{"uuid": "c98b5d5b-ddb4-4a1b-9afe-8443ca0aac12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1665", "type": "seen", "source": "https://t.me/cissp/3598", "content": "Malware analysis\n1. Snake Keylogger\u2019s Many Skins:\nAnalysing Code Reuse Among Infostealers\nhttps://threatresearch.ext.hp.com/the-many-skins-of-snake-keylogger\n2. Diving into a Google Sweepstakes Phishing E-mail\nhttps://isc.sans.edu/forums/diary/Diving+into+a+Google+Sweepstakes+Phishing+Email/27578\n\nOffensive security\n1. Analyzing CVE-2021-1665 - RCE Vulnerability in Windows GDI+\nhttps://www.mcafee.com/blogs/other-blogs/mcafee-labs/analyzing-cve-2021-1665-remote-code-execution-vulnerability-in-windows-gdi\n2. Using CVE-2020-9971 to escape Microsoft Office\u2019s app sandbox\nhttps://perception-point.io/using-cve-2020-9971-to-escape-microsoft-offices-app-sandbox\n\nRed Team Tactics\n1. AEM CRX Bypass: The 0-day that took control over some enterprise AEM CRX Package Manager\nhttps://labs.detectify.com/2021/06/28/aem-crx-bypass-0day-control-over-some-enterprise-aem-crx-package-manager\n2. Heappy - A Heap Editor To Support Exploitation Process\nhttps://github.com/gand3lf/heappy", "creation_timestamp": "2026-09-01T17:00:46.891140Z"}