{"uuid": "dfacd806-0e99-44ef-a4c7-07b356774147", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22937", "type": "seen", "source": "https://t.me/cissp/4013", "content": "Offensive security\nC2 profile generator for Cobalt Strike command and control servers designed to ensure evasion\nhttps://github.com/Tylous/SourcePoint\n]-> Malleable Command and Control:\nhttps://www.cobaltstrike.com/help-malleable-c2\n\nRed Team Tactics\nRelaying NTLM authentication over RPC again\nhttps://blog.compass-security.com/2021/08/relaying-ntlm-authentication-over-rpc-again\n\nThreat Research\n1. Multiple Vulnerabilities in cPanel/WHM\nhttps://www.fortbridge.co.uk/research/multiple-vulnerabilities-in-cpanel-whm\n2. Pulse Connect Secure - RCE via Uncontrolled Archive Extraction - CVE-2021-22937 (Patch Bypass)\nhttps://research.nccgroup.com/2021/08/05/technical-advisory-pulse-connect-secure-rce-via-uncontrolled-archive-extraction-cve-2021-22937-patch-bypass\n\nMalware analysis\n1. FlyTrap Android Malware Compromises Thousands of Facebook Accounts\nhttps://blog.zimperium.com/flytrap-android-malware-compromises-thousands-of-facebook-accounts\n2. XLSM Malware with MacroSheets\nhttps://www.mcafee.com/blogs/other-blogs/mcafee-labs/xlsm-malware-with-macrosheets\n\nexploit\n1. EasyAntiCheat Exploit to inject unsigned code into protected processes\nhttps://back.engineering/10/08/2021\n2. Having fun with a Use-After-Free in ProFTPd (CVE-2020-9273)\nhttps://adepts.of0x.cc/proftpd-cve-2020-9273-exploit", "creation_timestamp": "2026-09-01T17:00:42.986695Z"}