{"vulnerability": "CVE-2021-22909", "sightings": [{"uuid": "e58a6567-c7d5-4529-ae32-629035897402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22909", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3462", "content": "#WLAN_Security\nUbiquiti Networks EdgeOS Improper Certificate Validation RCE Vulnerability/Firmware Update Bug (PoC for CVE-2021-22909)\nhttps://www.zerodayinitiative.com/blog/2021/5/24/cve-2021-22909-digging-into-a-ubiquiti-firmware-update-bug", "creation_timestamp": "2021-05-26T12:20:01.000000Z"}, {"uuid": "782e0335-8fba-4c47-87b4-5891491629ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22909", "type": "seen", "source": "https://t.me/cissp/3279", "content": "Offensive security\nApplying the Invisibility Cloak:\nObfuscate C# Tools to Evade Signature-Based Detection\nhttps://securityintelligence.com/posts/invisibility-cloak-obfuscate-c-tools-evade-signature-based-detection\n\nexploit\nVMware\u00a0ESXi OpenSLP heap-overflow vulnerability\nhttps://github.com/straightblast/My-PoC-Exploits/blob/master/CVE-2021-21974.py\n]-> RCE PoC walkthrough:\nhttps://straightblast.medium.com/my-poc-walkthrough-for-cve-2021-21974-a266bcad14b9\n\nRed Team Tactics\n1. Nightly builds of common C# offensive tools\nhttps://github.com/Flangvik/SharpCollection\n2. Red Team tool for exfiltrating the target organization's Google People Directory that you have access to\nhttps://github.com/antman1p/GDir-Thief\n\nWLAN Security\nUbiquiti Networks EdgeOS Improper Certificate Validation RCE Vulnerability/Firmware Update Bug (PoC for CVE-2021-22909)\nhttps://www.zerodayinitiative.com/blog/2021/5/24/cve-2021-22909-digging-into-a-ubiquiti-firmware-update-bug\n\nAccessing Windows Systems Remotely From Linux\ud83d\ude01\nhttps://www.infosecmatter.com/accessing-windows-systems-remotely-from-linux\n// Collection of 30+ methods for accessing remote Windows systems from Linux to execute commands, use remote shell or connect to graphical remote desktop (RDP)", "creation_timestamp": "2026-09-01T17:00:49.751142Z"}, {"uuid": "ac9b9b16-865d-4b8e-a647-3a3070ef076c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22909", "type": "seen", "source": "https://t.me/cissp/3279", "content": "Offensive security\nApplying the Invisibility Cloak:\nObfuscate C# Tools to Evade Signature-Based Detection\nhttps://securityintelligence.com/posts/invisibility-cloak-obfuscate-c-tools-evade-signature-based-detection\n\nexploit\nVMware\u00a0ESXi OpenSLP heap-overflow vulnerability\nhttps://github.com/straightblast/My-PoC-Exploits/blob/master/CVE-2021-21974.py\n]-> RCE PoC walkthrough:\nhttps://straightblast.medium.com/my-poc-walkthrough-for-cve-2021-21974-a266bcad14b9\n\nRed Team Tactics\n1. Nightly builds of common C# offensive tools\nhttps://github.com/Flangvik/SharpCollection\n2. Red Team tool for exfiltrating the target organization's Google People Directory that you have access to\nhttps://github.com/antman1p/GDir-Thief\n\nWLAN Security\nUbiquiti Networks EdgeOS Improper Certificate Validation RCE Vulnerability/Firmware Update Bug (PoC for CVE-2021-22909)\nhttps://www.zerodayinitiative.com/blog/2021/5/24/cve-2021-22909-digging-into-a-ubiquiti-firmware-update-bug\n\nAccessing Windows Systems Remotely From Linux\ud83d\ude01\nhttps://www.infosecmatter.com/accessing-windows-systems-remotely-from-linux\n// Collection of 30+ methods for accessing remote Windows systems from Linux to execute commands, use remote shell or connect to graphical remote desktop (RDP)", "creation_timestamp": "2026-09-02T01:04:38.070477Z"}, {"uuid": "ca6d2324-3bc2-4a38-a53e-db0048f66bf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22909", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3279", "content": "Offensive security\nApplying the Invisibility Cloak:\nObfuscate C# Tools to Evade Signature-Based Detection\nhttps://securityintelligence.com/posts/invisibility-cloak-obfuscate-c-tools-evade-signature-based-detection\n\nexploit\nVMware\u00a0ESXi OpenSLP heap-overflow vulnerability\nhttps://github.com/straightblast/My-PoC-Exploits/blob/master/CVE-2021-21974.py\n]-> RCE PoC walkthrough:\nhttps://straightblast.medium.com/my-poc-walkthrough-for-cve-2021-21974-a266bcad14b9\n\nRed Team Tactics\n1. Nightly builds of common C# offensive tools\nhttps://github.com/Flangvik/SharpCollection\n2. Red Team tool for exfiltrating the target organization's Google People Directory that you have access to\nhttps://github.com/antman1p/GDir-Thief\n\nWLAN Security\nUbiquiti Networks EdgeOS Improper Certificate Validation RCE Vulnerability/Firmware Update Bug (PoC for CVE-2021-22909)\nhttps://www.zerodayinitiative.com/blog/2021/5/24/cve-2021-22909-digging-into-a-ubiquiti-firmware-update-bug\n\nAccessing Windows Systems Remotely From Linux\ud83d\ude01\nhttps://www.infosecmatter.com/accessing-windows-systems-remotely-from-linux\n// Collection of 30+ methods for accessing remote Windows systems from Linux to execute commands, use remote shell or connect to graphical remote desktop (RDP)", "creation_timestamp": "2026-09-11T05:00:04.902255Z"}, {"uuid": "88c7a1d6-13fc-4851-b902-4adeaf52fd4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22909", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3279", "content": "Offensive security\nApplying the Invisibility Cloak:\nObfuscate C# Tools to Evade Signature-Based Detection\nhttps://securityintelligence.com/posts/invisibility-cloak-obfuscate-c-tools-evade-signature-based-detection\n\nexploit\nVMware\u00a0ESXi OpenSLP heap-overflow vulnerability\nhttps://github.com/straightblast/My-PoC-Exploits/blob/master/CVE-2021-21974.py\n]-> RCE PoC walkthrough:\nhttps://straightblast.medium.com/my-poc-walkthrough-for-cve-2021-21974-a266bcad14b9\n\nRed Team Tactics\n1. Nightly builds of common C# offensive tools\nhttps://github.com/Flangvik/SharpCollection\n2. Red Team tool for exfiltrating the target organization's Google People Directory that you have access to\nhttps://github.com/antman1p/GDir-Thief\n\nWLAN Security\nUbiquiti Networks EdgeOS Improper Certificate Validation RCE Vulnerability/Firmware Update Bug (PoC for CVE-2021-22909)\nhttps://www.zerodayinitiative.com/blog/2021/5/24/cve-2021-22909-digging-into-a-ubiquiti-firmware-update-bug\n\nAccessing Windows Systems Remotely From Linux\ud83d\ude01\nhttps://www.infosecmatter.com/accessing-windows-systems-remotely-from-linux\n// Collection of 30+ methods for accessing remote Windows systems from Linux to execute commands, use remote shell or connect to graphical remote desktop (RDP)", "creation_timestamp": "2026-09-12T00:00:51.436089Z"}]}