{"uuid": "8f827f86-1f85-45b8-a5c7-36ef4417f396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24098", "type": "seen", "source": "https://t.me/cissp/2863", "content": "CVE-2020-9922:\nZero click vulnerability in Apple\u2019s macOS Mail\nhttps://mikko-kenttala.medium.com/zero-click-vulnerability-in-apples-macos-mail-59e0c14b106c\n\nFacebook account takeover:\n1. Facebook account takeover due to a bypass of allowed callback URLs in the OAuth flow\nhttps://ysamm.com/?p=646\n2. Facebook account takeover due to a wide platform bug in ajaxpipe responses\nhttps://ysamm.com/?p=654\n\nCVE-2021-24098:\nA Denial Of Service bug in Windows Console Driver (condrv.sys) (PoC)\nhttps://github.com/waleedassar/CVE-2021-24098\n\nRed Team Tactics:\n1. Using Kubelet Client to Attack the Kubernetes Cluster\nhttps://www.cyberark.com/resources/threat-research-blog/using-kubelet-client-to-attack-the-kubernetes-cluster\n2. Executing Shellcode via Callbacks\nhttps://osandamalith.com/2021/04/01/executing-shellcode-via-callbacks\n3. Finding secrets/passwords in container images and file systems\ud83d\ude00\nhttps://github.com/deepfence/SecretScanner#quickly-try-using-docker\n\nThreat Research:\n1. H2C Smuggling in the Wild\nhttps://blog.assetnote.io/2021/03/18/h2c-smuggling\n2. Abusing VoIPmonitor for RCE\nhttps://www.rtcsec.com/post/2021/03/bug-discovery-diaries-abusing-voipmonitor-for-remote-code-execution\n\nMalware analysis:\nBrowser lockers: extortion disguised as a fine\nhttps://securelist.com/browser-lockers-extortion-disguised-as-a-fine/101735", "creation_timestamp": "2026-09-02T01:04:46.225260Z"}