{"uuid": "11134ff8-4e76-46d7-a6b7-5afd8c860c70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21114", "type": "seen", "source": "https://t.me/cissp/2491", "content": "Malware analysis\ud83d\ude01\nMicrosoft-Themed Phishing Attack Targets Executives Using Fake Google reCAPTCHA Technique\nhttps://www.zscaler.com/blogs/security-research/microsoft-themed-phishing-attack-targets-executives-using-fake-google\n\nOffensive security\ud83d\udc40\n1. The Universal SSL pinning bypass for Android applications\nhttps://infosecwriteups.com/hail-frida-the-universal-ssl-pinning-bypass-for-android-e9e1d733d29\n2. Reverse Engineering a Flutter app by recompiling Flutter Engine\nhttps://tinyhack.com/2021/03/07/reversing-a-flutter-app-by-recompiling-flutter-engine\n\nThreat Research\n\"Prime+Probe 1, JavaScript 0: Overcoming Browser-based Side-Channel Defenses\", 2021.\nhttps://orenlab.sise.bgu.ac.il/p/PP0?k\n]-> Artifact Repository:\nhttps://github.com/Yossioren/pp0\n]-> .pdf:\nhttps://orenlab.sise.bgu.ac.il/p/PP0.pdf\n\nRed Team Tactics:\nContent Security Policy\u00a0(CSP) Bypass Guidelines\nhttps://brutelogic.com.br/blog/csp-bypass-guidelines\nCSP Reference:\nhttps://content-security-policy.com\n\nCVE-2020-6507:\nChrome RCE on macOS 11.2.1 (PoC)\nhttps://github.com/r0t0tiller/Exploits/tree/master/V8/CVE-2020-6507\n\nCVE-2020-15972, CVE-2021-21114:\nUse-after-free (UaF) in Chrome AudioHandler\nhttps://securitylab.github.com/advisories/GHSL-2020-167-chrome", "creation_timestamp": "2026-09-01T17:01:00.579034Z"}