{"uuid": "26ecb5be-1509-47b6-8723-a39555fd2859", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22192", "type": "seen", "source": "https://t.me/cissp/2770", "content": "CVE-2021-21389:\nBuddyPress < 7.2.1 - REST API Privilege Escalation to RCE (PoC)\nhttps://github.com/HoangKien1020/CVE-2021-21389\n\nCVE-2021-22192:\nAn issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing unauthorized authenticated users to execute arbitrary code on the server (PoC)\nhttps://github.com/lyy289065406/CVE-2021-22192\n\nRed Team Tactics:\n1. Local privilege escalation in OpenVAS\ud83d\ude33\nhttps://csal.medium.com/pentesters-tricks-local-privilege-escalation-in-openvas-fe933d7f161f\n2. How to bypass CloudFlare bot protection\nhttps://jychp.medium.com/how-to-bypass-cloudflare-bot-protection-1f2c6c0c36fb\n3. A tool for generating fake code signing certificates or signing real ones\nhttps://github.com/Tylous/Limelighter\n4. Obfuscate specific windows apis with different apis\nhttps://github.com/d35ha/CallObfuscator\n5. XSS to make Privilege Escalation to be Super Admin\nhttps://melotover.medium.com/how-i-leveraged-xss-to-make-privilege-escalation-to-be-super-admin-e120b6090451\n6. CVE-2020-17453:\nXSS In WSO2 Carbon Management Console\nPoC:\nhttps://example[.]com/carbon/admin/login.jsp?msgId=%27;alert(1)//", "creation_timestamp": "2026-09-02T01:04:46.668818Z"}