{"uuid": "345d912c-565e-4231-90ba-5f9bb5a57a9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40346", "type": "seen", "source": "https://t.me/cissp/4321", "content": "Cloud Security\nMonitor AWS Managed IAM Policies Changes\nhttps://github.com/z0ph/MAMIP\n]-> AWS ReadOnlyAccess: Not Even Once\nhttps://posts.specterops.io/aws-readonlyaccess-not-even-once-ffbceb9fc908\n\nThreat Research\n1. Panda Dome Antivirus - Heap-Based Buffer Overflow Vulnerability\nhttps://zeifan.my/security/heap/overflow/2021/09/08/panda-av-heap-overflow.html\n2. Pro-PRC Influence Campaign Expands to Dozens of Social Media Platforms\nhttps://www.fireeye.com/blog/threat-research/2021/09/pro-prc-influence-campaign-social-media-websites-forums.html\n\nBlue Team Techniques\nEntity Based Detection Engineering  \ud83d\ude01with BloodHound Enterprise\nhttps://posts.specterops.io/entity-based-detection-engineering-with-bloodhound-enterprise-b4dce3963d66\n\nRed Team Tactics\nSSRF in PDF export with PhantomJs\nhttps://xhzeem.me/posts/SSRF-in-PDF-export-with-PhantomJs/read\n\nexploit\nCVE-2021-40346:\nHAProxy HTTP Smuggling (PoC)\nhttps://github.com/knqyf263/CVE-2021-40346", "creation_timestamp": "2026-09-01T17:00:40.881468Z"}