{"uuid": "686f7703-c13a-4c81-a084-6a7b1901601e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-33216", "type": "seen", "source": "https://t.me/cissp/3312", "content": "Cloud Security\nrunc mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs\n(PoC for CVE-2021-30465)\nhttps://github.com/champtar/blog/blob/main/runc-symlink-CVE-2021-30465/README.md\n\nexploit\nCVE-2021-33216:\nCommScope Ruckus IoT Controller 1.7.1 - \nUndocumented Account (PoC)\nhttps://packetstormsecurity.com/files/162848/CommScope-Ruckus-IoT-Controller-1.7.1.0-Undocumented-Account.html\n\nThreat Research\n1. Abusing LNK \"Features\" for Initial Access and Persistence\nhttps://v3ded.github.io/redteam/abusing-lnk-features-for-initial-access-and-persistence\n2. Research of the HTTP/1.x, HTTP/2, HTTP/3 specifications\nhttps://sensepost.com/blog/2021/adventures-into-http2-and-http3\n\nhttps://zer1t0.gitlab.io/posts/attacking_ad\ud83d\ude1c\n\nRed Team Tactics\n1. This tool generates gopher link for exploiting SSRF and gaining RCE in various servers\nhttps://github.com/tarunkant/Gopherus\n2. Bypassing PatchGuard\nhttps://www.godeye.club/2021/05/22/001-bypass-patchguard-pssetcreateprocessnotifyroutine.html\n]-> x64 Windows PatchGuard bypass, register process-creation callbacks from unsigned code (PoC)\nhttps://github.com/kkent030315/NoPatchGuardCallback", "creation_timestamp": "2026-09-02T01:04:37.578324Z"}