{"vulnerability": "CVE-2021-28321", "sightings": [{"uuid": "1b84e4dc-f55e-42bd-93e9-0ebd8c6f0c3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28321", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3220", "content": "#Threat_Research\n1. RCE via unsafe inline Kramdown options when rendering certain Wiki pages\nhttps://hackerone.com/reports/1125425\n2. PoC code about the Microsoft Diaghub case sensitivity EoP vulnerability (CVE-2021-28321, CVE-2021-28322, CVE-2021-28313)\nhttps://github.com/irsl/microsoft-diaghub-case-sensitivity-eop-cve\n3. The peculiar case of HTML Injection\nhttps://infosecwriteups.com/the-peculiar-case-of-html-injection-d14db8440e3", "creation_timestamp": "2024-08-18T14:42:05.000000Z"}, {"uuid": "138d96df-1c1f-4f39-acfe-c17094a6d9ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28321", "type": "seen", "source": "https://t.me/cissp/3040", "content": "CVE-2021-27905:\nApache Solr SSRF (PoC)\nhttps://github.com/henry4e36/solr-ssrf\n\nRed Team Tactics:\n1. Thread and Process State Change a.k.a.:\nEDR Hook Evasion Method #4512\nhttps://windows-internals.com/thread-and-process-state-change\n2. A vulnerability exploitation tool for SVN source disclosure\n// support various versions of SVN\nhttps://github.com/X3NNY/SvnFuck\n\nMalware analysis:\n1. Best practices for handling new mining virus Sysrv-hello\nhttps://help.aliyun.com/document_detail/196163.html\n2. Binary Data Hiding in VB6 Executables\nhttps://decoded.avast.io/davidzimmer/binary-data-hiding-in-vb6-executables\n\nOffensive security:\nBrowser Exploitation on Windows -\nUnderstanding Use-After-Free Vulnerabilities\nhttps://connormcgarr.github.io/browser1\n\nThreat Research:\n1. RCE via unsafe inline Kramdown options when rendering certain Wiki pages\nhttps://hackerone.com/reports/1125425\n2. PoC code about the Microsoft Diaghub case sensitivity EoP vulnerability (CVE-2021-28321, CVE-2021-28322, CVE-2021-28313)\nhttps://github.com/irsl/microsoft-diaghub-case-sensitivity-eop-cve\n3. The peculiar case of HTML Injection\nhttps://infosecwriteups.com/the-peculiar-case-of-html-injection-d14db8440e3", "creation_timestamp": "2026-09-01T17:00:52.657851Z"}, {"uuid": "ee3e4e23-69fe-4f76-9209-9a9747ba5098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28321", "type": "seen", "source": "https://t.me/cissp/3040", "content": "CVE-2021-27905:\nApache Solr SSRF (PoC)\nhttps://github.com/henry4e36/solr-ssrf\n\nRed Team Tactics:\n1. Thread and Process State Change a.k.a.:\nEDR Hook Evasion Method #4512\nhttps://windows-internals.com/thread-and-process-state-change\n2. A vulnerability exploitation tool for SVN source disclosure\n// support various versions of SVN\nhttps://github.com/X3NNY/SvnFuck\n\nMalware analysis:\n1. Best practices for handling new mining virus Sysrv-hello\nhttps://help.aliyun.com/document_detail/196163.html\n2. Binary Data Hiding in VB6 Executables\nhttps://decoded.avast.io/davidzimmer/binary-data-hiding-in-vb6-executables\n\nOffensive security:\nBrowser Exploitation on Windows -\nUnderstanding Use-After-Free Vulnerabilities\nhttps://connormcgarr.github.io/browser1\n\nThreat Research:\n1. RCE via unsafe inline Kramdown options when rendering certain Wiki pages\nhttps://hackerone.com/reports/1125425\n2. PoC code about the Microsoft Diaghub case sensitivity EoP vulnerability (CVE-2021-28321, CVE-2021-28322, CVE-2021-28313)\nhttps://github.com/irsl/microsoft-diaghub-case-sensitivity-eop-cve\n3. The peculiar case of HTML Injection\nhttps://infosecwriteups.com/the-peculiar-case-of-html-injection-d14db8440e3", "creation_timestamp": "2026-09-02T01:04:42.554729Z"}, {"uuid": "5dda0677-2444-4610-9164-fd29223d0d4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28321", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3040", "content": "CVE-2021-27905:\nApache Solr SSRF (PoC)\nhttps://github.com/henry4e36/solr-ssrf\n\nRed Team Tactics:\n1. Thread and Process State Change a.k.a.:\nEDR Hook Evasion Method #4512\nhttps://windows-internals.com/thread-and-process-state-change\n2. A vulnerability exploitation tool for SVN source disclosure\n// support various versions of SVN\nhttps://github.com/X3NNY/SvnFuck\n\nMalware analysis:\n1. Best practices for handling new mining virus Sysrv-hello\nhttps://help.aliyun.com/document_detail/196163.html\n2. Binary Data Hiding in VB6 Executables\nhttps://decoded.avast.io/davidzimmer/binary-data-hiding-in-vb6-executables\n\nOffensive security:\nBrowser Exploitation on Windows -\nUnderstanding Use-After-Free Vulnerabilities\nhttps://connormcgarr.github.io/browser1\n\nThreat Research:\n1. RCE via unsafe inline Kramdown options when rendering certain Wiki pages\nhttps://hackerone.com/reports/1125425\n2. PoC code about the Microsoft Diaghub case sensitivity EoP vulnerability (CVE-2021-28321, CVE-2021-28322, CVE-2021-28313)\nhttps://github.com/irsl/microsoft-diaghub-case-sensitivity-eop-cve\n3. The peculiar case of HTML Injection\nhttps://infosecwriteups.com/the-peculiar-case-of-html-injection-d14db8440e3", "creation_timestamp": "2026-09-11T08:00:07.421021Z"}]}