{"uuid": "741df5cc-d892-41eb-893e-0ee2e89b458c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22146", "type": "seen", "source": "https://t.me/cissp/3912", "content": "Red Team Tactics\nHow to Phish for User Passwords with PowerShell\ud83d\ude03\nhttps://www.blackhillsinfosec.com/how-to-phish-for-user-passwords-with-powershell\n\nThreat Research\n1. Use-after-free vulnerabilities in Foxit PDF Reader (CVE-2021-21831, CVE-2021-21870, CVE-2021-21893)\nhttps://blog.talosintelligence.com/2021/07/vulnerability-spotlight-use-after-free.html?m=1\n2. Sunhillo SureLine Unauthenticated OS Command Injection (PoC for CVE-2021-36380)\nhttps://research.nccgroup.com/2021/07/26/technical-advisory-sunhillo-sureline-unauthenticated-os-command-injection-cve-2021-36380\n\nexploit\nCVE-2021-22146:\nElasticsearch ECE 7.13.x - The manipulation with an unknown input leads to a privilege escalation vulnerability (PoC)\ud83e\udd28\nhttps://github.com/magichk/cve-2021-22146\n\nCloud Security\nBlue Team Techniques\nThe Istio Service Mesh - Security Best Practices\nhttps://istio.io/latest/docs/ops/best-practices/security", "creation_timestamp": "2026-09-01T17:00:45.269297Z"}