{"uuid": "58e714bc-6323-4062-a458-3ba7c2df8948", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22429", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3981", "content": "Threat Research\n1. SAML is insecure by design\nhttps://joonas.fi/2021/08/saml-is-insecure-by-design\n]-> Securing XML implementations across the web:\nhttps://mattermost.com/blog/securing-xml-implementations-across-the-web\n2. Analysis of a Heap Buffer-Overflow Vulnerability in Microsoft Windows Address Book\nhttps://blog.exodusintel.com/2021/08/05/analysis-of-a-heap-buffer-overflow-vulnerability-in-microsoft-windows-address-book/?utm_source=rss&utm_medium=rss&utm_campaign=analysis-of-a-heap-buffer-overflow-vulnerability-in-microsoft-windows-address-book\n\nGeneral Countermeasures Against Source Leaks\nand Exploits (Git/Svn)\nhttps://drivertom.blogspot.com/2021/08/git.html?m=1\n\nOffensive security\n1. Cobalt Strike BOF - Bypass AMSI in a remote process\nwith code injection\nhttps://github.com/boku7/injectAmsiBypass\n2. Abusing Active Directory Certificate Services\nhttps://github.com/GhostPack/ForgeCert\n\nMalware analysis\nSee Ya Sharp:  A Loader\u2019s Tale\nhttps://www.mcafee.com/blogs/enterprise/mcafee-enterprise-atr/see-ya-sharp-a-loaders-tale\n\nThreat\n1. Potential remote code execution in PyPI\nhttps://blog.ryotak.me/post/pypi-potential-remote-code-execution-en\n2. Huawei Buffer Overflow in BootROM USB Stack (CVE-2021-22429)\nhttps://labs.taszk.io/blog/post/bootrom_usb\n3. Privacy Flaws in Telegram's Self-destruct Chats for MacOS (PoC)\nhttps://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/telegram-self-destruct-not-always", "creation_timestamp": "2026-09-10T23:00:04.763527Z"}