{"uuid": "5cecfaa2-3add-455f-b28a-9b9588f3faf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-33909", "type": "seen", "source": "https://t.me/cissp/4305", "content": "Red Team Tactics\n1. Threat Emulation and Red Teaming Framework\ud83d\ude01\nhttps://github.com/quantumcore/remote_hacker_probe\n2. PoC to turn xlsx (regular Excel files) into xlsm (Excel file with macro) and slipping inside a macro (vbaProject.bin)\nhttps://github.com/X-C3LL/xlsxPoison\n\nOffensive security\nAn advanced, yet simple, tunneling/pivoting tool that uses a TUN interface\nhttps://github.com/tnpitsecurity/ligolo-ng\n\nexploit\nCVE-2021-33909 - Sequoia PoC\nhttps://github.com/ChrisTheCoolHut/CVE-2021-33909\n// fs/seq_file.c in the Linux kernel 3.16 - 5.13 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user\n\nThreat Research\n1. Hacking Xiaomi's Android Apps\nhttps://blog.takemyhand.xyz/2021/07/hacking-on-xiaomis-android-apps.html?m=1\n2. Burp Suite RCE\nhttps://paper.seebug.org/1696", "creation_timestamp": "2026-09-01T17:00:40.967108Z"}