{"uuid": "95b88f39-390e-4ba0-b4b8-777c73a8fc21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31761", "type": "seen", "source": "https://t.me/cissp/3031", "content": "Threat Research:\n1. A Census of Deployed Pulse Connect Secure (PCS) Versions\nhttps://research.nccgroup.com/2021/04/23/a-census-of-deployed-pulse-connect-secure-pcs-versions\n2. Linux kernel exploitation on Android\nhttps://mcyoloswagham.github.io/linux\n\nRed Team Tactics:\n1. Don't Share Your $HOME with Untrusted Guests...\nhttps://zerodayengineering.com/blog/dont-share-your-home.html\n2. Spilling Local Files via XXE when HTTP OOB fails\nhttps://blog.noob.ninja/spilling-local-files-via-xxe-when\n\nCloud Security:\nS3 Account Search\nhttps://github.com/WeAreCloudar/s3-account-search\n\nWLAN Security:\nBluetooth-Wi-Fi Code Execution & Wi-Fi Debugging\nhttps://naehrdine.blogspot.com/2021/04/bluetooth-wi-fi-code-execution-wi-fi.html?m=1\n\n\nCVE-2021-31760/\nCVE-2021-31761/\nCVE-2021-31762:\nExploiting a CSRF/XSS/CSRF attack to get a RCE through the Webmin's running process feature (PoC)\nhttps://github.com/Mesh3l911/CVE-2021-31760\nhttps://github.com/Mesh3l911/CVE-2021-31761\nhttps://github.com/Mesh3l911/CVE-2021-31762", "creation_timestamp": "2026-09-01T17:00:52.782633Z"}