{"uuid": "b157b9b7-c11a-4b66-8789-77e9fccdb68a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37579", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4404", "content": "Offensive security\n1. Obfuscating Malicious, Macro-Enabled Word Docs\nhttps://depthsecurity.com/blog/obfuscating-malicious-macro-enabled-word-docs\n2. Pentest Notes:  Google Cloud Edition\nhttps://infosecwriteups.com/pentest-notes-google-cloud-edition-2e138bb0f504\n\nexploit\n1. CVE-2021-37579:\nPre-Auth Unsafe Java Deserialization in Apace Dubbo\nhttps://securitylab.github.com/advisories/GHSL-2021-097-apache-dubbo\n\n2. macOS 11.5.2/iOS 14.7.1 Kernel Race Condition PoC\nhttps://gist.github.com/infernalheaven/f2f6a2fa2ec1b2252955fb8078211da1 \n\n\nRed Team Tactics\n1. Tool to help on web application firewall bypasses\ud83d\ude00\nhttps://github.com/RedSection/pFuzz\n2. A tool for generating multiple types of NTLMv2 hash theft files\ud83d\ude01\nhttps://github.com/Greenwolf/ntlm_theft\n\nThreat Research\nLocal File Read via Stored XSS in The Opera Browser\nhttps://blogs.opera.com/security/2021/09/bug-bounty-guest-post-local-file-read-via-stored-xss-in-the-opera-browser.", "creation_timestamp": "2026-09-10T19:00:05.402910Z"}