{"uuid": "2e3c13f6-00f7-4b83-bee0-f09de2c9ef7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41765", "type": "seen", "source": "https://t.me/cissp/4789", "content": "Offensive_security\nThe Kerberos Key List Attack:\nThe return of the Read Only Domain Controllers\nhttps://www.secureauth.com/blog/the-kerberos-key-list-attack-the-return-of-the-read-only-domain-controllers\n\nexploit\nCVE-2021-41765:\nUnauthenticated SQLi to RCE Chain\nhttps://www.horizon3.ai/multiple-vulnerabilities-in-resourcespace\n\nMalware_analysis\n1. HTML smuggling surges: Highly evasive loader technique increasingly used in banking malware, targeted attacks\nhttps://www.microsoft.com/security/blog/2021/11/11/html-smuggling-surges-highly-evasive-loader-technique-increasingly-used-in-banking-malware-targeted-attacks\n2. Abcbot, an evolving botnet\nhttps://blog.netlab.360.com/abcbot_an_evolving_botnet_en\n\nThreat_Research\n1. The dark side of Microsoft Remote Procedure Call protocols\nhttps://redcanary.com/blog/msrpc-to-attack\n2. Analyzing a watering hole campaign using macOS exploits\nhttps://blog.google/threat-analysis-group/analyzing-watering-hole-campaign-using-macos-exploits", "creation_timestamp": "2026-09-01T17:00:35.458334Z"}