{"vulnerability": "CVE-2021-1784", "sightings": [{"uuid": "19f9c665-cdbd-4ce2-ac03-c55ec6d03df6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1784", "type": "seen", "source": "https://t.me/cibsecurity/28431", "content": "\u203c CVE-2021-1784 \u203c\n\nA permissions issue existed in DiskArbitration. This was addressed with additional ownership checks. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A malicious application may be able to modify protected parts of the file system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-08T18:28:27.000000Z"}, {"uuid": "f16d33c7-975a-401e-b409-fd23c0d657c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1784", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/5217", "content": "#Threat_Research\nCVE-2021-30808 - CVE-2021-1784 strikes back - TCC bypass via mounting\nhttps://theevilbit.github.io/posts/cve-2021-30808", "creation_timestamp": "2024-06-17T07:03:12.000000Z"}, {"uuid": "98214cc5-6bab-41e8-b4d5-3d5b94157626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1784", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/4652", "content": "#Offensive_security\nCVE-2021-30920 - CVE-2021-1784 strikes back - TCC bypass via mounting\nhttps://theevilbit.github.io/posts/cve_2021_30920", "creation_timestamp": "2024-08-05T18:56:53.000000Z"}, {"uuid": "2592c902-4f94-4b47-9cdf-15bc0bb6e331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1784", "type": "seen", "source": "https://t.me/cissp/4726", "content": "exploit\n1. CVE-2021-28079:\nJamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability\nhttps://github.com/g33xter/CVE-2021-28079\n\n2. Silent DOC Exploit for Microsoft Office\nhttps://github.com/attakercyebr/Exploit-doc\n\n3. Ghostscript sandbox bypass (CVE-2021-3781)\nhttps://security.tencent.com/index.php/blog/msg/205\n\nThreat_Research\nContainer Breakouts:\nPart 1 - Access to root directory of the Host\nhttps://blog.nody.cc/posts/container-breakouts-part1\nPart 2 - Privileged Container\nhttps://blog.nody.cc/posts/container-breakouts-part2\nPart 3 - Docker Socket\nhttps://blog.nody.cc/posts/container-breakouts-part3\n\nCloud_Security\nMesh-kridik: performs various security checks\non a Kubernetes cluster\nhttps://github.com/chen-keinan/mesh-kridik#requirements\n\nOffensive_security\nCVE-2021-30920 - CVE-2021-1784 strikes back -\nTCC bypass via mounting\nhttps://theevilbit.github.io/posts/cve_2021_30920", "creation_timestamp": "2026-09-01T17:00:36.729671Z"}, {"uuid": "b809c906-c2af-423c-8c70-f9e49216a02d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1784", "type": "seen", "source": "https://t.me/cissp/4726", "content": "exploit\n1. CVE-2021-28079:\nJamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability\nhttps://github.com/g33xter/CVE-2021-28079\n\n2. Silent DOC Exploit for Microsoft Office\nhttps://github.com/attakercyebr/Exploit-doc\n\n3. Ghostscript sandbox bypass (CVE-2021-3781)\nhttps://security.tencent.com/index.php/blog/msg/205\n\nThreat_Research\nContainer Breakouts:\nPart 1 - Access to root directory of the Host\nhttps://blog.nody.cc/posts/container-breakouts-part1\nPart 2 - Privileged Container\nhttps://blog.nody.cc/posts/container-breakouts-part2\nPart 3 - Docker Socket\nhttps://blog.nody.cc/posts/container-breakouts-part3\n\nCloud_Security\nMesh-kridik: performs various security checks\non a Kubernetes cluster\nhttps://github.com/chen-keinan/mesh-kridik#requirements\n\nOffensive_security\nCVE-2021-30920 - CVE-2021-1784 strikes back -\nTCC bypass via mounting\nhttps://theevilbit.github.io/posts/cve_2021_30920", "creation_timestamp": "2026-09-02T01:04:21.440346Z"}, {"uuid": "3b16cef1-734f-44f5-aeec-30fd09337262", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1784", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4726", "content": "exploit\n1. CVE-2021-28079:\nJamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability\nhttps://github.com/g33xter/CVE-2021-28079\n\n2. Silent DOC Exploit for Microsoft Office\nhttps://github.com/attakercyebr/Exploit-doc\n\n3. Ghostscript sandbox bypass (CVE-2021-3781)\nhttps://security.tencent.com/index.php/blog/msg/205\n\nThreat_Research\nContainer Breakouts:\nPart 1 - Access to root directory of the Host\nhttps://blog.nody.cc/posts/container-breakouts-part1\nPart 2 - Privileged Container\nhttps://blog.nody.cc/posts/container-breakouts-part2\nPart 3 - Docker Socket\nhttps://blog.nody.cc/posts/container-breakouts-part3\n\nCloud_Security\nMesh-kridik: performs various security checks\non a Kubernetes cluster\nhttps://github.com/chen-keinan/mesh-kridik#requirements\n\nOffensive_security\nCVE-2021-30920 - CVE-2021-1784 strikes back -\nTCC bypass via mounting\nhttps://theevilbit.github.io/posts/cve_2021_30920", "creation_timestamp": "2026-09-10T15:00:06.602775Z"}, {"uuid": "33956af9-d545-4d98-89f2-7834fd82c711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1784", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4726", "content": "exploit\n1. CVE-2021-28079:\nJamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability\nhttps://github.com/g33xter/CVE-2021-28079\n\n2. Silent DOC Exploit for Microsoft Office\nhttps://github.com/attakercyebr/Exploit-doc\n\n3. Ghostscript sandbox bypass (CVE-2021-3781)\nhttps://security.tencent.com/index.php/blog/msg/205\n\nThreat_Research\nContainer Breakouts:\nPart 1 - Access to root directory of the Host\nhttps://blog.nody.cc/posts/container-breakouts-part1\nPart 2 - Privileged Container\nhttps://blog.nody.cc/posts/container-breakouts-part2\nPart 3 - Docker Socket\nhttps://blog.nody.cc/posts/container-breakouts-part3\n\nCloud_Security\nMesh-kridik: performs various security checks\non a Kubernetes cluster\nhttps://github.com/chen-keinan/mesh-kridik#requirements\n\nOffensive_security\nCVE-2021-30920 - CVE-2021-1784 strikes back -\nTCC bypass via mounting\nhttps://theevilbit.github.io/posts/cve_2021_30920", "creation_timestamp": "2026-09-11T00:00:35.031743Z"}]}