{"uuid": "70e8f26c-6952-44d3-9e05-9961c5d2c555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21345", "type": "seen", "source": "https://t.me/cissp/2952", "content": "Threat Research \n1. In-depth analysis of the Xstream deserialization RCE vulnerability (PoCs for CVE-2021-21345, CVE-2021-21347, CVE-2021-21350, CVE-2021-21351)\nhttp://blog.topsec.com.cn/xstream\u53cd\u5e8f\u5217\u5316\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u6df1\u5165\u5206\u6790\n2. Cisco RV34X Series:\n- RV34X /upload Authorization Bypass (CVE-2021-1472)\n- RV34X OS Command injection in Cookie string (CVE-2021-1473)\nhttps://www.iot-inspector.com/blog/advisory-cisco-rv34x-authentication-bypass-remote-command-execution\n\n Malware analysis\n1. BRATA Malware Poses as Android Security Scanners on Google Play Store\nhttps://thehackernews.com/2021/04/brata-malware-poses-as-android-security.html\n2. Carbine Loader Cryptojacking Campaign\nhttps://www.lacework.com/carbine-loader-cryptojacking-campaign\n3. Linux/Mac Malware included in npm Module\ud83d\ude03\nhttps://blog.sonatype.com/damaging-linux-mac-malware-bundled-within-browserify-npm-brandjack-attempt", "creation_timestamp": "2026-09-02T01:04:45.096734Z"}