{"uuid": "5e2db414-2997-4e7b-abb4-e460ad37c87d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37580", "type": "seen", "source": "https://t.me/cissp/4835", "content": "exploit\nSeamlessly Discovering Netgear Universal Plug-and-Pwn (UPnP) 0-days (Netgear UPNP Stack Based Buffer Overflow)\nhttps://blog.grimm-co.com/2021/11/seamlessly-discovering-netgear.html\n\nexploit\n1. CVE-2021-43617:\nBypass CRF\nhttps://github.com/kombat1/CVE-2021-43617\n\n2. Linux: UAF read: SO_PEERCRED\nand SO_PEERGROUPS race with listen() (and connect())\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2230\n\n3. CVE-2021-37580:\nApache ShenYu 2.3.0/2.4.0 authentication bypass\nhttps://github.com/0x0021h/expbox/blob/main/cve-2021-37580-poc.py\n\nMalware_analysis\nPython Malware Imitates Signed PyPI Traffic\nin Novel Exfiltration Technique\n(11 Malicious PyPI Python Libraries)\nhttps://jfrog.com/blog/python-malware-imitates-signed-pypi-traffic-in-novel-exfiltration-technique\n\n\nRed_Team_Tactics\n1. Google SSRF - URL whitelist bypass\nhttps://feed.bugs.xdavidhu.me/bugs/0008\n2. HTTP Request Smuggling due to ignoring chunk extensions\nhttps://hackerone.com/reports/1238099\n3. How I was able to revoke your Instagram 2FA\nhttps://dhiyaneshgeek.github.io/web/security/2021/10/23/how-i-was-able-to-revoke-your-instagram-2fa", "creation_timestamp": "2026-09-01T17:00:35.138385Z"}