{"uuid": "b07abfae-31e7-4f12-b62a-7fdf53e852fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38112", "type": "seen", "source": "https://t.me/cissp/4457", "content": "Offensive security\n1. From RPC to RCE - Workstation Takeover via RBCD and MS-RPChoose-Your-Own-Adventure\nhttps://gist.github.com/gladiatx0r/1ffe59031d42c08603a3bde0ff678feb\n]-> Python tool to Check running WebClient services on multiple targets:\nhttps://github.com/Hackndo/WebclientServiceScanner\n2. How To Test Custom Shellcode Using a C Payload Tester\nhttps://secureideas.com/blog/2021/09/linux-x86-assembly-how-to-test-custom-shellcode-using-a-c-payload-tester.html\n\nCloud Security\nCVE-2021-38112:\nAWS WorkSpaces Desktop Client RCE\nhttps://rhinosecuritylabs.com/aws/cve-2021-38112-aws-workspaces-rce\n\nThreat Research\n1. Netgear SOHO Security Bug Allows RCE, Corporate Attacks (CVE-2021-40847)\nhttps://blog.grimm-co.com/2021/09/mama-always-told-me-not-to-trust.html?m=1\n2. A vmap/vmalloc use-after-free vulnerability within the Android ION allocator\nhttps://labs.taszk.io/blog/post/61_android_ion_uaf\n\nRed Team Tactics\n1. XSS payloads for bypassing WAF\ud83d\ude0a\nhttps://github.com/Walidhossain010/WAF-bypass-xss-payloads\n2. Resetting Expired Passwords Remotely\ud83e\udd13\nhttps://www.n00py.io/2021/09/resetting-expired-passwords-remotely", "creation_timestamp": "2026-09-02T01:04:25.020293Z"}