{"uuid": "e159398c-c4fc-4b36-9d95-7b85055e8009", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24499", "type": "seen", "source": "https://t.me/cissp/4346", "content": "Offensive security\nUsing Go to implement CobaltStrike's Beacon\nhttps://github.com/darkr4y/geacon\n\nThreat Research \n1. WooCommerce Multi Currency Plugin Vulnerability\nhttps://blog.nintechnet.com/vulnerability-fixed-in-wordpress-woocommerce-multi-currency-plugin\n2. Hacking CloudKit:\nthree bugs in iCrowd+, Apple News and Apple Shortcuts\nhttps://labs.detectify.com/2021/09/13/hacking-cloudkit-how-i-accidentally-deleted-your-apple-shortcuts\n\nexploit\n1. CVE-2021-24499:\nMass exploitation of CVE-2021-24499 unauthenticated upload leading to RCE in Workreap WordPress theme <2.2.2\nhttps://github.com/RyouYoo/CVE-2021-24499\n2. CVE-2021-2400/2401:\nOracle Business Intelligence XXE (PoC)\nlink.medium.com\nhttps://testbnull.medium.com/linh-tinh-v%E1%BB%81-oracle-business-intelligence-part-1-5a050b48a193", "creation_timestamp": "2026-09-01T17:00:40.646506Z"}