{"vulnerability": "cve-2021-3172", "sightings": [{"uuid": "7fcb11c1-6cd8-488c-824b-5c47a04f6447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31721", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/550", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aPoC for exploiting CVE-2021-31721 : Chevereto before 3.17.1 allows Cross Site Scripting (XSS) via an image title at the image upload stage.\nURL\uff1ahttps://github.com/AlAIAL90/CVE-2021-30704", "creation_timestamp": "2021-09-18T02:46:03.000000Z"}, {"uuid": "ff063b82-d03a-41c1-84c9-30df3306800e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31727", "type": "seen", "source": "https://t.me/arpsyndicate/2729", "content": "#ExploitObserverAlert\n\nCVE-2021-31727\n\nDESCRIPTION: Exploit Observer has 5 entries related to CVE-2021-31727. Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 where IOCTL's 0x80002014, 0x80002018 expose unrestricted disk read/write capabilities respectively. A non-privileged process can open a handle to \\.\\ZemanaAntiMalware, register with the driver using IOCTL 0x80002010 and send these IOCTL's to escalate privileges by overwriting the boot sector or overwriting critical code in the pagefile.\n\nFIRST-EPSS: 0.000440000\nNVD-IS: 5.9\nNVD-ES: 1.8", "creation_timestamp": "2024-01-09T07:47:08.000000Z"}, {"uuid": "548f3125-a989-480b-8af7-65a8643e5e5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3172", "type": "seen", "source": "https://t.me/cibsecurity/58447", "content": "\u203c CVE-2021-3172 \u203c\n\nAn issue in Php-Fusion v9.03.90 fixed in v9.10.00 allows authenticated attackers to cause a Distributed Denial of Service via the Polling feature.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-17T20:13:19.000000Z"}, {"uuid": "b9e5d171-a40d-4567-aefc-ee2e151cc65e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31727", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3325", "content": "#exploit\nCVE-2021-31727, CVE-2021-31728:\nVulnerability in zam64.sys, zam32.sys allowing ring 0 code execution\nhttps://github.com/irql0/CVE-2021-31728", "creation_timestamp": "2024-02-17T14:55:47.000000Z"}, {"uuid": "ac135e92-7746-4237-a6dc-325574596d98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31728", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3325", "content": "#exploit\nCVE-2021-31727, CVE-2021-31728:\nVulnerability in zam64.sys, zam32.sys allowing ring 0 code execution\nhttps://github.com/irql0/CVE-2021-31728", "creation_timestamp": "2024-02-17T14:55:47.000000Z"}, {"uuid": "912f43f4-ca9b-404c-9c39-be569bf96b7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31728", "type": "seen", "source": "https://t.me/cissp/3150", "content": "exploit\nCVE-2021-31727, CVE-2021-31728:\nVulnerability in zam64.sys, zam32.sys allowing ring 0 code execution\nhttps://github.com/irql0/CVE-2021-31728\n\nBlue Team Techniques\nIncident Response Playbooks\n1. Phishing investigation\ud83d\udc4d\ud83c\udffd\nhttps://docs.microsoft.com/ru-ru/security/compass/incident-response-playbook-phishing\n2. Password spray investigation\ud83d\udc4d\ud83c\udffd\nhttps://docs.microsoft.com/ru-ru/security/compass/incident-response-playbook-password-spray\n3. App consent grant investigation\nhttps://docs.microsoft.com/ru-ru/security/compass/incident-response-playbook-app-consent\n\nThreat Research\nSix CVEs, 0click RCEs on computers running the latest version of RemoteMouse application and server (0-day)\nhttps://axelp.io/MouseTrap\n]-> PoCs:\nhttps://github.com/CuckooEXE/MouseTrap\n\nRed Team Tactics\n1. Super fast login WordPress Brute Force\ud83d\ude01\nhttps://github.com/22XploiterCrew-Team/WordPress-Brute-Force\n2. Pwninit - automate starting binary exploit challenges\nhttps://github.com/io12/pwninit\n3. Bypassing EDR real-time injection detection logic\nhttps://blog.redbluepurple.io/offensive-research/bypassing-injection-detection\n\nWLAN Security\nCVE-2021-32030:\nASUS GT-AC2900 Dual Band WiFi Router - Authentication Bypass (PoC)\nhttps://www.atredis.com/blog/2021/4/30/asus-authentication-bypass", "creation_timestamp": "2026-09-01T17:00:50.682017Z"}, {"uuid": "867b5ee8-94cb-473e-9996-572f42405a98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31727", "type": "seen", "source": "https://t.me/cissp/3150", "content": "exploit\nCVE-2021-31727, CVE-2021-31728:\nVulnerability in zam64.sys, zam32.sys allowing ring 0 code execution\nhttps://github.com/irql0/CVE-2021-31728\n\nBlue Team Techniques\nIncident Response Playbooks\n1. Phishing investigation\ud83d\udc4d\ud83c\udffd\nhttps://docs.microsoft.com/ru-ru/security/compass/incident-response-playbook-phishing\n2. Password spray investigation\ud83d\udc4d\ud83c\udffd\nhttps://docs.microsoft.com/ru-ru/security/compass/incident-response-playbook-password-spray\n3. App consent grant investigation\nhttps://docs.microsoft.com/ru-ru/security/compass/incident-response-playbook-app-consent\n\nThreat Research\nSix CVEs, 0click RCEs on computers running the latest version of RemoteMouse application and server (0-day)\nhttps://axelp.io/MouseTrap\n]-> PoCs:\nhttps://github.com/CuckooEXE/MouseTrap\n\nRed Team Tactics\n1. Super fast login WordPress Brute Force\ud83d\ude01\nhttps://github.com/22XploiterCrew-Team/WordPress-Brute-Force\n2. Pwninit - automate starting binary exploit challenges\nhttps://github.com/io12/pwninit\n3. Bypassing EDR real-time injection detection logic\nhttps://blog.redbluepurple.io/offensive-research/bypassing-injection-detection\n\nWLAN Security\nCVE-2021-32030:\nASUS GT-AC2900 Dual Band WiFi Router - Authentication Bypass (PoC)\nhttps://www.atredis.com/blog/2021/4/30/asus-authentication-bypass", "creation_timestamp": "2026-09-01T17:00:50.646040Z"}, {"uuid": "af236732-c7a8-4175-841b-bc2d3c6fb993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31721", "type": "seen", "source": "https://t.me/hacking_Attack/24009", "content": "Exploit Collector\nCloudron 6.2 Cross Site Scripting\n\n\nCloudron version 6.2 suffers from a cross site scripting vulnerability.\n\nMD5 | c00528f7f6eb16cf927d4aff14fb5ee8\n\nDownload\n\n\n\n# Exploit Title: Cloudron 6.2 - Cross Site Scripting (Reflected)\n# Google Dork: N/A\n# Date: 10.06.2021\n# Exploit Author: Ak\u0131ner K\u0131sa\n# Vendor Homepage: https://cloudron.io\n# Software Link: https://www.cloudron.io/get.html\n# Version: 6.3 >\n# Tested on: Demo / Localhost\n# CVE : CVE-2021-31721\n\nProof of Concept:\n\n1. Go to https://my.demo.cloudron.io/login.html?returnTo=\n\n\n2. Type your payload after returnTo=\n\n3. Fill in the login information and press the sign in button.\n\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:02:22.671101Z"}, {"uuid": "113776e6-9e1a-4384-8635-c32ceb4bd75d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31721", "type": "seen", "source": "https://t.me/hacking_Attack/24009", "content": "Exploit Collector\nCloudron 6.2 Cross Site Scripting\n\n\nCloudron version 6.2 suffers from a cross site scripting vulnerability.\n\nMD5 | c00528f7f6eb16cf927d4aff14fb5ee8\n\nDownload\n\n\n\n# Exploit Title: Cloudron 6.2 - Cross Site Scripting (Reflected)\n# Google Dork: N/A\n# Date: 10.06.2021\n# Exploit Author: Ak\u0131ner K\u0131sa\n# Vendor Homepage: https://cloudron.io\n# Software Link: https://www.cloudron.io/get.html\n# Version: 6.3 >\n# Tested on: Demo / Localhost\n# CVE : CVE-2021-31721\n\nProof of Concept:\n\n1. Go to https://my.demo.cloudron.io/login.html?returnTo=\n\n\n2. Type your payload after returnTo=\n\n3. Fill in the login information and press the sign in button.\n\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:02:52.424510Z"}, {"uuid": "4a1c042d-7b62-4bf8-a20b-d54dd082c7d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31727", "type": "seen", "source": "https://t.me/cissp/3150", "content": "exploit\nCVE-2021-31727, CVE-2021-31728:\nVulnerability in zam64.sys, zam32.sys allowing ring 0 code execution\nhttps://github.com/irql0/CVE-2021-31728\n\nBlue Team Techniques\nIncident Response Playbooks\n1. Phishing investigation\ud83d\udc4d\ud83c\udffd\nhttps://docs.microsoft.com/ru-ru/security/compass/incident-response-playbook-phishing\n2. Password spray investigation\ud83d\udc4d\ud83c\udffd\nhttps://docs.microsoft.com/ru-ru/security/compass/incident-response-playbook-password-spray\n3. App consent grant investigation\nhttps://docs.microsoft.com/ru-ru/security/compass/incident-response-playbook-app-consent\n\nThreat Research\nSix CVEs, 0click RCEs on computers running the latest version of RemoteMouse application and server (0-day)\nhttps://axelp.io/MouseTrap\n]-> PoCs:\nhttps://github.com/CuckooEXE/MouseTrap\n\nRed Team Tactics\n1. Super fast login WordPress Brute Force\ud83d\ude01\nhttps://github.com/22XploiterCrew-Team/WordPress-Brute-Force\n2. Pwninit - automate starting binary exploit challenges\nhttps://github.com/io12/pwninit\n3. Bypassing EDR real-time injection detection logic\nhttps://blog.redbluepurple.io/offensive-research/bypassing-injection-detection\n\nWLAN Security\nCVE-2021-32030:\nASUS GT-AC2900 Dual Band WiFi Router - Authentication Bypass (PoC)\nhttps://www.atredis.com/blog/2021/4/30/asus-authentication-bypass", "creation_timestamp": "2026-09-02T01:04:39.659397Z"}, {"uuid": "9c4b86af-85ec-412e-a6a6-13cd47727a40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31728", "type": "seen", "source": "https://t.me/cissp/3150", "content": "exploit\nCVE-2021-31727, CVE-2021-31728:\nVulnerability in zam64.sys, zam32.sys allowing ring 0 code execution\nhttps://github.com/irql0/CVE-2021-31728\n\nBlue Team Techniques\nIncident Response Playbooks\n1. Phishing investigation\ud83d\udc4d\ud83c\udffd\nhttps://docs.microsoft.com/ru-ru/security/compass/incident-response-playbook-phishing\n2. Password spray investigation\ud83d\udc4d\ud83c\udffd\nhttps://docs.microsoft.com/ru-ru/security/compass/incident-response-playbook-password-spray\n3. App consent grant investigation\nhttps://docs.microsoft.com/ru-ru/security/compass/incident-response-playbook-app-consent\n\nThreat Research\nSix CVEs, 0click RCEs on computers running the latest version of RemoteMouse application and server (0-day)\nhttps://axelp.io/MouseTrap\n]-> PoCs:\nhttps://github.com/CuckooEXE/MouseTrap\n\nRed Team Tactics\n1. Super fast login WordPress Brute Force\ud83d\ude01\nhttps://github.com/22XploiterCrew-Team/WordPress-Brute-Force\n2. Pwninit - automate starting binary exploit challenges\nhttps://github.com/io12/pwninit\n3. Bypassing EDR real-time injection detection logic\nhttps://blog.redbluepurple.io/offensive-research/bypassing-injection-detection\n\nWLAN Security\nCVE-2021-32030:\nASUS GT-AC2900 Dual Band WiFi Router - Authentication Bypass (PoC)\nhttps://www.atredis.com/blog/2021/4/30/asus-authentication-bypass", "creation_timestamp": "2026-09-02T01:04:39.697941Z"}, {"uuid": "ef7333c2-3489-40d7-a11d-49b1166495ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31721", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/24009", "content": "Exploit Collector\nCloudron 6.2 Cross Site Scripting\n\n\nCloudron version 6.2 suffers from a cross site scripting vulnerability.\n\nMD5 | c00528f7f6eb16cf927d4aff14fb5ee8\n\nDownload\n\n\n\n# Exploit Title: Cloudron 6.2 - Cross Site Scripting (Reflected)\n# Google Dork: N/A\n# Date: 10.06.2021\n# Exploit Author: Ak\u0131ner K\u0131sa\n# Vendor Homepage: https://cloudron.io\n# Software Link: https://www.cloudron.io/get.html\n# Version: 6.3 >\n# Tested on: Demo / Localhost\n# CVE : CVE-2021-31721\n\nProof of Concept:\n\n1. Go to https://my.demo.cloudron.io/login.html?returnTo=\n\n\n2. Type your payload after returnTo=\n\n3. Fill in the login information and press the sign in button.\n\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-07T15:00:06.340680Z"}, {"uuid": "a3f23e18-6418-452d-b36f-940a7deb294a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31721", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/24009", "content": "Exploit Collector\nCloudron 6.2 Cross Site Scripting\n\n\nCloudron version 6.2 suffers from a cross site scripting vulnerability.\n\nMD5 | c00528f7f6eb16cf927d4aff14fb5ee8\n\nDownload\n\n\n\n# Exploit Title: Cloudron 6.2 - Cross Site Scripting (Reflected)\n# Google Dork: N/A\n# Date: 10.06.2021\n# Exploit Author: Ak\u0131ner K\u0131sa\n# Vendor Homepage: https://cloudron.io\n# Software Link: https://www.cloudron.io/get.html\n# Version: 6.3 >\n# Tested on: Demo / Localhost\n# CVE : CVE-2021-31721\n\nProof of Concept:\n\n1. Go to https://my.demo.cloudron.io/login.html?returnTo=\n\n\n2. Type your payload after returnTo=\n\n3. Fill in the login information and press the sign in button.\n\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-08T00:00:41.902508Z"}, {"uuid": "dc207dbb-1c7b-4b62-adf5-f7e906127212", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31727", "type": "seen", "source": "https://t.me/cissp/3150", "content": "exploit\nCVE-2021-31727, CVE-2021-31728:\nVulnerability in zam64.sys, zam32.sys allowing ring 0 code execution\nhttps://github.com/irql0/CVE-2021-31728\n\nBlue Team Techniques\nIncident Response Playbooks\n1. Phishing investigation\ud83d\udc4d\ud83c\udffd\nhttps://docs.microsoft.com/ru-ru/security/compass/incident-response-playbook-phishing\n2. Password spray investigation\ud83d\udc4d\ud83c\udffd\nhttps://docs.microsoft.com/ru-ru/security/compass/incident-response-playbook-password-spray\n3. App consent grant investigation\nhttps://docs.microsoft.com/ru-ru/security/compass/incident-response-playbook-app-consent\n\nThreat Research\nSix CVEs, 0click RCEs on computers running the latest version of RemoteMouse application and server (0-day)\nhttps://axelp.io/MouseTrap\n]-> PoCs:\nhttps://github.com/CuckooEXE/MouseTrap\n\nRed Team Tactics\n1. Super fast login WordPress Brute Force\ud83d\ude01\nhttps://github.com/22XploiterCrew-Team/WordPress-Brute-Force\n2. Pwninit - automate starting binary exploit challenges\nhttps://github.com/io12/pwninit\n3. Bypassing EDR real-time injection detection logic\nhttps://blog.redbluepurple.io/offensive-research/bypassing-injection-detection\n\nWLAN Security\nCVE-2021-32030:\nASUS GT-AC2900 Dual Band WiFi Router - Authentication Bypass (PoC)\nhttps://www.atredis.com/blog/2021/4/30/asus-authentication-bypass", "creation_timestamp": "2026-09-11T07:00:05.146008Z"}, {"uuid": "94536aaa-cb41-40e0-935a-32ea50ef5f8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31728", "type": "seen", "source": "https://t.me/cissp/3150", "content": "exploit\nCVE-2021-31727, CVE-2021-31728:\nVulnerability in zam64.sys, zam32.sys allowing ring 0 code execution\nhttps://github.com/irql0/CVE-2021-31728\n\nBlue Team Techniques\nIncident Response Playbooks\n1. Phishing investigation\ud83d\udc4d\ud83c\udffd\nhttps://docs.microsoft.com/ru-ru/security/compass/incident-response-playbook-phishing\n2. Password spray investigation\ud83d\udc4d\ud83c\udffd\nhttps://docs.microsoft.com/ru-ru/security/compass/incident-response-playbook-password-spray\n3. App consent grant investigation\nhttps://docs.microsoft.com/ru-ru/security/compass/incident-response-playbook-app-consent\n\nThreat Research\nSix CVEs, 0click RCEs on computers running the latest version of RemoteMouse application and server (0-day)\nhttps://axelp.io/MouseTrap\n]-> PoCs:\nhttps://github.com/CuckooEXE/MouseTrap\n\nRed Team Tactics\n1. Super fast login WordPress Brute Force\ud83d\ude01\nhttps://github.com/22XploiterCrew-Team/WordPress-Brute-Force\n2. Pwninit - automate starting binary exploit challenges\nhttps://github.com/io12/pwninit\n3. Bypassing EDR real-time injection detection logic\nhttps://blog.redbluepurple.io/offensive-research/bypassing-injection-detection\n\nWLAN Security\nCVE-2021-32030:\nASUS GT-AC2900 Dual Band WiFi Router - Authentication Bypass (PoC)\nhttps://www.atredis.com/blog/2021/4/30/asus-authentication-bypass", "creation_timestamp": "2026-09-11T07:00:05.190324Z"}, {"uuid": "43258e89-f630-4d01-9de1-530ed339865e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31728", "type": "seen", "source": "https://t.me/cissp/3150", "content": "exploit\nCVE-2021-31727, CVE-2021-31728:\nVulnerability in zam64.sys, zam32.sys allowing ring 0 code execution\nhttps://github.com/irql0/CVE-2021-31728\n\nBlue Team Techniques\nIncident Response Playbooks\n1. Phishing investigation\ud83d\udc4d\ud83c\udffd\nhttps://docs.microsoft.com/ru-ru/security/compass/incident-response-playbook-phishing\n2. Password spray investigation\ud83d\udc4d\ud83c\udffd\nhttps://docs.microsoft.com/ru-ru/security/compass/incident-response-playbook-password-spray\n3. App consent grant investigation\nhttps://docs.microsoft.com/ru-ru/security/compass/incident-response-playbook-app-consent\n\nThreat Research\nSix CVEs, 0click RCEs on computers running the latest version of RemoteMouse application and server (0-day)\nhttps://axelp.io/MouseTrap\n]-> PoCs:\nhttps://github.com/CuckooEXE/MouseTrap\n\nRed Team Tactics\n1. Super fast login WordPress Brute Force\ud83d\ude01\nhttps://github.com/22XploiterCrew-Team/WordPress-Brute-Force\n2. Pwninit - automate starting binary exploit challenges\nhttps://github.com/io12/pwninit\n3. Bypassing EDR real-time injection detection logic\nhttps://blog.redbluepurple.io/offensive-research/bypassing-injection-detection\n\nWLAN Security\nCVE-2021-32030:\nASUS GT-AC2900 Dual Band WiFi Router - Authentication Bypass (PoC)\nhttps://www.atredis.com/blog/2021/4/30/asus-authentication-bypass", "creation_timestamp": "2026-09-12T00:00:49.638645Z"}, {"uuid": "83ac2acc-ed86-48b5-b698-4d9799e7557e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31727", "type": "seen", "source": "https://t.me/cissp/3150", "content": "exploit\nCVE-2021-31727, CVE-2021-31728:\nVulnerability in zam64.sys, zam32.sys allowing ring 0 code execution\nhttps://github.com/irql0/CVE-2021-31728\n\nBlue Team Techniques\nIncident Response Playbooks\n1. Phishing investigation\ud83d\udc4d\ud83c\udffd\nhttps://docs.microsoft.com/ru-ru/security/compass/incident-response-playbook-phishing\n2. Password spray investigation\ud83d\udc4d\ud83c\udffd\nhttps://docs.microsoft.com/ru-ru/security/compass/incident-response-playbook-password-spray\n3. App consent grant investigation\nhttps://docs.microsoft.com/ru-ru/security/compass/incident-response-playbook-app-consent\n\nThreat Research\nSix CVEs, 0click RCEs on computers running the latest version of RemoteMouse application and server (0-day)\nhttps://axelp.io/MouseTrap\n]-> PoCs:\nhttps://github.com/CuckooEXE/MouseTrap\n\nRed Team Tactics\n1. Super fast login WordPress Brute Force\ud83d\ude01\nhttps://github.com/22XploiterCrew-Team/WordPress-Brute-Force\n2. Pwninit - automate starting binary exploit challenges\nhttps://github.com/io12/pwninit\n3. Bypassing EDR real-time injection detection logic\nhttps://blog.redbluepurple.io/offensive-research/bypassing-injection-detection\n\nWLAN Security\nCVE-2021-32030:\nASUS GT-AC2900 Dual Band WiFi Router - Authentication Bypass (PoC)\nhttps://www.atredis.com/blog/2021/4/30/asus-authentication-bypass", "creation_timestamp": "2026-09-12T00:00:49.577352Z"}]}