{"uuid": "f49c9db7-29f7-4b08-8182-c3f32117cd4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7378", "type": "seen", "source": "https://t.me/cissp/3678", "content": "Offensive security\n1. ETW-based process injection detection\nhttps://github.com/xinbailu/TiEtwAgent\n2. Exploiting LESS.JS to Achieve RCE\nhttps://www.softwaresecured.com/exploiting-less-js\n\nBlue Team Techniques\n1. A PrintNightmare (CVE-2021-34527) Python Scanner. Scan entire subnets for hosts vulnerable to the PrintNightmare RCE\nhttps://github.com/byt3bl33d3r/ItWasAllADream\n2. RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps\nhttps://github.com/BSI-Bund/RdpCacheStitcher\n\nexploit\nCVE-2021-3281:\nThere is a Directory Traversal vulnerability in django.utils.archive.py, lineno:171, in Class TarArchive\nhttps://github.com/lwzSoviet/CVE-2021-3281\n\nCVE-2020-7378:\nPassword Reset Vulnerability in OpenCRX (Unauthenticated Account Take Over)\nhttps://github.com/ruthvikvegunta/openCRX-CVE-2020-7378", "creation_timestamp": "2026-09-01T17:00:46.395877Z"}