{"uuid": "6b249ba6-7b18-4281-820b-2571b057f74a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40981", "type": "seen", "source": "https://t.me/cissp/4487", "content": "exploit\n1. RCE in Visual Studio Code Remote Development Extension\nhttps://www.shielder.it/advisories/remote-command-execution-in-visual-studio-code-remote-development-extension\n2. iOS 15 0-day exploits:\nhttps://github.com/illusionofchaos/ios-gamed-0day\nhttps://github.com/illusionofchaos/ios-nehelper-wifi-info-0day\nhttps://github.com/illusionofchaos/ios-nehelper-enum-apps-0day\n\nSADDNS:\nSide Channel Based DNS Cache Poisoning Attack\nhttps://github.com/seclab-ucr/SADDNS\n\nAnalytics\nStealing weapons from the Armoury\nhttps://aptw.tf/2021/09/24/armoury-crate-privesc.html\n// Root cause analysis of a privilege escalation vulnerability in ASUS ROG Armoury Crate Lite Service v4.2.8 (CVE-2021-40981)\n\nMalware analysis\n1. FoggyWeb: Targeted NOBELIUM malware leads to persistent backdoor\nhttps://www.microsoft.com/security/blog/2021/09/27/foggyweb-targeted-nobelium-malware-leads-to-persistent-backdoor\n2. ERMAC Android Malware\nhttps://www.threatfabric.com/blogs/ermac-another-cerberus-reborn.html\n\nThreat Research\n1. Case Analysis DiscuzX 3.4 SSRF Vulnerability\nhttps://blog.topsec.com.cn/discuzx-3-4-ssrf\n2. BloodyStealer and gaming assets for sale\nhttps://securelist.com/bloodystealer-and-gaming-assets-for-sale/104319\n3. Trend Micro ServerProtect Authentication Bypass Vulnerability\nhttps://www.zerodayinitiative.com/advisories/ZDI-21-1115\n\n\n\u200e\u200b", "creation_timestamp": "2026-09-01T17:00:39.321155Z"}