{"vulnerability": "CVE-2021-37999", "sightings": [{"uuid": "d5a8afc5-4746-41ad-9272-cf17a290b52a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37999", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/1170", "content": "#exploit\n\n+ CVE-2021-37999:\nGoogle Chrome NTP XSS via Google Search CSRF\nhttps://bugs.chromium.org/p/chromium/issues/detail?id=1251541\n\n+ CVE-2021-38666:\nRemote Desktop Client RCE Vulnerability\nhttps://github.com/DarkSprings/CVE-2021-38666-poc\n\n@BlueRedTeam", "creation_timestamp": "2021-11-13T07:15:28.000000Z"}, {"uuid": "1347e29a-d052-4b6c-a854-e892fb36b941", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37999", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4742", "content": "#exploit\n1. CVE-2021-37999:\nGoogle Chrome NTP XSS via Google Search CSRF\nhttps://bugs.chromium.org/p/chromium/issues/detail?id=1251541\n\n2. CVE-2021-38666:\nRemote Desktop Client RCE Vulnerability\nhttps://github.com/DarkSprings/CVE-2021-38666-poc", "creation_timestamp": "2021-11-13T13:15:07.000000Z"}, {"uuid": "ddfd6775-eec4-4dc8-8c03-4c1032a67012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37999", "type": "seen", "source": "https://t.me/cissp/4799", "content": "Blue_Team_Techniques\nSecurity Policy Templates\nhttps://www.sans.org/information-security-policy/?per-page=100\n\nThreat_Research\n1. Evading EDR Detection with Reentrancy Abuse\nhttps://www.deepinstinct.com/blog/evading-antivirus-detection-with-inline-hooks\n2. BotenaGo Botnet\nhttps://cybersecurity.att.com/blogs/labs-research/att-alien-labs-finds-new-golang-malwarebotenago-targeting-millions-of-routers-and-iot-devices-with-more-than-30-exploits\n\nexploit\n1. CVE-2021-37999:\nGoogle Chrome NTP XSS via Google Search CSRF\nhttps://bugs.chromium.org/p/chromium/issues/detail?id=1251541\n\n2. CVE-2021-38666:\nRemote Desktop Client RCE Vulnerability\nhttps://github.com/DarkSprings/CVE-2021-38666-poc\n\nRed_Team_Tactics\n1. Becoming A Super Admin In Someone Elses Gsuite Organization And Taking It Over\nhttps://secreltyhiddenwriteups.blogspot.com/2021/11/becoming-super-admin-in-someone-elses.html\n2. Dumping LSASS has never been so stealthy...\nhttps://github.com/helpsystems/nanodump", "creation_timestamp": "2026-09-01T17:00:35.291204Z"}, {"uuid": "5434c2a5-6dd0-4c22-b426-03b353b543b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37999", "type": "seen", "source": "https://t.me/cissp/4799", "content": "Blue_Team_Techniques\nSecurity Policy Templates\nhttps://www.sans.org/information-security-policy/?per-page=100\n\nThreat_Research\n1. Evading EDR Detection with Reentrancy Abuse\nhttps://www.deepinstinct.com/blog/evading-antivirus-detection-with-inline-hooks\n2. BotenaGo Botnet\nhttps://cybersecurity.att.com/blogs/labs-research/att-alien-labs-finds-new-golang-malwarebotenago-targeting-millions-of-routers-and-iot-devices-with-more-than-30-exploits\n\nexploit\n1. CVE-2021-37999:\nGoogle Chrome NTP XSS via Google Search CSRF\nhttps://bugs.chromium.org/p/chromium/issues/detail?id=1251541\n\n2. CVE-2021-38666:\nRemote Desktop Client RCE Vulnerability\nhttps://github.com/DarkSprings/CVE-2021-38666-poc\n\nRed_Team_Tactics\n1. Becoming A Super Admin In Someone Elses Gsuite Organization And Taking It Over\nhttps://secreltyhiddenwriteups.blogspot.com/2021/11/becoming-super-admin-in-someone-elses.html\n2. Dumping LSASS has never been so stealthy...\nhttps://github.com/helpsystems/nanodump", "creation_timestamp": "2026-09-02T01:04:19.899466Z"}, {"uuid": "c40179b1-1587-495a-9989-31d4e9cb7013", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37999", "type": "seen", "source": "https://t.me/cissp/4799", "content": "Blue_Team_Techniques\nSecurity Policy Templates\nhttps://www.sans.org/information-security-policy/?per-page=100\n\nThreat_Research\n1. Evading EDR Detection with Reentrancy Abuse\nhttps://www.deepinstinct.com/blog/evading-antivirus-detection-with-inline-hooks\n2. BotenaGo Botnet\nhttps://cybersecurity.att.com/blogs/labs-research/att-alien-labs-finds-new-golang-malwarebotenago-targeting-millions-of-routers-and-iot-devices-with-more-than-30-exploits\n\nexploit\n1. CVE-2021-37999:\nGoogle Chrome NTP XSS via Google Search CSRF\nhttps://bugs.chromium.org/p/chromium/issues/detail?id=1251541\n\n2. CVE-2021-38666:\nRemote Desktop Client RCE Vulnerability\nhttps://github.com/DarkSprings/CVE-2021-38666-poc\n\nRed_Team_Tactics\n1. Becoming A Super Admin In Someone Elses Gsuite Organization And Taking It Over\nhttps://secreltyhiddenwriteups.blogspot.com/2021/11/becoming-super-admin-in-someone-elses.html\n2. Dumping LSASS has never been so stealthy...\nhttps://github.com/helpsystems/nanodump", "creation_timestamp": "2026-09-10T14:00:04.997445Z"}, {"uuid": "b8838aef-185d-4607-b2e7-009bd2815715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37999", "type": "seen", "source": "https://t.me/cissp/4799", "content": "Blue_Team_Techniques\nSecurity Policy Templates\nhttps://www.sans.org/information-security-policy/?per-page=100\n\nThreat_Research\n1. Evading EDR Detection with Reentrancy Abuse\nhttps://www.deepinstinct.com/blog/evading-antivirus-detection-with-inline-hooks\n2. BotenaGo Botnet\nhttps://cybersecurity.att.com/blogs/labs-research/att-alien-labs-finds-new-golang-malwarebotenago-targeting-millions-of-routers-and-iot-devices-with-more-than-30-exploits\n\nexploit\n1. CVE-2021-37999:\nGoogle Chrome NTP XSS via Google Search CSRF\nhttps://bugs.chromium.org/p/chromium/issues/detail?id=1251541\n\n2. CVE-2021-38666:\nRemote Desktop Client RCE Vulnerability\nhttps://github.com/DarkSprings/CVE-2021-38666-poc\n\nRed_Team_Tactics\n1. Becoming A Super Admin In Someone Elses Gsuite Organization And Taking It Over\nhttps://secreltyhiddenwriteups.blogspot.com/2021/11/becoming-super-admin-in-someone-elses.html\n2. Dumping LSASS has never been so stealthy...\nhttps://github.com/helpsystems/nanodump", "creation_timestamp": "2026-09-11T00:00:36.246651Z"}]}