{"uuid": "ff3cda20-c692-4514-9fb5-de6bffa13f5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40438", "type": "seen", "source": "https://t.me/cissp/4622", "content": "Offensive security\nBuilding a POC for CVE-2021-40438\n(SSRF in apache2 mod_proxy)\nhttps://firzen.de/building-a-poc-for-cve-2021-40438\n\nRed Team Tactics\n1. Compromising vCenter via SAML Certificates\ud83e\udd2a\nhttps://www.horizon3.ai/compromising-vcenter-via-saml-certificates\n]-> PoC: https://github.com/horizon3ai/vcenter_saml_login\n2. Youtube as covert-channel - \nC2 by uploading videos to Youtube\ud83d\ude44\nhttps://github.com/ricardojoserf/covert-tube\n\nAttacking and defending CI/CD pipelines\ud83d\ude00\nhttps://tech.ovoenergy.com/gitoops-attacking-and-defending-ci-cd-pipelines\n]-> Tool: https://github.com/ovotech/gitoops\n\nexploit\nCVE-2021-36749:\nSecurity restrictions bypass in Apache Druid\nhttps://github.com/BrucessKING/CVE-2021-36749\n\nWLAN Security\nBluetooth WarDriving with the nRF52\nhttps://machinehum.medium.com/bluetooth-wardriving-with-the-nrf52-c6beaf7bc5e2\n]-> Repo:\nhttps://github.com/Machine-Hum/nRF52_War_Driving", "creation_timestamp": "2026-09-02T01:04:22.797409Z"}