{"uuid": "956ff3ed-62d0-47c8-9d04-251d943e93e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3560", "type": "seen", "source": "https://t.me/cissp/3394", "content": "Cloud Security\nPhishing for AWS credentials via AWS SSO device code authentication\ud83d\ude0a\nhttps://blog.christophetd.fr/phishing-for-aws-credentials-via-aws-sso-device-code-authentication\n\nRed_ eam Tactics\n1. Insecure Deserialization and extraction of admin password\nhttps://infosecwriteups.com/insecure-deserialization-web-challenges-part-1-7d1b7339ca\n2. On how to access (protected) networks\nhttps://s3cur3th1ssh1t.github.io/On-how-to-access-protected-networks\n\nexploit\nCVE-2021-3560:\nPrivilege escalation with polkit: How to get root on Linux with a seven-year-old bug (PoC)\ud83d\ude01\ud83d\udc4d\ud83c\udffd\nhttps://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug\n\nThreat Research\n1. Abusing SIP VoIPmonitor GUI for Cross-Site Scripting\nhttps://www.rtcsec.com/post/2021/06/abusing-sip-for-cross-site-scripting-most-definitely\n2. macOS Monterey Shortcuts\nhttps://theevilbit.github.io/posts/monterey_shortcuts", "creation_timestamp": "2026-09-02T01:04:35.837722Z"}