{"uuid": "fa469e01-20a2-49c1-a914-cbcab1678be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40444", "type": "seen", "source": "https://t.me/cissp/4341", "content": "Cloud Security\n1. Azurescape - Cross-Account Container Takeover\nin Azure Container Instances\nhttps://unit42.paloaltonetworks.com/azure-container-instances\n2. IAM Vulnerable - An AWS IAM Privilege Escalation Playground\nhttps://labs.bishopfox.com/tech-blog/iam-vulnerable-an-aws-iam-privilege-escalation-playground\n\nRed Team Tactics\n1. JDBC Connection URL Attack\nhttps://su18.org/post/jdbc-connection-url-attack\n2. IP-Board Stored XSS to RCE Chain\nhttps://ssd-disclosure.com/ssd-advisory-ip-board-stored-xss-to-rce-chain\n3. Attacking Google Chrome's Strict Site Isolation via Speculative Execution and Type Confusion\nhttps://www.spookjs.com\n\nOffensive security\nA proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization\ud83d\ude01\nhttps://github.com/frohoff/ysoserial\n\nexploit\nFull PoC with cab creation for CVE-2021-40444\nhttps://github.com/lockedbyte/CVE-2021-40444\n]-> https://github.com/Udyz/CVE-2021-40444-Sample/blob/main/poc.html", "creation_timestamp": "2026-09-01T17:00:40.932511Z"}