{"uuid": "b77d19d2-5cdc-45af-98aa-2721ebd9a4df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30146", "type": "seen", "source": "https://t.me/cissp/2889", "content": "exploit\nCVE-2021-30146:\nSeafile 7.0.5 (2019) allows Persistent XSS via the \"share of library functionality\"\n\nResearch\n\"A closer look at the security of React Native biometric libraries\", 2021.\nhttps://blog.nviso.eu/2021/04/06/a-closer-look-at-the-security-of-react-native-biometric-libraries\n\nRed Team Tactics:\n1. Revisiting MacOS X Kernel Rootkits (.pdf)\nhttps://vxug.fakedoma.in/papers/VXUG/Mirrors/phrack.org-%20Phrack%20Magazine%20.pdf\n2. Anti-Analysis Techniques Used in Excel 4.0 Macros\nhttps://www.goggleheadedhacker.com/blog/post/23\n3. Exploitation paths allowing you to use the Windows Privileges to elevate your rights within the OS\nhttps://github.com/gtworek/Priv2Admin\n4. Proxy Unix applications in the terminal\nhttps://posts.specterops.io/man-in-the-terminal-65476e6165b9\n]-> https://github.com/djhohnstein/cliProxy\n\nEliminating Data Races in Firefox - A Technical Report\nhttps://hacks.mozilla.org/2021/04/eliminating-data-races-in-firefox-a-technical-report\n\nOffensive security\nHow to bypass Cloudflare, Incapsula, SUCURI and another WAF\ud83d\udc4d\ud83c\udffd\nhttps://miloserdov.org/?p=2960", "creation_timestamp": "2026-09-11T11:00:04.413563Z"}