{"uuid": "cb440342-4e62-4ce1-b3c8-b89f097df744", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-29621", "type": "seen", "source": "https://t.me/cissp/4267", "content": "exploit \nCVE-2021-2429:\nA HEAP-BASED BUFFER OVERFLOW BUG IN THE MYSQL INNODB MEMCACHED PLUGIN\nhttps://www.zerodayinitiative.com/blog/2021/9/2/cve-2021-2429-a-heap-based-buffer-overflow-bug-in-the-mysql-innodb-memcached-plugin\n\nRedTeam Tactics\nPlay the music and bypass TCC aka CVE-2020-29621 (PoC)\nhttps://wojciechregula.blog/post/play-the-music-and-bypass-tcc-aka-cve-2020-29621\n\nOffensive security\nLiquidSnake is a tool that allows operators to perform fileless lateral movement using WMI Event \ud83d\ude42Subscriptions and GadgetToJScript\nhttps://github.com/RiccardoAncarani/LiquidSnake\n\nThreat Research\n1. Unknown Actor Using CLFS Log Files for Stealth\nhttps://www.fireeye.com/blog/threat-research/2021/09/unknown-actor-using-clfs-log-files-for-stealth.html\n2. OpenSSL Vulnerability Analysis (CVE-2021-3711)\ud83d\ude0e\nhttps://mp.weixin.qq.com/s/P2aduaUS3s8K7I-cDVJNgA\n3. Now Patched Vulnerability in WhatsApp could have led to data exposure of users\nhttps://research.checkpoint.com/2021/now-patched-vulnerability-in-whatsapp-could-have-led-to-data-exposure-of-users", "creation_timestamp": "2026-09-01T17:00:41.386652Z"}