{"vulnerability": "CVE-2021-2183", "sightings": [{"uuid": "c0d50b3d-5a88-465e-bf00-045f486746a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21835", "type": "seen", "source": "https://t.me/cibsecurity/27877", "content": "\u203c CVE-2021-21835 \u203c\n\nAn exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input when decoding the atom associated with the \u00e2\u20ac\u0153csgp\u00e2\u20ac\ufffd FOURCC can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-25T22:25:54.000000Z"}, {"uuid": "1263e85d-01a2-43c7-b4f0-dc4677e6b71f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21838", "type": "seen", "source": "https://t.me/cibsecurity/27508", "content": "\u203c CVE-2021-21838 \u203c\n\nMultiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-18T16:16:57.000000Z"}, {"uuid": "9eb8a54b-5d6b-4310-893f-63637378045c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21839", "type": "seen", "source": "https://t.me/cibsecurity/27503", "content": "\u203c CVE-2021-21839 \u203c\n\nMultiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-18T16:16:49.000000Z"}, {"uuid": "1c49dc06-ea4f-4942-a144-f54216577004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21837", "type": "seen", "source": "https://t.me/cibsecurity/27501", "content": "\u203c CVE-2021-21837 \u203c\n\nMultiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-18T16:16:47.000000Z"}, {"uuid": "6ba04570-d190-44ac-bee9-41f71dc3b7fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21830", "type": "seen", "source": "https://t.me/cibsecurity/27338", "content": "\u203c CVE-2021-21830 \u203c\n\nA heap-based buffer overflow vulnerability exists in the XML Decompression LabelDict::Load functionality of AT&T Labs\u00e2\u20ac\u2122 Xmill 0.7. A specially crafted XMI file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-13T22:11:18.000000Z"}, {"uuid": "b0439ef8-53ef-4dc6-8046-f6d93933ca03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21839", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4219", "content": "#exploit\nPoCs for exploiting CVE-2021-21847, \nCVE-2021-21853, CVE-2021-21845, \nCVE-2021-21846, CVE-2021-21844,\nCVE-2021-21839:\nhttps://github.com/AlAIAL90/CVE-2021-21847\nhttps://github.com/AlAIAL90/CVE-2021-21853\nhttps://github.com/AlAIAL90/CVE-2021-21845\nhttps://github.com/AlAIAL90/CVE-2021-21846\nhttps://github.com/AlAIAL90/CVE-2021-21844\nhttps://github.com/AlAIAL90/CVE-2021-21839\n// Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project", "creation_timestamp": "2024-03-29T14:38:26.000000Z"}, {"uuid": "5da52dc5-de43-4bac-aeee-539c18d55d29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21831", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3935", "content": "#Threat_Research\n1. UaF vulnerabilities in Foxit PDF Reader (CVE-2021-21831, CVE-2021-21870, CVE-2021-21893)\nhttps://blog.talosintelligence.com/2021/07/vulnerability-spotlight-use-after-free.html\n2. Sunhillo SureLine Unauthenticated OS Command Injection (PoC for CVE-2021-36380)\nhttps://research.nccgroup.com/2021/07/26/technical-advisory-sunhillo-sureline-unauthenticated-os-command-injection-cve-2021-36380", "creation_timestamp": "2024-02-03T18:24:47.000000Z"}, {"uuid": "8b697745-99ac-4d02-81b1-a4124a36b971", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21839", "type": "seen", "source": "https://t.me/cissp/4288", "content": "Blue Team Techniques\n1. Multiple vulnerabilities in EMC VNX NAS 8.1.9-232\nSecurity Advisory\nhttps://www.errno.fr/VNX_advisory\n2. Anatomy and Disruption of Metasploit Shellcode\nhttps://blog.nviso.eu/2021/09/02/anatomy-and-disruption-of-metasploit-shellcode\n\nRed Team Tactics\n1. Linphone SIP Protocol Stack:\nCrashing SIP Clients With a Single Slash\nhttps://claroty.com/2021/08/31/blog-research-crashing-sip-clients-with-a-single-slash\n2. MacOS Security & Privilege Escalation\nhttps://book.hacktricks.xyz/macos/macos-security-and-privilege-escalation\n\nexploit\nPoCs for exploiting CVE-2021-21847, \nCVE-2021-21853, CVE-2021-21845, \nCVE-2021-21846, CVE-2021-21844\nCVE-2021-21839:\nhttps://github.com/AlAIAL90/CVE-2021-21847\nhttps://github.com/AlAIAL90/CVE-2021-21853\nhttps://github.com/AlAIAL90/CVE-2021-21845\nhttps://github.com/AlAIAL90/CVE-2021-21846\nhttps://github.com/AlAIAL90/CVE-2021-21844\nhttps://github.com/AlAIAL90/CVE-2021-21839\n// Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project", "creation_timestamp": "2026-09-01T17:00:41.328185Z"}, {"uuid": "3d148379-3d9c-47bc-85d8-e49aadcd3edd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21831", "type": "seen", "source": "https://t.me/cissp/3912", "content": "Red Team Tactics\nHow to Phish for User Passwords with PowerShell\ud83d\ude03\nhttps://www.blackhillsinfosec.com/how-to-phish-for-user-passwords-with-powershell\n\nThreat Research\n1. Use-after-free vulnerabilities in Foxit PDF Reader (CVE-2021-21831, CVE-2021-21870, CVE-2021-21893)\nhttps://blog.talosintelligence.com/2021/07/vulnerability-spotlight-use-after-free.html?m=1\n2. Sunhillo SureLine Unauthenticated OS Command Injection (PoC for CVE-2021-36380)\nhttps://research.nccgroup.com/2021/07/26/technical-advisory-sunhillo-sureline-unauthenticated-os-command-injection-cve-2021-36380\n\nexploit\nCVE-2021-22146:\nElasticsearch ECE 7.13.x - The manipulation with an unknown input leads to a privilege escalation vulnerability (PoC)\ud83e\udd28\nhttps://github.com/magichk/cve-2021-22146\n\nCloud Security\nBlue Team Techniques\nThe Istio Service Mesh - Security Best Practices\nhttps://istio.io/latest/docs/ops/best-practices/security", "creation_timestamp": "2026-09-01T17:00:45.237065Z"}, {"uuid": "1097a058-91ae-409c-8a2c-8c9a14760f6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21839", "type": "seen", "source": "https://t.me/cissp/4288", "content": "Blue Team Techniques\n1. Multiple vulnerabilities in EMC VNX NAS 8.1.9-232\nSecurity Advisory\nhttps://www.errno.fr/VNX_advisory\n2. Anatomy and Disruption of Metasploit Shellcode\nhttps://blog.nviso.eu/2021/09/02/anatomy-and-disruption-of-metasploit-shellcode\n\nRed Team Tactics\n1. Linphone SIP Protocol Stack:\nCrashing SIP Clients With a Single Slash\nhttps://claroty.com/2021/08/31/blog-research-crashing-sip-clients-with-a-single-slash\n2. MacOS Security & Privilege Escalation\nhttps://book.hacktricks.xyz/macos/macos-security-and-privilege-escalation\n\nexploit\nPoCs for exploiting CVE-2021-21847, \nCVE-2021-21853, CVE-2021-21845, \nCVE-2021-21846, CVE-2021-21844\nCVE-2021-21839:\nhttps://github.com/AlAIAL90/CVE-2021-21847\nhttps://github.com/AlAIAL90/CVE-2021-21853\nhttps://github.com/AlAIAL90/CVE-2021-21845\nhttps://github.com/AlAIAL90/CVE-2021-21846\nhttps://github.com/AlAIAL90/CVE-2021-21844\nhttps://github.com/AlAIAL90/CVE-2021-21839\n// Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project", "creation_timestamp": "2026-09-02T01:04:27.294707Z"}, {"uuid": "afc99902-143d-4c88-8126-d1860c578418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21831", "type": "seen", "source": "https://t.me/cissp/3912", "content": "Red Team Tactics\nHow to Phish for User Passwords with PowerShell\ud83d\ude03\nhttps://www.blackhillsinfosec.com/how-to-phish-for-user-passwords-with-powershell\n\nThreat Research\n1. Use-after-free vulnerabilities in Foxit PDF Reader (CVE-2021-21831, CVE-2021-21870, CVE-2021-21893)\nhttps://blog.talosintelligence.com/2021/07/vulnerability-spotlight-use-after-free.html?m=1\n2. Sunhillo SureLine Unauthenticated OS Command Injection (PoC for CVE-2021-36380)\nhttps://research.nccgroup.com/2021/07/26/technical-advisory-sunhillo-sureline-unauthenticated-os-command-injection-cve-2021-36380\n\nexploit\nCVE-2021-22146:\nElasticsearch ECE 7.13.x - The manipulation with an unknown input leads to a privilege escalation vulnerability (PoC)\ud83e\udd28\nhttps://github.com/magichk/cve-2021-22146\n\nCloud Security\nBlue Team Techniques\nThe Istio Service Mesh - Security Best Practices\nhttps://istio.io/latest/docs/ops/best-practices/security", "creation_timestamp": "2026-09-02T01:04:31.938034Z"}]}