{"uuid": "c55b2f9d-a7d2-4097-a970-9678e5166f2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29447", "type": "seen", "source": "https://t.me/cissp/2972", "content": "exploit:\nCVE-2021-29447:\nWordPress 5.6-5.7 - Authenticated XXE (PoC)\nhttps://github.com/motikan2010/CVE-2021-29447\n\nRed Team Tactics:\n1. sJET allows an easy exploitation of insecure configured JMX services (siberas JMX Exploitation Toolkit)\nhttps://github.com/siberas/sjet\n2. Jenkins exploit for Servers without authentication\ud83d\ude04\nhttps://github.com/Hacker5preme/jenkins-exploit\n\nThreat Research:\nMultiple RCE vulnerabilities in Microsoft Azure Sphere (PoCs for CVE-2021-27047, CVE-2021-27080,\nCVE-2021-28460)\nhttps://blog.talosintelligence.com/2021/04/vuln-spotlight-azure-sphere-april-2021.html?m=1\n\nOffensive security:\n1. mod_security bypass\ud83d\ude03\nhttps://y000o.medium.com/fun-sql-injection-mod-security-bypass-644b54b0c445\n2. XSS in the process of creating a File/Folder in iCloud Drive\nhttps://fernale.blogspot.com/p/an-interesting-xss-exploit-that-i-found.html?m=1", "creation_timestamp": "2026-09-02T01:04:44.887674Z"}