{"vulnerability": "CVE-2021-20291", "sightings": [{"uuid": "7d235240-a474-4e16-8d31-ec09f577a051", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20291", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3162", "content": "#Blue_Team_Techniques\n1. Decoding Cobalt Strike Traffic\nhttps://isc.sans.edu/forums/diary/Decoding+Cobalt+Strike+Traffic/27322\n2. Mitigating CVE-2021-20291: \nDoS affecting CRI-O/Podman\nhttps://sysdig.com/blog/cve-2021-20291-cri-o-podman", "creation_timestamp": "2022-01-03T08:26:52.000000Z"}, {"uuid": "439fa42f-26f2-45cd-bfba-08c2bca5d9c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20291", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/3154", "content": "#Threat_Research\n1. Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310)\nhttps://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898\n2. Bugs in a Popular Third-Party Ethernet/IP Protocol Stack (CVE-2021-27478, CVE-2021-27482, CVE-2021-27498, CVE-2021-27500)\nhttps://www.claroty.com/2021/04/15/blog-research-fuzzing-and-pring\n3. New Vulnerability Affecting Container Engines CRI-O/Podman (CVE-2021-20291)\nhttps://unit42.paloaltonetworks.com/cve-2021-20291", "creation_timestamp": "2021-04-18T14:31:16.000000Z"}, {"uuid": "148ec9fe-15d5-4324-a63b-13e843f0e869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20291", "type": "published-proof-of-concept", "source": "https://t.me/Kubesploit/47", "content": "The CVE-2021-20291 medium-level vulnerability has been found in containers/storage Go library, leading to Denial of Service (DoS) when vulnerable container engines pull an injected image from a registry.\n\n\u2192 https://sysdig.com/blog/cve-2021-20291-cri-o-podman", "creation_timestamp": "2026-08-29T18:00:04.641301Z"}, {"uuid": "9eb2b2cd-0af3-4549-b806-bfd7f8b86f78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20291", "type": "published-proof-of-concept", "source": "https://t.me/Kubesploit/47", "content": "The CVE-2021-20291 medium-level vulnerability has been found in containers/storage Go library, leading to Denial of Service (DoS) when vulnerable container engines pull an injected image from a registry.\n\n\u2192 https://sysdig.com/blog/cve-2021-20291-cri-o-podman", "creation_timestamp": "2026-08-30T00:00:54.388867Z"}, {"uuid": "cbfb575c-ae68-4fa3-a10e-280ff3698490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20291", "type": "seen", "source": "https://t.me/cissp/2986", "content": "exploit\nCVE-2021-29349:\nCSRF to remove all messages in Mahara 20.10 (PoC)\nhttps://github.com/Vulnmachines/CVE-2021-29349\n\nOffensive security:\nAirstrike Attack - FDE bypass and EoP on domain joined Windows workstations (CVE-2021-28316)\nhttps://shenaniganslabs.io/2021/04/13/Airstrike.html\n\nMalware analysis:\n1. HackBoss: A cryptocurrency-stealing malware distributed through Telegram\nhttps://decoded.avast.io/romanalinkeova/hackboss-a-cryptocurrency-stealing-malware-distributed-through-telegram\n2. Carbine Loader Cryptojacking Campaign\nhttps://www.lacework.com/carbine-loader-cryptojacking-campaign\n\nRed Team Tactics\n1. Buffer overflow fuzzer and exploit script\nhttps://github.com/A1-exe/bufferoverflow\n2. PCI Express DIY hacking toolkit for Xilinx SP605\nhttps://github.com/Cr4sh/s6_pcie_microblaze\n\n\nThreat Research:\n1. Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310)\nhttps://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898\n2. Bugs in a Popular Third-Party Ethernet/IP Protocol Stack (CVE-2021-27478, CVE-2021-27482, CVE-2021-27498, CVE-2021-27500)\nhttps://www.claroty.com/2021/04/15/blog-research-fuzzing-and-pring\n3. New Vulnerability Affecting Container Engines CRI-O/Podman (CVE-2021-20291)\nhttps://unit42.paloaltonetworks.com/cve-2021-20291", "creation_timestamp": "2026-09-01T17:00:54.057676Z"}, {"uuid": "a0b8c324-32dd-4130-b44f-330f63638a4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20291", "type": "seen", "source": "https://t.me/cissp/2986", "content": "exploit\nCVE-2021-29349:\nCSRF to remove all messages in Mahara 20.10 (PoC)\nhttps://github.com/Vulnmachines/CVE-2021-29349\n\nOffensive security:\nAirstrike Attack - FDE bypass and EoP on domain joined Windows workstations (CVE-2021-28316)\nhttps://shenaniganslabs.io/2021/04/13/Airstrike.html\n\nMalware analysis:\n1. HackBoss: A cryptocurrency-stealing malware distributed through Telegram\nhttps://decoded.avast.io/romanalinkeova/hackboss-a-cryptocurrency-stealing-malware-distributed-through-telegram\n2. Carbine Loader Cryptojacking Campaign\nhttps://www.lacework.com/carbine-loader-cryptojacking-campaign\n\nRed Team Tactics\n1. Buffer overflow fuzzer and exploit script\nhttps://github.com/A1-exe/bufferoverflow\n2. PCI Express DIY hacking toolkit for Xilinx SP605\nhttps://github.com/Cr4sh/s6_pcie_microblaze\n\n\nThreat Research:\n1. Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310)\nhttps://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898\n2. Bugs in a Popular Third-Party Ethernet/IP Protocol Stack (CVE-2021-27478, CVE-2021-27482, CVE-2021-27498, CVE-2021-27500)\nhttps://www.claroty.com/2021/04/15/blog-research-fuzzing-and-pring\n3. New Vulnerability Affecting Container Engines CRI-O/Podman (CVE-2021-20291)\nhttps://unit42.paloaltonetworks.com/cve-2021-20291", "creation_timestamp": "2026-09-02T01:04:44.521182Z"}]}