https://vulnerability.circl.lu/sightings/feed 2026-10-03T03:37:17.178425+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/83359d73-78f2-46f3-ab42-2563bf0b7a90/export 2026-10-03T03:37:17.202094+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "83359d73-78f2-46f3-ab42-2563bf0b7a90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29627", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2945", "content": "CVE-2021-29627:\nIn FreeBSD 13.0-STABLE < n245050, 12.2-STABLE < r369525, 13.0-RC4 < p0, 12.2-RELEASE < p6, listening socket accept filters implementing the accf_create callback incorrectly freed a process supplied argument string. Additional operations on the socket can lead to a double free/use after free (1-day PoC)\nhttps://github.com/raymontag/cve-2021-29627\n\nRed Team Tactics:\n1. Unauthenticated Account Takeover Through Forget Password\nhttps://infosecwriteups.com/unauthenticated-account-takeover-through-forget-password-c120b4c1141d\n2. A webshell that can bypass some system security\nhttps://github.com/22XploiterCrew-Team/Gel4y-Mini-Shell-Backdoor\n\nThreat Research:\nMemory corruption vulnerability in QNAP QTS\u2019s Surveillance Station plugin leads to a pre-auth RCE\n(PoC for CVE-2021-28797)\nhttps://ssd-disclosure.com/ssd-advisory-qnap-pre-auth-cgi_find_parameter-rce", "creation_timestamp": "2026-09-11T10:00:05.548402Z"} 2026-09-11T10:00:05.548402+00:00 https://vulnerability.circl.lu/sighting/a14114ab-8d6d-4dd0-aa67-ed246bc69cb6/export 2026-10-03T03:37:17.205090+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a14114ab-8d6d-4dd0-aa67-ed246bc69cb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29627", "type": "seen", "source": "https://t.me/cissp/2945", "content": "CVE-2021-29627:\nIn FreeBSD 13.0-STABLE < n245050, 12.2-STABLE < r369525, 13.0-RC4 < p0, 12.2-RELEASE < p6, listening socket accept filters implementing the accf_create callback incorrectly freed a process supplied argument string. Additional operations on the socket can lead to a double free/use after free (1-day PoC)\nhttps://github.com/raymontag/cve-2021-29627\n\nRed Team Tactics:\n1. Unauthenticated Account Takeover Through Forget Password\nhttps://infosecwriteups.com/unauthenticated-account-takeover-through-forget-password-c120b4c1141d\n2. A webshell that can bypass some system security\nhttps://github.com/22XploiterCrew-Team/Gel4y-Mini-Shell-Backdoor\n\nThreat Research:\nMemory corruption vulnerability in QNAP QTS\u2019s Surveillance Station plugin leads to a pre-auth RCE\n(PoC for CVE-2021-28797)\nhttps://ssd-disclosure.com/ssd-advisory-qnap-pre-auth-cgi_find_parameter-rce", "creation_timestamp": "2026-09-01T17:00:54.963540Z"} 2026-09-01T17:00:54.963540+00:00 https://vulnerability.circl.lu/sighting/594445cf-3ac2-4c50-a7f4-be161d610759/export 2026-10-03T03:37:17.205230+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "594445cf-3ac2-4c50-a7f4-be161d610759", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29627", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3112", "content": "#exploit\nCVE-2021-29627:\nIn FreeBSD 13.0-STABLE < n245050, 12.2-STABLE < r369525, 13.0-RC4 < p0, 12.2-RELEASE < p6, listening socket accept filters implementing the accf_create callback incorrectly freed a process supplied argument string. Additional operations on the socket can lead to a double free/use after free (1-day PoC)\nhttps://github.com/raymontag/cve-2021-29627", "creation_timestamp": "2021-04-14T11:46:33.000000Z"} 2021-04-14T11:46:33+00:00