{"uuid": "1de39366-39a4-4244-baa2-85d1f07eb59c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39165", "type": "seen", "source": "https://t.me/cissp/4226", "content": "Offensive security\n1. From Stranger to DA:\nUsing PetitPotam to NTLM relay to Domain Administrator\ud83e\uddd0\nhttps://blog.truesec.com/2021/08/05/from-stranger-to-da-using-petitpotam-to-ntlm-relay-to-active-directory\n2. CVE-2021-39165:\nA Bug Bounty Journey from a Laravel SQL Injection Vulnerability\ud83e\udd13\nhttps://www.leavesongs.com/PENETRATION/cachet-from-laravel-sqli-to-bug-bounty.html\n\nWLAN Security\nThe ABCs of NFC chip security\nhttps://research.nccgroup.com/2021/08/30/the-abcs-of-nfc-chip-security\n\nThreat Research\n1. New Annke Vulnerability Shows Risks of IoT Security Camera Systems\ud83d\ude05\nhttps://www.nozominetworks.com/blog/new-annke-vulnerability-shows-risks-of-iot-security-camera-systems\n2. PROXYTOKEN: AN AUTHENTICATION BYPASS IN MICROSOFT EXCHANGE SERVER\ud83d\ude0a\nhttps://www.zerodayinitiative.com/blog/2021/8/30/proxytoken-an-authentication-bypass-in-microsoft-exchange-server", "creation_timestamp": "2026-09-02T01:04:28.369473Z"}