{"uuid": "03975be4-3e08-48c3-8b36-4171ce6e393f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20090", "type": "seen", "source": "https://t.me/cissp/3967", "content": "Red Team Tactics\n1. PostMessage XSS Attack\nhttps://medium.com/@youghourtaghannei/postmessage-xss-vulnerability-on-private-program-18e773e1a1ba\n2. Bypassing Authentication on Arcadyan Routers with CVE-2021-20090 and rooting some Buffalo\nhttps://medium.com/tenable-techblog/bypassing-authentication-on-arcadyan-routers-with-cve-2021-20090-and-rooting-some-buffalo-ea1dd30980c2\n\nOffensive security\n1. Developing an exploit for the Jira Data Center Ehcache RCE (CVE-2020-36239)\nhttps://dozer.nz/posts/CVE-2020-36239-POC-dev\n2. Playing with PuTTY\nhttps://labs.f-secure.com/blog/playing-with-putty\n\nThreat Research\n1. Windows Command-Line Obfuscation\nhttps://www.wietzebeukema.nl/blog/windows-command-line-obfuscation?fbclid=IwAR0lQRf9T5BTvCyXxdNP_WLH5oDR-CJe7eO-LUVf_kPWlVaxQZaKgQc3Jvw\n2. Escaping from a truly air gapped network via Apple AWDL\nhttps://medium.com/sensorfu/escaping-from-a-truly-air-gapped-network-via-apple-awdl-6cf6f9ea3499", "creation_timestamp": "2026-09-02T01:04:30.681649Z"}