{"uuid": "8ad34d4a-ca61-419b-9c24-193ec820387e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22992", "type": "seen", "source": "https://t.me/cissp/2494", "content": "Critical Vulnerabilities in F5 BIG-IP, BIG-IQ (1-day)\ud83d\ude01\nCVE-2021-22986:\nTraffic Management Microkernels (TMM) uri_normalize_host infoleak and out-of-bounds write (PoC)\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2126\nCVE-2021-22992:\nASM stack-based buffer overflow in is_hdr_criteria_matches (PoC)\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2132\n\nRed Team Tactics\n1. Phishing Users to Take a Test\nhttps://www.mdsec.co.uk/2021/03/phishing-users-to-take-a-test\n2. Windows Server Core 20H2 - Host Registry Virtual Registry Provider Bypass EoP\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2129\n3. Injecting a dynamic library to Firefox\nhttps://wojciechregula.blog/post/how-to-rob-a-firefox", "creation_timestamp": "2026-09-02T01:04:51.019753Z"}