{"vulnerability": "CVE-2021-35368", "sightings": [{"uuid": "1257ff22-ac5f-4dda-b68d-8055b49d77a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-35368", "type": "seen", "source": "https://t.me/cibsecurity/31915", "content": "\u203c CVE-2021-35368 \u203c\n\nOWASP ModSecurity Core Rule Set 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.2 is affected by a Request Body Bypass via a trailing pathname.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-05T21:26:17.000000Z"}, {"uuid": "7afd84a3-b79b-4816-a5a5-e4f155f2f696", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-35368", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3808", "content": "#exploit\nCVE-2021-35368:\nCRS Request Body Bypass\nhttps://coreruleset.org/20210630/cve-2021-35368-crs-request-body-bypass", "creation_timestamp": "2024-09-10T16:52:02.000000Z"}, {"uuid": "1a368b73-d276-492a-a31f-4ab710265013", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-35368", "type": "seen", "source": "https://t.me/cissp/3707", "content": "Threat Research\n1. Global Phishing Campaign Targets Energy Sector and its Suppliers\ud83d\ude04\nhttps://www.intezer.com/blog/research/global-phishing-campaign-targets-energy-sector-and-its-suppliers\n2. Tracking Cobalt Strike: A Trend Micro Vision One Investigation\ud83d\udc4d\ud83c\udffd\nhttps://www.trendmicro.com/en_us/research/21/g/tracking_cobalt_strike_a_vision_one_investigation.html\n\nRed Team Tactics\n1. Code Injection, Inject malicious payload via pagetables pml4\ud83d\ude04\nhttps://github.com/kkent030315/PageTableInjection\n2. VBA Stomping - Advanced Maldoc Techniques\nhttps://medium.com/walmartglobaltech/vba-stomping-advanced-maldoc-techniques-612c484ab278\n\nCode Property Graph (CPG) frontend for binary applications and libraries\nhttps://github.com/joernio/ghidra2cpg\n\nMalware analysis\nHackers Use New Trick to Disable Macro Security Warnings in Malicious Office Files\ud83d\ude0e\nhttps://thehackernews.com/2021/07/hackers-use-new-trick-to-disable-macro.html?m=1\n\nCVE-2021-35368:\nCRS Request Body Bypass\nhttps://coreruleset.org/20210630/cve-2021-35368-crs-request-body-bypass", "creation_timestamp": "2026-09-01T17:00:46.239184Z"}, {"uuid": "9a160de2-9bca-4c48-9859-4def586025a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-35368", "type": "seen", "source": "https://t.me/cissp/3707", "content": "Threat Research\n1. Global Phishing Campaign Targets Energy Sector and its Suppliers\ud83d\ude04\nhttps://www.intezer.com/blog/research/global-phishing-campaign-targets-energy-sector-and-its-suppliers\n2. Tracking Cobalt Strike: A Trend Micro Vision One Investigation\ud83d\udc4d\ud83c\udffd\nhttps://www.trendmicro.com/en_us/research/21/g/tracking_cobalt_strike_a_vision_one_investigation.html\n\nRed Team Tactics\n1. Code Injection, Inject malicious payload via pagetables pml4\ud83d\ude04\nhttps://github.com/kkent030315/PageTableInjection\n2. VBA Stomping - Advanced Maldoc Techniques\nhttps://medium.com/walmartglobaltech/vba-stomping-advanced-maldoc-techniques-612c484ab278\n\nCode Property Graph (CPG) frontend for binary applications and libraries\nhttps://github.com/joernio/ghidra2cpg\n\nMalware analysis\nHackers Use New Trick to Disable Macro Security Warnings in Malicious Office Files\ud83d\ude0e\nhttps://thehackernews.com/2021/07/hackers-use-new-trick-to-disable-macro.html?m=1\n\nCVE-2021-35368:\nCRS Request Body Bypass\nhttps://coreruleset.org/20210630/cve-2021-35368-crs-request-body-bypass", "creation_timestamp": "2026-09-02T01:04:33.533161Z"}]}