{"vulnerability": "cve-2020-2025", "sightings": [{"uuid": "38dec084-587c-4f0c-adbc-5f53d6ccf6d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-20254", "type": "published-proof-of-concept", "source": "https://t.me/VulnerabilityNews/23096", "content": "Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference). NOTE: this is different from CVE-2020-20253 and CVE-2020-20254. All four vulnerabilities in the /nova/bin/lcdstat process are discussed in the CVE-2020-20250 github.com/cq674350529 reference.\nPublished at: July 13, 2021 at 02:15PM\nView on website", "creation_timestamp": "2021-07-13T16:46:34.000000Z"}, {"uuid": "6b9659f1-8381-4db7-90de-62b44b26c2d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-20253", "type": "published-proof-of-concept", "source": "https://t.me/VulnerabilityNews/23096", "content": "Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference). NOTE: this is different from CVE-2020-20253 and CVE-2020-20254. All four vulnerabilities in the /nova/bin/lcdstat process are discussed in the CVE-2020-20250 github.com/cq674350529 reference.\nPublished at: July 13, 2021 at 02:15PM\nView on website", "creation_timestamp": "2021-07-13T16:46:34.000000Z"}, {"uuid": "599527a5-fa8e-4f3b-aa86-d1fb3eb7e8b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-20250", "type": "published-proof-of-concept", "source": "https://t.me/VulnerabilityNews/23096", "content": "Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference). NOTE: this is different from CVE-2020-20253 and CVE-2020-20254. All four vulnerabilities in the /nova/bin/lcdstat process are discussed in the CVE-2020-20250 github.com/cq674350529 reference.\nPublished at: July 13, 2021 at 02:15PM\nView on website", "creation_timestamp": "2021-07-13T16:46:34.000000Z"}, {"uuid": "cae17904-1756-4dbf-b75d-6a984073375f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-20250", "type": "published-proof-of-concept", "source": "Telegram/Bm9CsB5vW0fTXeD4nWorRtJBTwHEjZErbak-cGB5NHlsmwE", "content": "", "creation_timestamp": "2026-08-05T16:00:04.747893Z"}, {"uuid": "6f0f4bc8-5338-4f48-8191-8b02e2c0118c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-2025", "type": "seen", "source": "https://t.me/hacking_Attack/11444", "content": "container_escape  7.8 (https://nvd.nist.gov/vuln/detail/CVE-2016-5195)  \u2705      cve-2018-18955 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kernel/cve-2018-18955.yaml)  kernel  privilege_escalation  7.0 (https://nvd.nist.gov/vuln/detail/CVE-2018-18955)  \u2705      cve-2020-14386 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kernel/cve-2020-14386.yaml)  kernel  container_escape  7.8 (https://nvd.nist.gov/vuln/detail/CVE-2020-14386)  \u2705      cap_dac_read_search-container (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/configs/cap_dac_read_search-container.yaml)  config  container_escape  -  \u2705      cap_sys_admin-container (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/configs/cap_sys_admin-container.yaml)  config  container_escape  -  \u2705      cap_sys_ptrace-container (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/configs/cap_sys_ptrace-container.yaml)  config  container_escape  -  \u2705      privileged-container (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/configs/privileged-container.yaml)  config  container_escape  -  \u2705      mount-docker-sock (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/mounts/mount-docker-sock.yaml)  mount  container_escape  -  \u2705      mount-host-etc (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/mounts/mount-host-etc.yaml)  mount  container_escape  -  \u2705      mount-host-procfs (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/mounts/mount-host-procfs.yaml)  mount  container_escape  -  \u2705      kata-escape-2020 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kata-containers/kata-escape-2020.yaml)  kata-containers  container_escape  6.3 (https://nvd.nist.gov/vuln/detail/CVE-2020-2023)/8.8 (https://nvd.nist.gov/vuln/detail/CVE-2020-2025)/8.8 (https://nvd.nist.gov/vuln/detail/CVE-2020-2026)  \u2705      \n4.2 Vulnerable Scenes Related to Cloud Native Applications\n  These scenes are mainly derived from other open-source projects:    Vulhub (https://github.com/vulhub/vulhub)  DVWA (https://github.com/digininja/DVWA)    We express sincere gratitude to projects above!  Metarget converts scenes in projects above to Deployments and Services resources in Kubernetes (thanks to kompose (https://github.com/kubernetes/kompose)).  To list vulnerable scenes related to cloud native applications supported by Metarget, just run\uff1a  ./metarget appv list  \n5 DEMO", "creation_timestamp": "2026-09-01T20:02:38.646018Z"}, {"uuid": "347b3ed6-3c68-4274-bc99-76c82d7a13ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-2025", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/11444", "content": "container_escape  7.8 (https://nvd.nist.gov/vuln/detail/CVE-2016-5195)  \u2705      cve-2018-18955 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kernel/cve-2018-18955.yaml)  kernel  privilege_escalation  7.0 (https://nvd.nist.gov/vuln/detail/CVE-2018-18955)  \u2705      cve-2020-14386 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kernel/cve-2020-14386.yaml)  kernel  container_escape  7.8 (https://nvd.nist.gov/vuln/detail/CVE-2020-14386)  \u2705      cap_dac_read_search-container (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/configs/cap_dac_read_search-container.yaml)  config  container_escape  -  \u2705      cap_sys_admin-container (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/configs/cap_sys_admin-container.yaml)  config  container_escape  -  \u2705      cap_sys_ptrace-container (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/configs/cap_sys_ptrace-container.yaml)  config  container_escape  -  \u2705      privileged-container (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/configs/privileged-container.yaml)  config  container_escape  -  \u2705      mount-docker-sock (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/mounts/mount-docker-sock.yaml)  mount  container_escape  -  \u2705      mount-host-etc (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/mounts/mount-host-etc.yaml)  mount  container_escape  -  \u2705      mount-host-procfs (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/mounts/mount-host-procfs.yaml)  mount  container_escape  -  \u2705      kata-escape-2020 (https://github.com/brant-ruan/metarget/blob/master/vulns_cn/kata-containers/kata-escape-2020.yaml)  kata-containers  container_escape  6.3 (https://nvd.nist.gov/vuln/detail/CVE-2020-2023)/8.8 (https://nvd.nist.gov/vuln/detail/CVE-2020-2025)/8.8 (https://nvd.nist.gov/vuln/detail/CVE-2020-2026)  \u2705      \n4.2 Vulnerable Scenes Related to Cloud Native Applications\n  These scenes are mainly derived from other open-source projects:    Vulhub (https://github.com/vulhub/vulhub)  DVWA (https://github.com/digininja/DVWA)    We express sincere gratitude to projects above!  Metarget converts scenes in projects above to Deployments and Services resources in Kubernetes (thanks to kompose (https://github.com/kubernetes/kompose)).  To list vulnerable scenes related to cloud native applications supported by Metarget, just run\uff1a  ./metarget appv list  \n5 DEMO", "creation_timestamp": "2026-09-08T04:00:04.474231Z"}]}