{"uuid": "97b76571-8bc5-4c27-975e-00ae343a7323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-35394", "type": "seen", "source": "https://t.me/cissp/6506", "content": "Executive Summary\nRecent August-October 2022 observations of exploits used in the wild reveal that threat actors have been leveraging significant numbers of attacks against the Realtek Jungle SDK remote code execution vulnerability (CVE-2021-35394). They have also been making use of a newly published arbitrary file download vulnerability in BackupBuddy and taking advantage of a command injection vulnerability in Bitbucket.\nIn our observations of network security trends, Unit 42 researchers have pinpointed several attacks based on proof-of-concept (PoC) availability and impact. We have detailed below which of these we believe should be on a defender\u2019s radar\nNetwork Security Trends: August-October 2022\nhttps://unit42.paloaltonetworks.com/network-security-trends-aug-oct-2022\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.10.28", "creation_timestamp": "2026-09-01T17:00:23.719750Z"}