{"uuid": "7717a2c3-9e3e-40e2-b5e0-1f14311e24a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-33813", "type": "seen", "source": "https://t.me/cissp/3518", "content": "Threat Research\n1. Quick Analysis for the SSID Format String Bug in iOS Wi-Fi service\nhttps://blog.chichou.me/2021/06/20/quick-analysis-wifid\n2. Apple account takeover vulnerability\nhttps://thezerohack.com/apple-vulnerability-bug-bounty\n3. XXE in JDOM library (PoC for CVE-2021-33813)\nhttps://alephsecurity.com/vulns/aleph-2021003\n\nRed Team Tactics\n1. Bypassing Image Load Kernel Callbacks\nhttps://www.mdsec.co.uk/2021/06/bypassing-image-load-kernel-callbacks\n2. Pwning Home Router - Linksys WRT54G\nhttps://elongl.github.io/exploitation/2021/05/30/pwning-home-router.html\n\nexploit\nCVE-2021-30658:\nM1 Macs GateKeeper bypass (PoC)\nhttps://wojciechregula.blog/post/m1-macs-gatekeeper-bypass-aka-cve-2021-30658\n\nOffensive security\n1. Exploiting the notoriously unsafe gets() on a PAC-protected ARM64 binary\nhttps://blog.ret2.io/2021/06/16/intro-to-pac-arm64\n2. A Little More on the Task Scheduler's Service Account Usage...\nhttps://www.tiraniddo.dev/2021/06/a-little-more-on-task-schedulers.html?m=1", "creation_timestamp": "2026-09-01T17:00:47.461421Z"}