{"uuid": "c3a72d19-b754-451e-9313-9de455e4ab57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30005", "type": "seen", "source": "https://t.me/cissp/3193", "content": "exploit\nCVE-2021-30005:\nIn JetBrains PyCharm <2020.3.4, local code execution was possible because of insufficient checks when getting the project from VCS\nhttps://github.com/atorralba/CVE-2021-30005-POC\n\nMalware analysis\n1. Transparent Tribe APT expands its Windows malware arsenal\nhttps://blog.talosintelligence.com/2021/05/transparent-tribe-infra-and-targeting.html?m=1\n2. Threat Actors Use MSBuild to Deliver RATs Filelessly\ud83d\ude00\nhttps://www.anomali.com/blog/threat-actors-use-msbuild-to-deliver-rats-filelessly\n\nThreat Research\n1. Cross Browser Tracking with Schemeflood\n// Exploiting custom protocol handlers for cross-browser tracking in Tor, Safari, Chrome, Firefox\nhttps://fingerprintjs.com/blog/external-protocol-flooding\n2. A VMware ESXi vmxnet3 Case Study\nhttps://zerodayengineering.com/research/vmware-esxi-vmxnet3-from-patch-to-poc.html\ud83d\ude07\n\nBlackHat ASIA 2021:\nHacking MacOS Kernel Using File Extension Attributes (PoC)\u270c\ud83c\udffc\nhttps://mp.weixin.qq.com/s/bfdwAhRRso34OOZrG2r65Q\n\nCVE\u20112021\u20111079:\nNVIDIA GeForce Experience Command Execution\nhttps://voidsec.com/nvidia-geforce-experience-command-execution", "creation_timestamp": "2026-09-02T01:04:39.427563Z"}