{"uuid": "46020879-8050-41f8-be01-66b37c64293e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30551", "type": "seen", "source": "https://t.me/cissp/3798", "content": "Malware analysis\n1. USPS Phishing Kit Reporting Data Back Via Telegram\nhttps://isc.sans.edu/forums/diary/USPS+Phishing+Using+Telegram+to+Collect+Data/27630\n2. KiwiSDR Backdoor\nhttps://www.bleepingcomputer.com/news/security/software-maker-removes-backdoor-giving-root-access-to-radio-devices\n\nexploit\nCVE-2021-34558:\nThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA-key exchange, allowing a malicious TLS server to cause a TLS client to panic (PoC)\nhttps://github.com/alexzorin/cve-2021-34558\n\nCVE-2021-30551:\nChrome Type Confusion in V8\nhttps://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-30551.html\n\nCVE-2021-33742:\nIE out-of-bounds write in MSHTML\nhttps://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-33742.html\n\n\nRed Team Tactics\nROP Chaining - Callme from ROPEmporium\n32 bit: \nhttps://aidenpearce369.github.io/binary%20exploitation/2-callme\n64 bit: https://aidenpearce369.github.io/binary%20exploitation/1-callme", "creation_timestamp": "2026-09-01T17:00:46.020960Z"}