{"vulnerability": "CVE-2020-15504", "sightings": [{"uuid": "64200cc2-993e-41bd-bcdb-966d41719315", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-15504", "type": "seen", "source": "https://t.me/CyberGovIL/888", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d1-XG Firewall \u05e9\u05dc Sophos | Com753\n\n\u05d1\u05d7\u05d5\u05d3\u05e9 \u05d9\u05d5\u05dc\u05d9 2020 \u05d3\u05d9\u05d5\u05d5\u05d7\u05d4 \u05d7\u05d1\u05e8\u05ea Sophos \u05e2\u05dc \u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05de\u05e1\u05d5\u05d2 SQL injection (CVE-2020-15504) \u05d1\u05de\u05d5\u05e6\u05e8 XG Firewall, \u05d4\u05e2\u05dc\u05d5\u05dc\u05d4 \u05dc\u05d0\u05e4\u05e9\u05e8 \u05dc\u05ea\u05d5\u05e7\u05e3 \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7, \u05d6\u05d0\u05ea \u05dc\u05d0\u05d7\u05e8 \u05e9\u05d3\u05d5\u05d5\u05d7 \u05e2\u05dc \u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d3\u05d5\u05de\u05d4 \u05d1\u05d7\u05d5\u05d3\u05e9 \u05d0\u05e4\u05e8\u05d9\u05dc (CVE-2020-12271).\n\u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05d1\u05d7\u05d5\u05df \u05d5\u05dc\u05d4\u05ea\u05e7\u05d9\u05df \u05d1\u05d4\u05e7\u05d3\u05dd \u05d4\u05d0\u05e4\u05e9\u05e8\u05d9 \u05d2\u05e8\u05e1\u05d4 \u05e2\u05d3\u05db\u05e0\u05d9\u05ea.", "creation_timestamp": "2020-10-19T12:56:35.000000Z"}, {"uuid": "36923d01-f1e4-4844-9a7e-33573bd20a29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-15504", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/1447", "content": "#exploit\n1. Sophos XG Firewall - A Tale of the Unfortunate Re-engineering of an N-Day and the Lucky Find of a 0-Day\nhttps://codewhitesec.blogspot.com/2020/07/sophos-xg-tale-of-unfortunate-re.html\n]-&gt; CVE-2020-15504 - Sophos XG RCE:\nhttps://www.anquanke.com/post/id/210817\n\n2. CVE-2020-1362:\nExploiting an Elevation of Privilege bug in Windows 10.0.18363.815, x64\nhttps://github.com/Q4n/CVE-2020-1362", "creation_timestamp": "2022-06-24T15:03:39.000000Z"}]}