{"vulnerability": "cve-2020-29621", "sightings": [{"uuid": "ee76dac2-f6e1-4040-9b8d-e56e5adc00a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-29621", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/1089", "content": "Play the music and bypass TCC aka CVE-2020-29621 (PoC)\nhttps://wojciechregula.blog/post/play-the-music-and-bypass-tcc-aka-cve-2020-29621\n\n#RedTeam_Tactics\n#RedTeam \n@BlueRedTeam", "creation_timestamp": "2021-09-11T10:13:56.000000Z"}, {"uuid": "834aaa80-0397-4fb3-923c-e4cab22fc0dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-29621", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4215", "content": "#Red_Team_Tactics\nPlay the music and bypass TCC aka CVE-2020-29621 (PoC)\nhttps://wojciechregula.blog/post/play-the-music-and-bypass-tcc-aka-cve-2020-29621", "creation_timestamp": "2021-09-03T11:59:50.000000Z"}, {"uuid": "cb440342-4e62-4ce1-b3c8-b89f097df744", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-29621", "type": "seen", "source": "https://t.me/cissp/4267", "content": "exploit \nCVE-2021-2429:\nA HEAP-BASED BUFFER OVERFLOW BUG IN THE MYSQL INNODB MEMCACHED PLUGIN\nhttps://www.zerodayinitiative.com/blog/2021/9/2/cve-2021-2429-a-heap-based-buffer-overflow-bug-in-the-mysql-innodb-memcached-plugin\n\nRedTeam Tactics\nPlay the music and bypass TCC aka CVE-2020-29621 (PoC)\nhttps://wojciechregula.blog/post/play-the-music-and-bypass-tcc-aka-cve-2020-29621\n\nOffensive security\nLiquidSnake is a tool that allows operators to perform fileless lateral movement using WMI Event \ud83d\ude42Subscriptions and GadgetToJScript\nhttps://github.com/RiccardoAncarani/LiquidSnake\n\nThreat Research\n1. Unknown Actor Using CLFS Log Files for Stealth\nhttps://www.fireeye.com/blog/threat-research/2021/09/unknown-actor-using-clfs-log-files-for-stealth.html\n2. OpenSSL Vulnerability Analysis (CVE-2021-3711)\ud83d\ude0e\nhttps://mp.weixin.qq.com/s/P2aduaUS3s8K7I-cDVJNgA\n3. Now Patched Vulnerability in WhatsApp could have led to data exposure of users\nhttps://research.checkpoint.com/2021/now-patched-vulnerability-in-whatsapp-could-have-led-to-data-exposure-of-users", "creation_timestamp": "2026-09-01T17:00:41.386652Z"}, {"uuid": "f6a9f9ee-0bf0-40e5-bee3-1b28573c2d69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-29621", "type": "seen", "source": "https://t.me/cissp/4267", "content": "exploit \nCVE-2021-2429:\nA HEAP-BASED BUFFER OVERFLOW BUG IN THE MYSQL INNODB MEMCACHED PLUGIN\nhttps://www.zerodayinitiative.com/blog/2021/9/2/cve-2021-2429-a-heap-based-buffer-overflow-bug-in-the-mysql-innodb-memcached-plugin\n\nRedTeam Tactics\nPlay the music and bypass TCC aka CVE-2020-29621 (PoC)\nhttps://wojciechregula.blog/post/play-the-music-and-bypass-tcc-aka-cve-2020-29621\n\nOffensive security\nLiquidSnake is a tool that allows operators to perform fileless lateral movement using WMI Event \ud83d\ude42Subscriptions and GadgetToJScript\nhttps://github.com/RiccardoAncarani/LiquidSnake\n\nThreat Research\n1. Unknown Actor Using CLFS Log Files for Stealth\nhttps://www.fireeye.com/blog/threat-research/2021/09/unknown-actor-using-clfs-log-files-for-stealth.html\n2. OpenSSL Vulnerability Analysis (CVE-2021-3711)\ud83d\ude0e\nhttps://mp.weixin.qq.com/s/P2aduaUS3s8K7I-cDVJNgA\n3. Now Patched Vulnerability in WhatsApp could have led to data exposure of users\nhttps://research.checkpoint.com/2021/now-patched-vulnerability-in-whatsapp-could-have-led-to-data-exposure-of-users", "creation_timestamp": "2026-09-02T01:04:27.381648Z"}]}