{"vulnerability": "CVE-2021-28313", "sightings": [{"uuid": "ec81a461-5b3d-468f-9339-2c3bba859d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28313", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3220", "content": "#Threat_Research\n1. RCE via unsafe inline Kramdown options when rendering certain Wiki pages\nhttps://hackerone.com/reports/1125425\n2. PoC code about the Microsoft Diaghub case sensitivity EoP vulnerability (CVE-2021-28321, CVE-2021-28322, CVE-2021-28313)\nhttps://github.com/irsl/microsoft-diaghub-case-sensitivity-eop-cve\n3. The peculiar case of HTML Injection\nhttps://infosecwriteups.com/the-peculiar-case-of-html-injection-d14db8440e3", "creation_timestamp": "2024-08-18T14:42:05.000000Z"}, {"uuid": "39595e6a-98f7-43ac-8030-540928922173", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28313", "type": "seen", "source": "https://t.me/cissp/3040", "content": "CVE-2021-27905:\nApache Solr SSRF (PoC)\nhttps://github.com/henry4e36/solr-ssrf\n\nRed Team Tactics:\n1. Thread and Process State Change a.k.a.:\nEDR Hook Evasion Method #4512\nhttps://windows-internals.com/thread-and-process-state-change\n2. A vulnerability exploitation tool for SVN source disclosure\n// support various versions of SVN\nhttps://github.com/X3NNY/SvnFuck\n\nMalware analysis:\n1. Best practices for handling new mining virus Sysrv-hello\nhttps://help.aliyun.com/document_detail/196163.html\n2. Binary Data Hiding in VB6 Executables\nhttps://decoded.avast.io/davidzimmer/binary-data-hiding-in-vb6-executables\n\nOffensive security:\nBrowser Exploitation on Windows -\nUnderstanding Use-After-Free Vulnerabilities\nhttps://connormcgarr.github.io/browser1\n\nThreat Research:\n1. RCE via unsafe inline Kramdown options when rendering certain Wiki pages\nhttps://hackerone.com/reports/1125425\n2. PoC code about the Microsoft Diaghub case sensitivity EoP vulnerability (CVE-2021-28321, CVE-2021-28322, CVE-2021-28313)\nhttps://github.com/irsl/microsoft-diaghub-case-sensitivity-eop-cve\n3. The peculiar case of HTML Injection\nhttps://infosecwriteups.com/the-peculiar-case-of-html-injection-d14db8440e3", "creation_timestamp": "2026-09-01T17:00:52.709967Z"}, {"uuid": "d5d1a470-b946-4c26-9716-babeb1433179", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28313", "type": "seen", "source": "https://t.me/cissp/3040", "content": "CVE-2021-27905:\nApache Solr SSRF (PoC)\nhttps://github.com/henry4e36/solr-ssrf\n\nRed Team Tactics:\n1. Thread and Process State Change a.k.a.:\nEDR Hook Evasion Method #4512\nhttps://windows-internals.com/thread-and-process-state-change\n2. A vulnerability exploitation tool for SVN source disclosure\n// support various versions of SVN\nhttps://github.com/X3NNY/SvnFuck\n\nMalware analysis:\n1. Best practices for handling new mining virus Sysrv-hello\nhttps://help.aliyun.com/document_detail/196163.html\n2. Binary Data Hiding in VB6 Executables\nhttps://decoded.avast.io/davidzimmer/binary-data-hiding-in-vb6-executables\n\nOffensive security:\nBrowser Exploitation on Windows -\nUnderstanding Use-After-Free Vulnerabilities\nhttps://connormcgarr.github.io/browser1\n\nThreat Research:\n1. RCE via unsafe inline Kramdown options when rendering certain Wiki pages\nhttps://hackerone.com/reports/1125425\n2. PoC code about the Microsoft Diaghub case sensitivity EoP vulnerability (CVE-2021-28321, CVE-2021-28322, CVE-2021-28313)\nhttps://github.com/irsl/microsoft-diaghub-case-sensitivity-eop-cve\n3. The peculiar case of HTML Injection\nhttps://infosecwriteups.com/the-peculiar-case-of-html-injection-d14db8440e3", "creation_timestamp": "2026-09-02T01:04:42.648194Z"}, {"uuid": "196bb202-516f-4e61-ae9a-edc3ae9e264c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28313", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3040", "content": "CVE-2021-27905:\nApache Solr SSRF (PoC)\nhttps://github.com/henry4e36/solr-ssrf\n\nRed Team Tactics:\n1. Thread and Process State Change a.k.a.:\nEDR Hook Evasion Method #4512\nhttps://windows-internals.com/thread-and-process-state-change\n2. A vulnerability exploitation tool for SVN source disclosure\n// support various versions of SVN\nhttps://github.com/X3NNY/SvnFuck\n\nMalware analysis:\n1. Best practices for handling new mining virus Sysrv-hello\nhttps://help.aliyun.com/document_detail/196163.html\n2. Binary Data Hiding in VB6 Executables\nhttps://decoded.avast.io/davidzimmer/binary-data-hiding-in-vb6-executables\n\nOffensive security:\nBrowser Exploitation on Windows -\nUnderstanding Use-After-Free Vulnerabilities\nhttps://connormcgarr.github.io/browser1\n\nThreat Research:\n1. RCE via unsafe inline Kramdown options when rendering certain Wiki pages\nhttps://hackerone.com/reports/1125425\n2. PoC code about the Microsoft Diaghub case sensitivity EoP vulnerability (CVE-2021-28321, CVE-2021-28322, CVE-2021-28313)\nhttps://github.com/irsl/microsoft-diaghub-case-sensitivity-eop-cve\n3. The peculiar case of HTML Injection\nhttps://infosecwriteups.com/the-peculiar-case-of-html-injection-d14db8440e3", "creation_timestamp": "2026-09-11T08:00:07.515690Z"}]}