{"uuid": "c494734a-b2c4-4280-b79a-a9ad88c25cc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3186", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2232", "content": "Tenda AC5 AC1200 Wireless - \"WiFi Name & Password\" Stored Cross Site Scripting (PoC for CVE-2021-3186)\nhttps://www.exploit-db.com/exploits/49478\n\n1. TeamTNT delivers malware with new detection evasion tool\nhttps://cybersecurity.att.com/blogs/labs-research/teamtnt-delivers-malware-with-new-detection-evasion-tool#When:11:00:00Z\n2. Analysis of THREATNEEDLE C&C Communication\nhttps://medium.com/s2wlab/analysis-of-threatneedle-c-c-communication-feat-google-tag-warning-to-researchers-782aa51cf74\n\n1. FComm - C2 Lateral Movement/Additional communication method for the PoshC2 framework\nhttps://labs.nettitude.com/blog/introducing-fcomm-c2-lateral-movement\n2. New Docker Container Escape Bug\nhttps://www.intezer.com/blog/research/how-we-hacked-azure-functions-and-escaped-docker\n]-> PoC:\nhttps://github.com/tsarpaul/Azure-Functions-EoP-PoC\n\n\nNAT Slipstreaming v2.0:\nNew Attack Variant Can Expose All Internal Network Devices to The Internet\nhttps://www.armis.com/resources/iot-security-blog/nat-slipstreaming-v2-0-new-attack-variant-can-expose-all-internal-network-devices-to-the-internet\n// Vulnerable products:\n1. OpenWRT/VyOS, a Linux based router/firewall distribution, with kernel 4.14+\n2. Various consumer grade Linux routers, with likely older kernel versions\n3. Fortigate FG64 VM, 60E firewall appliance, Fortigate CGNAT of two local ISPs\n4. Cisco ASAv VM\n5. Cisco csr1000v VM (same software as IOS XE routers)\n6. HPE vsr1000 VM\n7. Sonicwall TZ300 appliance", "creation_timestamp": "2026-09-01T17:01:03.654246Z"}