Mishra\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a authenticated directory traversal vulnerability in Zen Load\\n          Balancer `v3.10.1`. The flaw exists in 'index.cgi' not properly handling 'filelog='\\n          parameter which allows a malicious actor to load arbitrary file path.\", \"disclosure_date\": \"2020-04-10\", \"fullname\": \"auxiliary/scanner/http/zenload_balancer_traversal\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"Zen Load Balancer Directory Traversal\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/http/zenload_balancer_traversal.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/http/zenload_balancer_traversal\", \"references\": [\"CVE-2020-11491\", \"EDB-48308\"], \"rport\": 444, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:59.622929Z"}]}