{"uuid": "c33783c8-041a-488e-8e3d-5ba440d1cbe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42013", "type": "seen", "source": "https://t.me/cissp/4553", "content": "Red Team Tactics\n1. Escaping to Java to escape the Chrome sandbox\n(PoC for CVE-2021-30528)\nhttps://securitylab.github.com/research/chrome_sbx_java\n2. Abusing Weak ACL on Certificate Templates\nhttps://github.com/daem0nc0re/Abusing_Weak_ACL_on_Certificate_Templates\n]-> Python implementation for AD certificate abuse:\nhttps://github.com/ollypwn/Certipy\n\nAnalytics\nA Modern Exploration of Windows Memory Corruption Exploits: Stack Overflows\nhttps://www.forrest-orr.net/post/a-modern-exploration-of-windows-memory-corruption-exploits-part-i-stack-overflows\n\nOffensive security\nPre-Auth SSRF To Full MailBox Access\n(Microsoft Exchange Server Exploit)\ud83d\ude00\nhttps://vanshal.medium.com/pre-auth-ssrf-to-full-mailbox-access-microsoft-exchange-server-exploit-a62c8ac04b47\n\nThreat Research\n1. Tale of two hypervisor bugs -\nEscaping from FreeBSD bhyve\nhttp://phrack.org/issues/70/11.html#article\n2. LPE in Firefox on Windows\nhttps://deepsurface.com/deepsurface-security-advisory-lpe-in-firefox-on-windows\n\nexploit\nCVE-2021-42013:\nApache 2.4.50 Path traversal vulnerability\nhttps://github.com/Vulnmachines/cve-2021-42013\n]-> Exploit with integrated shodan search:\nhttps://github.com/andrea-mattioli/apache-exploit-CVE-2021-42013", "creation_timestamp": "2026-09-02T01:04:23.607006Z"}