{"uuid": "42299260-8b4a-402d-940b-646946d9a0c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26295", "type": "seen", "source": "https://t.me/cissp/2699", "content": "CVE-2021-26295:\nApache OFBiz <17.12.06 - unsafe deserialization. An unauthenticated attacker can use this vulnerability to successfully take over Apache OFBiz (1-day PoC)\n]-> https://github.com/rakjong/CVE-2021-26295-Apache-OFBiz\n]-> https://github.com/r0ckysec/CVE-2021-26295\n\nCloudSecurity\nBlue Team Techniques:\n1. A serverless honeytoken framework\nhttps://github.com/3CORESec/Trapdoor\n2. Hunting and detecting Cobalt Strike\ud83d\ude01\nhttps://www.sekoia.io/en/hunting-and-detecting-cobalt-strike\n\nThreat Research:\nHidden OAuth attack vectors\u270c\ud83c\udffc\nhttps://portswigger.net/research/hidden-oauth-attack-vectors\n\nMalware analysis:\n1. Purple Fox Rootkit\nhttps://www.guardicore.com/labs/purple-fox-rootkit-now-propagates-as-a-worm\n2. Golang Bot Starts Targeting WordPress Websites\nhttps://labs.bitdefender.com/2021/03/golang-bot-starts-targeting-wordpress-websites\n\nRed Team Tactics:\n1. Recovering Redacted PEM Private Keys\nhttps://blog.cryptohack.org/twitter-secrets\n2. RCE on Unauthenticated Redis server\nhttps://trevorsaudi.medium.com/rce-on-unauthenticated-redis-server-11d3494ded5f", "creation_timestamp": "2026-09-01T17:00:57.386801Z"}