{"uuid": "60e96894-6d46-4078-9720-41c9602b3c8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22005", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4486", "content": "Red Team Tactics\n1. XSS to RCE:\nCovert Target Websites into Payload Landing Pages\nhttps://whynotsecurity.com/blog/xss-to-rce\n2. Redirecting (specific) TCP, UDP and ICMP traffic to another destination\nhttps://github.com/jellever/StreamDivert\n\nMalware analysis\nFinSpy: unseen findings\nhttps://securelist.com/finspy-unseen-findings/104322\n\nOffensive security\nThread Stack Spoofing - \nPoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners and analysts\nhttps://github.com/mgeeky/ThreadStackSpoofer\n\nFast binary emulation and symbolic execution framework using radare2\nhttps://github.com/aemmitt-ns/radius\n\nexploit\nA complete PoC exploit for CVE-2021-22005\nin VMware vCenter\ud83e\udd78\nhttps://securityaffairs.co/wordpress/122686/hacking/cve-2021-22005-exploit-vmware-vcenter.html?utm_source=feedly&utm_medium=rss&utm_campaign=cve-2021-22005-exploit-vmware-vcenter\n\nBlue Team Techniques\nMicrosoft Automates Exchange Mitigations\u270c\ud83c\udffc\nhttps://techcommunity.microsoft.com/t5/exchange-team-blog/new-security-feature-in-september-2021-cumulative-update-for/ba-p/2783155\n\n\n\u200e", "creation_timestamp": "2026-09-10T19:00:06.129243Z"}