Exploit / PoCcritical

Week in review: PoC for wormable SharePoint RCE released, how to select a DMARC solution

Help Net Securityby @helpnetsecurityJul 26, 2020 · 00:00 UTC (Jul 26, 2020)4 min read3 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2020-1350 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2020-1350 CVE-2020-1147

Tags: cve-2020-1350 cve-2020-1147 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-1147	XML Markup RCE in Microsoft .NET Framework, SharePoint, and Visual Studio	7.8	96%	KEVPoC ×4	Jul 14, 2020 KEV Nov 3, 2021
CVE-2020-1350	Wormable Unauthenticated RCE in Microsoft Windows DNS Server	10.0	97%	KEV	Jul 14, 2020 KEV Nov 3, 2021

From the original article

4 min read at helpnetsecurity.com

Here’s an overview of some of last week’s most interesting news and articles: Attackers exploit Twilio’s misconfigured cloud storage, inject malicious code into SDK Twilio has confirmed that, for 8 or so hours on July 19, a malicious version of their TaskRouter JS SDK was being served from their one of their AWS S3 buckets.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.