{"vulnerability": "CVE-2020-8300", "sightings": [{"uuid": "75914081-1b44-4849-90d1-901f017d90b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-8300", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3639", "content": "#exploit\n1. CVE-2020-8300:\nDetect Citrix ADC SAML action or SAML iDP Profile config vulnerable to CVE-2020-8300 using Citrix ADC NITRO API\nhttps://github.com/stuartcarroll/CitrixADC-CVE-2020-8300\n\n2. CVE-2021-31159:\nZoho ManageEngine ServiceDesk Plus MSP - Active Directory User Enumeration\nhttps://github.com/ricardojoserf/CVE-2021-31159", "creation_timestamp": "2024-10-09T17:28:32.000000Z"}, {"uuid": "01672694-b9d4-4deb-9b88-910a5d4bf43f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-8300", "type": "seen", "source": "https://t.me/cissp/3471", "content": "Threat Research\nAn Information  Disclosure Bug in ISC BIND Server (PoC)\nhttps://www.zerodayinitiative.com/blog/2021/6/15/zdi-21-502-an-information-disclosure-bug-in-isc-bind-server\n\nMalware analysis\nAPT Ferocious Kitten\nhttps://securelist.com/ferocious-kitten-6-years-of-covert-surveillance-in-iran/102806\n\nexploit\nCVE-2020-8300:\nDetect Citrix ADC SAML action or SAML iDP Profile config vulnerable to CVE-2020-8300 using Citrix ADC NITRO API (PoC)\nhttps://github.com/stuartcarroll/CitrixADC-CVE-2020-8300\n\nCVE-2021-31159:\nZoho ManageEngine ServiceDesk Plus MSP - Active Directory User Enumeration (PoC)\nhttps://github.com/ricardojoserf/CVE-2021-31159\n\nOffensiv security \nRouter (D-Link, Zyxel, TP-Link, Huawei) exploitation tool that allows to disclosure network router admin password\ud83d\ude01\nhttps://github.com/EntySec/RomBuster", "creation_timestamp": "2026-09-01T17:00:47.717980Z"}, {"uuid": "9971702e-8d50-441c-bfec-7822d1efcbb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-8300", "type": "seen", "source": "https://t.me/cissp/3471", "content": "Threat Research\nAn Information  Disclosure Bug in ISC BIND Server (PoC)\nhttps://www.zerodayinitiative.com/blog/2021/6/15/zdi-21-502-an-information-disclosure-bug-in-isc-bind-server\n\nMalware analysis\nAPT Ferocious Kitten\nhttps://securelist.com/ferocious-kitten-6-years-of-covert-surveillance-in-iran/102806\n\nexploit\nCVE-2020-8300:\nDetect Citrix ADC SAML action or SAML iDP Profile config vulnerable to CVE-2020-8300 using Citrix ADC NITRO API (PoC)\nhttps://github.com/stuartcarroll/CitrixADC-CVE-2020-8300\n\nCVE-2021-31159:\nZoho ManageEngine ServiceDesk Plus MSP - Active Directory User Enumeration (PoC)\nhttps://github.com/ricardojoserf/CVE-2021-31159\n\nOffensiv security \nRouter (D-Link, Zyxel, TP-Link, Huawei) exploitation tool that allows to disclosure network router admin password\ud83d\ude01\nhttps://github.com/EntySec/RomBuster", "creation_timestamp": "2026-09-02T01:04:35.581121Z"}, {"uuid": "08a7f50e-2d8b-4cf5-9ad8-86428c9575c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-8300", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3471", "content": "Threat Research\nAn Information  Disclosure Bug in ISC BIND Server (PoC)\nhttps://www.zerodayinitiative.com/blog/2021/6/15/zdi-21-502-an-information-disclosure-bug-in-isc-bind-server\n\nMalware analysis\nAPT Ferocious Kitten\nhttps://securelist.com/ferocious-kitten-6-years-of-covert-surveillance-in-iran/102806\n\nexploit\nCVE-2020-8300:\nDetect Citrix ADC SAML action or SAML iDP Profile config vulnerable to CVE-2020-8300 using Citrix ADC NITRO API (PoC)\nhttps://github.com/stuartcarroll/CitrixADC-CVE-2020-8300\n\nCVE-2021-31159:\nZoho ManageEngine ServiceDesk Plus MSP - Active Directory User Enumeration (PoC)\nhttps://github.com/ricardojoserf/CVE-2021-31159\n\nOffensiv security \nRouter (D-Link, Zyxel, TP-Link, Huawei) exploitation tool that allows to disclosure network router admin password\ud83d\ude01\nhttps://github.com/EntySec/RomBuster", "creation_timestamp": "2026-09-11T04:00:05.930473Z"}, {"uuid": "88fc5ca7-197a-44cc-8bf4-c4a8dfe4e4a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-8300", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3471", "content": "Threat Research\nAn Information  Disclosure Bug in ISC BIND Server (PoC)\nhttps://www.zerodayinitiative.com/blog/2021/6/15/zdi-21-502-an-information-disclosure-bug-in-isc-bind-server\n\nMalware analysis\nAPT Ferocious Kitten\nhttps://securelist.com/ferocious-kitten-6-years-of-covert-surveillance-in-iran/102806\n\nexploit\nCVE-2020-8300:\nDetect Citrix ADC SAML action or SAML iDP Profile config vulnerable to CVE-2020-8300 using Citrix ADC NITRO API (PoC)\nhttps://github.com/stuartcarroll/CitrixADC-CVE-2020-8300\n\nCVE-2021-31159:\nZoho ManageEngine ServiceDesk Plus MSP - Active Directory User Enumeration (PoC)\nhttps://github.com/ricardojoserf/CVE-2021-31159\n\nOffensiv security \nRouter (D-Link, Zyxel, TP-Link, Huawei) exploitation tool that allows to disclosure network router admin password\ud83d\ude01\nhttps://github.com/EntySec/RomBuster", "creation_timestamp": "2026-09-12T00:00:54.095962Z"}]}