{"uuid": "bf5483f9-504e-4ce3-a1a6-4fb7a61997b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30528", "type": "seen", "source": "https://t.me/cissp/4567", "content": "Apple has released urgent iOS 15.0.2 and iPadOS 15.0.2 updates to address a new critical 0-day vulnerability (CVE-2021-30883) that is being actively exploited in the wild.\nRead details: \nhttps://thehackernews.com/2021/10/apple-releases-urgent-iphone-and-ipad.html\n\nexploit\n1. Scripts for Buffer Overflow challenges\nhttps://github.com/Twigonometry/buffer-overflow-scripts\n2. Exploits Scripts and other tools that are useful during Penetration-Testing or Red Team engagement\nhttps://github.com/BlackSnufkin/PT-ToolKit\n\nOffensive security\n1. HTTP server for exfiltrating files/data\nhttps://github.com/IngoKl/HTTPUploadExfil\n2. WAF Bypassing with Unicode Compatibility\nhttps://jlajara.gitlab.io/web/2020/02/19/Bypass_WAF_Unicode.html\n\nRed Team Tactics\n1. Escaping to Java to escape the Chrome sandbox\n(PoC for CVE-2021-30528)\nhttps://securitylab.github.com/research/chrome_sbx_java\n2. Abusing Weak ACL on Certificate Templates\nhttps://github.com/daem0nc0re/Abusing_Weak_ACL_on_Certificate_Templates\n]-> Python implementation for AD certificate abuse:\nhttps://github.com/ollypwn/Certipy\n\nAnalytics\nA Modern Exploration of Windows Memory Corruption Exploits: Stack Overflows\nhttps://www.forrest-orr.net/post/a-modern-exploration-of-windows-memory-corruption-exploits-part-i-stack-overflows\n\n\n\u200e\u200b", "creation_timestamp": "2026-09-02T01:04:23.224095Z"}