{"vulnerability": "CVE-2021-24098", "sightings": [{"uuid": "1f6f7fad-7c95-47e2-8afb-6f619d45d4af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24098", "type": "seen", "source": "https://t.me/cibsecurity/24177", "content": "\u203c CVE-2021-24098 \u203c\n\nWindows Console Driver Denial of Service Vulnerability\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-26T02:44:17.000000Z"}, {"uuid": "9118de71-7704-453f-ad2b-55b38a11b64c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24098", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3046", "content": "CVE-2021-24098:\nA Denial Of Service bug in Windows Console Driver (condrv.sys) (PoC)\nhttps://github.com/waleedassar/CVE-2021-24098", "creation_timestamp": "2021-04-03T12:47:01.000000Z"}, {"uuid": "c1bbe6b6-37d6-4d57-b1dc-58c552405045", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24098", "type": "seen", "source": "https://t.me/cissp/2863", "content": "CVE-2020-9922:\nZero click vulnerability in Apple\u2019s macOS Mail\nhttps://mikko-kenttala.medium.com/zero-click-vulnerability-in-apples-macos-mail-59e0c14b106c\n\nFacebook account takeover:\n1. Facebook account takeover due to a bypass of allowed callback URLs in the OAuth flow\nhttps://ysamm.com/?p=646\n2. Facebook account takeover due to a wide platform bug in ajaxpipe responses\nhttps://ysamm.com/?p=654\n\nCVE-2021-24098:\nA Denial Of Service bug in Windows Console Driver (condrv.sys) (PoC)\nhttps://github.com/waleedassar/CVE-2021-24098\n\nRed Team Tactics:\n1. Using Kubelet Client to Attack the Kubernetes Cluster\nhttps://www.cyberark.com/resources/threat-research-blog/using-kubelet-client-to-attack-the-kubernetes-cluster\n2. Executing Shellcode via Callbacks\nhttps://osandamalith.com/2021/04/01/executing-shellcode-via-callbacks\n3. Finding secrets/passwords in container images and file systems\ud83d\ude00\nhttps://github.com/deepfence/SecretScanner#quickly-try-using-docker\n\nThreat Research:\n1. H2C Smuggling in the Wild\nhttps://blog.assetnote.io/2021/03/18/h2c-smuggling\n2. Abusing VoIPmonitor for RCE\nhttps://www.rtcsec.com/post/2021/03/bug-discovery-diaries-abusing-voipmonitor-for-remote-code-execution\n\nMalware analysis:\nBrowser lockers: extortion disguised as a fine\nhttps://securelist.com/browser-lockers-extortion-disguised-as-a-fine/101735", "creation_timestamp": "2026-09-01T17:00:55.694811Z"}, {"uuid": "8f827f86-1f85-45b8-a5c7-36ef4417f396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24098", "type": "seen", "source": "https://t.me/cissp/2863", "content": "CVE-2020-9922:\nZero click vulnerability in Apple\u2019s macOS Mail\nhttps://mikko-kenttala.medium.com/zero-click-vulnerability-in-apples-macos-mail-59e0c14b106c\n\nFacebook account takeover:\n1. Facebook account takeover due to a bypass of allowed callback URLs in the OAuth flow\nhttps://ysamm.com/?p=646\n2. Facebook account takeover due to a wide platform bug in ajaxpipe responses\nhttps://ysamm.com/?p=654\n\nCVE-2021-24098:\nA Denial Of Service bug in Windows Console Driver (condrv.sys) (PoC)\nhttps://github.com/waleedassar/CVE-2021-24098\n\nRed Team Tactics:\n1. Using Kubelet Client to Attack the Kubernetes Cluster\nhttps://www.cyberark.com/resources/threat-research-blog/using-kubelet-client-to-attack-the-kubernetes-cluster\n2. Executing Shellcode via Callbacks\nhttps://osandamalith.com/2021/04/01/executing-shellcode-via-callbacks\n3. Finding secrets/passwords in container images and file systems\ud83d\ude00\nhttps://github.com/deepfence/SecretScanner#quickly-try-using-docker\n\nThreat Research:\n1. H2C Smuggling in the Wild\nhttps://blog.assetnote.io/2021/03/18/h2c-smuggling\n2. Abusing VoIPmonitor for RCE\nhttps://www.rtcsec.com/post/2021/03/bug-discovery-diaries-abusing-voipmonitor-for-remote-code-execution\n\nMalware analysis:\nBrowser lockers: extortion disguised as a fine\nhttps://securelist.com/browser-lockers-extortion-disguised-as-a-fine/101735", "creation_timestamp": "2026-09-02T01:04:46.225260Z"}, {"uuid": "8c81857c-9a61-4ca5-a8a5-e0e7d68ce5ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24098", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2863", "content": "CVE-2020-9922:\nZero click vulnerability in Apple\u2019s macOS Mail\nhttps://mikko-kenttala.medium.com/zero-click-vulnerability-in-apples-macos-mail-59e0c14b106c\n\nFacebook account takeover:\n1. Facebook account takeover due to a bypass of allowed callback URLs in the OAuth flow\nhttps://ysamm.com/?p=646\n2. Facebook account takeover due to a wide platform bug in ajaxpipe responses\nhttps://ysamm.com/?p=654\n\nCVE-2021-24098:\nA Denial Of Service bug in Windows Console Driver (condrv.sys) (PoC)\nhttps://github.com/waleedassar/CVE-2021-24098\n\nRed Team Tactics:\n1. Using Kubelet Client to Attack the Kubernetes Cluster\nhttps://www.cyberark.com/resources/threat-research-blog/using-kubelet-client-to-attack-the-kubernetes-cluster\n2. Executing Shellcode via Callbacks\nhttps://osandamalith.com/2021/04/01/executing-shellcode-via-callbacks\n3. Finding secrets/passwords in container images and file systems\ud83d\ude00\nhttps://github.com/deepfence/SecretScanner#quickly-try-using-docker\n\nThreat Research:\n1. H2C Smuggling in the Wild\nhttps://blog.assetnote.io/2021/03/18/h2c-smuggling\n2. Abusing VoIPmonitor for RCE\nhttps://www.rtcsec.com/post/2021/03/bug-discovery-diaries-abusing-voipmonitor-for-remote-code-execution\n\nMalware analysis:\nBrowser lockers: extortion disguised as a fine\nhttps://securelist.com/browser-lockers-extortion-disguised-as-a-fine/101735", "creation_timestamp": "2026-09-11T11:00:03.923515Z"}, {"uuid": "2108dfd8-26f3-4546-9f61-e91c79a71ad1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24098", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2863", "content": "CVE-2020-9922:\nZero click vulnerability in Apple\u2019s macOS Mail\nhttps://mikko-kenttala.medium.com/zero-click-vulnerability-in-apples-macos-mail-59e0c14b106c\n\nFacebook account takeover:\n1. Facebook account takeover due to a bypass of allowed callback URLs in the OAuth flow\nhttps://ysamm.com/?p=646\n2. Facebook account takeover due to a wide platform bug in ajaxpipe responses\nhttps://ysamm.com/?p=654\n\nCVE-2021-24098:\nA Denial Of Service bug in Windows Console Driver (condrv.sys) (PoC)\nhttps://github.com/waleedassar/CVE-2021-24098\n\nRed Team Tactics:\n1. Using Kubelet Client to Attack the Kubernetes Cluster\nhttps://www.cyberark.com/resources/threat-research-blog/using-kubelet-client-to-attack-the-kubernetes-cluster\n2. Executing Shellcode via Callbacks\nhttps://osandamalith.com/2021/04/01/executing-shellcode-via-callbacks\n3. Finding secrets/passwords in container images and file systems\ud83d\ude00\nhttps://github.com/deepfence/SecretScanner#quickly-try-using-docker\n\nThreat Research:\n1. H2C Smuggling in the Wild\nhttps://blog.assetnote.io/2021/03/18/h2c-smuggling\n2. Abusing VoIPmonitor for RCE\nhttps://www.rtcsec.com/post/2021/03/bug-discovery-diaries-abusing-voipmonitor-for-remote-code-execution\n\nMalware analysis:\nBrowser lockers: extortion disguised as a fine\nhttps://securelist.com/browser-lockers-extortion-disguised-as-a-fine/101735", "creation_timestamp": "2026-09-12T00:00:41.637983Z"}]}