{"vulnerability": "CVE-2021-39239", "sightings": [{"uuid": "1707f072-f193-4ee1-970e-300980e3314f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39239", "type": "seen", "source": "https://t.me/cibsecurity/28995", "content": "\u203c CVE-2021-39239 \u203c\n\nA vulnerability in XML processing in Apache Jena, in versions up to 4.1.0, may allow an attacker to execute XML External Entities (XXE), including exposing the contents of local files to a remote server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-16T18:22:56.000000Z"}, {"uuid": "b0374bcc-89b5-4d23-9fe3-576090c6d828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39239", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4454", "content": "#exploit\n1. CVE-2021-39239:\nA vulnerability in XML processing in Apache Jena <4.1.0, may allow an attacker to execute XML External Entities (XXE), including exposing the contents of local files to a remote server\nhttps://github.com/AKIA27TACKEDYE76PUGU/CVE-2021-39239\n\n2. CVE-2021-24620:\nRCE in WordPress Simple Ecomm. Shopping Cart <2.2.5\nhttps://github.com/AKIA27TACKEDYE76PUGU/CVE-2021-24620\n\n3. CVE-2021-41773:\nApache 2.4.49 Path Traversal\nhttps://github.com/numanturle/CVE-2021-41773\nhttps://github.com/habibiefaried/CVE-2021-41773-PoC", "creation_timestamp": "2024-05-14T02:35:13.000000Z"}, {"uuid": "1efacc94-243e-4723-8dd1-5ee84ad606ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39239", "type": "seen", "source": "https://t.me/cissp/4546", "content": "Blue Team Techniques\nTool to discover external/internal network attack surface\ud83e\udd13\nhttps://github.com/vmware-labs/attack-surface-framework\n\nOffensive security\n1. Ping'ing Apache XML Security (CVE-2021-40690)\nhttps://blog.tint0.com/2021/09/pinging-xmlsec.html?m=1\n2. Slack Denial of Service via Hyperlinks in Posts (DOM Clobbering)\nhttps://hackerone.com/reports/1077136\n\nThreat Research\nPre-Auth RCE in Moodle\nPHP Object Injection in Shibboleth Module\nhttps://haxolot.com/posts/2021/moodle_pre_auth_shibboleth_rce_part1\n\nCloud Security\n1. Escalating Azure Privileges with the Log Analytics Contributor Role\nhttps://www.netspi.com/blog/technical/cloud-penetration-testing/escalating-azure-privileges-with-the-log-analystics-contributor-role\n2. Anatomy of a Cloud Infrastructure Attack via a Pull Request\nhttps://goteleport.com/blog/hack-via-pull-request\n\nSoc Techniques\nDevice Security Guidance Configuration Pack\ud83d\ude0a\nhttps://github.com/ukncsc/Device-Security-Guidance-Configuration-Packs\n// Contains policy packs which can be used by system management software to configure device platforms (Win10/iOS) in accordance with NCSC device security guidance\n\nexploit\nCVE-2021-39239:\nA vulnerability in XML processing in Apache Jena <4.1.0, may allow an attacker to execute XML External Entities (XXE), including exposing the contents of local files to a remote server\nhttps://github.com/AKIA27TACKEDYE76PUGU/CVE-2021-39239\n\nCVE-2021-24620:\nRCE in WordPress Simple Ecomm. Shopping Cart <2.2.5\nhttps://github.com/AKIA27TACKEDYE76PUGU/CVE-2021-24620\n\nCVE-2021-41773:\nApache 2.4.49 Path Traversal\nhttps://github.com/numanturle/CVE-2021-41773\nhttps://github.com/habibiefaried/CVE-2021-41773-PoC", "creation_timestamp": "2026-09-01T17:00:38.647776Z"}, {"uuid": "05b70101-2dca-49fa-b1ac-2cc31ed03c2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-39239", "type": "seen", "source": "https://t.me/cissp/4546", "content": "Blue Team Techniques\nTool to discover external/internal network attack surface\ud83e\udd13\nhttps://github.com/vmware-labs/attack-surface-framework\n\nOffensive security\n1. Ping'ing Apache XML Security (CVE-2021-40690)\nhttps://blog.tint0.com/2021/09/pinging-xmlsec.html?m=1\n2. Slack Denial of Service via Hyperlinks in Posts (DOM Clobbering)\nhttps://hackerone.com/reports/1077136\n\nThreat Research\nPre-Auth RCE in Moodle\nPHP Object Injection in Shibboleth Module\nhttps://haxolot.com/posts/2021/moodle_pre_auth_shibboleth_rce_part1\n\nCloud Security\n1. Escalating Azure Privileges with the Log Analytics Contributor Role\nhttps://www.netspi.com/blog/technical/cloud-penetration-testing/escalating-azure-privileges-with-the-log-analystics-contributor-role\n2. Anatomy of a Cloud Infrastructure Attack via a Pull Request\nhttps://goteleport.com/blog/hack-via-pull-request\n\nSoc Techniques\nDevice Security Guidance Configuration Pack\ud83d\ude0a\nhttps://github.com/ukncsc/Device-Security-Guidance-Configuration-Packs\n// Contains policy packs which can be used by system management software to configure device platforms (Win10/iOS) in accordance with NCSC device security guidance\n\nexploit\nCVE-2021-39239:\nA vulnerability in XML processing in Apache Jena <4.1.0, may allow an attacker to execute XML External Entities (XXE), including exposing the contents of local files to a remote server\nhttps://github.com/AKIA27TACKEDYE76PUGU/CVE-2021-39239\n\nCVE-2021-24620:\nRCE in WordPress Simple Ecomm. Shopping Cart <2.2.5\nhttps://github.com/AKIA27TACKEDYE76PUGU/CVE-2021-24620\n\nCVE-2021-41773:\nApache 2.4.49 Path Traversal\nhttps://github.com/numanturle/CVE-2021-41773\nhttps://github.com/habibiefaried/CVE-2021-41773-PoC", "creation_timestamp": "2026-09-02T01:04:23.556210Z"}]}