{"vulnerability": "cve-2021-40690", "sightings": [{"uuid": "0905d4cd-6d50-4c23-b85c-c2dd9be427d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40690", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4474", "content": "#Offensive_security\n1. Ping'ing Apache XML Security (CVE-2021-40690)\nhttps://blog.tint0.com/2021/09/pinging-xmlsec.html\n2. Slack Denial of Service via Hyperlinks in Posts (DOM Clobbering)\nhttps://hackerone.com/reports/1077136", "creation_timestamp": "2022-05-26T04:25:28.000000Z"}, {"uuid": "29e5bd0d-459f-4191-9642-c343dc290558", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40690", "type": "seen", "source": "https://t.me/cissp/4546", "content": "Blue Team Techniques\nTool to discover external/internal network attack surface\ud83e\udd13\nhttps://github.com/vmware-labs/attack-surface-framework\n\nOffensive security\n1. Ping'ing Apache XML Security (CVE-2021-40690)\nhttps://blog.tint0.com/2021/09/pinging-xmlsec.html?m=1\n2. Slack Denial of Service via Hyperlinks in Posts (DOM Clobbering)\nhttps://hackerone.com/reports/1077136\n\nThreat Research\nPre-Auth RCE in Moodle\nPHP Object Injection in Shibboleth Module\nhttps://haxolot.com/posts/2021/moodle_pre_auth_shibboleth_rce_part1\n\nCloud Security\n1. Escalating Azure Privileges with the Log Analytics Contributor Role\nhttps://www.netspi.com/blog/technical/cloud-penetration-testing/escalating-azure-privileges-with-the-log-analystics-contributor-role\n2. Anatomy of a Cloud Infrastructure Attack via a Pull Request\nhttps://goteleport.com/blog/hack-via-pull-request\n\nSoc Techniques\nDevice Security Guidance Configuration Pack\ud83d\ude0a\nhttps://github.com/ukncsc/Device-Security-Guidance-Configuration-Packs\n// Contains policy packs which can be used by system management software to configure device platforms (Win10/iOS) in accordance with NCSC device security guidance\n\nexploit\nCVE-2021-39239:\nA vulnerability in XML processing in Apache Jena <4.1.0, may allow an attacker to execute XML External Entities (XXE), including exposing the contents of local files to a remote server\nhttps://github.com/AKIA27TACKEDYE76PUGU/CVE-2021-39239\n\nCVE-2021-24620:\nRCE in WordPress Simple Ecomm. Shopping Cart <2.2.5\nhttps://github.com/AKIA27TACKEDYE76PUGU/CVE-2021-24620\n\nCVE-2021-41773:\nApache 2.4.49 Path Traversal\nhttps://github.com/numanturle/CVE-2021-41773\nhttps://github.com/habibiefaried/CVE-2021-41773-PoC", "creation_timestamp": "2026-09-01T17:00:38.751797Z"}, {"uuid": "69da7e85-8fbe-4af6-8624-e72f60d8e956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40690", "type": "seen", "source": "https://t.me/cissp/4546", "content": "Blue Team Techniques\nTool to discover external/internal network attack surface\ud83e\udd13\nhttps://github.com/vmware-labs/attack-surface-framework\n\nOffensive security\n1. Ping'ing Apache XML Security (CVE-2021-40690)\nhttps://blog.tint0.com/2021/09/pinging-xmlsec.html?m=1\n2. Slack Denial of Service via Hyperlinks in Posts (DOM Clobbering)\nhttps://hackerone.com/reports/1077136\n\nThreat Research\nPre-Auth RCE in Moodle\nPHP Object Injection in Shibboleth Module\nhttps://haxolot.com/posts/2021/moodle_pre_auth_shibboleth_rce_part1\n\nCloud Security\n1. Escalating Azure Privileges with the Log Analytics Contributor Role\nhttps://www.netspi.com/blog/technical/cloud-penetration-testing/escalating-azure-privileges-with-the-log-analystics-contributor-role\n2. Anatomy of a Cloud Infrastructure Attack via a Pull Request\nhttps://goteleport.com/blog/hack-via-pull-request\n\nSoc Techniques\nDevice Security Guidance Configuration Pack\ud83d\ude0a\nhttps://github.com/ukncsc/Device-Security-Guidance-Configuration-Packs\n// Contains policy packs which can be used by system management software to configure device platforms (Win10/iOS) in accordance with NCSC device security guidance\n\nexploit\nCVE-2021-39239:\nA vulnerability in XML processing in Apache Jena <4.1.0, may allow an attacker to execute XML External Entities (XXE), including exposing the contents of local files to a remote server\nhttps://github.com/AKIA27TACKEDYE76PUGU/CVE-2021-39239\n\nCVE-2021-24620:\nRCE in WordPress Simple Ecomm. Shopping Cart <2.2.5\nhttps://github.com/AKIA27TACKEDYE76PUGU/CVE-2021-24620\n\nCVE-2021-41773:\nApache 2.4.49 Path Traversal\nhttps://github.com/numanturle/CVE-2021-41773\nhttps://github.com/habibiefaried/CVE-2021-41773-PoC", "creation_timestamp": "2026-09-02T01:04:23.696885Z"}, {"uuid": "f24b34ef-8db8-4594-a662-ebfed4a24a08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40690", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4546", "content": "Blue Team Techniques\nTool to discover external/internal network attack surface\ud83e\udd13\nhttps://github.com/vmware-labs/attack-surface-framework\n\nOffensive security\n1. Ping'ing Apache XML Security (CVE-2021-40690)\nhttps://blog.tint0.com/2021/09/pinging-xmlsec.html?m=1\n2. Slack Denial of Service via Hyperlinks in Posts (DOM Clobbering)\nhttps://hackerone.com/reports/1077136\n\nThreat Research\nPre-Auth RCE in Moodle\nPHP Object Injection in Shibboleth Module\nhttps://haxolot.com/posts/2021/moodle_pre_auth_shibboleth_rce_part1\n\nCloud Security\n1. Escalating Azure Privileges with the Log Analytics Contributor Role\nhttps://www.netspi.com/blog/technical/cloud-penetration-testing/escalating-azure-privileges-with-the-log-analystics-contributor-role\n2. Anatomy of a Cloud Infrastructure Attack via a Pull Request\nhttps://goteleport.com/blog/hack-via-pull-request\n\nSoc Techniques\nDevice Security Guidance Configuration Pack\ud83d\ude0a\nhttps://github.com/ukncsc/Device-Security-Guidance-Configuration-Packs\n// Contains policy packs which can be used by system management software to configure device platforms (Win10/iOS) in accordance with NCSC device security guidance\n\nexploit\nCVE-2021-39239:\nA vulnerability in XML processing in Apache Jena <4.1.0, may allow an attacker to execute XML External Entities (XXE), including exposing the contents of local files to a remote server\nhttps://github.com/AKIA27TACKEDYE76PUGU/CVE-2021-39239\n\nCVE-2021-24620:\nRCE in WordPress Simple Ecomm. Shopping Cart <2.2.5\nhttps://github.com/AKIA27TACKEDYE76PUGU/CVE-2021-24620\n\nCVE-2021-41773:\nApache 2.4.49 Path Traversal\nhttps://github.com/numanturle/CVE-2021-41773\nhttps://github.com/habibiefaried/CVE-2021-41773-PoC", "creation_timestamp": "2026-09-10T18:00:05.617534Z"}, {"uuid": "449cf8d1-3dd3-4bfd-acb3-dcf9af7cc2f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40690", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4546", "content": "Blue Team Techniques\nTool to discover external/internal network attack surface\ud83e\udd13\nhttps://github.com/vmware-labs/attack-surface-framework\n\nOffensive security\n1. Ping'ing Apache XML Security (CVE-2021-40690)\nhttps://blog.tint0.com/2021/09/pinging-xmlsec.html?m=1\n2. Slack Denial of Service via Hyperlinks in Posts (DOM Clobbering)\nhttps://hackerone.com/reports/1077136\n\nThreat Research\nPre-Auth RCE in Moodle\nPHP Object Injection in Shibboleth Module\nhttps://haxolot.com/posts/2021/moodle_pre_auth_shibboleth_rce_part1\n\nCloud Security\n1. Escalating Azure Privileges with the Log Analytics Contributor Role\nhttps://www.netspi.com/blog/technical/cloud-penetration-testing/escalating-azure-privileges-with-the-log-analystics-contributor-role\n2. Anatomy of a Cloud Infrastructure Attack via a Pull Request\nhttps://goteleport.com/blog/hack-via-pull-request\n\nSoc Techniques\nDevice Security Guidance Configuration Pack\ud83d\ude0a\nhttps://github.com/ukncsc/Device-Security-Guidance-Configuration-Packs\n// Contains policy packs which can be used by system management software to configure device platforms (Win10/iOS) in accordance with NCSC device security guidance\n\nexploit\nCVE-2021-39239:\nA vulnerability in XML processing in Apache Jena <4.1.0, may allow an attacker to execute XML External Entities (XXE), including exposing the contents of local files to a remote server\nhttps://github.com/AKIA27TACKEDYE76PUGU/CVE-2021-39239\n\nCVE-2021-24620:\nRCE in WordPress Simple Ecomm. Shopping Cart <2.2.5\nhttps://github.com/AKIA27TACKEDYE76PUGU/CVE-2021-24620\n\nCVE-2021-41773:\nApache 2.4.49 Path Traversal\nhttps://github.com/numanturle/CVE-2021-41773\nhttps://github.com/habibiefaried/CVE-2021-41773-PoC", "creation_timestamp": "2026-09-11T00:00:31.516473Z"}]}