{"uuid": "41b15713-d1cd-4d0e-90e4-503cf427743d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/cissp/4662", "content": "Offensive security\nShellcode Injection Techniques\nhttps://github.com/plackyhacker/Shellcode-Injection-Techniques\n// A collection of C# shellcode injection techniques. All techniques use an AES encrypted meterpreter payload\n\nThreat Research\n1. Google Earth Hacking - EaaS\n(Espionage as a Service)\nhttps://johnjhacking.com/blog/gee-exploitation\n2. Chrome in-the-wild bug analysis: CVE-2021-37975\nhttps://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975\n\nAnalytics\nHow a simple Linux kernel memory corruption bug can lead to complete system compromise: An analysis of current and potential kernel security mitigations\nhttps://googleprojectzero.blogspot.com/2021/10/how-simple-linux-kernel-memory.html?m=1\n]-> PoC Exploit:\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2125#c5\n\nBlue Team Techniques\n1. Real Intelligence Threat Analytics\nis a framework for detecting command and control communication through network traffic analysis\nhttps://github.com/activecm/rita\n2. XNTSV program for detailed viewing of system structures for Windows\nhttps://github.com/horsicq/xntsv\n\nCloud Security\nA Scientific Notation Bug in MySQL left AWS WAF Clients Vulnerable to SQL Injection\nhttps://www.gosecure.net/blog/2021/10/19/a-scientific-notation-bug-in-mysql-left-aws-waf-clients-vulnerable-to-sql-injection\n\nMalware analysis\n1. IcedID to XingLocker Ransomware\nhttps://thedfirreport.com/2021/10/18/icedid-to-xinglocker-ransomware-in-24-hours\n2. TA505 Ramps Up Activity, Delivers New FlawedGrace Variant\nhttps://www.proofpoint.com/us/blog/threat-insight/whatta-ta-ta505-ramps-activity-delivers-new-flawedgrace-variant", "creation_timestamp": "2026-09-01T17:00:37.687359Z"}