{"vulnerability": "cve-2021-2471", "sightings": [{"uuid": "cdd1a38c-5ae7-4f82-82e4-32ecc89ad81c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-2471", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/730", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aPoC for CVE-2021-2471 - XXE in MySQL Connector/J\nURL\uff1ahttps://github.com/DrunkenShells/CVE-2021-2471", "creation_timestamp": "2021-10-22T18:30:37.000000Z"}, {"uuid": "828d88cc-98c7-48f7-bbac-eff0473f9824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-2471", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/961", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1ah2-jdbc(https://github.com/h2database/h2database/issues/3195) & mysql-jdbc(CVE-2021-2471) SQLXML XXE vulnerability reproduction.\nURL\uff1ahttps://github.com/SecCoder-Security-Lab/jdbc-sqlxml-xxe", "creation_timestamp": "2021-12-12T06:17:57.000000Z"}, {"uuid": "f908ca9a-b9e7-490e-b004-52cb7be1eb1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-2471", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/726", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1ah2-jdbc(https://github.com/h2database/h2database/issues/3195) & mysql-jdbc(CVE-2021-2471) SQLXML XXE vulnerability reduce.\nURL\uff1ahttps://github.com/SecCoder-Security-Lab/jdbc-sqlxml-xxe", "creation_timestamp": "2021-10-22T07:17:22.000000Z"}, {"uuid": "3cb5a705-17cf-42f4-9d89-67a60ff5e734", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-2471", "type": "published-proof-of-concept", "source": "https://t.me/hacker_trick/331", "content": "The project is compiled based on the LandGrey/SpringBootVulExploit list The purpose is to quickly exploit vulnerabilities during hvv and lower the threshold for exploiting vulnerabilities\nhttps://github.com/0x727/SpringBootExploit\n\nh2-jdbc(https://github.com/h2database/h2database/issues/3195) & mysql-jdbc(CVE-2021-2471) SQLXML XXE vulnerability reproduction\nhttps://github.com/SecCoder-Security-Lab/jdbc-sqlxml-xxe", "creation_timestamp": "2021-10-22T09:37:40.000000Z"}, {"uuid": "9b3d9136-393a-44ae-a6d3-17e4654debfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24714", "type": "seen", "source": "https://t.me/cibsecurity/33385", "content": "\u203c CVE-2021-24714 \u203c\n\nThe Import any XML or CSV File to WordPress plugin before 3.6.3 does not escape the Import's Title and Unique Identifier fields before outputting them in admin pages, which could allow high privilege users to perform Cross-Site attacks even when the unfiltered_html capability is disallowed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-06T18:20:59.000000Z"}, {"uuid": "e2054b82-4c6d-4477-8328-1fba43905b50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24718", "type": "seen", "source": "https://t.me/cibsecurity/33384", "content": "\u203c CVE-2021-24718 \u203c\n\nThe Contact Form, Survey & Popup Form Plugin for WordPress plugin before 1.5 does not properly sanitize some of its settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-06T18:20:55.000000Z"}, {"uuid": "bf055d6a-3dd6-47f0-a0ea-0b0f244cd032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24716", "type": "seen", "source": "https://t.me/cibsecurity/31535", "content": "\u203c CVE-2021-24716 \u203c\n\nThe Modern Events Calendar Lite WordPress plugin before 5.22.3 does not properly sanitize or escape values set by users with access to adjust settings withing wp-admin.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-01T11:21:19.000000Z"}, {"uuid": "3d1a1eb4-11e1-424e-8eb1-573efa0c2e2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24715", "type": "seen", "source": "https://t.me/cibsecurity/31528", "content": "\u203c CVE-2021-24715 \u203c\n\nThe WP Sitemap Page WordPress plugin before 1.7.0 does not properly sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-01T11:21:10.000000Z"}, {"uuid": "59d827c9-eb1d-473b-828f-5fc8f4ce2345", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24719", "type": "seen", "source": "https://t.me/cibsecurity/30310", "content": "\u203c CVE-2021-24719 \u203c\n\nThe Enfold Enfold WordPress theme before 4.8.4 was vulnerable to Reflected Cross-Site Scripting (XSS). The vulnerability is present on Enfold versions previous than 4.8.4 which use Avia Page Builder.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-11T14:24:22.000000Z"}, {"uuid": "e6075ca7-f16b-4c43-aa89-b08952c1cd15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24712", "type": "seen", "source": "https://t.me/cibsecurity/30324", "content": "\u203c CVE-2021-24712 \u203c\n\nThe Appointment Hour Booking WordPress plugin before 1.3.17 does not properly sanitize values used when creating new calendars.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-11T14:24:40.000000Z"}, {"uuid": "c4176635-20bf-4155-934e-e526830ea32c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-2471", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/1336", "content": "#CVE-2021\n\nh2-jdbc(https://github.com/h2database/h2database/issues/3195) & mysql-jdbc(CVE-2021-2471) SQLXML XXE vulnerability reproduction.\n\nhttps://github.com/SecCoder-Security-Lab/jdbc-sqlxml-xxe\n\n@BlueRedTeam", "creation_timestamp": "2021-12-12T07:19:08.000000Z"}, {"uuid": "868b80e4-bcf4-4fa1-82a5-7c59d4372fdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-2471", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4589", "content": "#exploit\nCVE-2021-2471:\nSQLXML XXE vulnerability reproduction\nhttps://github.com/SecCoder-Security-Lab/jdbc-sqlxml-xxe", "creation_timestamp": "2021-10-24T15:14:30.000000Z"}, {"uuid": "e8e4162b-c68c-4f36-9f3b-a9b49487e7dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-2471", "type": "seen", "source": "https://t.me/cissp/4671", "content": "Offensive security\n1. Hacking JSON Web Tokens (JWTs)\nhttps://infosecwriteups.com/hacking-json-web-tokens-jwts-a6eea2753d23\n2. Collection of remote authentication triggers\nhttps://github.com/cube0x0/SharpSystemTriggers\n\nBlue Team Techniques\n10 Types of Web Vulnerabilities that are Often Missed\nhttps://labs.detectify.com/2021/09/30/10-types-web-vulnerabilities-often-missed\n\nexploit\nCVE-2021-2471:\nSQLXML XXE vulnerability reproduction\nhttps://github.com/SecCoder-Security-Lab/jdbc-sqlxml-xxe\n\nMalware analysis\n1. VNC Malware (TinyNuke, TightVNC)\nUsed by Kimsuky Group\nhttps://asec.ahnlab.com/en/27346\n2. Franken-phish: TodayZoo built from other phishing kits\ud83d\ude0a\nhttps://www.microsoft.com/security/blog/2021/10/21/franken-phish-todayzoo-built-from-other-phishing-kits\n\n\n\u200e\u200b", "creation_timestamp": "2026-09-01T17:00:37.340772Z"}, {"uuid": "760b299e-ccb8-48c6-8ed7-83804dcabff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24719", "type": "seen", "source": "https://t.me/hacking_Attack/28232", "content": "Exploit Collector\nWordPress Enfold Theme 4.8.3 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-A9um4FlUYrw/WWlvH0fnNDI/AAAAAAAAILk/pA4dWsQKlcwBJHJ-2O0qL7e98i6zrXCWwCLcBGAs/s1600/h141.png \nWordPress Enfold theme version 4.8.3 suffers from a cross site scripting vulnerability.\n\nMD5 | d9d1878c1ba91b823f24f56e988af8c6\n\nDownload\n# Exploit Title: WordPress Theme Enfold 4.8.3 - Reflected Cross-Site Scripting (XSS)\n# Google Dork: \"inurl:avia-element-paging\"\n# Date: 18/10/2021\n# Exploit Author: Francisco D\u00edaz-Pache Alonso, Sergio Corral Cristo and David \u00c1lvarez Robles\n# Vendor Homepage: https://kriesi.at/\n# Version: Enfold < 4.8.4 (all versions)\n# Tested on: Ubuntu\n# CVE : CVE-2021-24719\n\n# Full disclosure and PoC on: https://blog.asturhackers.es/cross-site-scripting-xss-reflejado-en-tema-enfold-4-8-4-para-wordpress\n\nWhile navigating on WordPress sites with Enfold Theme previous than 4.8.4 version and Avia Page Builder, string \u201cProofOfConcept\u201d can be reflected literally  on pagination numbers. Moreover, the parameter \u201cavia-element-paging\u201d appears and can be used for crafting Google Dork based searches.\n\nhttps://[hostname]/[path]?ProofOfConcept --> This URL must include pages shown by Enfold theme\n\nChanging the \u201cProofOfConcept\u201d text with a Cross-Site-Scripting (XSS) payload, the page processes and executes it. This is a reflected Cross-Site-Scripting (XSS)  vulnerability. Find the following URL that includes the malicious payload.\n\nhttps://[hostname]/[path]/?%2527%253E%253Cscript%253Eeval%2528atob%2528%2522Y29uc29sZS5sb2coZG9j --> This URL must include pages shown by Enfold theme\n\nPayload (double encoded): this payload is double encoded in the URL from:\n'>\n\nPayload (base64): the \u201catob\u201d payload is Base64 encoded from:\nconsole.log(document.cookie)\n\nNavigating to the crafted URL, the console log displays some cookies that are used by the affected site (i.e. cookies with no \u201cHttpOnly\u201d flag set). However, the payload can be easily configurable.\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:13.040297Z"}, {"uuid": "84470fef-245f-4a4d-ae49-b9e459b6d77f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24719", "type": "seen", "source": "https://t.me/hacking_Attack/28232", "content": "Exploit Collector\nWordPress Enfold Theme 4.8.3 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-A9um4FlUYrw/WWlvH0fnNDI/AAAAAAAAILk/pA4dWsQKlcwBJHJ-2O0qL7e98i6zrXCWwCLcBGAs/s1600/h141.png \nWordPress Enfold theme version 4.8.3 suffers from a cross site scripting vulnerability.\n\nMD5 | d9d1878c1ba91b823f24f56e988af8c6\n\nDownload\n# Exploit Title: WordPress Theme Enfold 4.8.3 - Reflected Cross-Site Scripting (XSS)\n# Google Dork: \"inurl:avia-element-paging\"\n# Date: 18/10/2021\n# Exploit Author: Francisco D\u00edaz-Pache Alonso, Sergio Corral Cristo and David \u00c1lvarez Robles\n# Vendor Homepage: https://kriesi.at/\n# Version: Enfold < 4.8.4 (all versions)\n# Tested on: Ubuntu\n# CVE : CVE-2021-24719\n\n# Full disclosure and PoC on: https://blog.asturhackers.es/cross-site-scripting-xss-reflejado-en-tema-enfold-4-8-4-para-wordpress\n\nWhile navigating on WordPress sites with Enfold Theme previous than 4.8.4 version and Avia Page Builder, string \u201cProofOfConcept\u201d can be reflected literally  on pagination numbers. Moreover, the parameter \u201cavia-element-paging\u201d appears and can be used for crafting Google Dork based searches.\n\nhttps://[hostname]/[path]?ProofOfConcept --> This URL must include pages shown by Enfold theme\n\nChanging the \u201cProofOfConcept\u201d text with a Cross-Site-Scripting (XSS) payload, the page processes and executes it. This is a reflected Cross-Site-Scripting (XSS)  vulnerability. Find the following URL that includes the malicious payload.\n\nhttps://[hostname]/[path]/?%2527%253E%253Cscript%253Eeval%2528atob%2528%2522Y29uc29sZS5sb2coZG9j --> This URL must include pages shown by Enfold theme\n\nPayload (double encoded): this payload is double encoded in the URL from:\n'>\n\nPayload (base64): the \u201catob\u201d payload is Base64 encoded from:\nconsole.log(document.cookie)\n\nNavigating to the crafted URL, the console log displays some cookies that are used by the affected site (i.e. cookies with no \u201cHttpOnly\u201d flag set). However, the payload can be easily configurable.\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:38.995583Z"}, {"uuid": "fbab9fce-36ca-456f-a307-5d6df44399cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-2471", "type": "seen", "source": "https://t.me/cissp/4671", "content": "Offensive security\n1. Hacking JSON Web Tokens (JWTs)\nhttps://infosecwriteups.com/hacking-json-web-tokens-jwts-a6eea2753d23\n2. Collection of remote authentication triggers\nhttps://github.com/cube0x0/SharpSystemTriggers\n\nBlue Team Techniques\n10 Types of Web Vulnerabilities that are Often Missed\nhttps://labs.detectify.com/2021/09/30/10-types-web-vulnerabilities-often-missed\n\nexploit\nCVE-2021-2471:\nSQLXML XXE vulnerability reproduction\nhttps://github.com/SecCoder-Security-Lab/jdbc-sqlxml-xxe\n\nMalware analysis\n1. VNC Malware (TinyNuke, TightVNC)\nUsed by Kimsuky Group\nhttps://asec.ahnlab.com/en/27346\n2. Franken-phish: TodayZoo built from other phishing kits\ud83d\ude0a\nhttps://www.microsoft.com/security/blog/2021/10/21/franken-phish-todayzoo-built-from-other-phishing-kits\n\n\n\u200e\u200b", "creation_timestamp": "2026-09-02T01:04:22.156770Z"}, {"uuid": "be90b629-c974-4f3d-a36c-2f6bf6fa5821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24719", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/28232", "content": "Exploit Collector\nWordPress Enfold Theme 4.8.3 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-A9um4FlUYrw/WWlvH0fnNDI/AAAAAAAAILk/pA4dWsQKlcwBJHJ-2O0qL7e98i6zrXCWwCLcBGAs/s1600/h141.png \nWordPress Enfold theme version 4.8.3 suffers from a cross site scripting vulnerability.\n\nMD5 | d9d1878c1ba91b823f24f56e988af8c6\n\nDownload\n# Exploit Title: WordPress Theme Enfold 4.8.3 - Reflected Cross-Site Scripting (XSS)\n# Google Dork: \"inurl:avia-element-paging\"\n# Date: 18/10/2021\n# Exploit Author: Francisco D\u00edaz-Pache Alonso, Sergio Corral Cristo and David \u00c1lvarez Robles\n# Vendor Homepage: https://kriesi.at/\n# Version: Enfold < 4.8.4 (all versions)\n# Tested on: Ubuntu\n# CVE : CVE-2021-24719\n\n# Full disclosure and PoC on: https://blog.asturhackers.es/cross-site-scripting-xss-reflejado-en-tema-enfold-4-8-4-para-wordpress\n\nWhile navigating on WordPress sites with Enfold Theme previous than 4.8.4 version and Avia Page Builder, string \u201cProofOfConcept\u201d can be reflected literally  on pagination numbers. Moreover, the parameter \u201cavia-element-paging\u201d appears and can be used for crafting Google Dork based searches.\n\nhttps://[hostname]/[path]?ProofOfConcept --> This URL must include pages shown by Enfold theme\n\nChanging the \u201cProofOfConcept\u201d text with a Cross-Site-Scripting (XSS) payload, the page processes and executes it. This is a reflected Cross-Site-Scripting (XSS)  vulnerability. Find the following URL that includes the malicious payload.\n\nhttps://[hostname]/[path]/?%2527%253E%253Cscript%253Eeval%2528atob%2528%2522Y29uc29sZS5sb2coZG9j --> This URL must include pages shown by Enfold theme\n\nPayload (double encoded): this payload is double encoded in the URL from:\n'>\n\nPayload (base64): the \u201catob\u201d payload is Base64 encoded from:\nconsole.log(document.cookie)\n\nNavigating to the crafted URL, the console log displays some cookies that are used by the affected site (i.e. cookies with no \u201cHttpOnly\u201d flag set). However, the payload can be easily configurable.\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T07:00:08.865802Z"}, {"uuid": "a015328a-e4db-460c-81ca-ff60bfcd7143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24719", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/28232", "content": "Exploit Collector\nWordPress Enfold Theme 4.8.3 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-A9um4FlUYrw/WWlvH0fnNDI/AAAAAAAAILk/pA4dWsQKlcwBJHJ-2O0qL7e98i6zrXCWwCLcBGAs/s1600/h141.png \nWordPress Enfold theme version 4.8.3 suffers from a cross site scripting vulnerability.\n\nMD5 | d9d1878c1ba91b823f24f56e988af8c6\n\nDownload\n# Exploit Title: WordPress Theme Enfold 4.8.3 - Reflected Cross-Site Scripting (XSS)\n# Google Dork: \"inurl:avia-element-paging\"\n# Date: 18/10/2021\n# Exploit Author: Francisco D\u00edaz-Pache Alonso, Sergio Corral Cristo and David \u00c1lvarez Robles\n# Vendor Homepage: https://kriesi.at/\n# Version: Enfold < 4.8.4 (all versions)\n# Tested on: Ubuntu\n# CVE : CVE-2021-24719\n\n# Full disclosure and PoC on: https://blog.asturhackers.es/cross-site-scripting-xss-reflejado-en-tema-enfold-4-8-4-para-wordpress\n\nWhile navigating on WordPress sites with Enfold Theme previous than 4.8.4 version and Avia Page Builder, string \u201cProofOfConcept\u201d can be reflected literally  on pagination numbers. Moreover, the parameter \u201cavia-element-paging\u201d appears and can be used for crafting Google Dork based searches.\n\nhttps://[hostname]/[path]?ProofOfConcept --> This URL must include pages shown by Enfold theme\n\nChanging the \u201cProofOfConcept\u201d text with a Cross-Site-Scripting (XSS) payload, the page processes and executes it. This is a reflected Cross-Site-Scripting (XSS)  vulnerability. Find the following URL that includes the malicious payload.\n\nhttps://[hostname]/[path]/?%2527%253E%253Cscript%253Eeval%2528atob%2528%2522Y29uc29sZS5sb2coZG9j --> This URL must include pages shown by Enfold theme\n\nPayload (double encoded): this payload is double encoded in the URL from:\n'>\n\nPayload (base64): the \u201catob\u201d payload is Base64 encoded from:\nconsole.log(document.cookie)\n\nNavigating to the crafted URL, the console log displays some cookies that are used by the affected site (i.e. cookies with no \u201cHttpOnly\u201d flag set). However, the payload can be easily configurable.\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T00:00:56.035906Z"}, {"uuid": "1e3d3cf7-e0e5-42eb-a520-721e2ff8bbb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-2471", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4671", "content": "Offensive security\n1. Hacking JSON Web Tokens (JWTs)\nhttps://infosecwriteups.com/hacking-json-web-tokens-jwts-a6eea2753d23\n2. Collection of remote authentication triggers\nhttps://github.com/cube0x0/SharpSystemTriggers\n\nBlue Team Techniques\n10 Types of Web Vulnerabilities that are Often Missed\nhttps://labs.detectify.com/2021/09/30/10-types-web-vulnerabilities-often-missed\n\nexploit\nCVE-2021-2471:\nSQLXML XXE vulnerability reproduction\nhttps://github.com/SecCoder-Security-Lab/jdbc-sqlxml-xxe\n\nMalware analysis\n1. VNC Malware (TinyNuke, TightVNC)\nUsed by Kimsuky Group\nhttps://asec.ahnlab.com/en/27346\n2. Franken-phish: TodayZoo built from other phishing kits\ud83d\ude0a\nhttps://www.microsoft.com/security/blog/2021/10/21/franken-phish-todayzoo-built-from-other-phishing-kits\n\n\n\u200e\u200b", "creation_timestamp": "2026-09-10T16:00:04.931631Z"}, {"uuid": "4ef3459d-cea8-4a05-a49e-cf1eaccf9677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-2471", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4671", "content": "Offensive security\n1. Hacking JSON Web Tokens (JWTs)\nhttps://infosecwriteups.com/hacking-json-web-tokens-jwts-a6eea2753d23\n2. Collection of remote authentication triggers\nhttps://github.com/cube0x0/SharpSystemTriggers\n\nBlue Team Techniques\n10 Types of Web Vulnerabilities that are Often Missed\nhttps://labs.detectify.com/2021/09/30/10-types-web-vulnerabilities-often-missed\n\nexploit\nCVE-2021-2471:\nSQLXML XXE vulnerability reproduction\nhttps://github.com/SecCoder-Security-Lab/jdbc-sqlxml-xxe\n\nMalware analysis\n1. VNC Malware (TinyNuke, TightVNC)\nUsed by Kimsuky Group\nhttps://asec.ahnlab.com/en/27346\n2. Franken-phish: TodayZoo built from other phishing kits\ud83d\ude0a\nhttps://www.microsoft.com/security/blog/2021/10/21/franken-phish-todayzoo-built-from-other-phishing-kits\n\n\n\u200e\u200b", "creation_timestamp": "2026-09-11T00:00:33.854983Z"}]}