{"uuid": "1148bf19-2a7a-44f9-905e-2982a594313c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1499", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4519", "content": "Malware analysis\n1. GriftHorse Android Trojan\nhttps://blog.zimperium.com/grifthorse-android-trojan-steals-millions-from-over-10-million-victims-globally\n2. GhostEmperor: From ProxyLogon to kernel mode\nhttps://securelist.com/ghostemperor-from-proxylogon-to-kernel-mode/104407\n\nThreat Research\nCisco Hyperflex:\nRCE Through Login Form and Other Findings (CVE-2021-1497, CVE-2021-1498, CVE-2021-1499)\nhttps://swarm.ptsecurity.com/cisco-hyperflex-how-we-got-rce-through-login-form-and-other-findings\n\nRed Team Tactics\n1. Determine if the WebClient Service (WebDAV) is running on a remote system\nhttps://github.com/xforcered/GetWebDAVStatus\n2. Invoke-DLLClone - Koppeling x Metatwin x LazySign\nhttps://redteamer.tips/appdata-is-a-mistake-introducing-invoke-dllclone\n]-> https://github.com/jfmaes/Invoke-DLLClone\n\nexploit\nCVE-2021-24604 :\nThe Availability Calendar WordPress plugin <1.2.2 does not sanitise or escape its Category Names before outputting them in page/post where the associated shortcode is embed, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed\nhttps://github.com/AlAIAL90/CVE-2021-24604\n\n\n\u200e", "creation_timestamp": "2026-09-10T18:00:05.012798Z"}