{"uuid": "d7ae5ab7-20e2-4fa2-b768-03c7f5a6e083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30858", "type": "seen", "source": "https://t.me/cissp/4657", "content": "Red Team Tactics\n1. Exploiting XML External Entity (XXE) Injection Vulnerability\nhttps://infosecwriteups.com/exploiting-xml-external-entity-xxe-injection-vulnerability-f8c4094fef83\n2. Parallels Desktop Guest to Host Escape\nhttps://trenchant.io/pwn2own-2021-parallels-desktop-guest-to-host-escape\n\nThreat Research\nThe uppercased hell\nhttps://dfir.ru/2021/10/15/the-uppercased-hell\n// A new post about security implications of recent Unicode issues found in the Windows registry\n\nexploit\n1. CVE-2021-37980:\nInappropriate implementation in Sandbox (windows)\nhttps://github.com/ZeusBox/CVE-2021-37980\n\n2. CVE-2021-30858:\nUse-after-free in WebKit\nhttps://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-30858.html\n\nHouse of IO - Heap Reuse\nhttps://maxwelldulin.com/BlogPost?post=6295828480\n\nBlue Team Techniques\nLDAP Monitor:\nMonitor creation, deletion and changes to LDAP objects live during your pentest or system administration\nhttps://github.com/p0dalirius/LDAPmonitor\n\n\n\u200e", "creation_timestamp": "2026-09-02T01:04:22.625286Z"}