{"uuid": "2ca4393b-d308-4a40-a2c1-92a9557f52e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-43616", "type": "seen", "source": "https://t.me/cissp/4832", "content": "Fuzzing Microsoft's RDP Client using Virtual Channels: Overview & Methodology\nhttps://thalium.github.io/blog/posts/fuzzing-microsoft-rdp-client-using-virtual-channels\n\nThreat Research\n1. Android WebView and Its Vulnerabilities\nhttps://blog.securelayer7.net/learn-about-android-webview-and-its-vulnerabilities\n2. Groups Target Alibaba ECS Instances for Cryptojacking\nhttps://www.trendmicro.com/en_us/research/21/k/groups-target-alibaba-ecs-instances-for-cryptojacking.html\n\nexploit\nCVE-2021-43616:\nNPM < 8.1.3 CI Command package-lock.json RCE\nhttps://github.com/npm/cli/issues/2701\n]-> https://github.com/icatalina/CVE-2021-43616\n\nMalware analysis\n1. Uncovering MosesStaff techniques:\nIdeology over Money\nhttps://research.checkpoint.com/2021/mosesstaff-targeting-israeli-companies\n2. Malware uses namesilo Parking pages and Google's custom pages to spread\nhttps://blog.netlab.360.com/zhatuniubility-malware-uses-namesilo-parking-pages-and-googles-custom-pages-to-spread\n3. Exchange Exploit Leads to Domain Wide Ransomware\ud83d\ude01\nhttps://thedfirreport.com/2021/11/15/exchange-exploit-leads-to-domain-wide-ransomware", "creation_timestamp": "2026-09-02T01:04:19.986988Z"}