{"uuid": "07ed017a-3d69-4081-bd1f-461e0e7a1b53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1520", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3129", "content": "Threat Research\n1. TG8 Firewall - PreAuth RCE/Password Disclosure (PoC)\ud83d\ude00\nhttps://ssd-disclosure.com/ssd-advisory-tg8-firewall-preauth-rce-and-password-disclosure\n2. Cisco RV34X Series - Privilege \ud83d\ude2cEscalation in vpnTimer. Root Cause Analysis (PoC for CVE-2021-1520)\nhttps://www.iot-inspector.com/blog/advisory-cisco-rv34x-series-privilege-escalation-vpntimer\n\nAnalytics\nQ1 2021 DDoS attacks and BGP incidents\ud83d\udc4d\ud83c\udffd\nhttps://blog.qrator.net/en/q1-2021-report_129\n\nBlue Team Techniques\n1. Analysis of HSTS Caches of Different Browsers\n]-> Forensic HSTS Analyzer:\nhttps://github.com/ernw/forensic-hsts-analyzer\n2. Detecting memory management bugs with GCC 11. Part 1 - Understanding dynamic allocation\nhttps://developers.redhat.com/blog/2021/04/30/detecting-memory-management-bugs-with-gcc-11-part-1-understanding-dynamic-allocation\n\nApple Silicon Hardware Secrets:\nSPRR and Guarded Exception Levels (GXF)\nhttps://blog.svenpeter.dev/posts/m1_sprr_gxf\n\nMalware analysis\nOperation TunnelSnake\nhttps://securelist.com/operation-tunnelsnake-and-moriya-rootkit/101831", "creation_timestamp": "2026-09-11T07:00:04.680258Z"}