{"uuid": "e8953c2d-7c07-4a07-9d45-823d41d76618", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-23383", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxwm6ue6q52l", "content": "CVE-2021-23383 - handlebars\nThe Handlebars templating library used in several packages\u2014including jaylinski/handlebars, handlebarsjs/handlebars, NetApp's e-series performance analyzer…

{"uuid": "3f79dea7-76c7-4305-80f1-8609c661eacb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-23383", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3597", "content": "Threat Research\n1. Google Compute Engine (GCE) VM takeover via DHCP flood\nhttps://github.com/irsl/gcp-dhcp-takeover-code-exec\n2. PowerISO DMG File Format Handler memory corruption vulnerability (CVE-2021-2…

{"uuid": "7f2a9c90-d0cb-4ef4-bf7f-c362347e8496", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-23383", "type": "seen", "source": "https://t.me/cissp/3597", "content": "Threat Research\n1. Google Compute Engine (GCE) VM takeover via DHCP flood\nhttps://github.com/irsl/gcp-dhcp-takeover-code-exec\n2. PowerISO DMG File Format Handler memory corruption vulnerability (CVE-2021-21871)\nhttps://talosin…

{"uuid": "87c377c8-aefa-4b10-b931-877609fe5c51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-23383", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3720", "content": "#exploit\nCVE-2021-23383:\nThe package handlebars <4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted sou…