https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:37:16 +0000 https://vulnerability.circl.lu/sighting/83359d73-78f2-46f3-ab42-2563bf0b7a90/export {"uuid": "83359d73-78f2-46f3-ab42-2563bf0b7a90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29627", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2945", "content": "CVE-2021-29627:\nIn FreeBSD 13.0-STABLE < n245050, 12.2-STABLE < r369525, 13.0-RC4 < p0, 12.2-RELEASE < p6, listening socket accept filters implementing the accf_create callback incorrectly freed a process supplied argument string. Additional operations on the socket can lead to a double free/use after free (1-day PoC)\nhttps://github.com/raymontag/cve-2021-29627\n\nRed Team Tactics:\n1. Unauthenticated Account Takeover Through Forget Password\nhttps://infosecwriteups.com/unauthenticated-account-takeover-through-forget-password-c120b4c1141d\n2. A webshell that can bypass some system security\nhttps://github.com/22XploiterCrew-Team/Gel4y-Mini-Shell-Backdoor\n\nThreat Research:\nMemory corruption vulnerability in QNAP QTS\u2019s Surveillance Station plugin leads to a pre-auth RCE\n(PoC for CVE-2021-28797)\nhttps://ssd-disclosure.com/ssd-advisory-qnap-pre-auth-cgi_find_parameter-rce", "creation_timestamp": "2026-09-11T10:00:05.548402Z"} {"uuid": "83359d73-78f2-46f3-ab42-2563bf0b7a90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29627", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2945", "content": "CVE-2021-29627:\nIn FreeBSD 13.0-STABLE < n245050, 12.2-STABLE < r369525, 13.0-RC4 < p0, 12.2-RELEASE < p6, listening socket accept filters implementing the accf_create callback incorrectly freed a process supplied argument string. Additional operations on the socket can lead to a double free/use after free (1-day PoC)\nhttps://github.com/raymontag/cve-2021-29627\n\nRed Team Tactics:\n1. Unauthenticated Account Takeover Through Forget Password\nhttps://infosecwriteups.com/unauthenticated-account-takeover-through-forget-password-c120b4c1141d\n2. A webshell that can bypass some system security\nhttps://github.com/22XploiterCrew-Team/Gel4y-Mini-Shell-Backdoor\n\nThreat Research:\nMemory corruption vulnerability in QNAP QTS\u2019s Surveillance Station plugin leads to a pre-auth RCE\n(PoC for CVE-2021-28797)\nhttps://ssd-disclosure.com/ssd-advisory-qnap-pre-auth-cgi_find_parameter-rce", "creation_timestamp": "2026-09-11T10:00:05.548402Z"} https://vulnerability.circl.lu/sighting/83359d73-78f2-46f3-ab42-2563bf0b7a90/export Fri, 11 Sep 2026 10:00:05 +0000 https://vulnerability.circl.lu/sighting/a14114ab-8d6d-4dd0-aa67-ed246bc69cb6/export {"uuid": "a14114ab-8d6d-4dd0-aa67-ed246bc69cb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29627", "type": "seen", "source": "https://t.me/cissp/2945", "content": "CVE-2021-29627:\nIn FreeBSD 13.0-STABLE < n245050, 12.2-STABLE < r369525, 13.0-RC4 < p0, 12.2-RELEASE < p6, listening socket accept filters implementing the accf_create callback incorrectly freed a process supplied argument string. Additional operations on the socket can lead to a double free/use after free (1-day PoC)\nhttps://github.com/raymontag/cve-2021-29627\n\nRed Team Tactics:\n1. Unauthenticated Account Takeover Through Forget Password\nhttps://infosecwriteups.com/unauthenticated-account-takeover-through-forget-password-c120b4c1141d\n2. A webshell that can bypass some system security\nhttps://github.com/22XploiterCrew-Team/Gel4y-Mini-Shell-Backdoor\n\nThreat Research:\nMemory corruption vulnerability in QNAP QTS\u2019s Surveillance Station plugin leads to a pre-auth RCE\n(PoC for CVE-2021-28797)\nhttps://ssd-disclosure.com/ssd-advisory-qnap-pre-auth-cgi_find_parameter-rce", "creation_timestamp": "2026-09-01T17:00:54.963540Z"} {"uuid": "a14114ab-8d6d-4dd0-aa67-ed246bc69cb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29627", "type": "seen", "source": "https://t.me/cissp/2945", "content": "CVE-2021-29627:\nIn FreeBSD 13.0-STABLE < n245050, 12.2-STABLE < r369525, 13.0-RC4 < p0, 12.2-RELEASE < p6, listening socket accept filters implementing the accf_create callback incorrectly freed a process supplied argument string. Additional operations on the socket can lead to a double free/use after free (1-day PoC)\nhttps://github.com/raymontag/cve-2021-29627\n\nRed Team Tactics:\n1. Unauthenticated Account Takeover Through Forget Password\nhttps://infosecwriteups.com/unauthenticated-account-takeover-through-forget-password-c120b4c1141d\n2. A webshell that can bypass some system security\nhttps://github.com/22XploiterCrew-Team/Gel4y-Mini-Shell-Backdoor\n\nThreat Research:\nMemory corruption vulnerability in QNAP QTS\u2019s Surveillance Station plugin leads to a pre-auth RCE\n(PoC for CVE-2021-28797)\nhttps://ssd-disclosure.com/ssd-advisory-qnap-pre-auth-cgi_find_parameter-rce", "creation_timestamp": "2026-09-01T17:00:54.963540Z"} https://vulnerability.circl.lu/sighting/a14114ab-8d6d-4dd0-aa67-ed246bc69cb6/export Tue, 01 Sep 2026 17:00:54 +0000 https://vulnerability.circl.lu/sighting/594445cf-3ac2-4c50-a7f4-be161d610759/export {"uuid": "594445cf-3ac2-4c50-a7f4-be161d610759", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29627", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3112", "content": "#exploit\nCVE-2021-29627:\nIn FreeBSD 13.0-STABLE < n245050, 12.2-STABLE < r369525, 13.0-RC4 < p0, 12.2-RELEASE < p6, listening socket accept filters implementing the accf_create callback incorrectly freed a process supplied argument string. Additional operations on the socket can lead to a double free/use after free (1-day PoC)\nhttps://github.com/raymontag/cve-2021-29627", "creation_timestamp": "2021-04-14T11:46:33.000000Z"} {"uuid": "594445cf-3ac2-4c50-a7f4-be161d610759", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29627", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3112", "content": "#exploit\nCVE-2021-29627:\nIn FreeBSD 13.0-STABLE < n245050, 12.2-STABLE < r369525, 13.0-RC4 < p0, 12.2-RELEASE < p6, listening socket accept filters implementing the accf_create callback incorrectly freed a process supplied argument string. Additional operations on the socket can lead to a double free/use after free (1-day PoC)\nhttps://github.com/raymontag/cve-2021-29627", "creation_timestamp": "2021-04-14T11:46:33.000000Z"} https://vulnerability.circl.lu/sighting/594445cf-3ac2-4c50-a7f4-be161d610759/export Wed, 14 Apr 2021 11:46:33 +0000