{"uuid": "89901186-7c20-4e9d-bb67-bf3cf87bf48b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28918", "type": "seen", "source": "https://t.me/cissp/2786", "content": "Threat Research:\nSAML XML Injection + Example Exploits\n(Attribute injections and InResponseTo injections)\nhttps://research.nccgroup.com/2021/03/29/saml-xml-injection/#AttributeInjections\n\nCVE-2021-28918:\nServer-Side Request Forgery (SSRF)\nin Netmask package for npm <=1.1.0 (PoC)\nhttps://github.com/sickcodes/security/blob/master/advisories/SICK-2021-011.md\n\nMalware analysis:\nJumping Into Shellcode\nhttps://isc.sans.edu/forums/diary/Jumping+into+Shellcode/27256\n\nDebugging System with DCI and Windbg:\nhttp://standa-note.blogspot.com/2021/03/debugging-system-with-dci-and-windbg.html?m=1\n]-> The report and the exploit of CVE-2021-26943, the kernel-to-SMM local privilege escalation vulnerability in ASUS UX360CA BIOS version 303:\nhttps://github.com/tandasat/SmmExploit\n\nHow the Web Audio API is used for browser fingerprinting\nhttps://fingerprintjs.com/blog/audio-fingerprinting\n]-> Browser fingerprinting library with the highest accuracy and stability:\nhttps://github.com/fingerprintjs/fingerprintjs", "creation_timestamp": "2026-09-02T01:04:46.622008Z"}