{"uuid": "31b0edb9-8ffc-4346-896f-274e03afb715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24620", "type": "seen", "source": "https://t.me/cissp/4546", "content": "Blue Team Techniques\nTool to discover external/internal network attack surface\ud83e\udd13\nhttps://github.com/vmware-labs/attack-surface-framework\n\nOffensive security\n1. Ping'ing Apache XML Security (CVE-2021-40690)\nhttps://blog.tint0.com/2021/09/pinging-xmlsec.html?m=1\n2. Slack Denial of Service via Hyperlinks in Posts (DOM Clobbering)\nhttps://hackerone.com/reports/1077136\n\nThreat Research\nPre-Auth RCE in Moodle\nPHP Object Injection in Shibboleth Module\nhttps://haxolot.com/posts/2021/moodle_pre_auth_shibboleth_rce_part1\n\nCloud Security\n1. Escalating Azure Privileges with the Log Analytics Contributor Role\nhttps://www.netspi.com/blog/technical/cloud-penetration-testing/escalating-azure-privileges-with-the-log-analystics-contributor-role\n2. Anatomy of a Cloud Infrastructure Attack via a Pull Request\nhttps://goteleport.com/blog/hack-via-pull-request\n\nSoc Techniques\nDevice Security Guidance Configuration Pack\ud83d\ude0a\nhttps://github.com/ukncsc/Device-Security-Guidance-Configuration-Packs\n// Contains policy packs which can be used by system management software to configure device platforms (Win10/iOS) in accordance with NCSC device security guidance\n\nexploit\nCVE-2021-39239:\nA vulnerability in XML processing in Apache Jena <4.1.0, may allow an attacker to execute XML External Entities (XXE), including exposing the contents of local files to a remote server\nhttps://github.com/AKIA27TACKEDYE76PUGU/CVE-2021-39239\n\nCVE-2021-24620:\nRCE in WordPress Simple Ecomm. Shopping Cart <2.2.5\nhttps://github.com/AKIA27TACKEDYE76PUGU/CVE-2021-24620\n\nCVE-2021-41773:\nApache 2.4.49 Path Traversal\nhttps://github.com/numanturle/CVE-2021-41773\nhttps://github.com/habibiefaried/CVE-2021-41773-PoC", "creation_timestamp": "2026-09-01T17:00:38.791605Z"}