{"vulnerability": "CVE-2021-30833", "sightings": [{"uuid": "d99c6af4-fce2-4303-b591-d20e4dddc0a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30833", "type": "seen", "source": "https://t.me/cibsecurity/31426", "content": "\u203c CVE-2021-30833 \u203c\n\nThis issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.0.1. Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-28T22:17:50.000000Z"}, {"uuid": "e8361e7b-ae21-4561-94ef-5b7c60c573d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30833", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/4623", "content": "#Threat_Research\n1. Shrootless Vulnerability in MacOS (CVE-2021-30892)\nhttps://www.microsoft.com/security/blog/2021/10/28/microsoft-finds-new-macos-vulnerability-shrootless-that-could-bypass-system-integrity-protection\n2. Apple XAR - Arbitrary File Write (CVE-2021-30833)\nhttps://research.nccgroup.com/2021/10/28/technical-advisory-apple-xar-arbitrary-file-write-cve-2021-30833", "creation_timestamp": "2021-10-29T11:33:01.000000Z"}, {"uuid": "f24cc73f-b8d5-4f3e-8a0a-22aff2d46ee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30833", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1737", "content": "Technical Advisory \u2013 Apple XAR \u2013 Arbitrary File Write (CVE-2021-30833) https://research.nccgroup.com/2021/10/28/technical-advisory-apple-xar-arbitrary-file-write-cve-2021-30833/", "creation_timestamp": "2026-08-03T05:00:04.491179Z"}, {"uuid": "8ac50b93-5d42-4f16-a5b9-84605617592f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30833", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1737", "content": "Technical Advisory \u2013 Apple XAR \u2013 Arbitrary File Write (CVE-2021-30833) https://research.nccgroup.com/2021/10/28/technical-advisory-apple-xar-arbitrary-file-write-cve-2021-30833/", "creation_timestamp": "2026-08-04T00:00:49.948911Z"}, {"uuid": "02bb0930-9755-4ee6-8de1-fb1e2ac9f4ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30833", "type": "seen", "source": "https://t.me/reverseame/1737", "content": "Technical Advisory \u2013 Apple XAR \u2013 Arbitrary File Write (CVE-2021-30833) https://research.nccgroup.com/2021/10/28/technical-advisory-apple-xar-arbitrary-file-write-cve-2021-30833/", "creation_timestamp": "2026-07-29T12:02:52.190272Z"}, {"uuid": "5192f3da-70a7-4539-b838-4df4e8e214fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30833", "type": "seen", "source": "https://t.me/reverseame/1737", "content": "Technical Advisory \u2013 Apple XAR \u2013 Arbitrary File Write (CVE-2021-30833) https://research.nccgroup.com/2021/10/28/technical-advisory-apple-xar-arbitrary-file-write-cve-2021-30833/", "creation_timestamp": "2026-07-30T00:02:42.656659Z"}, {"uuid": "efe93e9c-51af-47c0-8d3c-728ee944aef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30833", "type": "seen", "source": "https://t.me/cissp/4713", "content": "Threat Research\n1. Shrootless Vulnerability in MacOS (CVE-2021-30892)\nhttps://www.microsoft.com/security/blog/2021/10/28/microsoft-finds-new-macos-vulnerability-shrootless-that-could-bypass-system-integrity-protection\n2. Apple XAR - Arbitrary File Write (CVE-2021-30833)\nhttps://research.nccgroup.com/2021/10/28/technical-advisory-apple-xar-arbitrary-file-write-cve-2021-30833\n\nexploit\n1. CVE-2021-31862:\nSysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication\nhttps://github.com/RobertDra/CVE-2021-31862\n\n2. Research and PoC exploits for ONLYOFFICE\n(CVE-2021-25829, CVE-2021-25830, CVE-2021-25831, CVE-2021-25832, CVE-2021-25833)\nhttps://github.com/merrychap/POC-onlyoffice/tree/master\n\nMalware analysis\n1. More Malicious NPM Libraries\nhttps://www.theregister.com/2021/10/27/npm_roblox_ransomware\n2. New AbstractEmu malware roots Android devices\nhttps://blog.lookout.com/lookout-discovers-global-rooting-malware-campaign\n\nCloud Security\nSnowcat: World\u2019s First Dedicated Security Scanner for Istio\nhttps://www.praetorian.com/blog/introducing-snowcat\n]-> https://github.com/praetorian-inc/snowcat", "creation_timestamp": "2026-09-01T17:00:36.873362Z"}, {"uuid": "c618f86d-1b2d-4024-bbde-cd9e1ea32711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30833", "type": "seen", "source": "https://t.me/cissp/4713", "content": "Threat Research\n1. Shrootless Vulnerability in MacOS (CVE-2021-30892)\nhttps://www.microsoft.com/security/blog/2021/10/28/microsoft-finds-new-macos-vulnerability-shrootless-that-could-bypass-system-integrity-protection\n2. Apple XAR - Arbitrary File Write (CVE-2021-30833)\nhttps://research.nccgroup.com/2021/10/28/technical-advisory-apple-xar-arbitrary-file-write-cve-2021-30833\n\nexploit\n1. CVE-2021-31862:\nSysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication\nhttps://github.com/RobertDra/CVE-2021-31862\n\n2. Research and PoC exploits for ONLYOFFICE\n(CVE-2021-25829, CVE-2021-25830, CVE-2021-25831, CVE-2021-25832, CVE-2021-25833)\nhttps://github.com/merrychap/POC-onlyoffice/tree/master\n\nMalware analysis\n1. More Malicious NPM Libraries\nhttps://www.theregister.com/2021/10/27/npm_roblox_ransomware\n2. New AbstractEmu malware roots Android devices\nhttps://blog.lookout.com/lookout-discovers-global-rooting-malware-campaign\n\nCloud Security\nSnowcat: World\u2019s First Dedicated Security Scanner for Istio\nhttps://www.praetorian.com/blog/introducing-snowcat\n]-> https://github.com/praetorian-inc/snowcat", "creation_timestamp": "2026-09-02T01:04:21.649688Z"}, {"uuid": "824481d8-3195-4be3-b699-a794e2e9b837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30833", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4713", "content": "Threat Research\n1. Shrootless Vulnerability in MacOS (CVE-2021-30892)\nhttps://www.microsoft.com/security/blog/2021/10/28/microsoft-finds-new-macos-vulnerability-shrootless-that-could-bypass-system-integrity-protection\n2. Apple XAR - Arbitrary File Write (CVE-2021-30833)\nhttps://research.nccgroup.com/2021/10/28/technical-advisory-apple-xar-arbitrary-file-write-cve-2021-30833\n\nexploit\n1. CVE-2021-31862:\nSysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication\nhttps://github.com/RobertDra/CVE-2021-31862\n\n2. Research and PoC exploits for ONLYOFFICE\n(CVE-2021-25829, CVE-2021-25830, CVE-2021-25831, CVE-2021-25832, CVE-2021-25833)\nhttps://github.com/merrychap/POC-onlyoffice/tree/master\n\nMalware analysis\n1. More Malicious NPM Libraries\nhttps://www.theregister.com/2021/10/27/npm_roblox_ransomware\n2. New AbstractEmu malware roots Android devices\nhttps://blog.lookout.com/lookout-discovers-global-rooting-malware-campaign\n\nCloud Security\nSnowcat: World\u2019s First Dedicated Security Scanner for Istio\nhttps://www.praetorian.com/blog/introducing-snowcat\n]-> https://github.com/praetorian-inc/snowcat", "creation_timestamp": "2026-09-10T16:00:05.624750Z"}]}