{"metadata": {"vulnerability": "CVE-2021-3560", "count": 205, "kinds": {"milestone": 19, "sighting": 78, "kev": 11, "other": 97}}, "data": [{"timestamp": "2021-02-04T00:00:00Z", "date_only": false, "value": "2021-02-04T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2021:2522", "record": "RHSA-2021:2522", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2021-02-14T00:00:00Z", "date_only": false, "value": "2021-02-14T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021:2522", "record": "RHSA-2021:2522", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2021-04-13T00:00:00Z", "date_only": false, "value": "2021-04-13T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021:2522", "record": "RHSA-2021:2522", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2021-04-13T09:30:00Z", "date_only": false, "value": "2021-04-13T09:30:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2021:2522", "record": "RHSA-2021:2522", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2021-05-18T00:00:00Z", "date_only": false, "value": "2021-05-18T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021:2236", "record": "RHSA-2021:2236", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2021-05-18T00:00:00Z", "date_only": false, "value": "2021-05-18T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021:2237", "record": "RHSA-2021:2237", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2021-05-18T00:00:00Z", "date_only": false, "value": "2021-05-18T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021:2522", "record": "RHSA-2021:2522", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2021-05-18T00:00:00Z", "date_only": false, "value": "2021-05-18T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021:2555", "record": "RHSA-2021:2555", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2021-05-20T00:00:00Z", "date_only": false, "value": "2021-05-20T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021:2522", "record": "RHSA-2021:2522", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2021-05-20T00:00:00Z", "date_only": false, "value": "2021-05-20T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-3560", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-05-21T00:00:00Z", "date_only": false, "value": "2021-05-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021:2555", "record": "RHSA-2021:2555", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2021-05-26T00:00:00Z", "date_only": false, "value": "2021-05-26T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2021:2555", "record": "RHSA-2021:2555", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2021-06-03T00:00:00Z", "date_only": false, "value": "2021-06-03T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2021:2238", "record": "RHSA-2021:2238", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-06-03T00:00:00Z", "date_only": false, "value": "2021-06-03T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2021:2238", "record": "RHSA-2021:2238", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-06-03T00:00:00Z", "date_only": false, "value": "2021-06-03T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2021:2238", "record": "RHSA-2021:2238", "field": "document.tracking.generator.date"}, {"timestamp": "2021-06-03T00:00:00Z", "date_only": false, "value": "2021-06-03T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2021:2238", "record": "RHSA-2021:2238", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-06-03T06:55:00Z", "date_only": false, "value": "2021-06-03T06:55:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2021:2236", "record": "RHSA-2021:2236", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2021-06-03T06:55:00Z", "date_only": false, "value": "2021-06-03T06:55:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2021:2237", "record": "RHSA-2021:2237", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2021-06-03T06:55:00Z", "date_only": false, "value": "2021-06-03T06:55:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2021:2522", "record": "RHSA-2021:2522", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2021-06-03T06:55:00Z", "date_only": false, "value": "2021-06-03T06:55:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2021:2555", "record": "RHSA-2021:2555", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2021-06-03T07:00:00Z", "date_only": false, "value": "2021-06-03T07:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-3560", "record": "UBUNTU-CVE-2021-3560", "field": "published"}, {"timestamp": "2021-06-03T10:11:01Z", "date_only": false, "value": "2021-06-03T10:11:01+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:2236", "record": "RHSA-2021:2236", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-06-03T10:11:01Z", "date_only": false, "value": "2021-06-03T10:11:01+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:2236", "record": "RHSA-2021:2236", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2021-06-03T10:11:01Z", "date_only": false, "value": "2021-06-03T10:11:01+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2021:2236", "record": "RHSA-2021:2236", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-06-03T11:03:38Z", "date_only": false, "value": "2021-06-03T11:03:38+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:2237", "record": "RHSA-2021:2237", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-06-03T11:03:38Z", "date_only": false, "value": "2021-06-03T11:03:38+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:2237", "record": "RHSA-2021:2237", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2021-06-03T11:03:38Z", "date_only": false, "value": "2021-06-03T11:03:38+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2021:2237", "record": "RHSA-2021:2237", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-06-03T14:21:32Z", "date_only": false, "value": "2021-06-03T14:21:32Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:1842-1", "record": "SUSE-SU-2021:1842-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-06-03T14:21:32Z", "date_only": false, "value": "2021-06-03T14:21:32Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2021:1842-1", "record": "SUSE-SU-2021:1842-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-06-03T14:21:32Z", "date_only": false, "value": "2021-06-03T14:21:32Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2021:1842-1", "record": "SUSE-SU-2021:1842-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-06-03T14:21:32Z", "date_only": false, "value": "2021-06-03T14:21:32Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2021:1842-1", "record": "SUSE-SU-2021:1842-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-06-03T14:22:54Z", "date_only": false, "value": "2021-06-03T14:22:54Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:1843-1", "record": "SUSE-SU-2021:1843-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-06-03T14:22:54Z", "date_only": false, "value": "2021-06-03T14:22:54Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2021:1843-1", "record": "SUSE-SU-2021:1843-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-06-03T14:22:54Z", "date_only": false, "value": "2021-06-03T14:22:54Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2021:1843-1", "record": "SUSE-SU-2021:1843-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-06-03T14:22:54Z", "date_only": false, "value": "2021-06-03T14:22:54Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2021:1843-1", "record": "SUSE-SU-2021:1843-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-06-03T14:23:36Z", "date_only": false, "value": "2021-06-03T14:23:36Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:1844-1", "record": "SUSE-SU-2021:1844-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-06-03T14:23:36Z", "date_only": false, "value": "2021-06-03T14:23:36Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2021:1844-1", "record": "SUSE-SU-2021:1844-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-06-03T14:23:36Z", "date_only": false, "value": "2021-06-03T14:23:36Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2021:1844-1", "record": "SUSE-SU-2021:1844-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-06-03T14:23:36Z", "date_only": false, "value": "2021-06-03T14:23:36Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2021:1844-1", "record": "SUSE-SU-2021:1844-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-06-04T08:34:08Z", "date_only": false, "value": "2021-06-04T08:34:08Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:0838-1", "record": "OPENSUSE-SU-2021:0838-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-06-04T08:34:08Z", "date_only": false, "value": "2021-06-04T08:34:08Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:0838-1", "record": "OPENSUSE-SU-2021:0838-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-06-04T08:34:08Z", "date_only": false, "value": "2021-06-04T08:34:08Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:0838-1", "record": "OPENSUSE-SU-2021:0838-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-06-04T08:34:08Z", "date_only": false, "value": "2021-06-04T08:34:08Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:0838-1", "record": "OPENSUSE-SU-2021:0838-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-06-08T17:00:00Z", "date_only": false, "value": "2021-06-08T17:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2021:2522", "record": "RHSA-2021:2522", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2021-06-11T12:02:00Z", "date_only": false, "value": "2021-06-11T12:02:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/true_secator/1808", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "ee49057d-db21-4f1d-a7b4-ff520a5ab74d", "content": "\u041a\u0435\u0432\u0438\u043d \u0411\u044d\u043a\u0445\u0430\u0443\u0441, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c GitHub Security Lab, \u043d\u0430\u0448\u0435\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 polkit \u0432 Linux, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0440\u0443\u0442\u043e\u0432\u044b\u0435 \u043f\u0440\u0430\u0432\u0430.\n\nPolkit - \u044d\u0442\u043e \u0441\u043b\u0443\u0436\u0431\u0430, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 Ubuntu, Fedora, Red Hat \u0438 \u0434\u0440.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 CVE-2021-3560 \u0438 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 3 \u0438\u044e\u043d\u044f. \u0421\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u043e\u043d\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 polkit 0.113 \u0435\u0449\u0435 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2013 \u0433\u043e\u0434\u0430 (\u0430 Baron Samedit \u0432 sudo \u043f\u0440\u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0432\u0441\u0435 10 \u043b\u0435\u0442 \u0434\u043e \u0441\u0432\u043e\u0435\u0433\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f).\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u0435\u0441\u044c\u043c\u0430 \u043f\u0440\u043e\u0441\u0442\u0430 \u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u0411\u044d\u043a\u0445\u0430\u0443\u0441\u043e\u043c \u0432 \u0441\u0432\u043e\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435. \u041e\u0446\u0435\u043d\u043a\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u043f\u043e CVSS - 7,8.\n\n\u0412\u0441\u0435\u043c, \u043a\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b \u0441 polkit \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f (\u0445\u043e\u0442\u044f \u044d\u0442\u043e \u043d\u0435 RCE, \u043a\u043e\u043d\u0435\u0447\u043d\u043e, \u0438 \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435).", "url": "https://t.me/true_secator/1808"}, {"timestamp": "2021-06-11T17:33:35Z", "date_only": false, "value": "2021-06-11T17:33:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/information_security_channel/44366", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "7a1ca460-df84-4b8f-acb6-b6b743288f32", "content": "GitHub Discloses Details of Easy-to-Exploit Linux Vulnerability\nhttp://feedproxy.google.com/~r/securityweek/~3/ixenj8Lk5tU/github-discloses-details-easy-exploit-linux-vulnerability\n\nGitHub this week disclosed the details of an easy-to-exploit Linux vulnerability that can be leveraged to escalate privileges to root on the targeted system.\nThe flaw, classified as high severity and tracked as CVE-2021-3560, impacts polkit, an authorization service that is present by default in many Linux distributions.\nread more (https://www.securityweek.com/github-discloses-details-easy-exploit-linux-vulnerability)", "url": "https://t.me/information_security_channel/44366"}, {"timestamp": "2021-06-12T08:24:48Z", "date_only": false, "value": "2021-06-12T08:24:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberbannews_ir/3348", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "6a07e4cb-41f9-44b0-8006-1589494b7384", "content": "\ud83d\uded1\u0647\u0634\u062f\u0627\u0631 \u062f\u0631 \u0645\u0648\u0631\u062f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0628\u0632\u0627\u0631 PolKit\n\n\u06cc\u06a9 \u0645\u062d\u0642\u0642 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u0647 \u0646\u0627\u0645 \u00abKevin Backhouse\u00bb \u062f\u0631 \u0648\u0628\u0644\u0627\u06af \u062e\u0648\u062f \u0646\u0633\u0628\u062a \u0628\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0642\u062f\u06cc\u0645\u06cc \u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647 PolKit \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f. \n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647 \u06a9\u0647 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 \u00abCVE-2021-3560\u00bb \u0634\u0646\u0627\u062e\u062a\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u0627\u0632 \u0633\u0627\u0644 2015 \u0647\u0645\u0686\u0646\u0627\u0646 \u0648\u062c\u0648\u062f \u062f\u0627\u0634\u062a\u0647 \u0648 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc PolKit 0.113 \u062a\u0627 0.118 \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0647 \u0627\u0633\u062a.\n\n\u062a\u0648\u0632\u06cc\u0639\u200c\u0647\u0627\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647\u200c\u06a9\u0646\u0646\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647 \u0646\u06cc\u0632 \u062e\u0635\u0648\u0635\u0627 \u062a\u0648\u0632\u06cc\u0639\u200c\u0647\u0627\u06cc \u062f\u0628\u06cc\u0627\u0646 \u06a9\u0647 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc PolKit 0.105\u060c RHEL 8\u060c Fedora 21\u060c Debian \"Bullseye\" \u0648 Ubuntu 20.04 \u062f\u0631 \u0622\u0646\u200c\u0647\u0627 \u0627\u062c\u0631\u0627 \u0634\u062f\u0647\u200c\u0627\u0646\u062f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0647\u0633\u062a\u0646\u062f. \n\n#\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc\n\n\u2705 \u0628\u06cc\u0634\u062a\u0631 \u0628\u062e\u0648\u0627\u0646\u06cc\u062f:\nhttps://bit.ly/35f3h6O\n\n@cyberbannews_ir", "url": "https://t.me/cyberbannews_ir/3348"}, {"timestamp": "2021-06-12T14:09:43Z", "date_only": false, "value": "2021-06-12T14:09:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/35152", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "e8e526e7-f069-43ca-a4b1-af6b53e00f3a", "content": "CVE-2021-3560 flaw in polkit auth system service affects most of Linux distros\n\nhttps://ift.tt/3ghbI7J", "url": "https://t.me/ctinow/35152"}, {"timestamp": "2021-06-13T04:07:48Z", "date_only": false, "value": "2021-06-13T04:07:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverse_dungeon/568", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "d1a2d8cd-8a55-441d-850c-01009141bddf", "content": "\u041a\u0435\u0432\u0438\u043d \u0411\u044d\u043a\u0445\u0430\u0443\u0441, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c GitHub Security Lab, \u043d\u0430\u0448\u0435\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 polkit \u0432 Linux, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0440\u0443\u0442\u043e\u0432\u044b\u0435 \u043f\u0440\u0430\u0432\u0430.\n\nPolkit - \u044d\u0442\u043e \u0441\u043b\u0443\u0436\u0431\u0430, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 Ubuntu, Fedora, Red Hat \u0438 \u0434\u0440.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 CVE-2021-3560 \u0438 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 3 \u0438\u044e\u043d\u044f. \u0421\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u043e\u043d\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 polkit 0.113 \u0435\u0449\u0435 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2013 \u0433\u043e\u0434\u0430 (\u0430 Baron Samedit \u0432 sudo \u043f\u0440\u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0432\u0441\u0435 10 \u043b\u0435\u0442 \u0434\u043e \u0441\u0432\u043e\u0435\u0433\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f).\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u0435\u0441\u044c\u043c\u0430 \u043f\u0440\u043e\u0441\u0442\u0430 \u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u0411\u044d\u043a\u0445\u0430\u0443\u0441\u043e\u043c \u0432 \u0441\u0432\u043e\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435. \u041e\u0446\u0435\u043d\u043a\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u043f\u043e CVSS - 7,8.\n\n\u0412\u0441\u0435\u043c, \u043a\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b \u0441 polkit \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f (\u0445\u043e\u0442\u044f \u044d\u0442\u043e \u043d\u0435 RCE, \u043a\u043e\u043d\u0435\u0447\u043d\u043e, \u0438 \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435).", "url": "https://t.me/reverse_dungeon/568"}, {"timestamp": "2021-06-13T15:32:20Z", "date_only": false, "value": "2021-06-13T15:32:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/theninjaway1337/1001", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "f9a48f40-d3b7-4fb6-8d61-b07c2ccacd37", "content": "#linux #explot #privesc \n\nCVE-2021-3560 Local PrivEsc Exploit\n\n https://github.com/swapravo/polkadots", "url": "https://t.me/theninjaway1337/1001"}, {"timestamp": "2021-06-15T00:00:00Z", "date_only": false, "value": "2021-06-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://www.exploit-db.com/exploits/50011", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "f935e709-ddc2-4439-b5ab-cc75730f89e1", "url": "https://www.exploit-db.com/exploits/50011"}, {"timestamp": "2021-06-16T01:37:34Z", "date_only": false, "value": "2021-06-16T01:37:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pwnwiki_zhchannel/654", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "fa66a2a5-5ab7-49ce-8f29-d58fc867de6b", "content": "CVE-2021-3560 Polkit 0.105-26 0.117-2 \u672c\u5730\u7279\u6b0a\u63d0\u5347\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-3560_Polkit_0.105-26_0.117-2_%E6%9C%AC%E5%9C%B0%E7%89%B9%E6%AC%8A%E6%8F%90%E5%8D%87%E6%BC%8F%E6%B4%9E", "url": "https://t.me/pwnwiki_zhchannel/654"}, {"timestamp": "2021-06-19T09:55:48Z", "date_only": false, "value": "2021-06-19T09:55:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/pwnwiki_zhchannel/679", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "46478907-f72f-4948-95f2-585e5fd6610b", "content": "CVE-2021-3560 - \u4f7f\u7528kill\u547d\u4ee4\u9032\u884c\u6b0a\u9650\u63d0\u5347\nhttps://forums.pwnwiki.org/t/34", "url": "https://t.me/pwnwiki_zhchannel/679"}, {"timestamp": "2021-06-22T11:04:28Z", "date_only": false, "value": "2021-06-22T11:04:28Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2021-1230", "record": "OESA-2021-1230", "field": "published"}, {"timestamp": "2021-06-22T14:57:03Z", "date_only": false, "value": "2021-06-22T14:57:03+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:2522", "record": "RHSA-2021:2522", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-06-22T14:57:03Z", "date_only": false, "value": "2021-06-22T14:57:03+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:2522", "record": "RHSA-2021:2522", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2021-06-22T14:57:03Z", "date_only": false, "value": "2021-06-22T14:57:03+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2021:2522", "record": "RHSA-2021:2522", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-07-01T11:03:01Z", "date_only": false, "value": "2021-07-01T11:03:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/3732", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "8311a680-13f2-4528-8b20-b371f4dea28a", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (June 1-30)\nCVE-2021-1675 - Windows Print Spooler EoP\nhttps://t.me/cybersecuritytechnologies/3723\nCVE-2021-21985 - vSphere Client RCE\nhttps://t.me/cybersecuritytechnologies/3493\nCVE-2021-3560 - Privilege escalation with polkit\nhttps://t.me/cybersecuritytechnologies/3587\nCVE-2021-28476 - Hyper-V RCE in vmswitch.sys\nhttps://t.me/cybersecuritytechnologies/3514\nCVE-2020-3580 - XSS in Cisco ASA\nhttps://www.helpnetsecurity.com/2021/06/29/cve-2020-3580-exploit\nCVE-2021-31955/31956 - Windows NTFS EoP/Kernel Information Disclosure\nhttps://github.com/mavillon1/CVE-2021-31955-POC\nhttps://t.me/cybersecuritytechnologies/3705\nCVE-2021-33739 - MS DWM Core Library EoP\nhttps://t.me/cybersecuritytechnologies/3581\nCVE-2021-27850 - Apache Tapestry RCE\nhttps://t.me/cybersecuritytechnologies/3694\nCVE-2020-36289 - Atlassian Jira Unauth User Enum\nhttps://mobile.twitter.com/i/web/status/1402644004781633540", "url": "https://t.me/CyberSecurityTechnologies/3732"}, {"timestamp": "2021-07-06T11:31:17Z", "date_only": false, "value": "2021-07-06T11:31:17+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:2555", "record": "RHSA-2021:2555", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-07-06T11:31:17Z", "date_only": false, "value": "2021-07-06T11:31:17+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:2555", "record": "RHSA-2021:2555", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2021-07-06T11:31:17Z", "date_only": false, "value": "2021-07-06T11:31:17+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2021:2555", "record": "RHSA-2021:2555", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-07-08T22:05:22Z", "date_only": false, "value": "2021-07-08T22:05:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/polkit_dbus_auth_bypass.rb", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "feeb0e5d-8c5a-4089-8ed3-eda1acec45f2", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/polkit_dbus_auth_bypass.rb"}, {"timestamp": "2021-07-11T12:11:00Z", "date_only": false, "value": "2021-07-11T12:11:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1843-1", "record": "OPENSUSE-SU-2021:1843-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-07-11T12:11:00Z", "date_only": false, "value": "2021-07-11T12:11:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1843-1", "record": "OPENSUSE-SU-2021:1843-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-07-11T12:11:00Z", "date_only": false, "value": "2021-07-11T12:11:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1843-1", "record": "OPENSUSE-SU-2021:1843-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-07-11T12:11:00Z", "date_only": false, "value": "2021-07-11T12:11:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1843-1", "record": "OPENSUSE-SU-2021:1843-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-07-30T11:42:23Z", "date_only": false, "value": "2021-07-30T11:42:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/211", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "f5eec937-f2e4-47e3-a733-de1a88d290f2", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aExploit\n\u63cf\u8ff0\uff1aPolkit D-Bus Authentication Bypass Exploit\nURL\uff1ahttps://github.com/0Day-dev/CVE-2021-3560", "url": "https://t.me/GithubRedTeam/211"}, {"timestamp": "2021-08-16T19:15:23Z", "date_only": false, "value": "2021-08-16T19:15:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/JGMy2HKSfAD3BUEkBfRAPBYrdj6682LBX41uJfpddYGBBQ", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "0d0528c0-3d00-4a56-9e4e-31cc962068f8"}, {"timestamp": "2021-08-24T04:56:13Z", "date_only": false, "value": "2021-08-24T04:56:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/378", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "6e39005d-54b3-4e46-81df-cd8b0dc4435a", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aAutomatic Explotation PoC for Polkit CVE-2021-3560\nURL\uff1ahttps://github.com/aancw/polkit-auto-exploit", "url": "https://t.me/GithubRedTeam/378"}, {"timestamp": "2022-01-31T09:07:20Z", "date_only": false, "value": "2022-01-31T09:07:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1455", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "02f1486f-68dd-46b0-839f-8966d682c24e", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-3560 analysis\nURL\uff1ahttps://github.com/chenaotian/CVE-2021-3560", "url": "https://t.me/GithubRedTeam/1455"}, {"timestamp": "2022-02-02T00:00:00Z", "date_only": false, "value": "2022-02-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-3560", "record": "MSRC_CVE-2021-3560", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-02-02T19:29:53Z", "date_only": false, "value": "2022-02-02T19:29:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1467", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "d5802f0d-0715-4f0e-98fa-40e7c2da4fe4", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aPolkit Exploit (CVE-2021-3560). Instant Root.\nURL\uff1ahttps://github.com/n3onhacks/CVE-2021-3560", "url": "https://t.me/GithubRedTeam/1467"}, {"timestamp": "2022-02-16T00:00:00Z", "date_only": false, "value": "2022-02-16T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-3560", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-02-16T19:15:00Z", "date_only": false, "value": "2022-02-16T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7C49-J253-WQ5R", "record": "GHSA-7C49-J253-WQ5R", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-02-16T19:15:00Z", "date_only": false, "value": "2022-02-16T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-3560", "record": "GSD-2021-3560", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-02-16T19:15:08.450Z", "date_only": false, "value": "2022-02-16T19:15:08.450", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-3560", "record": "FKIE_CVE-2021-3560", "field": "published"}, {"timestamp": "2022-02-16T22:36:28Z", "date_only": false, "value": "2022-02-16T22:36:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/37624", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "f8a4e359-a7bf-43bf-961c-05d3f0c41a46", "content": "\u203c CVE-2021-3560 \u203c\n\nIt was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/37624"}, {"timestamp": "2022-02-17T00:00:28Z", "date_only": false, "value": "2022-02-17T00:00:28Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7C49-J253-WQ5R", "record": "GHSA-7C49-J253-WQ5R", "field": "published"}, {"timestamp": "2022-02-17T06:24:35Z", "date_only": false, "value": "2022-02-17T06:24:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/beaverdreamer/55", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "9ebd6257-cbec-4c65-a9f4-39a09f27c814", "content": "#polkit #exploit\n\u0421\u043e\u0437\u0434\u0430\u0435\u0442\u0441\u044f \u044e\u0437\u0435\u0440 ahmed, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0435\u0433\u043e \u0441\u0442\u043e\u0438\u0442 \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u0438 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u043f\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044e \u0440\u0430\u0431\u043e\u0442 :)\nhttps://raw.githubusercontent.com/Almorabea/Polkit-exploit/main/CVE-2021-3560.py", "url": "https://t.me/beaverdreamer/55"}, {"timestamp": "2022-03-01T00:00:00Z", "date_only": false, "value": "2022-03-01T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-3560", "record": "MSRC_CVE-2021-3560", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-03-01T00:00:00Z", "date_only": false, "value": "2022-03-01T00:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-3560", "record": "MSRC_CVE-2021-3560", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2022-03-01T00:00:00Z", "date_only": false, "value": "2022-03-01T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-3560", "record": "MSRC_CVE-2021-3560", "field": "document.tracking.current_release_date"}, {"timestamp": "2022-03-09T15:49:41Z", "date_only": false, "value": "2022-03-09T15:49:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/intelexch/10408", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "61dc6ba4-c4f9-4cdc-b385-7f4f1db719d3", "content": "https://github.com/GatoGamer1155/CVE-2021-3560", "url": "https://t.me/intelexch/10408"}, {"timestamp": "2022-03-12T19:48:01Z", "date_only": false, "value": "2022-03-12T19:48:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reconshell/1216", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "e2d1cb33-8cbf-4ea9-80ab-d35e7d2ea9b9", "content": "Automatic Linux privesc exploitation\n\n#CVE-2021-3560 #CVE-2021-4034 #CVE-2022-0847\n#Linux #privesc #exploitation #PrivilegeEscalation\n#vulnerabilities #root #shell #Exploit #Hacking\n\nhttps://reconshell.com/automatic-linux-privesc-exploitation/", "url": "https://t.me/reconshell/1216"}, {"timestamp": "2022-04-15T00:00:00Z", "date_only": false, "value": "2022-04-15T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-351", "record": "CERTFR-2022-AVI-351", "field": "last_revision_date"}, {"timestamp": "2022-04-15T00:00:00Z", "date_only": false, "value": "2022-04-15T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-351", "record": "CERTFR-2022-AVI-351", "field": "initial_release_date"}, {"timestamp": "2022-04-15T00:00:00Z", "date_only": false, "value": "2022-04-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-351", "record": "CERTFR-2022-AVI-351", "field": "revisions.0.revision_date"}, {"timestamp": "2022-06-11T12:43:01Z", "date_only": false, "value": "2022-06-11T12:43:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/6178", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "04e2dc1d-c70f-48c1-a4fe-879f0a326239", "content": "#Threat_Research\n1. A New Exploit Method for CVE-2021-3560 PolicyKit Linux Privilege Escalation\nhttp://noahblog.360.cn/a-new-exploit-method-for-cve-2021-3560-policykit-linux-privilege-escalation-en\n2. De-Anonymization attacks against Proton services\nhttps://www.reversemode.com/2022/06/de-anonymization-attacks-against-proton.html", "url": "https://t.me/CyberSecurityTechnologies/6178"}, {"timestamp": "2022-06-18T10:22:36Z", "date_only": false, "value": "2022-06-18T10:22:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/arm1tage/129", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "2d8f753b-25ca-424e-a33d-97f9c190b090", "content": "HackTheBox:\n\n\u2014Easy Machines\u2014\n\nDriver - WinRM (evil-winrm), printnightmare CVE-2021-1675 (https://habr.com/ru/sandbox/156538/)\nhttps://0xdf.gitlab.io/2022/02/26/htb-driver.html\n\nSecret - JWT, Git source (tig), crush-dumps\nhttps://0xdf.gitlab.io/2022/03/26/htb-secret.html\n\nBackDoor - Wordpress eBook Dir Trav (https://www.exploit-db.com/exploits/39575), gdb exploit (https://www.exploit-db.com/exploits/50539, https://www.rapid7.com/db/modules/exploit/multi/gdb/gdb_server_exec/) \nhttps://0xdf.gitlab.io/2022/04/23/htb-backdoor.html\n\nPrevise - Backup, Site Reverse Shell, low-encrypted passwords\nhttps://0xdf.gitlab.io/2022/01/08/htb-previse.html\n\nBountyHunter - XXE, (root) NOPASSWD python code\nhttps://0xdf.gitlab.io/2021/11/20/htb-bountyhunter.html\n\nHorizontal - Strapi CMS 3.0.0 CVE-2019-18818/CVE-2019-19609 (https://www.exploit-db.com/exploits/50239, https://github.com/diego-tella/CVE-2019-19609-EXPLOIT), Laravel v8 (https://www.exploit-db.com/exploits/49424)\nhttps://0xdf.gitlab.io/2022/02/05/htb-horizontall.html\n\nOptimum - Windows 2012 (https://www.rapid7.com/db/modules/exploit/windows/http/rejetto_hfs_exec/, https://www.rapid7.com/db/modules/exploit/windows/local/ms16_032_secondary_logon_handle_privesc/)\nhttps://0xdf.gitlab.io/2021/03/17/htb-optimum.html\n\nLame - FTP Anonymous, SAMBA exploit (https://github.com/amriunix/CVE-2007-2447)\nhttps://0xdf.gitlab.io/2020/04/07/htb-lame.html\n\nJerry - Tomcat Default Cred, shell via .WAR\nhttps://0xdf.gitlab.io/2018/11/17/htb-jerry.html\n\nBlue - Win7 eternalblue (https://www.rapid7.com/db/modules/exploit/windows/smb/ms17_010_eternalblue/)\nhttps://0xdf.gitlab.io/2021/05/11/htb-blue.html\n\nDevel - Microsoft IIS httpd 7.5 reverse shell via .ASPX, MS11-046 or ms10_015_kitrap0d (https://github.com/abatchy17/WindowsExploits/tree/master/MS11-046)\nhttps://0xdf.gitlab.io/2019/03/05/htb-devel.html\n\nNetmon - PRTG Network Monitor 18.1.37.13946, Backup credentials, CVE-2018-9276 (https://github.com/A1vinSmith/CVE-2018-9276) / (https://www.exploit-db.com/exploits/46527) + evil-winrm\nhttps://0xdf.gitlab.io/2019/06/29/htb-netmon.html\n\nExplore (Android) - 59777 port CVE-2019-6447 (https://www.exploit-db.com/exploits/50070), SSH Creds on Photo, adb shell\nhttps://0xdf.gitlab.io/2021/10/30/htb-explore.html\n\nAntique - Telnet password via snmpget (https://www.irongeek.com/i.php?page=security/networkprinterhacking#JetDirect%20password%20notes), CUPS 1.6.1 (https://github.com/jpillora/chisel) \nhttps://0xdf.gitlab.io/2022/05/03/htb-antique.html\n\nReturn - evil-winrm, Server Operators in net user svc-printer /domain, sc.exe\nhttps://0xdf.gitlab.io/2022/05/05/htb-return.html\n\nGrandpa - CVE-2017-7269 (https://www.rapid7.com/db/modules/exploit/windows/iis/iis_webdav_scstoragepathfromurl/), SEImpersonalPrivilege Churrasco (https://github.com/Re4son/Churrasco/)\nhttps://0xdf.gitlab.io/2020/05/28/htb-grandpa.html\n\nBeep - ShellShock or Elastix 2.2.0 - 'graph.php' Local File Inclusion, (root) NOPASSWD nmap\nhttps://0xdf.gitlab.io/2021/02/23/htb-beep.html\n\nPandora - snmpwalk creds, CVE-2021-32099, Site Reverse Shell\nhttps://0xdf.gitlab.io/2022/05/21/htb-pandora.html\n\nPaper - WPS 5.2.3 - Cve-2019-17671 (https://www.exploit-db.com/exploits/47690, https://0day.work/proof-of-concept-for-wordpress-5-2-3-viewing-unauthenticated-posts/), Chat Bot Dir Trav, CVE-2021-3560 (https://github.com/Almorabea/Polkit-exploit/blob/main/CVE-2021-3560.py)\nhttps://0xjin.medium.com/paper-hackthebox-write-up-2abca22d3b54\n\n\n#hackthebox #ctf", "url": "https://t.me/arm1tage/129"}, {"timestamp": "2022-08-25T09:00:04Z", "date_only": false, "value": "2022-08-25T09:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/poxek/2359", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "e4630972-6d45-4219-b39d-224de87ec0c8", "content": "#Linux #CVE #POC\n\nPolkit Privilege Esclation\nCVE-2021-3560\n\npolkit - \u044d\u0442\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u0430\u044f \u0441\u043b\u0443\u0436\u0431\u0430, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Linux. \u041e\u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f systemd, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043b\u044e\u0431\u043e\u0439 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432 Linux, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 systemd, \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 polkit.\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 polkit_system_bus_name_get_creds_sync() \u0434\u0435\u043c\u043e\u043d\u0430 dbus-daemon \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Polkit \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438", "url": "https://t.me/poxek/2359"}, {"timestamp": "2022-11-18T05:48:52Z", "date_only": false, "value": "2022-11-18T05:48:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/4865", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "c75294d0-e214-4f34-ac6d-9d3702c4f3c1", "content": "#Whitepaper\n\"Polkit Authentication Bypass / LPE\", 2021. \n\n// This whitepaper provides an overview of a Polkit authentication bypass vulnerability (CVE-2021-3560) that allows for LPE\n\n]-> PoC Exploit: https://t.me/cybersecuritytechnologies/3587", "url": "https://t.me/CyberSecurityTechnologies/4865"}, {"timestamp": "2023-05-12T00:00:00Z", "date_only": false, "value": "2023-05-12T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2021-3560", "field": "timestamps.asserted_at", "uuid": "559429d5-cfdf-47e1-b6cc-a5c3a2f71256", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-05-12T00:00:00Z", "date_only": false, "value": "2023-05-12T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-3560", "field": "timestamps.asserted_at", "uuid": "4edaddc4-6cc3-4784-8836-29cce7c94576", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-05-12T00:00:00Z", "date_only": true, "value": "2023-05-12", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-3560", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2023-05-12T00:00:00Z", "date_only": false, "value": "2023-05-12T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2021-3560", "field": "evidence.0.details.added_date", "uuid": "4edaddc4-6cc3-4784-8836-29cce7c94576", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-05-12T00:00:00Z", "date_only": false, "value": "2023-05-12T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:2236", "record": "RHSA-2021:2236", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-05-12T00:00:00Z", "date_only": false, "value": "2023-05-12T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:2237", "record": "RHSA-2021:2237", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-05-12T00:00:00Z", "date_only": false, "value": "2023-05-12T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:2522", "record": "RHSA-2021:2522", "field": "vulnerabilities.2.threats.0.date"}, {"timestamp": "2023-05-12T00:00:00Z", "date_only": false, "value": "2023-05-12T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:2555", "record": "RHSA-2021:2555", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-05-12T00:00:00Z", "date_only": true, "value": "2023-05-12", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2021-3560", "field": "evidence.0.details.date_added", "uuid": "559429d5-cfdf-47e1-b6cc-a5c3a2f71256", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-05-12T00:00:00Z", "date_only": false, "value": "2023-05-12T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2021-3560", "field": "timestamps.first_seen_at", "uuid": "559429d5-cfdf-47e1-b6cc-a5c3a2f71256", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-05-12T00:00:00Z", "date_only": false, "value": "2023-05-12T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2021-3560", "field": "timestamps.first_seen_at", "uuid": "4edaddc4-6cc3-4784-8836-29cce7c94576", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-05-12T00:00:00Z", "date_only": false, "value": "2023-05-12T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2021-3560", "field": "status.status_updated_at", "uuid": "559429d5-cfdf-47e1-b6cc-a5c3a2f71256", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-05-12T00:00:00Z", "date_only": false, "value": "2023-05-12T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2021-3560", "field": "status.status_updated_at", "uuid": "4edaddc4-6cc3-4784-8836-29cce7c94576", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-05-12T00:00:00Z", "date_only": false, "value": "2023-05-12T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-3560", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2023-05-16T15:47:20Z", "date_only": false, "value": "2023-05-16T15:47:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/theninjaway1337/1371", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "013255fe-0275-46ec-9789-67fc63426cce", "content": "CISA: Several Old Linux Vulnerabilities Exploited in Attacks\n\nThe US Cybersecurity and Infrastructure Security Agency (CISA) has added several Linux and Linux-related flaws to its known exploited vulnerabilities (KEV) catalog.\nThe agency\u00a0added seven new vulnerabilities\u00a0to its KEV catalog on Friday: Ruckus AP remote code execution (CVE-2023-25717), Red Hat Polkit privilege escalation (CVE-2021-3560), Linux kernel privilege escalations (CVE-2014-0196 and CVE-2010-3904), Jenkins UI information disclosure (CVE-2015-5317), Apache Tomcat remote code execution (CVE-2016-8735), and an Oracle Java SE and JRockit issue (CVE-2016-3427).\n\nhttps://www.securityweek.com/cisa-several-old-linux-vulnerabilities-exploited-in-attacks/", "url": "https://t.me/theninjaway1337/1371"}, {"timestamp": "2023-06-02T00:00:00Z", "date_only": true, "value": "2023-06-02", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2021-3560", "field": "evidence.0.details.due_date", "uuid": "559429d5-cfdf-47e1-b6cc-a5c3a2f71256", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-12T06:06:22.689Z", "date_only": false, "value": "2023-06-12T06:06:22.689Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat", "record": "CVE-2021-3560", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-06-12T07:15:00Z", "date_only": false, "value": "2023-06-12T07:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-3560", "record": "GSD-2021-3560", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "683df2f2-5da2-463a-9429-9c57030bc416"}, {"timestamp": "2023-09-26T09:46:31Z", "date_only": false, "value": "2023-09-26T09:46:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LearnExploit/5529", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "912886e4-ca82-49ab-81f2-28098e68e18b", "content": "Traitor - Exploit Low-Hanging Fruit Automatically\n\n- Nearly all of GTFOBins\n- Writeable docker.sock\n- CVE-2022-0847 (Dirty pipe)\n- CVE-2021-4034 (pwnkit)\n- CVE-2021-3560\n\nGithub\n\n#Linux #Exploit #Tools \n\u2014\u2014\u2014\u2014\u2014\u2014\n0Day.Today\n@LearnExploit\n@Tech_Army", "url": "https://t.me/LearnExploit/5529"}, {"timestamp": "2023-09-26T19:41:26Z", "date_only": false, "value": "2023-09-26T19:41:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3136", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "6a0d3ecf-8ddc-4e26-8770-3177292979ec", "content": "Traitor - Exploit Low-Hanging Fruit Automatically\n\n\ud83c\udfa9 Nearly all of GTFOBins\n\ud83c\udfa9 Writeable docker.sock\n\ud83c\udfa9 CVE-2022-0847 (Dirty pipe)\n\ud83c\udfa9 CVE-2021-4034 (pwnkit)\n\ud83c\udfa9 CVE-2021-3560\n\n\nhttps://github.com/liamg/traitor", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3136"}, {"timestamp": "2023-12-01T07:35:12Z", "date_only": false, "value": "2023-12-01T07:35:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/838", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "90efa395-3ead-4108-aced-01ecad137fce", "content": "#ExploitObserverAlert\n\nCVE-2021-3560\n\nDESCRIPTION: Exploit Observer has 119 entries related to CVE-2021-3560. It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.\n\nFIRST-EPSS: 0.011770000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/838"}, {"timestamp": "2023-12-04T22:44:29Z", "date_only": false, "value": "2023-12-04T22:44:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1324", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "f5818ee2-bdd0-4318-8e7f-45b8ec8eda8b", "content": "#ExploitObserverAlert\n\nCVE-2021-3560\n\nDESCRIPTION: Exploit Observer has 120 entries related to CVE-2021-3560. It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.\n\nFIRST-EPSS: 0.011770000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/1324"}, {"timestamp": "2023-12-13T01:23:34.811Z", "date_only": false, "value": "2023-12-13T01:23:34.811778Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-3560", "record": "GSD-2021-3560", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-18T03:45:50Z", "date_only": false, "value": "2023-12-18T03:45:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1904", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "4dd8b5dd-03ab-470a-a9ab-7db3058f2709", "content": "#ExploitObserverAlert\n\nCVE-2021-3560\n\nDESCRIPTION: Exploit Observer has 120 entries related to CVE-2021-3560. It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.\n\nFIRST-EPSS: 0.011770000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/1904"}, {"timestamp": "2024-04-24T17:42:10Z", "date_only": false, "value": "2024-04-24T17:42:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/EidKnczSSqyjBcQ7sKuQ5Eq9NVHE7CjrCRWQNDH8CB5oRZc", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "19ecba55-0118-48d9-a911-2bcb7c21cd06"}, {"timestamp": "2024-04-24T17:42:11Z", "date_only": false, "value": "2024-04-24T17:42:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LockBitRaasRansomware/22829", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "b20174e9-0ee4-46f8-9bcc-e147e115fc60", "content": "Traitor - Exploit Low-Hanging Fruit Automatically\n\n\ud83c\udfa9 Nearly all of GTFOBins\n\ud83c\udfa9 Writeable docker.sock\n\ud83c\udfa9 CVE-2022-0847 (Dirty pipe)\n\ud83c\udfa9 CVE-2021-4034 (pwnkit)\n\ud83c\udfa9 CVE-2021-3560\n\n\nhttps://github.com/liamg/traitor", "url": "https://t.me/LockBitRaasRansomware/22829"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11180-1", "record": "OPENSUSE-SU-2024:11180-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11180-1", "record": "OPENSUSE-SU-2024:11180-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11180-1", "record": "OPENSUSE-SU-2024:11180-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11180-1", "record": "OPENSUSE-SU-2024:11180-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-08-03T17:01:06.571Z", "date_only": false, "value": "2024-08-03T17:01:06.571Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-3560", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-09T17:35:14Z", "date_only": false, "value": "2024-10-09T17:35:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/3587", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "7e5b41ab-a245-4d21-ab2b-a7629bc9edbd", "content": "#exploit\nCVE-2021-3560:\nPrivilege escalation with polkit: How to get root on Linux with a seven-year-old bug\nhttps://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug", "url": "https://t.me/CyberSecurityTechnologies/3587"}, {"timestamp": "2024-12-02T15:04:13Z", "date_only": false, "value": "2024-12-02T15:04:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/1283", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "619b2498-cd4f-47fa-a594-752de2d86a66", "content": "A newly discovered 7-year-old Polkit vulnerability (CVE-2021-3560) could allow unprivileged Linux users to gain root access on target systems.\n\nRead: https://thehackernews.com/2021/06/7-year-old-polkit-flaw-lets.html", "url": "https://t.me/thehackernews/1283"}, {"timestamp": "2024-12-24T20:34:24.985Z", "date_only": false, "value": "2024-12-24T20:34:24.985091Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971816", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "94255abd-5a05-4a6f-87f9-a1d3870b3322", "url": "https://feedsin.space/feed/CISAKevBot/items/2971816"}, {"timestamp": "2025-01-29T21:24:12.585Z", "date_only": false, "value": "2025-01-29T21:24:12.585039Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-3560", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-01-29T21:24:12.585Z", "date_only": false, "value": "2025-01-29T21:24:12.585039Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-3560", "record": "FKIE_CVE-2021-3560", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-30T02:17:49Z", "date_only": false, "value": "2025-01-30T02:17:49.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/hPHgDnp1pdH4sj9QFaxaJ9fY-IB8NnzLz8KIVcQH7bezm6_5", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "a93f95b6-30f1-41e2-b079-25f29baea02a"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "f7fa755a-d125-41c6-a231-3197fe3e5f1f"}, {"timestamp": "2025-02-11T07:01:30Z", "date_only": false, "value": "2025-02-11T07:01:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/shashinma/4d29c803ec30066d2b1178820b10c7fc", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "6451120b-ae67-4c72-86c6-33a5492e24fd", "url": "https://gist.github.com/shashinma/4d29c803ec30066d2b1178820b10c7fc"}, {"timestamp": "2025-02-18T16:00:09Z", "date_only": false, "value": "2025-02-18T16:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Ke7Qtx69srUNZs11KMyAFiA7I0NF0hlyPNgwpSWisFGTfjQ", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "c5fa4a3a-7104-43f8-9cc4-79cfdcbe8deb"}, {"timestamp": "2025-02-23T02:10:31Z", "date_only": false, "value": "2025-02-23T02:10:31.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "06d152cd-d2be-473a-af7a-696c780e5829"}, {"timestamp": "2025-02-23T04:10:39Z", "date_only": false, "value": "2025-02-23T04:10:39.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "ebc14b6b-8c31-4efb-8108-f6176d052804"}, {"timestamp": "2025-05-26T05:29:58.352Z", "date_only": false, "value": "2025-05-26T05:29:58.352432Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lq2gykpbkz2g", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "0a27b347-7000-43fa-be58-66ed741e60e7", "url": "https://bsky.app/profile/buherator.bsky.social/post/3lq2gykpbkz2g"}, {"timestamp": "2025-07-07T21:00:04Z", "date_only": false, "value": "2025-07-07T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/17sx7vfyYyw5cNVTNyrGtWFmcDoHLeuKbaDi91L36vhy8Ec", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "1cb59753-9615-432b-be71-2793d15a273a"}, {"timestamp": "2025-08-31T03:00:58Z", "date_only": false, "value": "2025-08-31T03:00:58.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "514206f5-50b6-4c8d-8fd8-7aec4fa2a75b"}, {"timestamp": "2025-10-21T23:15:46.259Z", "date_only": false, "value": "2025-10-21T23:15:46.259Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-3560", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:15:46.259Z", "date_only": false, "value": "2025-10-21T23:15:46.259Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-3560", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:30Z", "date_only": false, "value": "2025-10-22T00:32:30Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7C49-J253-WQ5R", "record": "GHSA-7C49-J253-WQ5R", "field": "modified"}, {"timestamp": "2025-10-31T21:00:05Z", "date_only": false, "value": "2025-10-31T21:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ZslVGStVV3_lt95-hFdoeilO4jVWtTXfLdOqUzc5Cu_nctM", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "1510269a-80fb-41dc-ad8a-5f6d91bcd782"}, {"timestamp": "2025-11-02T03:00:06Z", "date_only": false, "value": "2025-11-02T03:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/OZ23IKbQ47oGvBTE7eizQgpIhDfJ5XALPOlUhm63kbbFXAA", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "cfb81baa-b614-4d78-b9ef-9c4f7fc22767"}, {"timestamp": "2025-11-21T18:22:44Z", "date_only": false, "value": "2025-11-21T18:22:44+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:2236", "record": "RHSA-2021:2236", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-11-21T18:22:44Z", "date_only": false, "value": "2025-11-21T18:22:44+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2021:2236", "record": "RHSA-2021:2236", "field": "document.tracking.generator.date"}, {"timestamp": "2025-11-21T18:22:44Z", "date_only": false, "value": "2025-11-21T18:22:44+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2021:2236", "record": "RHSA-2021:2236", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-11-21T18:22:45Z", "date_only": false, "value": "2025-11-21T18:22:45+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:2237", "record": "RHSA-2021:2237", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-11-21T18:22:45Z", "date_only": false, "value": "2025-11-21T18:22:45+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2021:2237", "record": "RHSA-2021:2237", "field": "document.tracking.generator.date"}, {"timestamp": "2025-11-21T18:22:45Z", "date_only": false, "value": "2025-11-21T18:22:45+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2021:2237", "record": "RHSA-2021:2237", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-12-17T21:00:04Z", "date_only": false, "value": "2025-12-17T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/LegeDtMxRTlSxU-E4vRWPyR6r8eVZBSkTQd0bvp4AR24yPQ", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "ebead635-d754-4c9c-867f-e421f08e91f0"}, {"timestamp": "2025-12-27T18:08:48.039Z", "date_only": false, "value": "2025-12-27T18:08:48.039Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2021-3560", "record": "MSRC_CVE-2021-3560", "field": "document.tracking.generator.date"}, {"timestamp": "2026-02-02T12:26:59.147Z", "date_only": false, "value": "2026-02-02T12:26:59.147649Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2acf1b60-8bdc-45a3-82f1-b983f55668f3", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "c008b0b6-c95a-4356-b6e2-6c6417cc5024", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2acf1b60-8bdc-45a3-82f1-b983f55668f3"}, {"timestamp": "2026-02-02T12:26:59.147Z", "date_only": false, "value": "2026-02-02T12:26:59.147649Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2acf1b60-8bdc-45a3-82f1-b983f55668f3", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "6c0f5eb7-68d0-47dd-bd5c-432f8e66ea40", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2acf1b60-8bdc-45a3-82f1-b983f55668f3"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2021-3560", "field": "timestamps.recorded_at", "uuid": "559429d5-cfdf-47e1-b6cc-a5c3a2f71256", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-22T07:39:47Z", "date_only": false, "value": "2026-04-22T07:39:47Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-3560", "record": "UBUNTU-CVE-2021-3560", "field": "modified"}, {"timestamp": "2026-05-27T01:05:06Z", "date_only": false, "value": "2026-05-27T01:05:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/86046", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "387b1b73-0e20-410c-882a-4569a6ac93a0", "url": "https://t.me/GithubRedTeam/86046"}, {"timestamp": "2026-05-27T21:09:44Z", "date_only": false, "value": "2026-05-27T21:09:44.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/XPzjER_VXnqDaL0x3el2A57nJCguhK8qowmsl0HK-KFshHo", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "2083d8f3-8862-41f4-b731-f7af9318f4bb"}, {"timestamp": "2026-06-17T04:05:20.767Z", "date_only": false, "value": "2026-06-17T04:05:20.767", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-3560", "record": "FKIE_CVE-2021-3560", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:55.158Z", "date_only": false, "value": "2026-06-19T12:46:55.158326Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3408707d-94fd-4440-86a7-3a81285e29e1", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "34161a8d-a3b7-49e8-9532-2f018f6866d2", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3408707d-94fd-4440-86a7-3a81285e29e1"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2021-3560", "field": "timestamps.recorded_at", "uuid": "4edaddc4-6cc3-4784-8836-29cce7c94576", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:06.597Z", "date_only": false, "value": "2026-06-23T11:14:06.597773Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/4edaddc4-6cc3-4784-8836-29cce7c94576", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "806c243a-40d9-4679-9ddd-ade4af5c9d11", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/4edaddc4-6cc3-4784-8836-29cce7c94576"}, {"timestamp": "2026-06-23T14:05:40.582Z", "date_only": false, "value": "2026-06-23T14:05:40.582021Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1e8b453b-bf41-4209-a411-dd05d314c7c7", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "7fa4fe19-6114-44ef-ba23-3ed58a0c020b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1e8b453b-bf41-4209-a411-dd05d314c7c7"}, {"timestamp": "2026-07-17T11:00:09.112Z", "date_only": false, "value": "2026-07-17T11:00:09.112850Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/115", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "85764a27-1b77-47d9-b79f-92f3b62c543b", "url": "https://t.me/cyberwarehouse/115"}, {"timestamp": "2026-07-18T00:00:27.611Z", "date_only": false, "value": "2026-07-18T00:00:27.611988Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/115", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "0c0cf75a-8b7c-4cac-b869-344dd1c399b5", "url": "https://t.me/cyberwarehouse/115"}, {"timestamp": "2026-07-21T13:00:06.332Z", "date_only": false, "value": "2026-07-21T13:00:06.332651Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GitBook_s/141", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "0198071c-6f93-48c2-b348-f58125307d89", "url": "https://t.me/GitBook_s/141"}, {"timestamp": "2026-07-22T00:00:22.761Z", "date_only": false, "value": "2026-07-22T00:00:22.761403Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GitBook_s/141", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "5e4d6971-f814-41dc-921f-3f97271c1abe", "url": "https://t.me/GitBook_s/141"}, {"timestamp": "2026-08-06T11:04:28Z", "date_only": false, "value": "2026-08-06T11:04:28Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2021-1230", "record": "OESA-2021-1230", "field": "modified"}, {"timestamp": "2026-08-07T02:36:56Z", "date_only": false, "value": "2026-08-07T02:36:56+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:2555", "record": "RHSA-2021:2555", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-08-07T02:36:56Z", "date_only": false, "value": "2026-08-07T02:36:56+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2021:2555", "record": "RHSA-2021:2555", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-07T02:36:56Z", "date_only": false, "value": "2026-08-07T02:36:56+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2021:2555", "record": "RHSA-2021:2555", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-08-24T08:00:02.853Z", "date_only": false, "value": "2026-08-24T08:00:02.853847Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/xhqcankao/2256", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "f4ef2f5b-4623-4364-97e8-cc35dc028405", "url": "https://t.me/xhqcankao/2256"}, {"timestamp": "2026-08-27T12:00:09.168Z", "date_only": false, "value": "2026-08-27T12:00:09.168299Z", "kind": "sighting", "label": "Seen", "source": "Telegram/FMxKlI5Q8oe-wqfdJhLf519zmPU2wTxgtOLa-sFM77th6qo", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "ddeada83-34ea-4953-ba0a-94bb217efea8"}, {"timestamp": "2026-08-29T00:00:28.224Z", "date_only": false, "value": "2026-08-29T00:00:28.224533Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/FMxKlI5Q8oe-wqfdJhLf519zmPU2wTxgtOLa-sFM77th6qo", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "d54ea4df-1ed2-4a7e-89da-12f9319976ba"}, {"timestamp": "2026-09-01T17:00:48.562Z", "date_only": false, "value": "2026-09-01T17:00:48.562803Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/3394", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "0efec896-d3b4-4ba8-9830-fc860f5fb3e2", "url": "https://t.me/cissp/3394"}, {"timestamp": "2026-09-01T17:00:48.784Z", "date_only": false, "value": "2026-09-01T17:00:48.784164Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/3390", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "f4e36173-ab35-48bd-9cfd-6e702d538aae", "url": "https://t.me/cissp/3390"}, {"timestamp": "2026-09-01T20:01:12.877Z", "date_only": false, "value": "2026-09-01T20:01:12.877571Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/81243", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "97cb1475-e60f-4aad-8e2a-4d0e3470a881", "url": "https://t.me/hacking_Attack/81243"}, {"timestamp": "2026-09-01T20:01:12.926Z", "date_only": false, "value": "2026-09-01T20:01:12.926134Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/81245", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "b4a835a9-eb24-4d5e-9b04-e06384829e87", "url": "https://t.me/hacking_Attack/81245"}, {"timestamp": "2026-09-01T20:01:13.007Z", "date_only": false, "value": "2026-09-01T20:01:13.007097Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/81151", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "b5f7dd5b-bbdc-448c-8beb-afb1a5464024", "url": "https://t.me/hacking_Attack/81151"}, {"timestamp": "2026-09-01T20:01:13.057Z", "date_only": false, "value": "2026-09-01T20:01:13.057596Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/81155", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "728bc91e-9e8b-46ac-b173-6261a0d4b371", "url": "https://t.me/hacking_Attack/81155"}, {"timestamp": "2026-09-01T20:01:13.124Z", "date_only": false, "value": "2026-09-01T20:01:13.124424Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/81237", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "e2ed58a7-e462-4a20-99fe-4e832d9ff717", "url": "https://t.me/hacking_Attack/81237"}, {"timestamp": "2026-09-01T20:02:04.805Z", "date_only": false, "value": "2026-09-01T20:02:04.805162Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/34461", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "38f7f2b2-1039-4678-908c-f3c6a3562d42", "url": "https://t.me/hacking_Attack/34461"}, {"timestamp": "2026-09-05T01:00:04.678Z", "date_only": false, "value": "2026-09-05T01:00:04.678425Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/OfhVuefsoKRdr0Dsr__JpyZdyxpoDA5ij7MfO8O_RItQOyo", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "48b52272-8b09-43f0-9f2a-8b276afc5d0f"}, {"timestamp": "2026-09-05T02:00:05.127Z", "date_only": false, "value": "2026-09-05T02:00:05.127780Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/81151", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "2a162280-4a7b-4789-8655-ea068fe9eaec", "url": "https://t.me/hacking_Attack/81151"}, {"timestamp": "2026-09-05T02:00:05.188Z", "date_only": false, "value": "2026-09-05T02:00:05.188008Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/81245", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "6405e196-364d-4abb-a87b-765e10ddc5d5", "url": "https://t.me/hacking_Attack/81245"}, {"timestamp": "2026-09-05T02:00:05.231Z", "date_only": false, "value": "2026-09-05T02:00:05.231520Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/81243", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "c55208b9-123a-48dc-bdc8-682f1fc58829", "url": "https://t.me/hacking_Attack/81243"}, {"timestamp": "2026-09-05T03:00:05.871Z", "date_only": false, "value": "2026-09-05T03:00:05.871285Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/81237", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "4c159d10-0864-40c0-9bfc-7cf1572a783d", "url": "https://t.me/hacking_Attack/81237"}, {"timestamp": "2026-09-05T03:00:05.918Z", "date_only": false, "value": "2026-09-05T03:00:05.918605Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/81155", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "d20974c8-1eae-4923-94ed-37d644ad023a", "url": "https://t.me/hacking_Attack/81155"}, {"timestamp": "2026-09-07T01:00:05.384Z", "date_only": false, "value": "2026-09-07T01:00:05.384364Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/34461", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "1ae4b2af-da4f-47b9-9b75-48144027f434", "url": "https://t.me/hacking_Attack/34461"}, {"timestamp": "2026-09-11T04:00:05.290Z", "date_only": false, "value": "2026-09-11T04:00:05.290450Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/3394", "record": "CVE-2021-3560", "field": "creation_timestamp", "uuid": "a00b0cb9-3e71-42dd-956c-5b76c9795e03", "url": "https://t.me/cissp/3394"}, {"timestamp": "2026-09-20T11:15:13Z", "date_only": false, "value": "2026-09-20T11:15:13Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2021:2238", "record": "RHSA-2021:2238", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T11:15:13Z", "date_only": false, "value": "2026-09-20T11:15:13Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2021:2238", "record": "RHSA-2021:2238", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T13:57:53Z", "date_only": false, "value": "2026-09-20T13:57:53Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:1842-1", "record": "SUSE-SU-2021:1842-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T13:57:53Z", "date_only": false, "value": "2026-09-20T13:57:53Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2021:1842-1", "record": "SUSE-SU-2021:1842-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T13:57:54Z", "date_only": false, "value": "2026-09-20T13:57:54Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:1843-1", "record": "SUSE-SU-2021:1843-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T13:57:54Z", "date_only": false, "value": "2026-09-20T13:57:54Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2021:1843-1", "record": "SUSE-SU-2021:1843-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T13:57:55Z", "date_only": false, "value": "2026-09-20T13:57:55Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:1844-1", "record": "SUSE-SU-2021:1844-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T13:57:55Z", "date_only": false, "value": "2026-09-20T13:57:55Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2021:1844-1", "record": "SUSE-SU-2021:1844-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T19:25:50Z", "date_only": false, "value": "2026-09-20T19:25:50Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:0838-1", "record": "OPENSUSE-SU-2021:0838-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:25:50Z", "date_only": false, "value": "2026-09-20T19:25:50Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:0838-1", "record": "OPENSUSE-SU-2021:0838-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T19:32:06Z", "date_only": false, "value": "2026-09-20T19:32:06Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1843-1", "record": "OPENSUSE-SU-2021:1843-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:32:06Z", "date_only": false, "value": "2026-09-20T19:32:06Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2021:1843-1", "record": "OPENSUSE-SU-2021:1843-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T20:13:15Z", "date_only": false, "value": "2026-09-20T20:13:15Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11180-1", "record": "OPENSUSE-SU-2024:11180-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:13:15Z", "date_only": false, "value": "2026-09-20T20:13:15Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11180-1", "record": "OPENSUSE-SU-2024:11180-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-14T13:39:16Z", "date_only": false, "value": "2026-10-14T13:39:16+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:2522", "record": "RHSA-2021:2522", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-14T13:39:16Z", "date_only": false, "value": "2026-10-14T13:39:16+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2021:2522", "record": "RHSA-2021:2522", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-14T13:39:16Z", "date_only": false, "value": "2026-10-14T13:39:16+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2021:2522", "record": "RHSA-2021:2522", "field": "document.tracking.current_release_date"}]}