{"vulnerability": "cve-2021-30734", "sightings": [{"uuid": "3bd00e2a-086c-4041-b88a-4f91a5b7812a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30734", "type": "seen", "source": "https://t.me/cibsecurity/28489", "content": "\u203c CVE-2021-30734 \u203c\n\nMultiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to arbitrary code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-08T18:42:52.000000Z"}, {"uuid": "3fc44492-e7e6-4649-80d2-db0ebb35b12e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30734", "type": "published-proof-of-concept", "source": "https://t.me/burpsuite/268", "content": "Exploiting a zero-day WebAssembly Vulnerability (CVE-2021-30734) in Apple Safari\n\nhttps://blog.ret2.io/2021/06/02/pwn2own-2021-jsc-exploit/", "creation_timestamp": "2021-06-04T10:17:42.000000Z"}, {"uuid": "ab53148d-c653-479d-96d4-662099ed8d24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30734", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/5430", "content": "Exploiting a zero-day WebAssembly Vulnerability (CVE-2021-30734) in Apple Safari\n\nhttps://blog.ret2.io/2021/06/02/pwn2own-2021-jsc-exploit/", "creation_timestamp": "2021-06-02T18:32:01.000000Z"}, {"uuid": "99cb05bf-ef54-4f9a-b111-43d286b8afdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30734", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3530", "content": "#Offensive_security\nExploitation of a JavaScriptCore WebAssembly Vulnerability (CVE-2021-30734)\nhttps://blog.ret2.io/2021/06/02/pwn2own-2021-jsc-exploit\n]-&gt; PoC:\nhttps://github.com/ret2/Pwn2Own-2021-Safari", "creation_timestamp": "2021-06-03T15:03:25.000000Z"}, {"uuid": "cef7f234-d56b-4c6d-bb21-d5ca77138d9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30734", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/5107", "content": "#Threat_Research\nAnalysis and Exploitation of Pwn2Own-Safari Vulnerability (CVE-2021-30734)\nhttps://paper.seebug.org/1804", "creation_timestamp": "2023-05-11T18:04:57.000000Z"}, {"uuid": "cbef43ce-8d6a-44b6-a892-0a2bb3eadb4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30734", "type": "seen", "source": "Telegram/qapbVBd1sl_Uj9Qv_u6wQOKoshkFYCasSqfn50j-3VwCcA8", "content": "", "creation_timestamp": "2026-08-16T19:00:06.289652Z"}, {"uuid": "b93b3622-d927-4808-829c-c51e76c1a853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30734", "type": "seen", "source": "https://t.me/burpsuite/48773", "content": "Exploiting a zero-day WebAssembly Vulnerability (CVE-2021-30734) in Apple Safari\n\nhttps://blog.ret2.io/2021/06/02/pwn2own-2021-jsc-exploit/", "creation_timestamp": "2026-08-16T19:00:06.326134Z"}, {"uuid": "80b482c0-7c74-43a9-a1fa-d1b5cfba97d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30734", "type": "exploited", "source": "https://t.me/burpsuite/48773", "content": "Exploiting a zero-day WebAssembly Vulnerability (CVE-2021-30734) in Apple Safari\n\nhttps://blog.ret2.io/2021/06/02/pwn2own-2021-jsc-exploit/", "creation_timestamp": "2026-08-17T00:00:09.107922Z"}, {"uuid": "72a7ecdd-9170-4151-806b-993af0b506d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30734", "type": "published-proof-of-concept", "source": "Telegram/qapbVBd1sl_Uj9Qv_u6wQOKoshkFYCasSqfn50j-3VwCcA8", "content": "", "creation_timestamp": "2026-08-17T00:00:09.152801Z"}, {"uuid": "188e3ca7-296e-435d-b8af-78c87591edba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30734", "type": "seen", "source": "https://t.me/cissp/3336", "content": "SSL certificate not validated when registering with a provider \nhttps://hackerone.com/reports/903424\nDisclosed at: 2021-06-02 03:09:32 UTC+0\nCreated at: 2020-06-20 01:40:16 UTC+0\n\n\nExploiting a zero-day WebAssembly Vulnerability (CVE-2021-30734) in Apple Safari\nhttps://blog.ret2.io/2021/06/02/pwn2own-2021-jsc-exploit/", "creation_timestamp": "2026-09-01T17:00:49.146103Z"}, {"uuid": "480741c4-cf85-4e14-8490-69035a88c2bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30734", "type": "seen", "source": "https://t.me/cissp/3334", "content": "exploit\nCVE-2021-31181:\nMicrosoft SharePoint Webpart Interpretation Conflict RCE\nhttps://www.zerodayinitiative.com/blog/2021/6/1/cve-2021-31181-microsoft-sharepoint-webpart-interpretation-conflict-remote-code-execution-vulnerability\n\nOffensive security\n1. Defeating Code Obfuscation with Angr\nhttps://napongizero.github.io/blog/Defeating-Code-Obfuscation-with-Angr\n2. Reflective DLL injection\nhttps://bruteratel.com/research/feature-update/2021/06/01/PE-Reflection-Long-Live-The-King\n3.Exploitation of a JavaScriptCore WebAssembly Vulnerability (CVE-2021-30734)\nhttps://blog.ret2.io/2021/06/02/pwn2own-2021-jsc-exploit\n]-&gt; PoC:\nhttps://github.com/ret2/Pwn2Own-2021-Safari\n\nRed Team Tactics\n1. Tool for interacting with outlook interop during red team engagements\nhttps://github.com/checkymander/Carbuncle\n2. Threat Hunting AMSI\u00a0Bypasses\nhttps://pentestlaboratories.com/2021/06/01/threat-hunting-amsi-bypasses", "creation_timestamp": "2026-09-01T17:00:49.345732Z"}, {"uuid": "7dd2e9b3-05c9-40cf-a7da-283c4609e307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30734", "type": "seen", "source": "https://t.me/cissp/3336", "content": "SSL certificate not validated when registering with a provider \nhttps://hackerone.com/reports/903424\nDisclosed at: 2021-06-02 03:09:32 UTC+0\nCreated at: 2020-06-20 01:40:16 UTC+0\n\n\nExploiting a zero-day WebAssembly Vulnerability (CVE-2021-30734) in Apple Safari\nhttps://blog.ret2.io/2021/06/02/pwn2own-2021-jsc-exploit/", "creation_timestamp": "2026-09-02T01:04:37.077274Z"}, {"uuid": "efcda7cf-0579-44aa-87c0-05f9c95e8261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30734", "type": "seen", "source": "https://t.me/cissp/3334", "content": "exploit\nCVE-2021-31181:\nMicrosoft SharePoint Webpart Interpretation Conflict RCE\nhttps://www.zerodayinitiative.com/blog/2021/6/1/cve-2021-31181-microsoft-sharepoint-webpart-interpretation-conflict-remote-code-execution-vulnerability\n\nOffensive security\n1. Defeating Code Obfuscation with Angr\nhttps://napongizero.github.io/blog/Defeating-Code-Obfuscation-with-Angr\n2. Reflective DLL injection\nhttps://bruteratel.com/research/feature-update/2021/06/01/PE-Reflection-Long-Live-The-King\n3.Exploitation of a JavaScriptCore WebAssembly Vulnerability (CVE-2021-30734)\nhttps://blog.ret2.io/2021/06/02/pwn2own-2021-jsc-exploit\n]-&gt; PoC:\nhttps://github.com/ret2/Pwn2Own-2021-Safari\n\nRed Team Tactics\n1. Tool for interacting with outlook interop during red team engagements\nhttps://github.com/checkymander/Carbuncle\n2. Threat Hunting AMSI\u00a0Bypasses\nhttps://pentestlaboratories.com/2021/06/01/threat-hunting-amsi-bypasses", "creation_timestamp": "2026-09-02T01:04:37.373539Z"}, {"uuid": "7ca378a0-f7f4-4992-b878-60845cf2c054", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30734", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3336", "content": "SSL certificate not validated when registering with a provider \nhttps://hackerone.com/reports/903424\nDisclosed at: 2021-06-02 03:09:32 UTC+0\nCreated at: 2020-06-20 01:40:16 UTC+0\n\n\nExploiting a zero-day WebAssembly Vulnerability (CVE-2021-30734) in Apple Safari\nhttps://blog.ret2.io/2021/06/02/pwn2own-2021-jsc-exploit/", "creation_timestamp": "2026-09-11T05:00:05.863084Z"}, {"uuid": "b5da5797-a678-42e3-8566-c0d5b1ddfd2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30734", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3334", "content": "exploit\nCVE-2021-31181:\nMicrosoft SharePoint Webpart Interpretation Conflict RCE\nhttps://www.zerodayinitiative.com/blog/2021/6/1/cve-2021-31181-microsoft-sharepoint-webpart-interpretation-conflict-remote-code-execution-vulnerability\n\nOffensive security\n1. Defeating Code Obfuscation with Angr\nhttps://napongizero.github.io/blog/Defeating-Code-Obfuscation-with-Angr\n2. Reflective DLL injection\nhttps://bruteratel.com/research/feature-update/2021/06/01/PE-Reflection-Long-Live-The-King\n3.Exploitation of a JavaScriptCore WebAssembly Vulnerability (CVE-2021-30734)\nhttps://blog.ret2.io/2021/06/02/pwn2own-2021-jsc-exploit\n]-&gt; PoC:\nhttps://github.com/ret2/Pwn2Own-2021-Safari\n\nRed Team Tactics\n1. Tool for interacting with outlook interop during red team engagements\nhttps://github.com/checkymander/Carbuncle\n2. Threat Hunting AMSI\u00a0Bypasses\nhttps://pentestlaboratories.com/2021/06/01/threat-hunting-amsi-bypasses", "creation_timestamp": "2026-09-11T05:00:05.561000Z"}]}