{"uuid": "33c9ea97-0482-4255-8f4e-04bb5c93d025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3770", "type": "seen", "source": "https://t.me/cissp/4540", "content": "exploit\nCVE-2021-3770:\nHeap-based Buffer Overflow in vim/vim, the text editor that's preinstalled on 100M+ Apple Mac/UNIX devices\nhttps://huntr.dev/bounties/016ad2f2-07c1-4d14-a8ce-6eed10729365\n\nCloudSecurity\nOffensive security\n1. Script to retrieve information via O365 and AzureAD with a valid cred\nhttps://github.com/nyxgeek/o365recon\n2. Scan for NTLM directories\nhttps://github.com/nyxgeek/ntlmscan\n\nIoT Security\n1. Cisco VOIP Adapter ATA19X Privilege Escalation\ud83d\ude0a\nand RCE (PoC for CVE-2021-34710)\nhttps://www.iot-inspector.com/blog/advisory-cisco-ata19x-privilege-escalation-rce\n2. Dahua Console: access internal debug console\nand/or other researched functions\nhttps://github.com/mcw0/DahuaConsole\n\nRed Team Tactics\n1. Automatic Exploit Generation (AEG)\nusing concolic execution\nhttps://github.com/aesophor/requiem\n2. Practical strategies for exploiting FILE READ vulnerabilities\nhttps://afinepl.medium.com/practical-strategies-for-exploiting-file-read-vulnerabilities-272abe792078\n\n\n \u200e\u200b", "creation_timestamp": "2026-09-01T17:00:38.895117Z"}