{"uuid": "2f80b49e-6553-47cd-b777-0c0db9b231dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31959", "type": "seen", "source": "https://t.me/cissp/4366", "content": "Fuzzing Closed-Source JavaScript Engines with Coverage Feedback\nhttps://googleprojectzero.blogspot.com/2021/09/fuzzing-closed-source-javascript.html\n]-> CVE-2021-26419:  \nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2157\n]-> CVE-2021-31959:  \nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2168\n]-> CVE-2021-34480:  \nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2188\n\nexploit\nCVE-2021-40539:\nZoho ManageEngine ADSelfService \ud83d\ude43Plus <=6113 is vulnerable to REST API authentication bypass with resultant RCE (Patch + PoC)\nhttps://attackerkb.com/topics/DMSNq5zgcW/cve-2021-40539/rapid7-analysis\n\nThreat Research\n1. Web Shells Lead to ZeroLogon and Application Impersonation Attacks\ud83d\ude0a\nhttps://www.fortinet.com/blog/threat-research/more-proxyshell-web-shells-lead-to-zerologon-and-application-impersonation-attacks\n2. Analyzing The ForcedEntry Zero-Click iPhone Exploit Used By Pegasus\nhttps://www.trendmicro.com/en_us/research/21/i/analyzing-pegasus-spywares-zero-click-iphone-exploit-forcedentry.html", "creation_timestamp": "2026-09-02T01:04:25.963869Z"}