{"uuid": "19843e78-49fe-4b2e-bf40-5045ee49ff50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26415", "type": "seen", "source": "https://t.me/cissp/3012", "content": "Red Team Tactics:\n1. As-Exploits 404Team\nhttps://github.com/yzddmr6/As-Exploits\n2. MS External Email Warning Bypass\nhttps://whynotsecurity.com/blog/external-email-warning-bypass\n\nThreat Research:\n1. Zero-Day Exploits in SonicWall Email Security Lead to Enterprise Compromise\nhttps://www.fireeye.com/blog/threat-research/2021/04/zero-day-exploits-in-sonicwall-email-security-lead-to-compromise.html\n2. RCE in Homebrew by compromising the official Cask repository\nhttps://blog.ryotak.me/post/homebrew-security-incident-en\n\nCVE-2021-26415:\nWindows Installer Elevation of Privilege Vulnerability (PoC)\nhttps://www.cloaked.pl/2021/04/cve-2021-26415\n\nexploit\nCVE-2021-22893:\nPoC script to exploit Pulse Secure VPNs\nhttps://github.com/ZephrFish/CVE-2021-22893\n\nCloud Security:\nAzure Application Proxy C2\nhttps://www.trustedsec.com/blog/azure-application-proxy-c2\n]-> AppProxyC2 PoC:\nhttps://github.com/xpn/appproxyc2\n\nLKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x\n(x86/x86_64, ARM64)\nhttps://github.com/m0nad/Diamorphine", "creation_timestamp": "2026-09-01T17:00:52.836812Z"}