{"uuid": "18df896b-ac39-43bd-afe1-f8d8a8d54644", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3781", "type": "seen", "source": "https://t.me/cissp/4726", "content": "exploit\n1. CVE-2021-28079:\nJamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability\nhttps://github.com/g33xter/CVE-2021-28079\n\n2. Silent DOC Exploit for Microsoft Office\nhttps://github.com/attakercyebr/Exploit-doc\n\n3. Ghostscript sandbox bypass (CVE-2021-3781)\nhttps://security.tencent.com/index.php/blog/msg/205\n\nThreat_Research\nContainer Breakouts:\nPart 1 - Access to root directory of the Host\nhttps://blog.nody.cc/posts/container-breakouts-part1\nPart 2 - Privileged Container\nhttps://blog.nody.cc/posts/container-breakouts-part2\nPart 3 - Docker Socket\nhttps://blog.nody.cc/posts/container-breakouts-part3\n\nCloud_Security\nMesh-kridik: performs various security checks\non a Kubernetes cluster\nhttps://github.com/chen-keinan/mesh-kridik#requirements\n\nOffensive_security\nCVE-2021-30920 - CVE-2021-1784 strikes back -\nTCC bypass via mounting\nhttps://theevilbit.github.io/posts/cve_2021_30920", "creation_timestamp": "2026-09-01T17:00:36.541658Z"}