{"vulnerability": "CVE-2020-15704", "sightings": [{"uuid": "9dc80e6e-4aa7-497e-8dc7-332edf4f404e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-15704", "type": "published-proof-of-concept", "source": "https://t.me/canyoupwnme/6617", "content": "UBUNTU PPP'S CVE-2020-15704 WRAP-UP\nhttps://www.synacktiv.com/publications/ubuntu-ppps-cve-2020-15704-wrap-up", "creation_timestamp": "2020-09-05T09:00:00.000000Z"}, {"uuid": "8671578b-6d92-4c17-95c2-0b37d911df86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-15704", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/1704", "content": "CVE-2020-15704:\nUbuntu Desktop 20.04 - A local non-root attacker could exploit the MODPROBE_OPTIONS environment variable to read arbitrary root files\nhttps://www.synacktiv.com/en/publications/ubuntu-ppps-cve-2020-15704-wrap-up.html", "creation_timestamp": "2020-11-23T02:44:40.000000Z"}, {"uuid": "7e3b88b6-dc2f-44e3-b5e9-59209fba937d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-15704", "type": "seen", "source": "https://t.me/cissp/1801", "content": "Red team:\n1. PowerShell obfuscation script to bypass AMSI and commercial antivirus solutions\nhttps://github.com/tokyoneon/Chimera\n\n2. JavaScript Engine Fuzzing and Exploitation Reading List\nhttps://zon8.re/posts/javascript-engine-fuzzing-and-exploitation-reading-list/\n\n3. WSUS Attacks. Part 1 - Introducing PyWSUS\nhttps://www.gosecure.net/blog/2020/09/03/wsus-attacks-part-1-introducing-pywsus/\n\n4.CVE-2020-9839:\nmacOS <10.15.4 cfprefsd Arbitrary File Write/Local Privilege Escalation (PoC)\nhttps://packetstormsecurity.com/files/159084/cfprefsd_race_condition.rb.txt\n\n5.CVE-2020-15704:\nUbuntu Desktop 20.04 - A local non-root attacker could exploit the MODPROBE_OPTIONS environment variable\nto read arbitrary root files\nhttps://www.synacktiv.com/en/publications/ubuntu-ppps-cve-2020-15704-wrap-up.html\n\n6.Simple Bugs With Complex Exploits (PoCs)\n// This post explores Project Zero Issue 2046, a seemingly unexploitable and simple bug that turns out to be exploitable in a very complex manner...\nhttps://www.elttam.com/blog/simple-bugs-with-complex-exploits/#content\n\n7.Maltego <4.2.12 XXE Analysis (CVE-2020-24656)\nhttps://www.hackersforchange.com/post/maltego-cve-2020-24656-analysis\n\n8.CVE-2020-9715: \nExploiting a Use-After-Free in Adobe Reader (PoC)\nhttps://www.zerodayinitiative.com/blog/2020/9/2/cve-2020-9715-exploiting-a-use-after-free-in-adobe-reader", "creation_timestamp": "2026-09-01T17:01:09.881479Z"}, {"uuid": "8335e9d4-213e-4c0c-b966-1ff5f0cba5d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-15704", "type": "seen", "source": "https://t.me/cissp/1801", "content": "Red team:\n1. PowerShell obfuscation script to bypass AMSI and commercial antivirus solutions\nhttps://github.com/tokyoneon/Chimera\n\n2. JavaScript Engine Fuzzing and Exploitation Reading List\nhttps://zon8.re/posts/javascript-engine-fuzzing-and-exploitation-reading-list/\n\n3. WSUS Attacks. Part 1 - Introducing PyWSUS\nhttps://www.gosecure.net/blog/2020/09/03/wsus-attacks-part-1-introducing-pywsus/\n\n4.CVE-2020-9839:\nmacOS <10.15.4 cfprefsd Arbitrary File Write/Local Privilege Escalation (PoC)\nhttps://packetstormsecurity.com/files/159084/cfprefsd_race_condition.rb.txt\n\n5.CVE-2020-15704:\nUbuntu Desktop 20.04 - A local non-root attacker could exploit the MODPROBE_OPTIONS environment variable\nto read arbitrary root files\nhttps://www.synacktiv.com/en/publications/ubuntu-ppps-cve-2020-15704-wrap-up.html\n\n6.Simple Bugs With Complex Exploits (PoCs)\n// This post explores Project Zero Issue 2046, a seemingly unexploitable and simple bug that turns out to be exploitable in a very complex manner...\nhttps://www.elttam.com/blog/simple-bugs-with-complex-exploits/#content\n\n7.Maltego <4.2.12 XXE Analysis (CVE-2020-24656)\nhttps://www.hackersforchange.com/post/maltego-cve-2020-24656-analysis\n\n8.CVE-2020-9715: \nExploiting a Use-After-Free in Adobe Reader (PoC)\nhttps://www.zerodayinitiative.com/blog/2020/9/2/cve-2020-9715-exploiting-a-use-after-free-in-adobe-reader", "creation_timestamp": "2026-09-02T01:04:59.708140Z"}]}