{"vulnerability": "cve-2020-27904", "sightings": [{"uuid": "47ed1008-7cae-4f1e-b971-ec998df74d43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-27904", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3318", "content": "BlackHat ASIA 2021:\nA tfp0 bug for macOS <=10.15.x (PoC for CVE-2020-27904)\nhttps://www.blackhat.com/asia-21/briefings/schedule/#the-price-of-compatibility-defeating-macos-kernel-using-extended-file-attributes-21799\n]-> PoC:\nhttps://github.com/pattern-f/xattr-oob-swap", "creation_timestamp": "2021-05-08T13:05:01.000000Z"}, {"uuid": "3607d1d2-4a8f-44e9-b1c0-9619e7153d6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-27904", "type": "seen", "source": "https://t.me/cissp/3149", "content": "Offensive security\nMicro Backdoor for Windows:\nSmall and convenient C2 tool for Windows targets\ud83d\ude01\nhttps://github.com/Cr4sh/MicroBackdoor\n\nBlue Team Techniques\neBPF-based Networking, Security, and Observability\ud83d\ude07\nhttps://github.com/cilium/cilium\n\nMalware analysis\n1. Lemon Duck spreads its wings:\nActors target Microsoft Exchange servers, incorporate new TTPs\nhttps://blog.talosintelligence.com/2021/05/lemon-duck-spreads-wings.html?m=1\n2. An alternative way to deal with Android Malware\nhttps://github.com/UDcide/udcide\n\nBlackHat ASIA 2021:\nA tfp0 bug for macOS <=10.15.x (PoC for CVE-2020-27904)\nhttps://www.blackhat.com/asia-21/briefings/schedule/#the-price-of-compatibility-defeating-macos-kernel-using-extended-file-attributes-21799\n]-> PoC:\nhttps://github.com/pattern-f/xattr-oob-swap", "creation_timestamp": "2026-09-01T17:00:50.812066Z"}, {"uuid": "86eff8a6-1cdd-45fc-a9f8-35f3ee7d2a1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-27904", "type": "seen", "source": "https://t.me/cissp/3149", "content": "Offensive security\nMicro Backdoor for Windows:\nSmall and convenient C2 tool for Windows targets\ud83d\ude01\nhttps://github.com/Cr4sh/MicroBackdoor\n\nBlue Team Techniques\neBPF-based Networking, Security, and Observability\ud83d\ude07\nhttps://github.com/cilium/cilium\n\nMalware analysis\n1. Lemon Duck spreads its wings:\nActors target Microsoft Exchange servers, incorporate new TTPs\nhttps://blog.talosintelligence.com/2021/05/lemon-duck-spreads-wings.html?m=1\n2. An alternative way to deal with Android Malware\nhttps://github.com/UDcide/udcide\n\nBlackHat ASIA 2021:\nA tfp0 bug for macOS <=10.15.x (PoC for CVE-2020-27904)\nhttps://www.blackhat.com/asia-21/briefings/schedule/#the-price-of-compatibility-defeating-macos-kernel-using-extended-file-attributes-21799\n]-> PoC:\nhttps://github.com/pattern-f/xattr-oob-swap", "creation_timestamp": "2026-09-02T01:04:39.855829Z"}]}