{"vulnerability": "cve-2021-32588", "sightings": [{"uuid": "dd294d0a-9753-4adb-95a9-7015baadb6b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32588", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/4061", "content": "#Threat_Research\n1. Fortinet FortiPortal Vulnerability Disclosures (CVE-2021-32588, CVE-2021-36168)\nhttps://insomniasec.com/blog/fortiportal-disclosures\n2. Modify in-flight data to payment provider Smart2Pay\nhttps://hackerone.com/reports/1295844", "creation_timestamp": "2021-08-14T13:25:01.000000Z"}, {"uuid": "3040c90e-9a83-4fbf-84d3-dc5f22ca4568", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32588", "type": "seen", "source": "https://t.me/cissp/4024", "content": "Red Team Tactics\nAbusing NTLM Relay and Pass-The-Hash for Admin\nhttps://infosecwriteups.com/abusing-ntlm-relay-and-pass-the-hash-for-admin-d24d0f12bea0\n\nexploit\nCSRF on /api/graphql allows executing mutations through GET requests\nhttps://hackerone.com/reports/1122408\n\nOffensive security\nMy Steps of Reproducing\u00a0ProxyShell\nhttps://y4y.space/2021/08/12/my-steps-of-reproducing-proxyshell\n\nThreat Research\n1. Fortinet FortiPortal Vulnerability Disclosures (CVE-2021-32588, CVE-2021-36168)\nhttps://insomniasec.com/blog/fortiportal-disclosures\n2. Modify in-flight data to payment provider Smart2Pay\nhttps://hackerone.com/reports/1295844", "creation_timestamp": "2026-09-01T17:00:42.959253Z"}, {"uuid": "0e85fccc-1347-4ada-9baa-0f2ecbcc889a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32588", "type": "seen", "source": "https://t.me/cissp/4024", "content": "Red Team Tactics\nAbusing NTLM Relay and Pass-The-Hash for Admin\nhttps://infosecwriteups.com/abusing-ntlm-relay-and-pass-the-hash-for-admin-d24d0f12bea0\n\nexploit\nCSRF on /api/graphql allows executing mutations through GET requests\nhttps://hackerone.com/reports/1122408\n\nOffensive security\nMy Steps of Reproducing\u00a0ProxyShell\nhttps://y4y.space/2021/08/12/my-steps-of-reproducing-proxyshell\n\nThreat Research\n1. Fortinet FortiPortal Vulnerability Disclosures (CVE-2021-32588, CVE-2021-36168)\nhttps://insomniasec.com/blog/fortiportal-disclosures\n2. Modify in-flight data to payment provider Smart2Pay\nhttps://hackerone.com/reports/1295844", "creation_timestamp": "2026-09-02T01:04:30.138895Z"}]}