{"vulnerability": "CVE-2021-37975", "sightings": [{"uuid": "65757f28-c872-40d8-9dd1-5777b5e6b350", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2021-11-20T09:53:52.000000Z"}, {"uuid": "4be59875-9df9-42d8-9af9-d8276955ac12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:17.000000Z"}, {"uuid": "07e9a653-a30f-4f3a-91d8-d2c92b78912c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "MISP/7effef96-bacc-4102-bf33-d90a3fed8d03", "content": "", "creation_timestamp": "2024-11-14T06:10:15.000000Z"}, {"uuid": "078ad4dc-74e7-4785-b99e-679a3a416d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971070", "content": "", "creation_timestamp": "2024-12-24T20:23:49.876058Z"}, {"uuid": "8b97bd0b-3c6b-4693-86ca-a46e124f7719", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:57.000000Z"}, {"uuid": "d90c3422-2a8d-4e9d-a7ad-359c7d1ecf1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=662", "content": "", "creation_timestamp": "2021-10-04T04:00:00.000000Z"}, {"uuid": "09ca6f93-7c74-48ed-bb73-c9c7d546b849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=663", "content": "", "creation_timestamp": "2021-10-04T04:00:00.000000Z"}, {"uuid": "7084fd28-8d71-4b92-857b-8b5a941af32a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8b97620b-9a7a-45e6-b8f3-678c88f5e187", "content": "", "creation_timestamp": "2026-02-02T12:28:45.841343Z"}, {"uuid": "4ddc50b9-af0a-4110-bdd6-3083c1afa5ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/arpsyndicate/1194", "content": "#ExploitObserverAlert\n\nCVE-2021-37975\n\nDESCRIPTION: Exploit Observer has 7 entries related to CVE-2021-37975. Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n\nFIRST-EPSS: 0.077650000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2023-12-04T11:43:10.000000Z"}, {"uuid": "b006c99b-1456-4324-a6a1-b8d0a447c16e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://t.me/wwm76/366", "content": "\u0642\u0645 \u0628\u062a\u062d\u062f\u064a\u062b Google Chrome \u0641\u064a \u0623\u0633\u0631\u0639 \u0648\u0642\u062a \u0645\u0645\u0643\u0646 \u0644\u062a\u0635\u062d\u064a\u062d 2 \u0639\u064a\u0648\u0628 Zero-Day \u0627\u0644\u062c\u062f\u064a\u062f\u0629 \u0627\u0644\u0645\u0633\u062a\u063a\u0644\u0629 \u0628\u0634\u0643\u0644 \u0646\u0634\u0637\n\u062c\u0648\u062c\u0644 \u0643\u0631\u0648\u0645\n\u062f\u0641\u0639\u062a Google \u064a\u0648\u0645 \u0627\u0644\u062e\u0645\u064a\u0633 \u0625\u0644\u0649 \u0625\u0635\u0644\u0627\u062d\u0627\u062a \u0623\u0645\u0646\u064a\u0629 \u0639\u0627\u062c\u0644\u0629 \u0644\u0645\u062a\u0635\u0641\u062d\u0647\u0627 Chrome \u060c \u0628\u0645\u0627 \u0641\u064a \u0630\u0644\u0643 \u0632\u0648\u062c \u0645\u0646 \u0646\u0642\u0627\u0637 \u0627\u0644\u0636\u0639\u0641 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0627\u0644\u062c\u062f\u064a\u062f\u0629 \u0627\u0644\u062a\u064a \u0642\u0627\u0644\u062a \u0627\u0644\u0634\u0631\u0643\u0629 \u0625\u0646\u0647 \u064a\u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0641\u064a \u0627\u0644\u0628\u0631\u064a\u0629 \u060c \u0645\u0645\u0627 \u064a\u062c\u0639\u0644\u0647\u0627 \u0631\u0627\u0628\u0639 \u0648\u062e\u0627\u0645\u0633 \u0623\u064a\u0627\u0645 \u0627\u0644\u0635\u0641\u0631 \u0627\u0644\u0646\u0634\u0637\u0629 \u062e\u0644\u0627\u0644 \u0647\u0630\u0627 \u0627\u0644\u0634\u0647\u0631 \u0648\u062d\u062f\u0647.\n\nhttps://t.me/wwm76\n\u0fd0\ufeb3\u0640\ufb51\u05dd\u0640\u0640\u0640\u0696 \ufe82\ufedf\u0640\u06f6\u0640\u06a3\u064a\u0640\u065b\u0696\u064a\u0fd0\n\n\u062a\u0639\u062f \u0627\u0644\u0645\u0634\u0643\u0644\u0627\u062a \u060c \u0627\u0644\u0645\u0639\u064a\u0646\u0629 \u0628\u0640 CVE-2021-37975 \u0648 CVE-2021-37976 \u060c \u062c\u0632\u0621\u064b\u0627 \u0645\u0646 \u0625\u062c\u0645\u0627\u0644\u064a \u0623\u0631\u0628\u0639\u0629 \u062a\u0635\u062d\u064a\u062d\u0627\u062a \u060c \u0648\u062a\u062a\u0639\u0644\u0642 \u0628\u0639\u064a\u0628 \u062e\u0627\u0644\u064d \u0645\u0646 \u0627\u0644\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0641\u064a \u0645\u062d\u0631\u0643 V8 JavaScript \u0648 WebAssembly \u0628\u0627\u0644\u0625\u0636\u0627\u0641\u0629 \u0625\u0644\u0649 \u062a\u0633\u0631\u0628 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0641\u064a \u0627\u0644\u0646\u0648\u0627\u0629.\n\n\u0643\u0645\u0627 \u0647\u0648 \u0627\u0644\u062d\u0627\u0644 \u0639\u0627\u062f\u0629\u064b \u060c \u0627\u0645\u062a\u0646\u0639 \u0639\u0645\u0644\u0627\u0642 \u0627\u0644\u062a\u0643\u0646\u0648\u0644\u0648\u062c\u064a\u0627 \u0639\u0646 \u0645\u0634\u0627\u0631\u0643\u0629 \u0623\u064a \u062a\u0641\u0627\u0635\u064a\u0644 \u0625\u0636\u0627\u0641\u064a\u0629 \u0628\u0634\u0623\u0646 \u0643\u064a\u0641\u064a\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062b\u063a\u0631\u0627\u062a \u064a\u0648\u0645 \u0627\u0644\u0635\u0641\u0631 \u0647\u0630\u0647 \u0641\u064a \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u062d\u062a\u0649 \u064a\u062a\u0645 \u062a\u062d\u062f\u064a\u062b \u063a\u0627\u0644\u0628\u064a\u0629 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646 \u0628\u0627\u0644\u062a\u0635\u062d\u064a\u062d\u0627\u062a \u060c \u0644\u0643\u0646\u0647 \u0623\u0634\u0627\u0631 \u0625\u0644\u0649 \u0623\u0646\u0647 \u064a\u062f\u0631\u0643 \u0623\u0646 \"\u0639\u0645\u0644\u064a\u0627\u062a \u0627\u0633\u062a\u063a\u0644\u0627\u0644 CVE-2021 -37975 \u0648 CVE-2021-37976 \u0645\u0648\u062c\u0648\u062f\u0627\u0646 \u0641\u064a \u0627\u0644\u0628\u0631\u064a\u0629 \".\n\n\u0627\u0644\u0646\u0633\u062e \u0627\u0644\u0627\u062d\u062a\u064a\u0627\u0637\u064a\u0629 \u0627\u0644\u062a\u0644\u0642\u0627\u0626\u064a\u0629 \u0639\u0644\u0649 GitHub\n\u0646\u064f\u0633\u0628 \u0627\u0644\u0641\u0636\u0644 \u0625\u0644\u0649 \u0628\u0627\u062d\u062b \u0645\u062c\u0647\u0648\u0644 \u0641\u064a \u0627\u0644\u0625\u0628\u0644\u0627\u063a \u0639\u0646 CVE-2021-37975. \u0645\u0646 \u0646\u0627\u062d\u064a\u0629 \u0623\u062e\u0631\u0649 \u060c \u064a\u062a\u0636\u0645\u0646 \u0627\u0643\u062a\u0634\u0627\u0641 CVE-2021-37976 Cl\u00e9ment Lecigne \u0645\u0646 Google Threat Analysis Group \u060c \u0648\u0627\u0644\u0630\u064a \u064a\u064f\u0646\u0633\u0628 \u0625\u0644\u064a\u0647 \u0623\u064a\u0636\u064b\u0627 CVE-2021-37973 \u060c \u0648\u0647\u064a \u062b\u063a\u0631\u0629 \u0623\u062e\u0631\u0649 \u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0628\u0634\u0643\u0644 \u0646\u0634\u0637 \u0641\u064a \u0628\u0648\u0627\u0628\u0627\u062a \u0648\u0627\u062c\u0647\u0629 \u0628\u0631\u0645\u062c\u0629 \u062a\u0637\u0628\u064a\u0642\u0627\u062a Chrome \u0627\u0644\u062a\u064a \u062a\u0645 \u0627\u0644\u0625\u0628\u0644\u0627\u063a \u0639\u0646\u0647\u0627 \u0641\u064a \u0627\u0644\u0623\u0633\u0628\u0648\u0639 \u0627\u0644\u0645\u0627\u0636\u064a \u060c \u0623\u062b\u0627\u0631 \u0627\u062d\u062a\u0645\u0627\u0644 \u0623\u0646 \u064a\u0643\u0648\u0646 \u0627\u0644\u0639\u064a\u0628\u0627\u0646 \u0642\u062f \u062a\u0645 \u062a\u062c\u0645\u064a\u0639\u0647\u0645\u0627 \u0645\u0639\u064b\u0627 \u0643\u062c\u0632\u0621 \u0645\u0646 \u0633\u0644\u0633\u0644\u0629 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0644\u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0634\u0648\u0627\u0626\u064a\u0629.\n\n\u0645\u0639 \u0627\u0644\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0623\u062e\u064a\u0631 \u060c \u062a\u0639\u0627\u0645\u0644\u062a Google \u0645\u0639 \u0631\u0642\u0645 \u0642\u064a\u0627\u0633\u064a \u0628\u0644\u063a 14 \u064a\u0648\u0645\u064b\u0627 \u0641\u064a \u0645\u062a\u0635\u0641\u062d \u0627\u0644\u0648\u064a\u0628 \u0645\u0646\u0630 \u0628\u062f\u0627\u064a\u0629", "creation_timestamp": "2022-10-01T08:17:14.000000Z"}, {"uuid": "bb3f4dab-1ef0-4e12-9e2d-81f46bbe59b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://t.me/MH_HACKING_termux/63", "content": "\u0642\u0645 \u0628\u062a\u062d\u062f\u064a\u062b Google Chrome \u0641\u064a \u0623\u0633\u0631\u0639 \u0648\u0642\u062a \u0645\u0645\u0643\u0646 \u0644\u062a\u0635\u062d\u064a\u062d 2 \u0639\u064a\u0648\u0628 Zero-Day \u0627\u0644\u062c\u062f\u064a\u062f\u0629 \u0627\u0644\u0645\u0633\u062a\u063a\u0644\u0629 \u0628\u0634\u0643\u0644 \u0646\u0634\u0637\n\u062c\u0648\u062c\u0644 \u0643\u0631\u0648\u0645\n\u062f\u0641\u0639\u062a Google \u064a\u0648\u0645 \u0627\u0644\u062e\u0645\u064a\u0633 \u0625\u0644\u0649 \u0625\u0635\u0644\u0627\u062d\u0627\u062a \u0623\u0645\u0646\u064a\u0629 \u0639\u0627\u062c\u0644\u0629 \u0644\u0645\u062a\u0635\u0641\u062d\u0647\u0627 Chrome \u060c \u0628\u0645\u0627 \u0641\u064a \u0630\u0644\u0643 \u0632\u0648\u062c \u0645\u0646 \u0646\u0642\u0627\u0637 \u0627\u0644\u0636\u0639\u0641 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0627\u0644\u062c\u062f\u064a\u062f\u0629 \u0627\u0644\u062a\u064a \u0642\u0627\u0644\u062a \u0627\u0644\u0634\u0631\u0643\u0629 \u0625\u0646\u0647 \u064a\u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0641\u064a \u0627\u0644\u0628\u0631\u064a\u0629 \u060c \u0645\u0645\u0627 \u064a\u062c\u0639\u0644\u0647\u0627 \u0631\u0627\u0628\u0639 \u0648\u062e\u0627\u0645\u0633 \u0623\u064a\u0627\u0645 \u0627\u0644\u0635\u0641\u0631 \u0627\u0644\u0646\u0634\u0637\u0629 \u062e\u0644\u0627\u0644 \u0647\u0630\u0627 \u0627\u0644\u0634\u0647\u0631 \u0648\u062d\u062f\u0647.\n\n\u062a\u0639\u062f \u0627\u0644\u0645\u0634\u0643\u0644\u0627\u062a \u060c \u0627\u0644\u0645\u0639\u064a\u0646\u0629 \u0628\u0640 CVE-2021-37975 \u0648 CVE-2021-37976 \u060c \u062c\u0632\u0621\u064b\u0627 \u0645\u0646 \u0625\u062c\u0645\u0627\u0644\u064a \u0623\u0631\u0628\u0639\u0629 \u062a\u0635\u062d\u064a\u062d\u0627\u062a \u060c \u0648\u062a\u062a\u0639\u0644\u0642 \u0628\u0639\u064a\u0628 \u062e\u0627\u0644\u064d \u0645\u0646 \u0627\u0644\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0641\u064a \u0645\u062d\u0631\u0643 V8 JavaScript \u0648 WebAssembly \u0628\u0627\u0644\u0625\u0636\u0627\u0641\u0629 \u0625\u0644\u0649 \u062a\u0633\u0631\u0628 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0641\u064a \u0627\u0644\u0646\u0648\u0627\u0629.\n\n\u0643\u0645\u0627 \u0647\u0648 \u0627\u0644\u062d\u0627\u0644 \u0639\u0627\u062f\u0629\u064b \u060c \u0627\u0645\u062a\u0646\u0639 \u0639\u0645\u0644\u0627\u0642 \u0627\u0644\u062a\u0643\u0646\u0648\u0644\u0648\u062c\u064a\u0627 \u0639\u0646 \u0645\u0634\u0627\u0631\u0643\u0629 \u0623\u064a \u062a\u0641\u0627\u0635\u064a\u0644 \u0625\u0636\u0627\u0641\u064a\u0629 \u0628\u0634\u0623\u0646 \u0643\u064a\u0641\u064a\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062b\u063a\u0631\u0627\u062a \u064a\u0648\u0645 \u0627\u0644\u0635\u0641\u0631 \u0647\u0630\u0647 \u0641\u064a \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u062d\u062a\u0649 \u064a\u062a\u0645 \u062a\u062d\u062f\u064a\u062b \u063a\u0627\u0644\u0628\u064a\u0629 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646 \u0628\u0627\u0644\u062a\u0635\u062d\u064a\u062d\u0627\u062a \u060c \u0644\u0643\u0646\u0647 \u0623\u0634\u0627\u0631 \u0625\u0644\u0649 \u0623\u0646\u0647 \u064a\u062f\u0631\u0643 \u0623\u0646 \"\u0639\u0645\u0644\u064a\u0627\u062a \u0627\u0633\u062a\u063a\u0644\u0627\u0644 CVE-2021 -37975 \u0648 CVE-2021-37976 \u0645\u0648\u062c\u0648\u062f\u0627\u0646 \u0641\u064a \u0627\u0644\u0628\u0631\u064a\u0629 \".\n\n\u0627\u0644\u0646\u0633\u062e \u0627\u0644\u0627\u062d\u062a\u064a\u0627\u0637\u064a\u0629 \u0627\u0644\u062a\u0644\u0642\u0627\u0626\u064a\u0629 \u0639\u0644\u0649 GitHub\n\u0646\u064f\u0633\u0628 \u0627\u0644\u0641\u0636\u0644 \u0625\u0644\u0649 \u0628\u0627\u062d\u062b \u0645\u062c\u0647\u0648\u0644 \u0641\u064a \u0627\u0644\u0625\u0628\u0644\u0627\u063a \u0639\u0646 CVE-2021-37975. \u0645\u0646 \u0646\u0627\u062d\u064a\u0629 \u0623\u062e\u0631\u0649 \u060c \u064a\u062a\u0636\u0645\u0646 \u0627\u0643\u062a\u0634\u0627\u0641 CVE-2021-37976 Cl\u00e9ment Lecigne \u0645\u0646 Google Threat Analysis Group \u060c \u0648\u0627\u0644\u0630\u064a \u064a\u064f\u0646\u0633\u0628 \u0625\u0644\u064a\u0647 \u0623\u064a\u0636\u064b\u0627 CVE-2021-37973 \u060c \u0648\u0647\u064a \u062b\u063a\u0631\u0629 \u0623\u062e\u0631\u0649 \u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0628\u0634\u0643\u0644 \u0646\u0634\u0637 \u0641\u064a \u0628\u0648\u0627\u0628\u0627\u062a \u0648\u0627\u062c\u0647\u0629 \u0628\u0631\u0645\u062c\u0629 \u062a\u0637\u0628\u064a\u0642\u0627\u062a Chrome \u0627\u0644\u062a\u064a \u062a\u0645 \u0627\u0644\u0625\u0628\u0644\u0627\u063a \u0639\u0646\u0647\u0627 \u0641\u064a \u0627\u0644\u0623\u0633\u0628\u0648\u0639 \u0627\u0644\u0645\u0627\u0636\u064a \u060c \u0623\u062b\u0627\u0631 \u0627\u062d\u062a\u0645\u0627\u0644 \u0623\u0646 \u064a\u0643\u0648\u0646 \u0627\u0644\u0639\u064a\u0628\u0627\u0646 \u0642\u062f \u062a\u0645 \u062a\u062c\u0645\u064a\u0639\u0647\u0645\u0627 \u0645\u0639\u064b\u0627 \u0643\u062c\u0632\u0621 \u0645\u0646 \u0633\u0644\u0633\u0644\u0629 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0644\u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0634\u0648\u0627\u0626\u064a\u0629.\n\n\u0645\u0639 \u0627\u0644\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0623\u062e\u064a\u0631 \u060c \u062a\u0639\u0627\u0645\u0644\u062a Google \u0645\u0639 \u0631\u0642\u0645 \u0642\u064a\u0627\u0633\u064a \u0628\u0644\u063a 14 \u064a\u0648\u0645\u064b\u0627 \u0641\u064a \u0645\u062a\u0635\u0641\u062d \u0627\u0644\u0648\u064a\u0628 \u0645\u0646\u0630 \u0628\u062f\u0627\u064a\u0629", "creation_timestamp": "2021-10-03T18:15:53.000000Z"}, {"uuid": "b1e9a688-9a08-4d5e-b0a0-36a14a70ea7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://t.me/hacker_trick/310", "content": "Chrome in-the-wild bug analysis CVE-2021-37975\n\nhttps://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975", "creation_timestamp": "2021-10-20T19:44:57.000000Z"}, {"uuid": "6e0965c7-ccf3-4fe0-9565-02c7df75a447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/true_secator/2167", "content": "\u200b\u200bGoogle, \u043f\u043e\u0445\u043e\u0436\u0435, \u0440\u0435\u0448\u0438\u043b\u0438 \u0434\u043e\u0433\u043d\u0430\u0442\u044c Microsoft \u0432 \u0447\u0430\u0441\u0442\u0438 \u043a\u0430\u043a\u0447\u0435\u0441\u0442\u0432\u0430 \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043a\u043e\u043b\u0438\u043a\u0447\u0435\u0441\u0442\u0432\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u041f\u044f\u0442\u0438 \u0434\u043d\u0435\u0439 \u043d\u0435 \u043f\u0440\u043e\u0448\u043b\u043e \u0441 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Chrome, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u043a\u0430\u043a \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u043d\u043e\u0432\u044b\u0439 \u043f\u0430\u0442\u0447, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0443\u0436\u0435 \u0434\u0432\u0430 0-day. \u0418 \u043e\u0431\u0430, \u0447\u0442\u043e \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438.\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 Google, \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e, \u043d\u0435 \u0434\u0430\u044e\u0442, \u043e\u0434\u043d\u0430\u043a\u043e, \u0441\u0443\u0434\u044f \u043f\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0441\u043a\u0443\u0434\u043d\u043e\u043c\u0443 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e, CVE-2021-37976 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0443\u0442\u0435\u0447\u043a\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u044f\u0434\u0440\u0435 \u0438 \u0438\u043c\u0435\u0435\u0442 \u0441\u0440\u0435\u0434\u043d\u044e\u044e \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438. \u0412\u0442\u043e\u0440\u0430\u044f \u0436\u0435 \u043e\u0448\u0438\u0431\u043a\u0430, CVE-2021-37975, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0439 \u0438 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a UAF-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c (Use After Free). \u0422\u0430\u043a\u0438\u0435 \u0434\u044b\u0440\u043a\u0438 \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430. \u041f\u043e-\u043f\u0430\u0446\u0430\u043d\u0441\u043a\u0438 \u0432\u044b\u0440\u0430\u0436\u0430\u044f\u0441\u044c - \u0430\u0442\u0430\u0441.\n\n\u0414\u043e \u043a\u0443\u0447\u0438 \u0437\u0430\u043a\u0440\u044b\u043b\u0438 \u0435\u0449\u0435 \u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2021-37974, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u043e\u0436\u0435 \u0432\u0440\u043e\u0434\u0435 \u043a\u0430\u043a 0-day \u0438 UAF, \u043d\u043e \u043d\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, Google \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430 \u0437\u0430\u043a\u0440\u044b\u043b\u0438, \u0435\u0441\u043b\u0438 \u043d\u0430\u043c \u043d\u0435 \u0438\u0437\u043c\u0435\u043d\u044f\u0435\u0442 \u0441\u043a\u043b\u0435\u0440\u043e\u0437, \u0447\u0435\u0442\u044b\u0440\u043d\u0430\u0434\u0446\u0430\u0442\u044c 0-day \u0432 Chrome. \u0412\u043f\u0435\u0447\u0430\u0442\u043b\u044f\u044e\u0449\u0438\u0439 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442.\n\n\u0412\u0441\u0435\u043c, \u043a\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 Chrome, \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f.\n\n- \u0414\u044b\u0440\u043a\u043e\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0435?\n- \u041d\u0435\u0442, \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0435\u043b\u0430\u0435\u043c.\n- \u041a\u0440\u0430\u0441\u0438\u0432\u043e\u0435!", "creation_timestamp": "2021-10-01T08:56:19.000000Z"}, {"uuid": "dc442d36-afb1-4558-bc7c-d85944d81a55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://t.me/MH_HACKING_termux/1279", "content": "\u0642\u0645 \u0628\u062a\u062d\u062f\u064a\u062b Google Chrome \u0641\u064a \u0623\u0633\u0631\u0639 \u0648\u0642\u062a \u0645\u0645\u0643\u0646 \u0644\u062a\u0635\u062d\u064a\u062d 2 \u0639\u064a\u0648\u0628 Zero-Day \u0627\u0644\u062c\u062f\u064a\u062f\u0629 \u0627\u0644\u0645\u0633\u062a\u063a\u0644\u0629 \u0628\u0634\u0643\u0644 \u0646\u0634\u0637\n\u062c\u0648\u062c\u0644 \u0643\u0631\u0648\u0645\n\u062f\u0641\u0639\u062a Google \u064a\u0648\u0645 \u0627\u0644\u062e\u0645\u064a\u0633 \u0625\u0644\u0649 \u0625\u0635\u0644\u0627\u062d\u0627\u062a \u0623\u0645\u0646\u064a\u0629 \u0639\u0627\u062c\u0644\u0629 \u0644\u0645\u062a\u0635\u0641\u062d\u0647\u0627 Chrome \u060c \u0628\u0645\u0627 \u0641\u064a \u0630\u0644\u0643 \u0632\u0648\u062c \u0645\u0646 \u0646\u0642\u0627\u0637 \u0627\u0644\u0636\u0639\u0641 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0627\u0644\u062c\u062f\u064a\u062f\u0629 \u0627\u0644\u062a\u064a \u0642\u0627\u0644\u062a \u0627\u0644\u0634\u0631\u0643\u0629 \u0625\u0646\u0647 \u064a\u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0641\u064a \u0627\u0644\u0628\u0631\u064a\u0629 \u060c \u0645\u0645\u0627 \u064a\u062c\u0639\u0644\u0647\u0627 \u0631\u0627\u0628\u0639 \u0648\u062e\u0627\u0645\u0633 \u0623\u064a\u0627\u0645 \u0627\u0644\u0635\u0641\u0631 \u0627\u0644\u0646\u0634\u0637\u0629 \u062e\u0644\u0627\u0644 \u0647\u0630\u0627 \u0627\u0644\u0634\u0647\u0631 \u0648\u062d\u062f\u0647.\n\n\u062a\u0639\u062f \u0627\u0644\u0645\u0634\u0643\u0644\u0627\u062a \u060c \u0627\u0644\u0645\u0639\u064a\u0646\u0629 \u0628\u0640 CVE-2021-37975 \u0648 CVE-2021-37976 \u060c \u062c\u0632\u0621\u064b\u0627 \u0645\u0646 \u0625\u062c\u0645\u0627\u0644\u064a \u0623\u0631\u0628\u0639\u0629 \u062a\u0635\u062d\u064a\u062d\u0627\u062a \u060c \u0648\u062a\u062a\u0639\u0644\u0642 \u0628\u0639\u064a\u0628 \u062e\u0627\u0644\u064d \u0645\u0646 \u0627\u0644\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0641\u064a \u0645\u062d\u0631\u0643 V8 JavaScript \u0648 WebAssembly \u0628\u0627\u0644\u0625\u0636\u0627\u0641\u0629 \u0625\u0644\u0649 \u062a\u0633\u0631\u0628 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0641\u064a \u0627\u0644\u0646\u0648\u0627\u0629.\n\n\u0643\u0645\u0627 \u0647\u0648 \u0627\u0644\u062d\u0627\u0644 \u0639\u0627\u062f\u0629\u064b \u060c \u0627\u0645\u062a\u0646\u0639 \u0639\u0645\u0644\u0627\u0642 \u0627\u0644\u062a\u0643\u0646\u0648\u0644\u0648\u062c\u064a\u0627 \u0639\u0646 \u0645\u0634\u0627\u0631\u0643\u0629 \u0623\u064a \u062a\u0641\u0627\u0635\u064a\u0644 \u0625\u0636\u0627\u0641\u064a\u0629 \u0628\u0634\u0623\u0646 \u0643\u064a\u0641\u064a\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062b\u063a\u0631\u0627\u062a \u064a\u0648\u0645 \u0627\u0644\u0635\u0641\u0631 \u0647\u0630\u0647 \u0641\u064a \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u062d\u062a\u0649 \u064a\u062a\u0645 \u062a\u062d\u062f\u064a\u062b \u063a\u0627\u0644\u0628\u064a\u0629 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646 \u0628\u0627\u0644\u062a\u0635\u062d\u064a\u062d\u0627\u062a \u060c \u0644\u0643\u0646\u0647 \u0623\u0634\u0627\u0631 \u0625\u0644\u0649 \u0623\u0646\u0647 \u064a\u062f\u0631\u0643 \u0623\u0646 \"\u0639\u0645\u0644\u064a\u0627\u062a \u0627\u0633\u062a\u063a\u0644\u0627\u0644 CVE-2021 -37975 \u0648 CVE-2021-37976 \u0645\u0648\u062c\u0648\u062f\u0627\u0646 \u0641\u064a \u0627\u0644\u0628\u0631\u064a\u0629 \".\n\n\u0627\u0644\u0646\u0633\u062e \u0627\u0644\u0627\u062d\u062a\u064a\u0627\u0637\u064a\u0629 \u0627\u0644\u062a\u0644\u0642\u0627\u0626\u064a\u0629 \u0639\u0644\u0649 GitHub\n\u0646\u064f\u0633\u0628 \u0627\u0644\u0641\u0636\u0644 \u0625\u0644\u0649 \u0628\u0627\u062d\u062b \u0645\u062c\u0647\u0648\u0644 \u0641\u064a \u0627\u0644\u0625\u0628\u0644\u0627\u063a \u0639\u0646 CVE-2021-37975. \u0645\u0646 \u0646\u0627\u062d\u064a\u0629 \u0623\u062e\u0631\u0649 \u060c \u064a\u062a\u0636\u0645\u0646 \u0627\u0643\u062a\u0634\u0627\u0641 CVE-2021-37976 Cl\u00e9ment Lecigne \u0645\u0646 Google Threat Analysis Group \u060c \u0648\u0627\u0644\u0630\u064a \u064a\u064f\u0646\u0633\u0628 \u0625\u0644\u064a\u0647 \u0623\u064a\u0636\u064b\u0627 CVE-2021-37973 \u060c \u0648\u0647\u064a \u062b\u063a\u0631\u0629 \u0623\u062e\u0631\u0649 \u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0628\u0634\u0643\u0644 \u0646\u0634\u0637 \u0641\u064a \u0628\u0648\u0627\u0628\u0627\u062a \u0648\u0627\u062c\u0647\u0629 \u0628\u0631\u0645\u062c\u0629 \u062a\u0637\u0628\u064a\u0642\u0627\u062a Chrome \u0627\u0644\u062a\u064a \u062a\u0645 \u0627\u0644\u0625\u0628\u0644\u0627\u063a \u0639\u0646\u0647\u0627 \u0641\u064a \u0627\u0644\u0623\u0633\u0628\u0648\u0639 \u0627\u0644\u0645\u0627\u0636\u064a \u060c \u0623\u062b\u0627\u0631 \u0627\u062d\u062a\u0645\u0627\u0644 \u0623\u0646 \u064a\u0643\u0648\u0646 \u0627\u0644\u0639\u064a\u0628\u0627\u0646 \u0642\u062f \u062a\u0645 \u062a\u062c\u0645\u064a\u0639\u0647\u0645\u0627 \u0645\u0639\u064b\u0627 \u0643\u062c\u0632\u0621 \u0645\u0646 \u0633\u0644\u0633\u0644\u0629 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0644\u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0634\u0648\u0627\u0626\u064a\u0629.\n\n\u0645\u0639 \u0627\u0644\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0623\u062e\u064a\u0631 \u060c \u062a\u0639\u0627\u0645\u0644\u062a Google \u0645\u0639 \u0631\u0642\u0645 \u0642\u064a\u0627\u0633\u064a \u0628\u0644\u063a 14 \u064a\u0648\u0645\u064b\u0627 \u0641\u064a \u0645\u062a\u0635\u0641\u062d \u0627\u0644\u0648\u064a\u0628 \u0645\u0646\u0630 \u0628\u062f\u0627\u064a\u0629", "creation_timestamp": "2021-10-03T16:16:30.000000Z"}, {"uuid": "6a84c2a7-81f2-4194-90ab-44c12596f446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://t.me/oleg_log/5008", "content": "I\u2019ll analyse CVE-2021-37975 (reported by an anonymous researcher), which is a logic bug in the implementation of the garbage collector (GC) in v8 (the JavaScript interpreter of Chrome). This bug allows reachable JavaScript objects to be collected by the garbage collector, which then leads to a use-after-free (UAF) vulnerability for arbitrary objects in v8.\n\n\u0425\u043e\u0447\u0435\u0442\u0441\u044f \u043d\u0430 2022 \u0432\u0437\u044f\u0442\u044c \u043e\u0431\u0435\u0449\u0430\u043d\u0438\u0435, \u0447\u0442\u043e \u044f \u0431\u0443\u0434\u0443 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0447\u0438\u0442\u0430\u0442\u044c \u0442\u0430\u043a\u0438\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b.\n\nhttps://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975/", "creation_timestamp": "2026-08-01T18:00:05.862930Z"}, {"uuid": "af213d36-8acb-4df6-abc8-aa67977c5b4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://t.me/SecLabNews/10975", "content": "\u26a0\ufe0fGoogle \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome\n\n\u2757\ufe0f\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\ud83d\udee0\u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u0442\u0435\u0445\u043d\u043e\u0433\u0438\u0433\u0430\u043d\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0442\u0440\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b - CVE-2021-37974, CVE-2021-37975 \u0438 CVE-2021-37976. \u041f\u0435\u0440\u0432\u044b\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\nhttps://www.securitylab.ru/news/525174.php", "creation_timestamp": "2021-10-01T09:59:25.000000Z"}, {"uuid": "e010e479-4e76-4824-970a-b06de8659419", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://t.me/CyberSecurityTechnologies/4558", "content": "#Threat_Research\n1. Google Earth Hacking - EaaS\n(Espionage as a Service)\nhttps://johnjhacking.com/blog/gee-exploitation\n2. Chrome in-the-wild bug analysis: CVE-2021-37975\nhttps://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975", "creation_timestamp": "2021-10-20T11:07:01.000000Z"}, {"uuid": "198b6552-85f6-481d-879b-78ad471565dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://t.me/reverseame/1714", "content": "Chrome in-the-wild bug analysis: CVE-2021-37975 https://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975/", "creation_timestamp": "2026-08-03T05:00:04.325496Z"}, {"uuid": "96bb57c0-ddee-4c4e-8029-076a56bf41c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://t.me/oleg_log/5008", "content": "I\u2019ll analyse CVE-2021-37975 (reported by an anonymous researcher), which is a logic bug in the implementation of the garbage collector (GC) in v8 (the JavaScript interpreter of Chrome). This bug allows reachable JavaScript objects to be collected by the garbage collector, which then leads to a use-after-free (UAF) vulnerability for arbitrary objects in v8.\n\n\u0425\u043e\u0447\u0435\u0442\u0441\u044f \u043d\u0430 2022 \u0432\u0437\u044f\u0442\u044c \u043e\u0431\u0435\u0449\u0430\u043d\u0438\u0435, \u0447\u0442\u043e \u044f \u0431\u0443\u0434\u0443 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0447\u0438\u0442\u0430\u0442\u044c \u0442\u0430\u043a\u0438\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b.\n\nhttps://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975/", "creation_timestamp": "2026-08-02T00:00:24.488149Z"}, {"uuid": "7ad9898b-f5e8-47a1-927e-717634274336", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://t.me/reverseame/1714", "content": "Chrome in-the-wild bug analysis: CVE-2021-37975 https://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975/", "creation_timestamp": "2026-08-04T00:00:49.191602Z"}, {"uuid": "1c26e782-e114-4543-9d39-2f1b102bb345", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "Telegram/MdfEMfzqpQqOtZfA1sXzSO_D6sbdWtby_pIAMf5vB7iCJ2I", "content": "", "creation_timestamp": "2026-08-16T19:00:05.217468Z"}, {"uuid": "f4dd2e1e-0a97-45c9-968c-f755d1b08230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "Telegram/MdfEMfzqpQqOtZfA1sXzSO_D6sbdWtby_pIAMf5vB7iCJ2I", "content": "", "creation_timestamp": "2026-08-17T00:00:10.269897Z"}, {"uuid": "720646b7-6c2e-40de-9b94-ca4e18f68b78", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8c774663-5470-4b99-b8cb-3f804786a4b7", "content": "", "creation_timestamp": "2026-06-19T12:47:46.744129Z"}, {"uuid": "fd7f0fc3-9ec1-4f3a-a0b0-001c102246c9", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b29862c5-dafa-4cfa-b54f-59d03af36c0c", "content": "", "creation_timestamp": "2026-06-23T14:04:42.265786Z"}, {"uuid": "a3643d05-7ad5-425b-9357-263ea5de8ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/bitbaanlab/635", "content": "\u2b55\ufe0f \u06f3 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u062f\u0631 \u06af\u0648\u06af\u0644\u200c \u06a9\u0631\u0648\u0645\n       [\u0647\u0645\u06cc\u0646 \u0627\u0644\u0627\u0646 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u06cc\u062f]\n\n\u26a0\ufe0f \u06af\u0648\u06af\u0644 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u062c\u062f\u06cc\u062f\u06cc \u0628\u0631\u0627\u06cc \u06af\u0648\u06af\u0644 \u06a9\u0631\u0648\u0645 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u06a9\u0647 \u06f3 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u0631\u0627 \u062f\u0631 \u0622\u0646 \u0648\u0635\u0644\u0647 \u0646\u0645\u0648\u062f\u0647 \u0627\u0633\u062a.\n\n\ud83d\udda5 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u06a9\u0647 \u062f\u0648 \u0645\u0648\u0631\u062f \u0627\u0632 \u0622\u0646\u0647\u0627 \u0628\u0633\u06cc\u0627\u0631 \u062e\u0637\u0631\u0646\u0627\u06a9 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f\u060c \u062f\u0631 \u062f\u06cc\u06af\u0631 \u0645\u0631\u0648\u0631\u06af\u0631\u0647\u0627\u06cc Chromium \u0645\u0627\u0646\u0646\u062f Microsoft Edge \u0646\u06cc\u0632 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u0646\u062f \u0648 \u0636\u0631\u0648\u0631\u06cc \u0627\u0633\u062a \u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u062a\u0631 \u0622\u0646\u0647\u0627 \u0631\u0627 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n\u26d4\ufe0f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\n\n\u2796 \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2021-37974 \u0648 CVE-2021-37975 \u0627\u06cc\u0646 \u0627\u0645\u06a9\u0627\u0646 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0647\u06a9\u0631 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f\u060c \u06a9\u0647 \u06a9\u062f \u0645\u062e\u0631\u0628 \u062f\u0644\u062e\u0648\u0627\u0647\u0634 \u0631\u0627 \u0628\u0631 \u0633\u06cc\u0633\u062a\u0645 \u06cc\u0627 \u062f\u0633\u062a\u06af\u0627\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0627\u062c\u0631\u0627 \u0646\u0645\u0627\u06cc\u062f \u0648 \u062f\u0631 \u0646\u0647\u0627\u06cc\u062a \u0628\u062a\u0648\u0627\u0646\u062f \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0627\u0645\u0644\u06cc \u0628\u0631 \u0622\u0646\u0647\u0627 \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.\n\n\u2796 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2021-37976 \u0646\u06cc\u0632\u060c \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0627\u06cc \u0628\u0631\u0627\u06cc \u0647\u06a9\u0631 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u0628\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0645\u062d\u0631\u0645\u0627\u0646\u0647\u200c\u06cc \u0642\u0631\u0628\u0627\u0646\u06cc \u062f\u0633\u062a \u06cc\u0627\u0628\u062f.\n\n\ud83d\udd39 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06af\u0648\u06af\u0644 \u06a9\u0631\u0648\u0645\n\nHelp > About Google Chrome >> Version 94.0.4606.71\n\n\ud83d\udd39 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u0627\u062c\n\nHelp and fedback > About Microsoft Edge >> Version 94.0.992.38\n\n\ud83c\udf10 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062a\u06a9\u0645\u06cc\u0644\u06cc \u062f\u0631 \u0645\u0648\u0631\u062f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627", "creation_timestamp": "2026-08-22T14:00:15.652984Z"}, {"uuid": "c6f36691-d01b-42ac-a759-9429bb4107f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/bitbaanlab/635", "content": "\u2b55\ufe0f \u06f3 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u062f\u0631 \u06af\u0648\u06af\u0644\u200c \u06a9\u0631\u0648\u0645\n       [\u0647\u0645\u06cc\u0646 \u0627\u0644\u0627\u0646 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u06cc\u062f]\n\n\u26a0\ufe0f \u06af\u0648\u06af\u0644 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u062c\u062f\u06cc\u062f\u06cc \u0628\u0631\u0627\u06cc \u06af\u0648\u06af\u0644 \u06a9\u0631\u0648\u0645 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u06a9\u0647 \u06f3 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u0631\u0627 \u062f\u0631 \u0622\u0646 \u0648\u0635\u0644\u0647 \u0646\u0645\u0648\u062f\u0647 \u0627\u0633\u062a.\n\n\ud83d\udda5 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u06a9\u0647 \u062f\u0648 \u0645\u0648\u0631\u062f \u0627\u0632 \u0622\u0646\u0647\u0627 \u0628\u0633\u06cc\u0627\u0631 \u062e\u0637\u0631\u0646\u0627\u06a9 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f\u060c \u062f\u0631 \u062f\u06cc\u06af\u0631 \u0645\u0631\u0648\u0631\u06af\u0631\u0647\u0627\u06cc Chromium \u0645\u0627\u0646\u0646\u062f Microsoft Edge \u0646\u06cc\u0632 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u0646\u062f \u0648 \u0636\u0631\u0648\u0631\u06cc \u0627\u0633\u062a \u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u062a\u0631 \u0622\u0646\u0647\u0627 \u0631\u0627 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n\u26d4\ufe0f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\n\n\u2796 \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2021-37974 \u0648 CVE-2021-37975 \u0627\u06cc\u0646 \u0627\u0645\u06a9\u0627\u0646 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0647\u06a9\u0631 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f\u060c \u06a9\u0647 \u06a9\u062f \u0645\u062e\u0631\u0628 \u062f\u0644\u062e\u0648\u0627\u0647\u0634 \u0631\u0627 \u0628\u0631 \u0633\u06cc\u0633\u062a\u0645 \u06cc\u0627 \u062f\u0633\u062a\u06af\u0627\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0627\u062c\u0631\u0627 \u0646\u0645\u0627\u06cc\u062f \u0648 \u062f\u0631 \u0646\u0647\u0627\u06cc\u062a \u0628\u062a\u0648\u0627\u0646\u062f \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0627\u0645\u0644\u06cc \u0628\u0631 \u0622\u0646\u0647\u0627 \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.\n\n\u2796 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2021-37976 \u0646\u06cc\u0632\u060c \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0627\u06cc \u0628\u0631\u0627\u06cc \u0647\u06a9\u0631 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u0628\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0645\u062d\u0631\u0645\u0627\u0646\u0647\u200c\u06cc \u0642\u0631\u0628\u0627\u0646\u06cc \u062f\u0633\u062a \u06cc\u0627\u0628\u062f.\n\n\ud83d\udd39 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06af\u0648\u06af\u0644 \u06a9\u0631\u0648\u0645\n\nHelp > About Google Chrome >> Version 94.0.4606.71\n\n\ud83d\udd39 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u0627\u062c\n\nHelp and fedback > About Microsoft Edge >> Version 94.0.992.38\n\n\ud83c\udf10 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062a\u06a9\u0645\u06cc\u0644\u06cc \u062f\u0631 \u0645\u0648\u0631\u062f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627", "creation_timestamp": "2026-08-23T00:00:37.820699Z"}, {"uuid": "465e88d4-6d1a-4771-8a55-568ea199bae0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "Telegram/8g9qE3V3IhqTv_OCceR2iT57So_ULY18Bpbe6a8g9xtXT5o", "content": "", "creation_timestamp": "2026-08-28T13:00:04.931727Z"}, {"uuid": "c77bf96f-6952-4c04-a677-d2c6e593de5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "published-proof-of-concept", "source": "Telegram/8g9qE3V3IhqTv_OCceR2iT57So_ULY18Bpbe6a8g9xtXT5o", "content": "", "creation_timestamp": "2026-08-29T00:00:11.624987Z"}, {"uuid": "929a79fb-fce9-4927-8fae-12dce3dda903", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/oleg_log/5008", "content": "I\u2019ll analyse CVE-2021-37975 (reported by an anonymous researcher), which is a logic bug in the implementation of the garbage collector (GC) in v8 (the JavaScript interpreter of Chrome). This bug allows reachable JavaScript objects to be collected by the garbage collector, which then leads to a use-after-free (UAF) vulnerability for arbitrary objects in v8.\n\n\u0425\u043e\u0447\u0435\u0442\u0441\u044f \u043d\u0430 2022 \u0432\u0437\u044f\u0442\u044c \u043e\u0431\u0435\u0449\u0430\u043d\u0438\u0435, \u0447\u0442\u043e \u044f \u0431\u0443\u0434\u0443 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0447\u0438\u0442\u0430\u0442\u044c \u0442\u0430\u043a\u0438\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b.\n\nhttps://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975/", "creation_timestamp": "2026-07-29T12:01:53.069691Z"}, {"uuid": "e225472a-dc15-421d-af5e-5d14e5454658", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/reverseame/1714", "content": "Chrome in-the-wild bug analysis: CVE-2021-37975 https://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975/", "creation_timestamp": "2026-07-29T12:02:52.371099Z"}, {"uuid": "b7f93cb8-74d8-4295-aa26-ed4f26bfa9ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/oleg_log/5008", "content": "I\u2019ll analyse CVE-2021-37975 (reported by an anonymous researcher), which is a logic bug in the implementation of the garbage collector (GC) in v8 (the JavaScript interpreter of Chrome). This bug allows reachable JavaScript objects to be collected by the garbage collector, which then leads to a use-after-free (UAF) vulnerability for arbitrary objects in v8.\n\n\u0425\u043e\u0447\u0435\u0442\u0441\u044f \u043d\u0430 2022 \u0432\u0437\u044f\u0442\u044c \u043e\u0431\u0435\u0449\u0430\u043d\u0438\u0435, \u0447\u0442\u043e \u044f \u0431\u0443\u0434\u0443 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0447\u0438\u0442\u0430\u0442\u044c \u0442\u0430\u043a\u0438\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b.\n\nhttps://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975/", "creation_timestamp": "2026-07-30T00:02:04.868928Z"}, {"uuid": "ac079372-4dab-4aa7-b733-a29aa4281380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/reverseame/1714", "content": "Chrome in-the-wild bug analysis: CVE-2021-37975 https://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975/", "creation_timestamp": "2026-07-30T00:02:42.846285Z"}, {"uuid": "41b15713-d1cd-4d0e-90e4-503cf427743d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/cissp/4662", "content": "Offensive security\nShellcode Injection Techniques\nhttps://github.com/plackyhacker/Shellcode-Injection-Techniques\n// A collection of C# shellcode injection techniques. All techniques use an AES encrypted meterpreter payload\n\nThreat Research\n1. Google Earth Hacking - EaaS\n(Espionage as a Service)\nhttps://johnjhacking.com/blog/gee-exploitation\n2. Chrome in-the-wild bug analysis: CVE-2021-37975\nhttps://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975\n\nAnalytics\nHow a simple Linux kernel memory corruption bug can lead to complete system compromise: An analysis of current and potential kernel security mitigations\nhttps://googleprojectzero.blogspot.com/2021/10/how-simple-linux-kernel-memory.html?m=1\n]-> PoC Exploit:\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2125#c5\n\nBlue Team Techniques\n1. Real Intelligence Threat Analytics\nis a framework for detecting command and control communication through network traffic analysis\nhttps://github.com/activecm/rita\n2. XNTSV program for detailed viewing of system structures for Windows\nhttps://github.com/horsicq/xntsv\n\nCloud Security\nA Scientific Notation Bug in MySQL left AWS WAF Clients Vulnerable to SQL Injection\nhttps://www.gosecure.net/blog/2021/10/19/a-scientific-notation-bug-in-mysql-left-aws-waf-clients-vulnerable-to-sql-injection\n\nMalware analysis\n1. IcedID to XingLocker Ransomware\nhttps://thedfirreport.com/2021/10/18/icedid-to-xinglocker-ransomware-in-24-hours\n2. TA505 Ramps Up Activity, Delivers New FlawedGrace Variant\nhttps://www.proofpoint.com/us/blog/threat-insight/whatta-ta-ta505-ramps-activity-delivers-new-flawedgrace-variant", "creation_timestamp": "2026-09-01T17:00:37.687359Z"}, {"uuid": "80d583f5-3936-45bb-98f9-7303fc38067a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/hacking_Attack/48246", "content": "o execute arbitrary code inside a sandbox via a crafted HTML page.\n* CVE-2021-30551\u00a0\u2013- June 9, a type-confusion bug within V8 (also under active attack as a zero-day)\n* CVE-2021-30563\u00a0\u2013 July 15, another type-confusion bug in V8.\n* CVE-2021-30633\u00a0\u2013 Sept. 13, an out-of-bounds write in V8\n* CVE-2021-37975\u00a0\u2013 Sept. 30, a use-after-free bug in V8 (also attacked as a zero-day)\n* CVE-2021-38003\u00a0\u2013 Oct. 28, an inappropriate implementation in V8\n* CVE-2021-4102\u00a0\u2013 Dec. 13, a use-after-free bug in V8. See Also: Offensive Security Tool: Scapy Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSee Also: Hacking stories: MafiaBoy, the hacker who took down the Internet\nSource: threatpost.com Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/685f-article-211221-chrome-site-isolation-body-text-90x90.jpg HTML parser bug triggers Chromium XSS security flaw1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Polygon-hacker-90x90.jpg Hackers getting faster at latching onto unpatched vulnerabilities2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/mitmproxy-90x90.png HTTP request smuggling bug patched in mitmproxy3 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ee3dc49c79d14f20970cc8b20063f52e-90x90.jpg Flash loan attack on One Ring protocol nets crypto-thief $1.4 million6 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ezgif.com-gif-maker-3-1-90x90.jpg DeadBolt Ransomware Resurfaces to Hit QNAP Again7 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/hackers-90x90.jpg Lapsus$ Data Kidnappers Claim Snatches From Microsoft, Okta1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Invisible-man-scaled-e1647906959971-90x90.jpg Browser-in-the-Browser Attack Makes Phishing Nearly Invisible1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/pdf-export-90x90.png Workaround offered for unpatched HTML-to-PDF rendering vulnerability1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ezgif.com-gif-maker-2-scaled-90x90.jpg Caketap, a New Unix rootkit for stealing ATM banking data2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/AdobeStock_390895150_Editorial_Use_Only-1-1-min-scaled-1-90x90.jpeg Hundreds of GoDaddy-hosted sites backdoored in a single day2 weeks ago\nThe post Google Chrome Bug Actively Exploited as Zero-Day first appeared on Black Hat Ethical Hacking.\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:49.245100Z"}, {"uuid": "49c83824-e9f7-4e2e-9785-13c2ed194006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/hacking_Attack/25743", "content": "Black Hat Ethical Hacking\nGoogle pushes emergency Chrome update to fix two zero-days\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Google pushes emergency Chrome update to fix two zero-daysPost Views: 73 \nReading Time: 1 Minute\nGoogle has released Chrome 94.0.4606.71 for Windows, Mac, and Linux, to fix two zero-day vulnerabilities that have been exploited by attackers.\n\u201cGoogle is aware the exploits for CVE-2021-37975 and CVE-2021-37976 exist in the wild,\u201d Google disclosed in the list of security fixes\u00a0fixed in today\u2019s Google Chrome release.\n\nGoogle has started rolling out Chrome 94.0.4606.71 to users worldwide\u00a0in the Stable Desktop channel and should be available to all users within the coming days.\n\nTo install the update immediately, Google Chrome users can go to Chrome menu > Help > About Google Chrome, and the browser will begin performing the update.\n\nIn our tests, the new version of the browser was installed immediately using the above steps.\nhttps://www.bleepstatic.com/images/news/web-browsers/chrome/chrome-94.jpg \nZero-day attacks\u2019 details not disclosedWhile this Chrome release includes fixes for four security vulnerabilities, the two zero-days are concerning as they are known to have been exploited in the wild.\n\nThe first zero-day, tracked as CVE-2021-37976, is described as an \u201cInformation leak in core\u201d and was assigned a Medium severity level. This vulnerability was discovered by Cl\u00e9ment Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero, on September 21st, 2021.\n\nThe second zero-day, tracked as CVE-2021-37975, is a High severity user after free\u00a0bug in the Chrome V8 JavaScript engine. The researcher disclosed this vulnerability on September 24th and wished to remain anonymous.\n\nUse after free bugs are commonly used to perform remote code execution or escape the browser\u2019s security sandbox.\n\nAt this time, there are no other details regarding how these zero-day vulnerabilities were used in attacks but may be released in future reports by Google TAG or Project Zero.\n2 more in-the-wild 0days fixed by Chrome:\n* CVE-2021-37975 use-after-free in V8 by anonymous\n* CVE-2021-37976 info leak in core by @_clem1 #itw0days\n\nThe release cycle that Chrome is making happen in order to get these patches out is pretty impressivehttps://t.co/j1xPY4zjlP\n\n\u2014 Maddie Stone (@maddiestone) September 30, 2021\nSee Also: Hackers exploiting critical VMware vCenter CVE-2021-22005 bug Chrome users should perform a manual upgrade or restart their browser to install the latest version and prevent exploitation attempts. Thirteenth zero-day fixed this yearWith these two fixes, Google has patched 13\u00a0zero-day vulnerabilities in the Chrome web browser since the start of 2021.\n\nThe other Chrome zero-day bugs Google fixed this year are:\n\n* CVE-2021-21148\u00a0\u2013 February 4th, 2021\n* CVE-2021-21166\u00a0\u2013 March 2nd, 2021\n* CVE-2021-21193\u00a0\u2013 March 12th, 2021\n* CVE-2021-21220\u00a0\u2013 April 13th, 2021\n* CVE-2021-21224\u00a0\u2013 April 20th, 2021\n* CVE-2021-30551\u00a0\u2013 June 9th, 2021\n* CVE-2021-30554\u00a0\u2013 June 17th, 2021\n* CVE-2021-30563\u00a0\u2013 July 15th, 2021\n* CVE-2021-30632 and CVE-2021-30633\u00a0\u2013 September 13th\n* CVE-2021-37973\u00a0\u2013 September 24th, 2021\n\nAs Google is\u00a0rushing out Chrome updates to fix zero-days as they are reported, it is always critical to install new browser updates as soon as they become available.\nSee Also: Offensive Security Tool: Discover\n[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:19.815131Z"}, {"uuid": "294869b5-f3d6-46f0-b561-7e17884da905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/hacking_Attack/48246", "content": "o execute arbitrary code inside a sandbox via a crafted HTML page.\n* CVE-2021-30551\u00a0\u2013- June 9, a type-confusion bug within V8 (also under active attack as a zero-day)\n* CVE-2021-30563\u00a0\u2013 July 15, another type-confusion bug in V8.\n* CVE-2021-30633\u00a0\u2013 Sept. 13, an out-of-bounds write in V8\n* CVE-2021-37975\u00a0\u2013 Sept. 30, a use-after-free bug in V8 (also attacked as a zero-day)\n* CVE-2021-38003\u00a0\u2013 Oct. 28, an inappropriate implementation in V8\n* CVE-2021-4102\u00a0\u2013 Dec. 13, a use-after-free bug in V8. See Also: Offensive Security Tool: Scapy Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSee Also: Hacking stories: MafiaBoy, the hacker who took down the Internet\nSource: threatpost.com Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/685f-article-211221-chrome-site-isolation-body-text-90x90.jpg HTML parser bug triggers Chromium XSS security flaw1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Polygon-hacker-90x90.jpg Hackers getting faster at latching onto unpatched vulnerabilities2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/mitmproxy-90x90.png HTTP request smuggling bug patched in mitmproxy3 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ee3dc49c79d14f20970cc8b20063f52e-90x90.jpg Flash loan attack on One Ring protocol nets crypto-thief $1.4 million6 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ezgif.com-gif-maker-3-1-90x90.jpg DeadBolt Ransomware Resurfaces to Hit QNAP Again7 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/hackers-90x90.jpg Lapsus$ Data Kidnappers Claim Snatches From Microsoft, Okta1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Invisible-man-scaled-e1647906959971-90x90.jpg Browser-in-the-Browser Attack Makes Phishing Nearly Invisible1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/pdf-export-90x90.png Workaround offered for unpatched HTML-to-PDF rendering vulnerability1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ezgif.com-gif-maker-2-scaled-90x90.jpg Caketap, a New Unix rootkit for stealing ATM banking data2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/AdobeStock_390895150_Editorial_Use_Only-1-1-min-scaled-1-90x90.jpeg Hundreds of GoDaddy-hosted sites backdoored in a single day2 weeks ago\nThe post Google Chrome Bug Actively Exploited as Zero-Day first appeared on Black Hat Ethical Hacking.\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:02.614027Z"}, {"uuid": "aaaffafe-d8c3-487d-99be-be323b64b490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/hacking_Attack/25743", "content": "Black Hat Ethical Hacking\nGoogle pushes emergency Chrome update to fix two zero-days\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Google pushes emergency Chrome update to fix two zero-daysPost Views: 73 \nReading Time: 1 Minute\nGoogle has released Chrome 94.0.4606.71 for Windows, Mac, and Linux, to fix two zero-day vulnerabilities that have been exploited by attackers.\n\u201cGoogle is aware the exploits for CVE-2021-37975 and CVE-2021-37976 exist in the wild,\u201d Google disclosed in the list of security fixes\u00a0fixed in today\u2019s Google Chrome release.\n\nGoogle has started rolling out Chrome 94.0.4606.71 to users worldwide\u00a0in the Stable Desktop channel and should be available to all users within the coming days.\n\nTo install the update immediately, Google Chrome users can go to Chrome menu > Help > About Google Chrome, and the browser will begin performing the update.\n\nIn our tests, the new version of the browser was installed immediately using the above steps.\nhttps://www.bleepstatic.com/images/news/web-browsers/chrome/chrome-94.jpg \nZero-day attacks\u2019 details not disclosedWhile this Chrome release includes fixes for four security vulnerabilities, the two zero-days are concerning as they are known to have been exploited in the wild.\n\nThe first zero-day, tracked as CVE-2021-37976, is described as an \u201cInformation leak in core\u201d and was assigned a Medium severity level. This vulnerability was discovered by Cl\u00e9ment Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero, on September 21st, 2021.\n\nThe second zero-day, tracked as CVE-2021-37975, is a High severity user after free\u00a0bug in the Chrome V8 JavaScript engine. The researcher disclosed this vulnerability on September 24th and wished to remain anonymous.\n\nUse after free bugs are commonly used to perform remote code execution or escape the browser\u2019s security sandbox.\n\nAt this time, there are no other details regarding how these zero-day vulnerabilities were used in attacks but may be released in future reports by Google TAG or Project Zero.\n2 more in-the-wild 0days fixed by Chrome:\n* CVE-2021-37975 use-after-free in V8 by anonymous\n* CVE-2021-37976 info leak in core by @_clem1 #itw0days\n\nThe release cycle that Chrome is making happen in order to get these patches out is pretty impressivehttps://t.co/j1xPY4zjlP\n\n\u2014 Maddie Stone (@maddiestone) September 30, 2021\nSee Also: Hackers exploiting critical VMware vCenter CVE-2021-22005 bug Chrome users should perform a manual upgrade or restart their browser to install the latest version and prevent exploitation attempts. Thirteenth zero-day fixed this yearWith these two fixes, Google has patched 13\u00a0zero-day vulnerabilities in the Chrome web browser since the start of 2021.\n\nThe other Chrome zero-day bugs Google fixed this year are:\n\n* CVE-2021-21148\u00a0\u2013 February 4th, 2021\n* CVE-2021-21166\u00a0\u2013 March 2nd, 2021\n* CVE-2021-21193\u00a0\u2013 March 12th, 2021\n* CVE-2021-21220\u00a0\u2013 April 13th, 2021\n* CVE-2021-21224\u00a0\u2013 April 20th, 2021\n* CVE-2021-30551\u00a0\u2013 June 9th, 2021\n* CVE-2021-30554\u00a0\u2013 June 17th, 2021\n* CVE-2021-30563\u00a0\u2013 July 15th, 2021\n* CVE-2021-30632 and CVE-2021-30633\u00a0\u2013 September 13th\n* CVE-2021-37973\u00a0\u2013 September 24th, 2021\n\nAs Google is\u00a0rushing out Chrome updates to fix zero-days as they are reported, it is always critical to install new browser updates as soon as they become available.\nSee Also: Offensive Security Tool: Discover\n[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:49.040806Z"}, {"uuid": "b5d4e003-f566-4f6a-98a9-66e5f2616385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/cissp/4662", "content": "Offensive security\nShellcode Injection Techniques\nhttps://github.com/plackyhacker/Shellcode-Injection-Techniques\n// A collection of C# shellcode injection techniques. All techniques use an AES encrypted meterpreter payload\n\nThreat Research\n1. Google Earth Hacking - EaaS\n(Espionage as a Service)\nhttps://johnjhacking.com/blog/gee-exploitation\n2. Chrome in-the-wild bug analysis: CVE-2021-37975\nhttps://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975\n\nAnalytics\nHow a simple Linux kernel memory corruption bug can lead to complete system compromise: An analysis of current and potential kernel security mitigations\nhttps://googleprojectzero.blogspot.com/2021/10/how-simple-linux-kernel-memory.html?m=1\n]-> PoC Exploit:\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2125#c5\n\nBlue Team Techniques\n1. Real Intelligence Threat Analytics\nis a framework for detecting command and control communication through network traffic analysis\nhttps://github.com/activecm/rita\n2. XNTSV program for detailed viewing of system structures for Windows\nhttps://github.com/horsicq/xntsv\n\nCloud Security\nA Scientific Notation Bug in MySQL left AWS WAF Clients Vulnerable to SQL Injection\nhttps://www.gosecure.net/blog/2021/10/19/a-scientific-notation-bug-in-mysql-left-aws-waf-clients-vulnerable-to-sql-injection\n\nMalware analysis\n1. IcedID to XingLocker Ransomware\nhttps://thedfirreport.com/2021/10/18/icedid-to-xinglocker-ransomware-in-24-hours\n2. TA505 Ramps Up Activity, Delivers New FlawedGrace Variant\nhttps://www.proofpoint.com/us/blog/threat-insight/whatta-ta-ta505-ramps-activity-delivers-new-flawedgrace-variant", "creation_timestamp": "2026-09-02T01:04:22.500016Z"}, {"uuid": "979fe10f-5029-4a1e-9bf6-e0cdcb8ea524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/hacking_Attack/48246", "content": "o execute arbitrary code inside a sandbox via a crafted HTML page.\n* CVE-2021-30551\u00a0\u2013- June 9, a type-confusion bug within V8 (also under active attack as a zero-day)\n* CVE-2021-30563\u00a0\u2013 July 15, another type-confusion bug in V8.\n* CVE-2021-30633\u00a0\u2013 Sept. 13, an out-of-bounds write in V8\n* CVE-2021-37975\u00a0\u2013 Sept. 30, a use-after-free bug in V8 (also attacked as a zero-day)\n* CVE-2021-38003\u00a0\u2013 Oct. 28, an inappropriate implementation in V8\n* CVE-2021-4102\u00a0\u2013 Dec. 13, a use-after-free bug in V8. See Also: Offensive Security Tool: Scapy Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSee Also: Hacking stories: MafiaBoy, the hacker who took down the Internet\nSource: threatpost.com Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/685f-article-211221-chrome-site-isolation-body-text-90x90.jpg HTML parser bug triggers Chromium XSS security flaw1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Polygon-hacker-90x90.jpg Hackers getting faster at latching onto unpatched vulnerabilities2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/mitmproxy-90x90.png HTTP request smuggling bug patched in mitmproxy3 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ee3dc49c79d14f20970cc8b20063f52e-90x90.jpg Flash loan attack on One Ring protocol nets crypto-thief $1.4 million6 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ezgif.com-gif-maker-3-1-90x90.jpg DeadBolt Ransomware Resurfaces to Hit QNAP Again7 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/hackers-90x90.jpg Lapsus$ Data Kidnappers Claim Snatches From Microsoft, Okta1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Invisible-man-scaled-e1647906959971-90x90.jpg Browser-in-the-Browser Attack Makes Phishing Nearly Invisible1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/pdf-export-90x90.png Workaround offered for unpatched HTML-to-PDF rendering vulnerability1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ezgif.com-gif-maker-2-scaled-90x90.jpg Caketap, a New Unix rootkit for stealing ATM banking data2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/AdobeStock_390895150_Editorial_Use_Only-1-1-min-scaled-1-90x90.jpeg Hundreds of GoDaddy-hosted sites backdoored in a single day2 weeks ago\nThe post Google Chrome Bug Actively Exploited as Zero-Day first appeared on Black Hat Ethical Hacking.\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T04:00:05.345759Z"}, {"uuid": "d2eeae8b-0a28-4bf8-b1b3-62c93d39ee48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/hacking_Attack/48246", "content": "o execute arbitrary code inside a sandbox via a crafted HTML page.\n* CVE-2021-30551\u00a0\u2013- June 9, a type-confusion bug within V8 (also under active attack as a zero-day)\n* CVE-2021-30563\u00a0\u2013 July 15, another type-confusion bug in V8.\n* CVE-2021-30633\u00a0\u2013 Sept. 13, an out-of-bounds write in V8\n* CVE-2021-37975\u00a0\u2013 Sept. 30, a use-after-free bug in V8 (also attacked as a zero-day)\n* CVE-2021-38003\u00a0\u2013 Oct. 28, an inappropriate implementation in V8\n* CVE-2021-4102\u00a0\u2013 Dec. 13, a use-after-free bug in V8. See Also: Offensive Security Tool: Scapy Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSee Also: Hacking stories: MafiaBoy, the hacker who took down the Internet\nSource: threatpost.com Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/685f-article-211221-chrome-site-isolation-body-text-90x90.jpg HTML parser bug triggers Chromium XSS security flaw1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Polygon-hacker-90x90.jpg Hackers getting faster at latching onto unpatched vulnerabilities2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/mitmproxy-90x90.png HTTP request smuggling bug patched in mitmproxy3 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ee3dc49c79d14f20970cc8b20063f52e-90x90.jpg Flash loan attack on One Ring protocol nets crypto-thief $1.4 million6 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ezgif.com-gif-maker-3-1-90x90.jpg DeadBolt Ransomware Resurfaces to Hit QNAP Again7 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/hackers-90x90.jpg Lapsus$ Data Kidnappers Claim Snatches From Microsoft, Okta1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Invisible-man-scaled-e1647906959971-90x90.jpg Browser-in-the-Browser Attack Makes Phishing Nearly Invisible1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/pdf-export-90x90.png Workaround offered for unpatched HTML-to-PDF rendering vulnerability1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ezgif.com-gif-maker-2-scaled-90x90.jpg Caketap, a New Unix rootkit for stealing ATM banking data2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/AdobeStock_390895150_Editorial_Use_Only-1-1-min-scaled-1-90x90.jpeg Hundreds of GoDaddy-hosted sites backdoored in a single day2 weeks ago\nThe post Google Chrome Bug Actively Exploited as Zero-Day first appeared on Black Hat Ethical Hacking.\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T01:00:35.978500Z"}, {"uuid": "c98f743e-def7-4bea-aa64-4a11a2ab721d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://t.me/hacking_Attack/25743", "content": "Black Hat Ethical Hacking\nGoogle pushes emergency Chrome update to fix two zero-days\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Google pushes emergency Chrome update to fix two zero-daysPost Views: 73 \nReading Time: 1 Minute\nGoogle has released Chrome 94.0.4606.71 for Windows, Mac, and Linux, to fix two zero-day vulnerabilities that have been exploited by attackers.\n\u201cGoogle is aware the exploits for CVE-2021-37975 and CVE-2021-37976 exist in the wild,\u201d Google disclosed in the list of security fixes\u00a0fixed in today\u2019s Google Chrome release.\n\nGoogle has started rolling out Chrome 94.0.4606.71 to users worldwide\u00a0in the Stable Desktop channel and should be available to all users within the coming days.\n\nTo install the update immediately, Google Chrome users can go to Chrome menu > Help > About Google Chrome, and the browser will begin performing the update.\n\nIn our tests, the new version of the browser was installed immediately using the above steps.\nhttps://www.bleepstatic.com/images/news/web-browsers/chrome/chrome-94.jpg \nZero-day attacks\u2019 details not disclosedWhile this Chrome release includes fixes for four security vulnerabilities, the two zero-days are concerning as they are known to have been exploited in the wild.\n\nThe first zero-day, tracked as CVE-2021-37976, is described as an \u201cInformation leak in core\u201d and was assigned a Medium severity level. This vulnerability was discovered by Cl\u00e9ment Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero, on September 21st, 2021.\n\nThe second zero-day, tracked as CVE-2021-37975, is a High severity user after free\u00a0bug in the Chrome V8 JavaScript engine. The researcher disclosed this vulnerability on September 24th and wished to remain anonymous.\n\nUse after free bugs are commonly used to perform remote code execution or escape the browser\u2019s security sandbox.\n\nAt this time, there are no other details regarding how these zero-day vulnerabilities were used in attacks but may be released in future reports by Google TAG or Project Zero.\n2 more in-the-wild 0days fixed by Chrome:\n* CVE-2021-37975 use-after-free in V8 by anonymous\n* CVE-2021-37976 info leak in core by @_clem1 #itw0days\n\nThe release cycle that Chrome is making happen in order to get these patches out is pretty impressivehttps://t.co/j1xPY4zjlP\n\n\u2014 Maddie Stone (@maddiestone) September 30, 2021\nSee Also: Hackers exploiting critical VMware vCenter CVE-2021-22005 bug Chrome users should perform a manual upgrade or restart their browser to install the latest version and prevent exploitation attempts. Thirteenth zero-day fixed this yearWith these two fixes, Google has patched 13\u00a0zero-day vulnerabilities in the Chrome web browser since the start of 2021.\n\nThe other Chrome zero-day bugs Google fixed this year are:\n\n* CVE-2021-21148\u00a0\u2013 February 4th, 2021\n* CVE-2021-21166\u00a0\u2013 March 2nd, 2021\n* CVE-2021-21193\u00a0\u2013 March 12th, 2021\n* CVE-2021-21220\u00a0\u2013 April 13th, 2021\n* CVE-2021-21224\u00a0\u2013 April 20th, 2021\n* CVE-2021-30551\u00a0\u2013 June 9th, 2021\n* CVE-2021-30554\u00a0\u2013 June 17th, 2021\n* CVE-2021-30563\u00a0\u2013 July 15th, 2021\n* CVE-2021-30632 and CVE-2021-30633\u00a0\u2013 September 13th\n* CVE-2021-37973\u00a0\u2013 September 24th, 2021\n\nAs Google is\u00a0rushing out Chrome updates to fix zero-days as they are reported, it is always critical to install new browser updates as soon as they become available.\nSee Also: Offensive Security Tool: Discover\n[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T12:00:03.813669Z"}, {"uuid": "35416a3f-d5cd-44a2-93a1-ebc6f39f3525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://t.me/hacking_Attack/25743", "content": "Black Hat Ethical Hacking\nGoogle pushes emergency Chrome update to fix two zero-days\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Google pushes emergency Chrome update to fix two zero-daysPost Views: 73 \nReading Time: 1 Minute\nGoogle has released Chrome 94.0.4606.71 for Windows, Mac, and Linux, to fix two zero-day vulnerabilities that have been exploited by attackers.\n\u201cGoogle is aware the exploits for CVE-2021-37975 and CVE-2021-37976 exist in the wild,\u201d Google disclosed in the list of security fixes\u00a0fixed in today\u2019s Google Chrome release.\n\nGoogle has started rolling out Chrome 94.0.4606.71 to users worldwide\u00a0in the Stable Desktop channel and should be available to all users within the coming days.\n\nTo install the update immediately, Google Chrome users can go to Chrome menu > Help > About Google Chrome, and the browser will begin performing the update.\n\nIn our tests, the new version of the browser was installed immediately using the above steps.\nhttps://www.bleepstatic.com/images/news/web-browsers/chrome/chrome-94.jpg \nZero-day attacks\u2019 details not disclosedWhile this Chrome release includes fixes for four security vulnerabilities, the two zero-days are concerning as they are known to have been exploited in the wild.\n\nThe first zero-day, tracked as CVE-2021-37976, is described as an \u201cInformation leak in core\u201d and was assigned a Medium severity level. This vulnerability was discovered by Cl\u00e9ment Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero, on September 21st, 2021.\n\nThe second zero-day, tracked as CVE-2021-37975, is a High severity user after free\u00a0bug in the Chrome V8 JavaScript engine. The researcher disclosed this vulnerability on September 24th and wished to remain anonymous.\n\nUse after free bugs are commonly used to perform remote code execution or escape the browser\u2019s security sandbox.\n\nAt this time, there are no other details regarding how these zero-day vulnerabilities were used in attacks but may be released in future reports by Google TAG or Project Zero.\n2 more in-the-wild 0days fixed by Chrome:\n* CVE-2021-37975 use-after-free in V8 by anonymous\n* CVE-2021-37976 info leak in core by @_clem1 #itw0days\n\nThe release cycle that Chrome is making happen in order to get these patches out is pretty impressivehttps://t.co/j1xPY4zjlP\n\n\u2014 Maddie Stone (@maddiestone) September 30, 2021\nSee Also: Hackers exploiting critical VMware vCenter CVE-2021-22005 bug Chrome users should perform a manual upgrade or restart their browser to install the latest version and prevent exploitation attempts. Thirteenth zero-day fixed this yearWith these two fixes, Google has patched 13\u00a0zero-day vulnerabilities in the Chrome web browser since the start of 2021.\n\nThe other Chrome zero-day bugs Google fixed this year are:\n\n* CVE-2021-21148\u00a0\u2013 February 4th, 2021\n* CVE-2021-21166\u00a0\u2013 March 2nd, 2021\n* CVE-2021-21193\u00a0\u2013 March 12th, 2021\n* CVE-2021-21220\u00a0\u2013 April 13th, 2021\n* CVE-2021-21224\u00a0\u2013 April 20th, 2021\n* CVE-2021-30551\u00a0\u2013 June 9th, 2021\n* CVE-2021-30554\u00a0\u2013 June 17th, 2021\n* CVE-2021-30563\u00a0\u2013 July 15th, 2021\n* CVE-2021-30632 and CVE-2021-30633\u00a0\u2013 September 13th\n* CVE-2021-37973\u00a0\u2013 September 24th, 2021\n\nAs Google is\u00a0rushing out Chrome updates to fix zero-days as they are reported, it is always critical to install new browser updates as soon as they become available.\nSee Also: Offensive Security Tool: Discover\n[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T00:00:46.338907Z"}, {"uuid": "c3fba8dd-dd5c-474c-b098-20c1a5fbd4f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4662", "content": "Offensive security\nShellcode Injection Techniques\nhttps://github.com/plackyhacker/Shellcode-Injection-Techniques\n// A collection of C# shellcode injection techniques. All techniques use an AES encrypted meterpreter payload\n\nThreat Research\n1. Google Earth Hacking - EaaS\n(Espionage as a Service)\nhttps://johnjhacking.com/blog/gee-exploitation\n2. Chrome in-the-wild bug analysis: CVE-2021-37975\nhttps://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975\n\nAnalytics\nHow a simple Linux kernel memory corruption bug can lead to complete system compromise: An analysis of current and potential kernel security mitigations\nhttps://googleprojectzero.blogspot.com/2021/10/how-simple-linux-kernel-memory.html?m=1\n]-> PoC Exploit:\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2125#c5\n\nBlue Team Techniques\n1. Real Intelligence Threat Analytics\nis a framework for detecting command and control communication through network traffic analysis\nhttps://github.com/activecm/rita\n2. XNTSV program for detailed viewing of system structures for Windows\nhttps://github.com/horsicq/xntsv\n\nCloud Security\nA Scientific Notation Bug in MySQL left AWS WAF Clients Vulnerable to SQL Injection\nhttps://www.gosecure.net/blog/2021/10/19/a-scientific-notation-bug-in-mysql-left-aws-waf-clients-vulnerable-to-sql-injection\n\nMalware analysis\n1. IcedID to XingLocker Ransomware\nhttps://thedfirreport.com/2021/10/18/icedid-to-xinglocker-ransomware-in-24-hours\n2. TA505 Ramps Up Activity, Delivers New FlawedGrace Variant\nhttps://www.proofpoint.com/us/blog/threat-insight/whatta-ta-ta505-ramps-activity-delivers-new-flawedgrace-variant", "creation_timestamp": "2026-09-10T17:00:05.218469Z"}, {"uuid": "359b3ad0-bc58-4e27-8598-54e02e86747b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4662", "content": "Offensive security\nShellcode Injection Techniques\nhttps://github.com/plackyhacker/Shellcode-Injection-Techniques\n// A collection of C# shellcode injection techniques. All techniques use an AES encrypted meterpreter payload\n\nThreat Research\n1. Google Earth Hacking - EaaS\n(Espionage as a Service)\nhttps://johnjhacking.com/blog/gee-exploitation\n2. Chrome in-the-wild bug analysis: CVE-2021-37975\nhttps://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975\n\nAnalytics\nHow a simple Linux kernel memory corruption bug can lead to complete system compromise: An analysis of current and potential kernel security mitigations\nhttps://googleprojectzero.blogspot.com/2021/10/how-simple-linux-kernel-memory.html?m=1\n]-> PoC Exploit:\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2125#c5\n\nBlue Team Techniques\n1. Real Intelligence Threat Analytics\nis a framework for detecting command and control communication through network traffic analysis\nhttps://github.com/activecm/rita\n2. XNTSV program for detailed viewing of system structures for Windows\nhttps://github.com/horsicq/xntsv\n\nCloud Security\nA Scientific Notation Bug in MySQL left AWS WAF Clients Vulnerable to SQL Injection\nhttps://www.gosecure.net/blog/2021/10/19/a-scientific-notation-bug-in-mysql-left-aws-waf-clients-vulnerable-to-sql-injection\n\nMalware analysis\n1. IcedID to XingLocker Ransomware\nhttps://thedfirreport.com/2021/10/18/icedid-to-xinglocker-ransomware-in-24-hours\n2. TA505 Ramps Up Activity, Delivers New FlawedGrace Variant\nhttps://www.proofpoint.com/us/blog/threat-insight/whatta-ta-ta505-ramps-activity-delivers-new-flawedgrace-variant", "creation_timestamp": "2026-09-11T00:00:33.549605Z"}]}