{"uuid": "194917b8-8e94-4e78-b5d8-b876b41d4cf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30747", "type": "seen", "source": "https://t.me/cissp/3281", "content": "Patch Gapping a Safari Type Confusion (PoC)\nhttps://blog.theori.io/research/webkit-type-confusion\n\nA fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries\nhttps://github.com/d3mondev/puredns\n+ A Golang module to resolve multiple DNS requests\nhttps://github.com/d3mondev/resolvermt\n\nJavaScriptCore Internals\nPart 3 - The DFG (Data Flow Graph) JIT - Graph Building\nhttps://zon8.re/posts/jsc-part3-the-dfg-jit-graph-building\nPart 4 - The DFG JIT - Graph Optimisation\nhttps://zon8.re/posts/jsc-part4-the-dfg-jit-graph-optimisation\nPart 5 - The DFG JIT - On Stack Replacement\nhttps://zon8.re/posts/jsc-part5-the-dfg-jit-osr\n\nexploit\nCVE-2021-30747:\nCovert channel vulnerability in the Apple Silicon \"M1\" chip\nhttps://m1racles.com\n]-> PoC:\nhttps://gist.github.com/marcan/99e788db33af66c92ab1811da78ab62f\n\nMalware analysis\n1. AV evasion with 64-bit Executables\nhttps://isc.sans.edu/forums/diary/All+your+Base+arenearly+equal+when+it+comes+to+AV+evasion+but+64bit+executables+are+not/27466\n2. Phishing attack on intranet system credentials\nhttps://paper.seebug.org/1590\n3. New sophisticated email-based attack from NOBELIUM\nhttps://www.microsoft.com/security/blog/2021/05/27/new-sophisticated-email-based-attack-from-nobelium", "creation_timestamp": "2026-09-01T17:00:49.625270Z"}