{"uuid": "740decd2-860b-4c69-a3bf-445758864daf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42292", "type": "seen", "source": "https://t.me/cissp/4784", "content": "Threat_Research\n1. How SSL certificates are leaking sensitive information\nhttps://labs.detectify.com/2021/11/05/how-ssl-certificates-are-leaking-sensitive-information\n2. Finding and Fixing DOM-based XSS with Static Analysis\nhttps://blog.mozilla.org/attack-and-defense/2021/11/03/finding-and-fixing-dom-based-xss-with-static-analysis\n\nResearch\n1. The Invisible JavaScript Backdoor\nhttps://certitude.consulting/blog/en/invisible-backdoor\n2. VPN CVE-2021-3064:\nPaloAlto Networks GlobalProtect VPN\nhttps://www.randori.com/blog/cve-2021-3064/?i=2\n\nBlue_Team_Techniques\n1. A Zeek package to detect CVE-2021-42292,\na Microsoft Excel local privilege escalation exploit\nhttps://github.com/corelight/CVE-2021-42292\n2. RPC Firewall\nhttps://github.com/zeronetworks/rpcfirewall\n\nCloud_Security\n1. Practical HTTP Header Smuggling:\nSneaking Past Reverse Proxies to Attack AWS\nhttps://www.intruder.io/research/practical-http-header-smuggling\n2. ChaosDB Explained: Azure's Cosmos DB Vulnerability Walkthrough\nhttps://www.wiz.io/blog/chaosdb-explained-azures-cosmos-db-vulnerability-walkthrough\n\nOffensive_security\nAdaptive DLL hijacking/Dynamic export forwarding\nhttps://github.com/monoxgas/Koppeling", "creation_timestamp": "2026-09-02T01:04:20.078142Z"}