{"vulnerability": "cve-2021-26431", "sightings": [{"uuid": "c2de4feb-4a34-41e1-b1de-fc3aa181fc1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26431", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4268", "content": "#Threat_Research\n1. Analysis of a Parallels Desktop Stack Clash Vulnerability and Variant Hunting Using Binary Ninja\nhttps://www.zerodayinitiative.com/blog/2021/9/9/analysis-of-a-parallels-desktop-stack-clash-vulnerability-and-variant-hunting-using-binary-ninja\n2. CVE-2021-26431:\nMicrosoft Windows Lock Screen Improper Access Control Authentication Bypass Vulnerability (PoC)\nhttps://halove23.blogspot.com/2021/09/zdi-21-1053-bypassing-windows-lock.html", "creation_timestamp": "2021-09-10T12:12:38.000000Z"}, {"uuid": "9a62e64f-7fcd-4912-9ad2-6728e33dedd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26431", "type": "seen", "source": "https://t.me/cissp/4324", "content": "Offensive security\nFacebook email disclosure and account takeover\ud83e\udd13\nhttps://rikeshbaniyaaa.medium.com/facebook-email-disclosure-and-account-takeover-ecdb44ee12e9\n\nCobalt Strike, function hooking, and the Windows heap\nhttps://www.arashparsa.com/hook-heaps-and-live-free\n\nThreat Research\n1. Analysis of a Parallels Desktop Stack Clash Vulnerability and Variant Hunting Using Binary Ninja\nhttps://www.zerodayinitiative.com/blog/2021/9/9/analysis-of-a-parallels-desktop-stack-clash-vulnerability-and-variant-hunting-using-binary-ninja\n2. CVE-2021-26431:\nMicrosoft Windows Lock Screen Improper Access Control Authentication Bypass Vulnerability (PoC)\ud83d\ude3a\nhttps://halove23.blogspot.com/2021/09/zdi-21-1053-bypassing-windows-lock.html\n\nGitHub Actions\u00a0check-spelling\u00a0community workflow -\u00a0GITHUB_TOKEN\u00a0leakage via\u00a0advice.txt\u00a0symlink\nhttps://github.com/justinsteven/advisories/blob/master/2021_github_actions_checkspelling_token_leak_via_advice_symlink.md", "creation_timestamp": "2026-09-01T17:00:40.908657Z"}, {"uuid": "16292bdd-51c5-425f-b1ec-b437de058165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26431", "type": "seen", "source": "https://t.me/cissp/4324", "content": "Offensive security\nFacebook email disclosure and account takeover\ud83e\udd13\nhttps://rikeshbaniyaaa.medium.com/facebook-email-disclosure-and-account-takeover-ecdb44ee12e9\n\nCobalt Strike, function hooking, and the Windows heap\nhttps://www.arashparsa.com/hook-heaps-and-live-free\n\nThreat Research\n1. Analysis of a Parallels Desktop Stack Clash Vulnerability and Variant Hunting Using Binary Ninja\nhttps://www.zerodayinitiative.com/blog/2021/9/9/analysis-of-a-parallels-desktop-stack-clash-vulnerability-and-variant-hunting-using-binary-ninja\n2. CVE-2021-26431:\nMicrosoft Windows Lock Screen Improper Access Control Authentication Bypass Vulnerability (PoC)\ud83d\ude3a\nhttps://halove23.blogspot.com/2021/09/zdi-21-1053-bypassing-windows-lock.html\n\nGitHub Actions\u00a0check-spelling\u00a0community workflow -\u00a0GITHUB_TOKEN\u00a0leakage via\u00a0advice.txt\u00a0symlink\nhttps://github.com/justinsteven/advisories/blob/master/2021_github_actions_checkspelling_token_leak_via_advice_symlink.md", "creation_timestamp": "2026-09-02T01:04:26.559775Z"}]}