{"vulnerability": "CVE-2020-1358", "sightings": [{"uuid": "59c25fa1-6ecd-4982-ba83-83eb5ccf2f27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13585", "type": "seen", "source": "https://t.me/cibsecurity/23419", "content": "\u203c CVE-2020-13585 \u203c\n\nAn out-of-bounds write vulnerability exists in the PSD Header processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-11T00:41:55.000000Z"}, {"uuid": "f5ad4fd0-fc8c-41b3-ab2a-995b57388145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13581", "type": "seen", "source": "https://t.me/cibsecurity/23418", "content": "\u203c CVE-2020-13581 \u203c\n\nIn SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014), a specially crafted document can cause the document parser to copy data from a particular record type into a buffer that is smaller than the size used for the copy which will cause a heap-based buffer overflow. An attacker can entice the victim to open a document to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-11T00:41:54.000000Z"}, {"uuid": "ff89eae9-cd7f-417d-baf4-b46774d1a3f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13580", "type": "seen", "source": "https://t.me/cibsecurity/23054", "content": "\u203c CVE-2020-13580 \u203c\n\nAn exploitable heap-based buffer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office 2021\u00e2\u20ac\u2122s PlanMaker application. A specially crafted document can cause the document parser to explicitly trust a length from a particular record type and use it to write a 16-bit null relative to a buffer allocated on the stack. Due to a lack of bounds-checking on this value, this can allow an attacker to write to memory outside of the buffer and controllably corrupt memory. This can allow an attacker to earn code execution under the context of the application. An attacker can entice the victim to open a document to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-04T12:34:10.000000Z"}, {"uuid": "b53dfa3a-23a6-4707-a33a-6bffb67d808d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13583", "type": "seen", "source": "https://t.me/cibsecurity/23409", "content": "\u203c CVE-2020-13583 \u203c\n\nA denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00. A specially crafted HTTP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-11T00:41:46.000000Z"}, {"uuid": "cab9dbb3-8975-4690-8cc0-ce104363c16e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13586", "type": "seen", "source": "https://t.me/cibsecurity/23053", "content": "\u203c CVE-2020-13586 \u203c\n\nA memory corruption vulnerability exists in the Excel Document SST Record 0x00fc functionality of SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014). A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-04T12:34:09.000000Z"}, {"uuid": "d0612e75-293e-4743-aa93-54cc800247a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13583", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2582", "content": "#IoT_Security\n#SCADA_Security\nVulnerabilities in Micrium uc-HTTP\u2019s HTTP server (PoCs)\n]-> Unchecked return value DoS (CVE-2020-13582):\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1193\n]-> Null pointer dereference DoS (CVE-2020-13583):\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1194", "creation_timestamp": "2021-01-27T11:02:01.000000Z"}, {"uuid": "1a366341-7abd-42b7-a882-e8614716488c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13582", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2582", "content": "#IoT_Security\n#SCADA_Security\nVulnerabilities in Micrium uc-HTTP\u2019s HTTP server (PoCs)\n]-> Unchecked return value DoS (CVE-2020-13582):\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1193\n]-> Null pointer dereference DoS (CVE-2020-13583):\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1194", "creation_timestamp": "2021-01-27T11:02:01.000000Z"}, {"uuid": "e4906c41-b421-4092-94a9-94a786d93d53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13584", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2203", "content": "Multiple vulnerabilities in WebKit (PoCs)\n- Webkit WebSocket code execution vulnerability (CVE-2020-13543):\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1155\n- Webkit ImageDecoderGStreamer use-after-free vulnerability (CVE-2020-13584):\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1195", "creation_timestamp": "2020-12-01T11:07:01.000000Z"}, {"uuid": "d2f7231f-2c05-4ef4-9dac-1ebddde008cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13582", "type": "seen", "source": "https://t.me/cibsecurity/22672", "content": "\u203c CVE-2020-13582 \u203c\n\nA denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00. A specially crafted HTTP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-26T22:36:25.000000Z"}]}