{"vulnerability": "CVE-2021-42306", "sightings": [{"uuid": "0c06c35c-efdd-49ba-8a41-cb70cf01ef11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42306", "type": "seen", "source": "https://msrc.microsoft.com/blog/2021/11/guidance-for-azure-active-directory-ad-keycredential-property-information-disclosure-in-application-and-service-principal-apis/", "content": "", "creation_timestamp": "2021-11-17T07:00:00.000000Z"}, {"uuid": "6f97c8e3-aaaa-4ae7-a340-62ffd1ffbde2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42306", "type": "published-proof-of-concept", "source": "https://t.me/cloud_sec/242", "content": "\ud83d\udd37 CVE-2021-42306 CredManifest: App Registration Certificates Stored in Azure Active Directory\n\nAnother security issue discovered in Azure: due to a misconfiguration, Automation Account \"Run as\" credentials (PFX certificates) were being stored in cleartext in Azure Active Directory (AAD).\n\nhttps://www.netspi.com/blog/technical/cloud-penetration-testing/azure-cloud-vulnerability-credmanifest/ \n \n#azure", "creation_timestamp": "2021-11-22T06:27:10.000000Z"}, {"uuid": "d781778a-0639-4859-bae8-d0f2380460ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42306", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4782", "content": "#Offensive_security\n1. CVE-2021-42306 CredManifest:\nApp Registration Certificates Stored in Azure AD\nhttps://www.netspi.com/blog/technical/cloud-penetration-testing/azure-cloud-vulnerability-credmanifest\n2. Windows Security Updates for Hackers\nhttps://bitsadm.in/blog/windows-security-updates-for-hackers", "creation_timestamp": "2021-11-18T13:13:22.000000Z"}, {"uuid": "c4d9b41c-ca4a-4b2f-8fe8-d14e481cc99b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42306", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1844", "content": "CVE-2021-42306 CredManifest: App Registration Certificates Stored in Azure Active Directory https://www.netspi.com/blog/technical/cloud-penetration-testing/azure-cloud-vulnerability-credmanifest/", "creation_timestamp": "2026-08-03T04:12:55.883100Z"}, {"uuid": "20e62183-8d97-4843-869a-d9462b0c8d4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42306", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1844", "content": "CVE-2021-42306 CredManifest: App Registration Certificates Stored in Azure Active Directory https://www.netspi.com/blog/technical/cloud-penetration-testing/azure-cloud-vulnerability-credmanifest/", "creation_timestamp": "2026-08-04T00:00:50.989963Z"}, {"uuid": "a18006a9-581f-4cf8-8d25-35c82ab1b7cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42306", "type": "seen", "source": "https://t.me/onelab1337/1978", "content": "#Offensive_security\n1. CVE-2021-42306 CredManifest: App Registration Certificates Stored in Azure Active Directory\n\nApp Registration Certificates Stored in Azure AD\n\n\ud83d\udd17See on NetSpi\n\n2. Windows Security Updates for Hackers\n\n\ud83d\udd17See on Bitsadm", "creation_timestamp": "2026-08-09T04:59:32.511343Z"}, {"uuid": "f4191cca-9289-40d8-bac3-964bf5e48f9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42306", "type": "seen", "source": "https://t.me/onelab1337/1978", "content": "#Offensive_security\n1. CVE-2021-42306 CredManifest: App Registration Certificates Stored in Azure Active Directory\n\nApp Registration Certificates Stored in Azure AD\n\n\ud83d\udd17See on NetSpi\n\n2. Windows Security Updates for Hackers\n\n\ud83d\udd17See on Bitsadm", "creation_timestamp": "2026-08-10T00:00:11.986526Z"}, {"uuid": "4fecce61-c9b0-44d8-a4a9-8252d970876f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42306", "type": "seen", "source": "https://t.me/reverseame/1844", "content": "CVE-2021-42306 CredManifest: App Registration Certificates Stored in Azure Active Directory https://www.netspi.com/blog/technical/cloud-penetration-testing/azure-cloud-vulnerability-credmanifest/", "creation_timestamp": "2026-07-29T12:02:51.297116Z"}, {"uuid": "d82358c2-d0d5-437b-a0d0-578b0256e4a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42306", "type": "seen", "source": "https://t.me/reverseame/1844", "content": "CVE-2021-42306 CredManifest: App Registration Certificates Stored in Azure Active Directory https://www.netspi.com/blog/technical/cloud-penetration-testing/azure-cloud-vulnerability-credmanifest/", "creation_timestamp": "2026-07-30T00:02:41.388191Z"}, {"uuid": "725ea11e-de28-43e9-824c-3e36ce071191", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42306", "type": "seen", "source": "https://t.me/cissp/4834", "content": "Offensive_security\n1. CVE-2021-42306 CredManifest:\nApp Registration Certificates Stored in Azure AD\nhttps://www.netspi.com/blog/technical/cloud-penetration-testing/azure-cloud-vulnerability-credmanifest\n2. Windows Security Updates for Hackers\ud83d\ude0e\nhttps://bitsadm.in/blog/windows-security-updates-for-hackers\n\nMalware_analysis\nStrategic web compromises\n(aka watering hole) in the Middle East\nwith a pinch of Candiru\ud83e\udd74\nhttps://www.welivesecurity.com/2021/11/16/strategic-web-compromises-middle-east-pinch-candiru\n\nRed_Team_Tactics\n1. TPM sniffing\nhttps://blog.scrt.ch/2021/11/15/tpm-sniffing\n2. Exploit para Apache Struts v2 (RCE)\nhttps://github.com/andre3llo/apachestruts\n\nThreat_Research\nDiving into Open-source LMS Codebases\ud83e\udd14\nhttps://starlabs.sg/blog/2021/11/diving-into-open-source-lms-codebases\n\nsecurity\nAdversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red/Blue Teams\nhttps://github.com/Trusted-AI/adversarial-robustness-toolbox\n// This material is partially based upon work supported by the DARPA under Contract No. HR001120C0013", "creation_timestamp": "2026-09-01T17:00:35.229672Z"}, {"uuid": "ae7aaa67-fcde-411c-8d7a-8850403d4092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42306", "type": "seen", "source": "https://t.me/cissp/4834", "content": "Offensive_security\n1. CVE-2021-42306 CredManifest:\nApp Registration Certificates Stored in Azure AD\nhttps://www.netspi.com/blog/technical/cloud-penetration-testing/azure-cloud-vulnerability-credmanifest\n2. Windows Security Updates for Hackers\ud83d\ude0e\nhttps://bitsadm.in/blog/windows-security-updates-for-hackers\n\nMalware_analysis\nStrategic web compromises\n(aka watering hole) in the Middle East\nwith a pinch of Candiru\ud83e\udd74\nhttps://www.welivesecurity.com/2021/11/16/strategic-web-compromises-middle-east-pinch-candiru\n\nRed_Team_Tactics\n1. TPM sniffing\nhttps://blog.scrt.ch/2021/11/15/tpm-sniffing\n2. Exploit para Apache Struts v2 (RCE)\nhttps://github.com/andre3llo/apachestruts\n\nThreat_Research\nDiving into Open-source LMS Codebases\ud83e\udd14\nhttps://starlabs.sg/blog/2021/11/diving-into-open-source-lms-codebases\n\nsecurity\nAdversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red/Blue Teams\nhttps://github.com/Trusted-AI/adversarial-robustness-toolbox\n// This material is partially based upon work supported by the DARPA under Contract No. HR001120C0013", "creation_timestamp": "2026-09-02T01:04:19.817435Z"}]}