{"uuid": "d7f78692-441a-4b5a-924e-8f08c7cb3896", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39341", "type": "seen", "source": "https://t.me/cissp/4722", "content": "Threat_Research\n1. Apache HTTP Server CVE-2021-42013, CVE-2021-41773 Exploited in the Wild\nhttps://blogs.juniper.net/en-us/threat-research/apache-http-server-cve-2021-42013-and-cve-2021-41773-exploited\n2. CVE-2021-39341:\nA vulnerability in the the OptinMonster plugin\nhttps://www.wordfence.com/blog/2021/10/1000000-sites-affected-by-optinmonster-vulnerabilities\n\nOffensive_security\n1. HatVenom is a HatSploit native payload generation and shellcode injection tool that provides support for common platforms and architectures\nhttps://github.com/EntySec/HatVenom\n2. GC2 - C&C application that allows an attacker to execute commands on the target machine using Google Sheet and exfiltrate data using Google Drive\nhttps://github.com/looCiprian/GC2-sheet\n\nMalware_analysis\nTA575 Uses \"Squid Game\" Lures to Distribute Dridex malware\nhttps://www.proofpoint.com/us/blog/threat-insight/ta575-uses-squid-game-lures-distribute-dridex-malware\n\nRed_Team_Tactics\nGet shells with JET, the Jolokia Exploitation Toolkit\nhttps://thinkloveshare.com/hacking/shells_with_jolokia_exploitation_toolkit\n]-> jolokia-exploitation-toolkit:\nhttps://github.com/laluka/jolokia-exploitation-toolkit\n\nexploit\nPoC for the CVE-2021-20837:\nRCE in MovableType\nhttps://github.com/ghost-nemesis/cve-2021-20837-poc", "creation_timestamp": "2026-09-01T17:00:36.647786Z"}