{"uuid": "bbf53f71-94fa-4910-beb9-445d2f8c172f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3493", "type": "seen", "source": "https://t.me/cissp/3004", "content": "Threat Research:\n1. Ret2Libc Attack in Linux\nhttps://aidenpearce369.medium.com/ret2libc-attack-in-lin-3dfc827c90c3\n2. Exploiting Format String Vulnerability\nhttps://aidenpearce369.medium.com/exploiting-format-string-vulnerability-97e3d588da1b\n\nexploit\nCVE-2021-3493:\nA vulnerability in OverlayFS allows local users under Ubuntu 14.04 ESM, 16.04/18.04/20.04 LTS, 20.10 to gain root privileges (PoC)\nhttps://ssd-disclosure.com/ssd-advisory-overlayfs-pe\n\nRed Team Tactics:\n1. Rxploit\nhttps://github.com/NANI1734/Rxploit\n2. A Rust library for VMware host-guest protocol\ud83d\ude0e\n(\"VMXh backdoor\")\nhttps://github.com/lucab/vmw_backdoor-rs\n3. A list of payload and bypass lists for penetration testing and red team\ud83e\udd13 infrastructure build\nhttps://github.com/ffffffff0x/AboutSecurity\n\nResearch:\nTenet - a new IDA Pro plugin. It is an experimental plugin designed to explore software execution traces\nhttps://blog.ret2.io/2021/04/20/tenet-trace-explorer", "creation_timestamp": "2026-09-01T17:00:53.061674Z"}