{"uuid": "cc77dd0f-23ff-4036-8892-b07ed39e57c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34423", "type": "seen", "source": "https://t.me/cissp/4021", "content": "Offensive security\nNuclei Scanner for Proxyshell RCE\n(CVE-2021-34423, CVE-2021-34473, CVE-2021-31207)\nhttps://github.com/cyberheartmi9/Proxyshell-Scanner\n\nCloud Security\nSecurity as code:\nThe best (and maybe only) path to securing cloud applications and systems\nhttps://www.mckinsey.com/business-functions/mckinsey-digital/our-insights/security-as-code-the-best-and-maybe-only-path-to-securing-cloud-applications-and-systems\n\n\nRed Team Tactics\n1.  ; echo \"Shell Injection\"\nhttps://matklad.github.io//2021/07/30/shell-injection.html\n2. Bypass UAC at any level by abusing the Program Compatibility Assistant with RPC, WDI, and more Windows components\nhttps://github.com/AzAgarampur/byeintegrity8-uac\n\nThreat Research\n1. Visual Studio Code\u00a0.ipynb\u00a0Jupyter Notebook XSS (Arbitrary File Read)\nhttps://github.com/justinsteven/advisories/blob/master/2021_vscode_ipynb_xss_arbitrary_file_read.md\n2. GraphQL Security Analysis\nhttps://securitygoat.medium.com/common-graphql-misconceptions-a-rant-489647167ca3", "creation_timestamp": "2026-09-01T17:00:42.905869Z"}