{"uuid": "3c7f2d05-32d3-48bd-afd3-ee62d0c01914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27905", "type": "seen", "source": "https://t.me/cissp/3040", "content": "CVE-2021-27905:\nApache Solr SSRF (PoC)\nhttps://github.com/henry4e36/solr-ssrf\n\nRed Team Tactics:\n1. Thread and Process State Change a.k.a.:\nEDR Hook Evasion Method #4512\nhttps://windows-internals.com/thread-and-process-state-change\n2. A vulnerability exploitation tool for SVN source disclosure\n// support various versions of SVN\nhttps://github.com/X3NNY/SvnFuck\n\nMalware analysis:\n1. Best practices for handling new mining virus Sysrv-hello\nhttps://help.aliyun.com/document_detail/196163.html\n2. Binary Data Hiding in VB6 Executables\nhttps://decoded.avast.io/davidzimmer/binary-data-hiding-in-vb6-executables\n\nOffensive security:\nBrowser Exploitation on Windows -\nUnderstanding Use-After-Free Vulnerabilities\nhttps://connormcgarr.github.io/browser1\n\nThreat Research:\n1. RCE via unsafe inline Kramdown options when rendering certain Wiki pages\nhttps://hackerone.com/reports/1125425\n2. PoC code about the Microsoft Diaghub case sensitivity EoP vulnerability (CVE-2021-28321, CVE-2021-28322, CVE-2021-28313)\nhttps://github.com/irsl/microsoft-diaghub-case-sensitivity-eop-cve\n3. The peculiar case of HTML Injection\nhttps://infosecwriteups.com/the-peculiar-case-of-html-injection-d14db8440e3", "creation_timestamp": "2026-09-02T01:04:42.834316Z"}