{"vulnerability": "CVE-2021-36394", "sightings": [{"uuid": "36b39e76-fd0d-4c66-b144-d9a5db323004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36394", "type": "seen", "source": "https://t.me/cibsecurity/59507", "content": "\u203c CVE-2021-36394 \u203c\n\nIn Moodle, a remote code execution risk was identified in the Shibboleth authentication plugin.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-07T00:13:07.000000Z"}, {"uuid": "c91695b5-e5c6-4fcc-88d1-ff248a19f29d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36394", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4180", "content": "#exploit\nCVE 2021-36394:\nMoodle RCE risk when Shibboleth authentication is enabled\nhttps://github.com/dinhbaouit/CVE-2021-36394\n]-> https://0xd0ff9.wordpress.com/2021/08/28/cve-2021-36394-hack-truong-sua-diem-cac-kieu", "creation_timestamp": "2022-07-12T11:42:21.000000Z"}, {"uuid": "dc3dfb74-3b97-48a3-8849-a46f108f68bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36394", "type": "seen", "source": "https://t.me/cissp/4184", "content": "Malware analysis\nLockFile ransomware\u2019s box of tricks:\nintermittent encryption and evasion\nhttps://news.sophos.com/en-us/2021/08/27/lockfile-ransomwares-box-of-tricks-intermittent-encryption-and-evasion\n\nexploit\nCVE 2021-36394:\nMoodle RCE risk when Shibboleth authentication is enabled (PoC)\nhttps://github.com/dinhbaouit/CVE-2021-36394\n]-> https://0xd0ff9.wordpress.com/2021/08/28/cve-2021-36394-hack-truong-sua-diem-cac-kieu\n\nBlueTeam Techniques\nA Primer On Event Tracing For Windows (ETW)\nhttps://nasbench.medium.com/a-primer-on-event-tracing-for-windows-etw-997725c082bf", "creation_timestamp": "2026-09-01T17:00:41.978186Z"}, {"uuid": "7351e67d-c404-4a4a-aae7-6ea64bd4ead7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36394", "type": "seen", "source": "https://t.me/cissp/4184", "content": "Malware analysis\nLockFile ransomware\u2019s box of tricks:\nintermittent encryption and evasion\nhttps://news.sophos.com/en-us/2021/08/27/lockfile-ransomwares-box-of-tricks-intermittent-encryption-and-evasion\n\nexploit\nCVE 2021-36394:\nMoodle RCE risk when Shibboleth authentication is enabled (PoC)\nhttps://github.com/dinhbaouit/CVE-2021-36394\n]-> https://0xd0ff9.wordpress.com/2021/08/28/cve-2021-36394-hack-truong-sua-diem-cac-kieu\n\nBlueTeam Techniques\nA Primer On Event Tracing For Windows (ETW)\nhttps://nasbench.medium.com/a-primer-on-event-tracing-for-windows-etw-997725c082bf", "creation_timestamp": "2026-09-02T01:04:28.598815Z"}, {"uuid": "4beb8fc1-cbfa-4131-ad32-874362af2fdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36394", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4184", "content": "Malware analysis\nLockFile ransomware\u2019s box of tricks:\nintermittent encryption and evasion\nhttps://news.sophos.com/en-us/2021/08/27/lockfile-ransomwares-box-of-tricks-intermittent-encryption-and-evasion\n\nexploit\nCVE 2021-36394:\nMoodle RCE risk when Shibboleth authentication is enabled (PoC)\nhttps://github.com/dinhbaouit/CVE-2021-36394\n]-> https://0xd0ff9.wordpress.com/2021/08/28/cve-2021-36394-hack-truong-sua-diem-cac-kieu\n\nBlueTeam Techniques\nA Primer On Event Tracing For Windows (ETW)\nhttps://nasbench.medium.com/a-primer-on-event-tracing-for-windows-etw-997725c082bf", "creation_timestamp": "2026-09-10T22:00:04.455225Z"}, {"uuid": "8b591256-29bd-4b9e-9be4-e0e8afd10752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36394", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4184", "content": "Malware analysis\nLockFile ransomware\u2019s box of tricks:\nintermittent encryption and evasion\nhttps://news.sophos.com/en-us/2021/08/27/lockfile-ransomwares-box-of-tricks-intermittent-encryption-and-evasion\n\nexploit\nCVE 2021-36394:\nMoodle RCE risk when Shibboleth authentication is enabled (PoC)\nhttps://github.com/dinhbaouit/CVE-2021-36394\n]-> https://0xd0ff9.wordpress.com/2021/08/28/cve-2021-36394-hack-truong-sua-diem-cac-kieu\n\nBlueTeam Techniques\nA Primer On Event Tracing For Windows (ETW)\nhttps://nasbench.medium.com/a-primer-on-event-tracing-for-windows-etw-997725c082bf", "creation_timestamp": "2026-09-11T00:00:11.622487Z"}]}