{"uuid": "8038f95e-c9fd-4de9-91be-2d79c8d9414e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27651", "type": "seen", "source": "https://t.me/cissp/3201", "content": "Malware analysis\n1. Newly observed PHP-based skimmer shows ongoing Magecart Group 12 activity\nhttps://blog.malwarebytes.com/cybercrime/2021/05/newly-observed-php-based-skimmer-shows-ongoing-magecart-group-12-activity\n2. Malicious Rust Macro for VSCode\nhttps://github.com/lucky/bad_actor_poc\n\nexploit\nCVE-2021-27651:\nPega Infinity Password Reset (PoC)\nhttps://github.com/Vulnmachines/CVE-2021-27651\n\nThreat Research\n1. Pentesting ISP 101. How I hacked & fixed My ISP\nhttps://infosecwriteups.com/pentesting-isp-101-how-i-hacked-fixed-my-isp-643e9201f7e9\n2. Auth Bypass in https-nearbydevices-pa-googleapis-com\nhttps://feed.bugs.xdavidhu.me/bugs/0004\n\nRed Team Tactics\n1. A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors\nhttps://github.com/optiv/Dent#techniques\n2. Remote Potato - From Domain User to Enterprise Admin\nhttps://pentestlab.blog/2021/05/04/remote-potato-from-domain-user-to-enterprise-admin/amp/?__twitter_impression=true\n\nWindows/x64 - Inject All Processes with Meterpreter Reverse Shell\nhttps://github.com/boku7/winx64-InjectAllProcessesMeterpreter-Shellcode\n\nHTTP Protocol Stack RCE Vulnerability\n(PoC for CVE-2021-31166)\nhttps://github.com/0vercl0k/CVE-2021-31166\n\nHYNTROSPECT Fuzzer\nhttps://github.com/googleprojectzero/Hyntrospect", "creation_timestamp": "2026-09-02T01:04:39.124371Z"}