{"uuid": "4a2a65ef-a8d0-400a-899b-dfd787b79b6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29447", "type": "seen", "source": "https://t.me/cissp/3243", "content": "Red Team Tactics\n1. Windows Privilege Escalation: \ud83d\ude0a\nDnsAdmins to DomainAdmin\nhttps://www.hackingarticles.in/windows-privilege-escalation-dnsadmins-to-domainadmin\n2. How to bypass Defender in a few easy steps\nhttps://arty-hlr.com/blog/2021/05/06/how-to-bypass-defender\n\nSCADA Security\nWhen Intrusions Don\u2019t Align:\nA New Water Watering Hole and Oldsmar\nhttps://www.dragos.com/blog/industry-news/a-new-water-watering-hole\n\nFuzzing iOS code on macOS at native speed\nOr how iOS apps on macOS work under the hood\nhttps://googleprojectzero.blogspot.com/2021/05/fuzzing-ios-code-on-macos-at-native.html\n\nThreat_Research\n1. WordPress 5.7, 5.6.2, 5.6.1, 5.6, 5.0.11 XXE Vulnerability\nin Media Library (CVE-2021-29447)\nhttps://blog.wpsec.com/wordpress-xxe-in-media-library-cve-2021-29447\n2. Oculus SSO \"Account Linking\" bug leads to account takeover on third party websites and inside VR Games/Apps\nhttps://ysamm.com/?p=697\n\n1. GraphQL:\n]-> Security Overview and Testing Tips\nhttps://blog.doyensec.com/2018/05/17/graphql-security-overview.html\n]-> POST-based CSRF\nhttps://blog.doyensec.com/2021/05/20/graphql-csrf.html\n2. Terraform Plan \"RCE\"\nhttps://alex.kaskaso.li/post/terraform-plan-rce", "creation_timestamp": "2026-09-01T17:00:49.974814Z"}