CVE-2020-28045

An unsigned-library issue was discovered in ProlinOS through 2.4.161.8859R. This OS requires installed applications and all system binaries to be signed either by the manufacturer or by the Point Of Sale application developer and distributor. The signature is a 2048-byte RSA signature verified in the kernel prior to ELF execution. Shared libraries, however, do not need to be signed, and they are not verified. An attacker may execute a custom binary by compiling it as a shared object and loading it via LD_PRELOAD.

• CWE-347

• https://git.lsd.cat/g/pax-pwnExploit, Third Party Advisory
• https://git.lsd.cat/g/pax-pwnExploit, Third Party Advisory

Published

Nov 2, 2020

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-2804Vulnerability in the MySQL Server product of Oracle MySQL (c…5.9
• CVE-2020-28040WordPress before 5.5.2 allows CSRF attacks that change a the…4.3
• CVE-2020-28041The SIP ALG implementation on NETGEAR Nighthawk R7000 1.0.9.…6.5
• CVE-2020-28042ServiceStack before 5.9.2 mishandles JWT signature verificat…5.3
• CVE-2020-28043MISP through 2.4.133 allows SSRF in the REST client via the …7.5
• CVE-2020-28044An attacker with physical access to a PAX Point Of Sale devi…6.8
• CVE-2020-28046An issue was discovered in ProlinOS through 2.4.161.8859R. A…7.8
• CVE-2020-28047AudimexEE before 14.1.1 is vulnerable to Reflected XSS (Cros…5.4
• CVE-2020-28049An issue was discovered in SDDM before 0.19.0. It incorrectl…6.3
• CVE-2020-2805Vulnerability in the Java SE, Java SE Embedded product of Or…8.3
• CVE-2020-28050Zoho ManageEngine Desktop Central before build 10.0.647 allo…9.1
• CVE-2020-28052An issue was discovered in Legion of the Bouncy Castle BC Ja…8.1