{"uuid": "fddfa114-cf24-4ab2-a1a3-98393c5b3d39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1590", "type": "seen", "source": "https://t.me/cissp/4289", "content": "Cloud Security\n1. AWS privilege escalation:\nexploring odd features of the Trust Policy\nhttps://medium.com/inside-the-tech-by-softserve/aws-privilege-escalation-exploring-odd-features-of-the-trust-policy-7a970a32861\n2. Kubernetes Penetration Testing tool\ud83d\udc4d\ud83c\udffd\nhttps://github.com/inguardians/peirates\n\nexploit\nCVE-2021-1588:\nA vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software\nhttps://github.com/AlAIAL90/CVE-2021-1588\n]-> A vulnerability in the implementation of the system login block-for command for Cisco NX-OS Software\nhttps://github.com/AlAIAL90/CVE-2021-1590\n]-> A vulnerability in the EtherChannel port subscription logic of Cisco Nexus 9500 Series Switches\u00a0\nhttps://github.com/AlAIAL90/CVE-2021-1591\n\nA practical experiment on supply-chain security using reproducible builds\ud83e\udd78\nhttps://github.com/kpcyrd/i-probably-didnt-backdoor-this\n\nThreat Research\n1. Tale of $126k worth of bugs that lead to Facebook Account Takeovers\ud83d\ude00\nhttps://ysamm.com/?p=708\n2. A deep-dive into the SolarWinds Serv-U SSH vulnerability\ud83d\ude01\nhttps://www.microsoft.com/security/blog/2021/09/02/a-deep-dive-into-the-solarwinds-serv-u-ssh-vulnerability", "creation_timestamp": "2026-09-01T17:00:41.271907Z"}