{"vulnerability": "CVE-2021-30658", "sightings": [{"uuid": "a89878dc-17ad-49fa-ad67-db39f037e78e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30658", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3662", "content": "#exploit\nCVE-2021-30658:\nM1 Macs GateKeeper bypass\nhttps://wojciechregula.blog/post/m1-macs-gatekeeper-bypass-aka-cve-2021-30658", "creation_timestamp": "2024-02-15T13:44:34.000000Z"}, {"uuid": "d81a2aff-bb74-43d0-9d75-a63dc7c6c124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30658", "type": "seen", "source": "https://t.me/cissp/3518", "content": "Threat Research\n1. Quick Analysis for the SSID Format String Bug in iOS Wi-Fi service\nhttps://blog.chichou.me/2021/06/20/quick-analysis-wifid\n2. Apple account takeover vulnerability\nhttps://thezerohack.com/apple-vulnerability-bug-bounty\n3. XXE in JDOM library (PoC for CVE-2021-33813)\nhttps://alephsecurity.com/vulns/aleph-2021003\n\nRed Team Tactics\n1. Bypassing Image Load Kernel Callbacks\nhttps://www.mdsec.co.uk/2021/06/bypassing-image-load-kernel-callbacks\n2. Pwning Home Router - Linksys WRT54G\nhttps://elongl.github.io/exploitation/2021/05/30/pwning-home-router.html\n\nexploit\nCVE-2021-30658:\nM1 Macs GateKeeper bypass (PoC)\nhttps://wojciechregula.blog/post/m1-macs-gatekeeper-bypass-aka-cve-2021-30658\n\nOffensive security\n1. Exploiting the notoriously unsafe gets() on a PAC-protected ARM64 binary\nhttps://blog.ret2.io/2021/06/16/intro-to-pac-arm64\n2. A Little More on the Task Scheduler's Service Account Usage...\nhttps://www.tiraniddo.dev/2021/06/a-little-more-on-task-schedulers.html?m=1", "creation_timestamp": "2026-09-01T17:00:47.431760Z"}, {"uuid": "7bf3e0e7-a6cc-43f3-aba2-1745de7dcd39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30658", "type": "seen", "source": "https://t.me/cissp/3518", "content": "Threat Research\n1. Quick Analysis for the SSID Format String Bug in iOS Wi-Fi service\nhttps://blog.chichou.me/2021/06/20/quick-analysis-wifid\n2. Apple account takeover vulnerability\nhttps://thezerohack.com/apple-vulnerability-bug-bounty\n3. XXE in JDOM library (PoC for CVE-2021-33813)\nhttps://alephsecurity.com/vulns/aleph-2021003\n\nRed Team Tactics\n1. Bypassing Image Load Kernel Callbacks\nhttps://www.mdsec.co.uk/2021/06/bypassing-image-load-kernel-callbacks\n2. Pwning Home Router - Linksys WRT54G\nhttps://elongl.github.io/exploitation/2021/05/30/pwning-home-router.html\n\nexploit\nCVE-2021-30658:\nM1 Macs GateKeeper bypass (PoC)\nhttps://wojciechregula.blog/post/m1-macs-gatekeeper-bypass-aka-cve-2021-30658\n\nOffensive security\n1. Exploiting the notoriously unsafe gets() on a PAC-protected ARM64 binary\nhttps://blog.ret2.io/2021/06/16/intro-to-pac-arm64\n2. A Little More on the Task Scheduler's Service Account Usage...\nhttps://www.tiraniddo.dev/2021/06/a-little-more-on-task-schedulers.html?m=1", "creation_timestamp": "2026-09-02T01:04:35.235476Z"}, {"uuid": "9fa1a207-9d25-4702-95e8-2d21a47ce4fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30658", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3518", "content": "Threat Research\n1. Quick Analysis for the SSID Format String Bug in iOS Wi-Fi service\nhttps://blog.chichou.me/2021/06/20/quick-analysis-wifid\n2. Apple account takeover vulnerability\nhttps://thezerohack.com/apple-vulnerability-bug-bounty\n3. XXE in JDOM library (PoC for CVE-2021-33813)\nhttps://alephsecurity.com/vulns/aleph-2021003\n\nRed Team Tactics\n1. Bypassing Image Load Kernel Callbacks\nhttps://www.mdsec.co.uk/2021/06/bypassing-image-load-kernel-callbacks\n2. Pwning Home Router - Linksys WRT54G\nhttps://elongl.github.io/exploitation/2021/05/30/pwning-home-router.html\n\nexploit\nCVE-2021-30658:\nM1 Macs GateKeeper bypass (PoC)\nhttps://wojciechregula.blog/post/m1-macs-gatekeeper-bypass-aka-cve-2021-30658\n\nOffensive security\n1. Exploiting the notoriously unsafe gets() on a PAC-protected ARM64 binary\nhttps://blog.ret2.io/2021/06/16/intro-to-pac-arm64\n2. A Little More on the Task Scheduler's Service Account Usage...\nhttps://www.tiraniddo.dev/2021/06/a-little-more-on-task-schedulers.html?m=1", "creation_timestamp": "2026-09-11T03:00:04.580811Z"}, {"uuid": "d93ebbcd-5a20-46f8-a0dc-d15e425af2c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30658", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3518", "content": "Threat Research\n1. Quick Analysis for the SSID Format String Bug in iOS Wi-Fi service\nhttps://blog.chichou.me/2021/06/20/quick-analysis-wifid\n2. Apple account takeover vulnerability\nhttps://thezerohack.com/apple-vulnerability-bug-bounty\n3. XXE in JDOM library (PoC for CVE-2021-33813)\nhttps://alephsecurity.com/vulns/aleph-2021003\n\nRed Team Tactics\n1. Bypassing Image Load Kernel Callbacks\nhttps://www.mdsec.co.uk/2021/06/bypassing-image-load-kernel-callbacks\n2. Pwning Home Router - Linksys WRT54G\nhttps://elongl.github.io/exploitation/2021/05/30/pwning-home-router.html\n\nexploit\nCVE-2021-30658:\nM1 Macs GateKeeper bypass (PoC)\nhttps://wojciechregula.blog/post/m1-macs-gatekeeper-bypass-aka-cve-2021-30658\n\nOffensive security\n1. Exploiting the notoriously unsafe gets() on a PAC-protected ARM64 binary\nhttps://blog.ret2.io/2021/06/16/intro-to-pac-arm64\n2. A Little More on the Task Scheduler's Service Account Usage...\nhttps://www.tiraniddo.dev/2021/06/a-little-more-on-task-schedulers.html?m=1", "creation_timestamp": "2026-09-12T00:00:54.433715Z"}]}