{"uuid": "d6a4a996-4975-469a-9954-6d33d6dc4f63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42299", "type": "seen", "source": "https://t.me/cissp/4665", "content": "Analytics\nThe 2021 TLS Telemetry Report\nhttps://www.f5.com/labs/articles/threat-intelligence/the-2021-tls-telemetry-report\n\nexploit\nScan & Exploit - EternalBlue MS17-010\n- Windows 7 x86/x64\nhttps://github.com/d4t4s3c/Win7Blue\n\nThreat Research\n1. TPM Carte Blance attack\nhttps://github.com/google/security-research/tree/master/pocs/bios/tpm-carte-blanche\n// PoC demonstrates the exploitation of CVE-2021-42299\n2. WinRAR\u2019s vulnerable trialware\nhttps://swarm.ptsecurity.com/winrars-vulnerable-trialware-when-free-software-isnt-free\n\nMalware analysis\n1. Sliver-based malware\nhttps://isc.sans.edu/diary/rss/27954\n2. Karma Ransomware\nhttps://www.sentinelone.com/labs/karma-ransomware-an-emerging-threat-with-a-hint-of-nemty-pedigree\n\nOpenXuantie - OpenC910 RISC-V Core\nhttps://github.com/T-head-Semi/openc910\n\nModifying the Acorn CLE-215+ FPGA into a PCILeech DMA attack device\nhttps://blog.frizk.net/2021/10/acorn.html\n\nOffensive security\n1. Utilizing Programmatic Identifiers (ProgIDs)\nfor UAC Bypasses\nhttps://v3ded.github.io/redteam/utilizing-programmatic-identifiers-progids-for-uac-bypasses\n2. A unique technique to execute binaries from a password protected zip\nhttps://github.com/Tylous/ZipExec\n\n\n\u200e", "creation_timestamp": "2026-09-01T17:00:37.722441Z"}