{"vulnerability": "CVE-2020-8865", "sightings": [{"uuid": "a000b772-dcd6-4ca9-9be0-70a9bb3960c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-8865", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/1619", "content": "Horde Groupware Webmail Trean_Queue_Task_Crawl url Deserialization of Unstrusted Data RCE Vulnerability (CVE-2020-8865/8866)\nhttps://srcincite.io/blog/2020/08/19/a-smorgashorde-of-vulnerabilities-a-comparative-analysis-of-discovery.html\nPoC Exploit:\nhttps://srcincite.io/pocs/zdi-20-1051.py.txt", "creation_timestamp": "2020-08-21T13:36:01.000000Z"}, {"uuid": "f4553b6a-f84f-4022-9c8a-1534342d6812", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-8865", "type": "seen", "source": "https://t.me/cissp/1734", "content": "1. Using Kubelet Client to Attack the Kubernetes Cluster\nhttps://securityboulevard.com/2020/08/using-kubelet-client-to-attack-the-kubernetes-cluster/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+SecurityBloggersNetwork+%28Security+Bloggers+Network%29\n\n2. How to Exfiltrate Internal Information Using Web Proxies McAfee, FortiGuard, Symantec\nhttps://sefod.eu/posts/web_proxies/\n\n3.DDoor - cross platform backdoor using dns txt records\nhttps://github.com/rek7/ddoor\n\n4.Unexpected Deserialization - JMS\nhttps://blog.silentsignal.eu/2020/08/17/unexpected-deserialization-pt-1-jms/\n\n5.Horde Groupware Webmail Trean_Queue_Task_Crawl url Deserialization of Unstrusted Data RCE Vulnerability (CVE-2020-8865/8866)\nhttps://srcincite.io/blog/2020/08/19/a-smorgashorde-of-vulnerabilities-a-comparative-analysis-of-discovery.html\nPoC Exploit:\nhttps://srcincite.io/pocs/zdi-20-1051.py.txt\n\n6.Breaking the Firmware of Samsung\u2019s NFC Chips, or turning your S8/S9/S10 into a DIY \u201cProxmark\u201d\nhttps://www.pentestpartners.com/security-blog/breaking-samsung-firmware-or-turning-your-s8-s9-s10-into-a-diy-proxmark/\nTools for exploiting, reverse engineering, and deploying firmware to the S3FWRN5 and S3NRN82 Samsung NFC Controllers:\nhttps://github.com/Iskuri/Samsung-NFC-Controller-Reverse-Engineering\n\n7.DHCP starvation attack without making any DHCP requests\nhttps://medium.com/bugbountywriteup/dhcp-starvation-attack-without-making-any-dhcp-requests-bef0022133c9\n\n8.Threat Research:\nWindows .Net Core SDK Elevation of Privilege\nhttps://itm4n.github.io/dotnet-sdk-eop/\n\n9.CVE-2020-9036:\nJeedom home automation solution used in IoT (<=4.0.38) XSS leading to Remote Code Execution (PoC)\nhttps://sysdream.com/news/lab/2020-08-05-cve-2020-9036-jeedom-xss-leading-to-remote-code-execution/\n\n10.CVE-2020-8620:\nAn assertion failure exists within the Internet Systems Consortium's BIND server, versions 9.16.1 - 9.17.1 when processing TCP traffic via the libuv library (PoC)\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1100\n\n11.Introduction to Whiteboxes and Collision-Based Attacks With QBDI\nhttps://blog.quarkslab.com/introduction-to-whiteboxes-and-collision-based-attacks-with-qbdi.html\n\n12. Dynamic analysis of apps inside Android Cloning apps (PoC)\nhttps://darvincitech.wordpress.com/2020/07/18/all-your-crypto-keys-belongs-to-me-in-android-virtual-containers/amp/?__twitter_impression=true\n\n13.CVE-2020-10029:\nBuffer overflow in GNU libc trigonometry functions (PoC)\nhttps://securityboulevard.com/2020/08/cve-2020-10029-buffer-overflow-in-gnu-libc-trigonometry-functions/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+SecurityBloggersNetwork+%28Security+Bloggers+Network%29\n\n14.Team TNT - The First Crypto-mining Worm to Steal AWS Credentials\ud83d\ude03\nhttps://www.cadosecurity.com/2020/08/17/teamtnt-the-first-crypto-mining-worm-to-steal-aws-credentials/\n\n15. Duri - HTML Smuggling Campaign\nhttps://www.menlosecurity.com/blog/new-attack-alert-duri\n\n16.\"FreeBSD grub-bhyve bootloader virtual machine escapes (CVE-2020-10565/10566)\"\nhttps://github.com/renorobert/grub-bhyve-bugs\n\n17.Threat research-Windows Print Spooler Patch Bypass Re-Enables Persistent Backdoor\nhttps://www.zerodayinitiative.com/blog/2020/8/11/windows-print-spooler-patch-bypass-re-enables-persistent-backdoor\n\n18.CVE-2020-15778:\nSCP in OpenSSH <=8.3p1 allows eval injection\n(Comand Injection/Eval injection) (PoC)\nhttps://github.com/cpandya2909/CVE-2020-15778\nA vulnerability in OpenSSH may affect IBM Spectrum Protect Plus 10.1.0-10.1.5...\nhttps://www.ibm.com/support/pages/node/6255652\n\n19.LSASS + Rootkit + TDI (PoC)\nhttps://zerosum0x0.blogspot.com/2020/08/sassykitdi-kernel-mode-tcp-sockets.html?m=1\n\n20.PowerSharpPack: usefull offensive CSharp Projects\nhttps://securityonline.info/powersharppack/", "creation_timestamp": "2026-09-01T17:01:10.912802Z"}, {"uuid": "5e25d7f7-522f-4bbb-bc4f-5f01616e9f54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-8865", "type": "seen", "source": "https://t.me/cissp/1734", "content": "1. Using Kubelet Client to Attack the Kubernetes Cluster\nhttps://securityboulevard.com/2020/08/using-kubelet-client-to-attack-the-kubernetes-cluster/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+SecurityBloggersNetwork+%28Security+Bloggers+Network%29\n\n2. How to Exfiltrate Internal Information Using Web Proxies McAfee, FortiGuard, Symantec\nhttps://sefod.eu/posts/web_proxies/\n\n3.DDoor - cross platform backdoor using dns txt records\nhttps://github.com/rek7/ddoor\n\n4.Unexpected Deserialization - JMS\nhttps://blog.silentsignal.eu/2020/08/17/unexpected-deserialization-pt-1-jms/\n\n5.Horde Groupware Webmail Trean_Queue_Task_Crawl url Deserialization of Unstrusted Data RCE Vulnerability (CVE-2020-8865/8866)\nhttps://srcincite.io/blog/2020/08/19/a-smorgashorde-of-vulnerabilities-a-comparative-analysis-of-discovery.html\nPoC Exploit:\nhttps://srcincite.io/pocs/zdi-20-1051.py.txt\n\n6.Breaking the Firmware of Samsung\u2019s NFC Chips, or turning your S8/S9/S10 into a DIY \u201cProxmark\u201d\nhttps://www.pentestpartners.com/security-blog/breaking-samsung-firmware-or-turning-your-s8-s9-s10-into-a-diy-proxmark/\nTools for exploiting, reverse engineering, and deploying firmware to the S3FWRN5 and S3NRN82 Samsung NFC Controllers:\nhttps://github.com/Iskuri/Samsung-NFC-Controller-Reverse-Engineering\n\n7.DHCP starvation attack without making any DHCP requests\nhttps://medium.com/bugbountywriteup/dhcp-starvation-attack-without-making-any-dhcp-requests-bef0022133c9\n\n8.Threat Research:\nWindows .Net Core SDK Elevation of Privilege\nhttps://itm4n.github.io/dotnet-sdk-eop/\n\n9.CVE-2020-9036:\nJeedom home automation solution used in IoT (<=4.0.38) XSS leading to Remote Code Execution (PoC)\nhttps://sysdream.com/news/lab/2020-08-05-cve-2020-9036-jeedom-xss-leading-to-remote-code-execution/\n\n10.CVE-2020-8620:\nAn assertion failure exists within the Internet Systems Consortium's BIND server, versions 9.16.1 - 9.17.1 when processing TCP traffic via the libuv library (PoC)\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1100\n\n11.Introduction to Whiteboxes and Collision-Based Attacks With QBDI\nhttps://blog.quarkslab.com/introduction-to-whiteboxes-and-collision-based-attacks-with-qbdi.html\n\n12. Dynamic analysis of apps inside Android Cloning apps (PoC)\nhttps://darvincitech.wordpress.com/2020/07/18/all-your-crypto-keys-belongs-to-me-in-android-virtual-containers/amp/?__twitter_impression=true\n\n13.CVE-2020-10029:\nBuffer overflow in GNU libc trigonometry functions (PoC)\nhttps://securityboulevard.com/2020/08/cve-2020-10029-buffer-overflow-in-gnu-libc-trigonometry-functions/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+SecurityBloggersNetwork+%28Security+Bloggers+Network%29\n\n14.Team TNT - The First Crypto-mining Worm to Steal AWS Credentials\ud83d\ude03\nhttps://www.cadosecurity.com/2020/08/17/teamtnt-the-first-crypto-mining-worm-to-steal-aws-credentials/\n\n15. Duri - HTML Smuggling Campaign\nhttps://www.menlosecurity.com/blog/new-attack-alert-duri\n\n16.\"FreeBSD grub-bhyve bootloader virtual machine escapes (CVE-2020-10565/10566)\"\nhttps://github.com/renorobert/grub-bhyve-bugs\n\n17.Threat research-Windows Print Spooler Patch Bypass Re-Enables Persistent Backdoor\nhttps://www.zerodayinitiative.com/blog/2020/8/11/windows-print-spooler-patch-bypass-re-enables-persistent-backdoor\n\n18.CVE-2020-15778:\nSCP in OpenSSH <=8.3p1 allows eval injection\n(Comand Injection/Eval injection) (PoC)\nhttps://github.com/cpandya2909/CVE-2020-15778\nA vulnerability in OpenSSH may affect IBM Spectrum Protect Plus 10.1.0-10.1.5...\nhttps://www.ibm.com/support/pages/node/6255652\n\n19.LSASS + Rootkit + TDI (PoC)\nhttps://zerosum0x0.blogspot.com/2020/08/sassykitdi-kernel-mode-tcp-sockets.html?m=1\n\n20.PowerSharpPack: usefull offensive CSharp Projects\nhttps://securityonline.info/powersharppack/", "creation_timestamp": "2026-09-02T01:05:00.912069Z"}]}