{"vulnerability": "CVE-2021-2121", "sightings": [{"uuid": "83eddb73-0a0f-4f69-9229-5be18e52d6b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-2121", "type": "seen", "source": "https://t.me/cibsecurity/22354", "content": "\u203c CVE-2021-2121 \u203c\n\nVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 6.0 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-20T18:33:20.000000Z"}, {"uuid": "4b1cf798-9835-4505-a106-1443ef85fb01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21210", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/5495", "content": "How I found my first Chrome bug\n\nhttps://vovohelo.medium.com/how-i-found-my-first-chrome-bug-cve-2021-21210-248a21272248", "creation_timestamp": "2021-06-28T22:41:33.000000Z"}, {"uuid": "59f3dad6-e6f5-43b9-9ff2-fe17b5c82ce3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21210", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3733", "content": "#Threat_Research\n1. CVE-2018-18472:\nWestern Digital My Book Live Mass Exploitation\nhttps://censys.io/blog/cve-2018-18472-western-digital-my-book-live-mass-exploitation\n2. RTSP NAT Slipstream on Google Chrome 89.0\n(PoC for CVE-2021-21210)\nhttps://vovohelo.medium.com/how-i-found-my-first-chrome-bug-cve-2021-21210-248a21272248\n]-> NAT Slipstream samples:\nhttps://github.com/bananabr/natslipstream", "creation_timestamp": "2021-07-01T11:03:01.000000Z"}, {"uuid": "802d0267-0e2c-4afc-b1b4-bf9cff5e1bc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21210", "type": "seen", "source": "Telegram/OLdQRt4r2fdV5UESECHPSF63VM8iagrfFP3qgk5zexwtf7U", "content": "", "creation_timestamp": "2026-08-16T19:00:05.995447Z"}, {"uuid": "91abab9a-065f-4aac-908b-bb911c88c98b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21210", "type": "published-proof-of-concept", "source": "Telegram/OLdQRt4r2fdV5UESECHPSF63VM8iagrfFP3qgk5zexwtf7U", "content": "", "creation_timestamp": "2026-08-17T00:00:09.513460Z"}, {"uuid": "7d683b8a-57b3-485b-aed1-eb7c418a01f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21210", "type": "seen", "source": "https://t.me/cissp/3617", "content": "Research\n\"A Mirage of Safety:\nBug Finding and Exploit Techniques of Top Android Vendor's Privacy Protection Apps\", 2021.\nhttps://xlab.tencent.com/en/2021/05/14/A-Mirage-of-Safety-Bug-Finding-and-Exploit-Techniques-of-Top-Android-Vendors-Privacy-Protection-Apps\n// A1: Attack from malicious apps\n    A2: Attack from malicious apps which can gain system previledge\n    A3: Attackers have physically compromise the phone\n\nThreat Research\n1. CVE-2018-18472:\nWestern Digital My Book Live Mass Exploitation\nhttps://censys.io/blog/cve-2018-18472-western-digital-my-book-live-mass-exploitation\n2. RTSP NAT Slipstream on Google Chrome 89.0\n(PoC for CVE-2021-21210)\nhttps://vovohelo.medium.com/how-i-found-my-first-chrome-bug-cve-2021-21210-248a21272248\n]-> NAT Slipstream samples:\nhttps://github.com/bananabr/natslipstream\n\nRed Team Tactics\n1. GateKeeper macOS Bypass\nhttps://theevilbit.github.io/posts/gatekeeper_not_a_bypass\n2. Metadata service MITM allows root privilege escalation (EKS/GKE)\nhttps://blog.champtar.fr/Metadata_MITM_root_EKS_GKE\n\nThreat\n1. An EPYC escape:\nCase-study of a KVM breakout (PoC for CVE-2021-29657)\nhttps://googleprojectzero.blogspot.com/2021/06/an-epyc-escape-case-study-of-kvm.html?m=0\n2. Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464)\nhttps://portswigger.net/research/pre-auth-rce-in-forgerock-openam-cve-2021-35464", "creation_timestamp": "2026-09-01T17:00:46.817164Z"}, {"uuid": "19629cc5-652e-4c6e-9c6d-a6b19a48f199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21210", "type": "seen", "source": "https://t.me/hacking_Attack/14605", "content": "How I found my first Chrome bug (CVE-2021\u201321210)\nhttps://vovohelo.medium.com/how-i-found-my-first-chrome-bug-cve-2021-21210-248a21272248?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:02:34.631837Z"}, {"uuid": "3486de59-af72-4529-94b9-a0b424dd4cb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21210", "type": "seen", "source": "https://t.me/hacking_Attack/14607", "content": "On October 31, 2020, @SamyKamkar published his research on NAT Slipstreaming. According to his own words, NAT Slipstreaming \u2014Continue reading on Medium \u00bb (https://vovohelo.medium.com/how-i-found-my-first-chrome-bug-cve-2021-21210-248a21272248?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:02:34.680991Z"}, {"uuid": "e9f09437-bb4d-4472-af5c-fc778831aa6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21210", "type": "seen", "source": "https://t.me/hacking_Attack/14605", "content": "How I found my first Chrome bug (CVE-2021\u201321210)\nhttps://vovohelo.medium.com/how-i-found-my-first-chrome-bug-cve-2021-21210-248a21272248?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:03:09.328621Z"}, {"uuid": "579c8dac-0339-47ba-b084-8704d708dbd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21210", "type": "seen", "source": "https://t.me/hacking_Attack/14607", "content": "On October 31, 2020, @SamyKamkar published his research on NAT Slipstreaming. According to his own words, NAT Slipstreaming \u2014Continue reading on Medium \u00bb (https://vovohelo.medium.com/how-i-found-my-first-chrome-bug-cve-2021-21210-248a21272248?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:03:09.373479Z"}, {"uuid": "46273eb3-dcf8-41e3-a340-6b023203703b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21210", "type": "seen", "source": "https://t.me/cissp/3617", "content": "Research\n\"A Mirage of Safety:\nBug Finding and Exploit Techniques of Top Android Vendor's Privacy Protection Apps\", 2021.\nhttps://xlab.tencent.com/en/2021/05/14/A-Mirage-of-Safety-Bug-Finding-and-Exploit-Techniques-of-Top-Android-Vendors-Privacy-Protection-Apps\n// A1: Attack from malicious apps\n    A2: Attack from malicious apps which can gain system previledge\n    A3: Attackers have physically compromise the phone\n\nThreat Research\n1. CVE-2018-18472:\nWestern Digital My Book Live Mass Exploitation\nhttps://censys.io/blog/cve-2018-18472-western-digital-my-book-live-mass-exploitation\n2. RTSP NAT Slipstream on Google Chrome 89.0\n(PoC for CVE-2021-21210)\nhttps://vovohelo.medium.com/how-i-found-my-first-chrome-bug-cve-2021-21210-248a21272248\n]-> NAT Slipstream samples:\nhttps://github.com/bananabr/natslipstream\n\nRed Team Tactics\n1. GateKeeper macOS Bypass\nhttps://theevilbit.github.io/posts/gatekeeper_not_a_bypass\n2. Metadata service MITM allows root privilege escalation (EKS/GKE)\nhttps://blog.champtar.fr/Metadata_MITM_root_EKS_GKE\n\nThreat\n1. An EPYC escape:\nCase-study of a KVM breakout (PoC for CVE-2021-29657)\nhttps://googleprojectzero.blogspot.com/2021/06/an-epyc-escape-case-study-of-kvm.html?m=0\n2. Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464)\nhttps://portswigger.net/research/pre-auth-rce-in-forgerock-openam-cve-2021-35464", "creation_timestamp": "2026-09-02T01:04:34.353242Z"}, {"uuid": "a7b1b08b-8b83-4cf9-8fdd-b76ed1363696", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21210", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/14607", "content": "On October 31, 2020, @SamyKamkar published his research on NAT Slipstreaming. According to his own words, NAT Slipstreaming \u2014Continue reading on Medium \u00bb (https://vovohelo.medium.com/how-i-found-my-first-chrome-bug-cve-2021-21210-248a21272248?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-08T02:00:06.184656Z"}, {"uuid": "abcd5850-8b57-45b1-8b2c-4a70aa6d0f62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21210", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/14605", "content": "How I found my first Chrome bug (CVE-2021\u201321210)\nhttps://vovohelo.medium.com/how-i-found-my-first-chrome-bug-cve-2021-21210-248a21272248?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-08T02:00:06.227115Z"}, {"uuid": "6ab0b422-b7b8-4973-895a-521e8ac5c3ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21210", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/14607", "content": "On October 31, 2020, @SamyKamkar published his research on NAT Slipstreaming. According to his own words, NAT Slipstreaming \u2014Continue reading on Medium \u00bb (https://vovohelo.medium.com/how-i-found-my-first-chrome-bug-cve-2021-21210-248a21272248?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-09T00:00:47.507189Z"}, {"uuid": "d486c19a-c051-4b42-961d-30e767c1340a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21210", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/14605", "content": "How I found my first Chrome bug (CVE-2021\u201321210)\nhttps://vovohelo.medium.com/how-i-found-my-first-chrome-bug-cve-2021-21210-248a21272248?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-09T00:00:47.551732Z"}]}