GHSA-82jc-cv6x-r223

Exploit Intelligence

• 这资源是作者复现微软签字证书漏洞CVE-2020-0601，结合相关资源及文章实现。推荐大家结合作者博客，复现了该漏洞和理解恶意软件自启动劫持原理。作为网络安全初学者，自己确实很菜，但希望坚持下去，一起加油！ (github-poc-repo)
• 这资源是作者复现微软签字证书漏洞CVE-2020-0601，结合相关资源及文章实现。推荐大家结合作者博客，复现了该漏洞和理解恶意软件自启动劫持原理。作为网络安全初学者，自己确实很菜，但希望坚持下去，一起加油！ (github-poc-repo)
• exploitblizzard/CVE-2020-0601-spoofkey (github-poc-repo)
• exploitblizzard/CVE-2020-0601-spoofkey (github-poc-repo)
• okanulkr/CurveBall-CVE-2020-0601-PoC (github-poc-repo)
• okanulkr/CurveBall-CVE-2020-0601-PoC (github-poc-repo)
• PoC for CVE-2020-0601- Windows CryptoAPI (Crypt32.dll) POC: https://github.com/ollypwn/CurveBall (github-poc-repo)
• PoC for CVE-2020-0601- Windows CryptoAPI (Crypt32.dll) POC: https://github.com/ollypwn/CurveBall (github-poc-repo)
• Resources related to CurveBall (CVE-2020-0601) detection (github-poc-repo)
• Resources related to CurveBall (CVE-2020-0601) detection (github-poc-repo)

…and 96 more exploits

Timeline

• CVE Published
• May 23, 2014 PoC Published
• Jan 21, 2020 PoC Published
• Jun 26, 2020 PoC Published
• Apr 9, 2026 Security Advisory