{"vulnerability": "CVE-2021-22937", "sightings": [{"uuid": "03470bd8-a939-44a1-ae2c-fead6b71ad1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22937", "type": "seen", "source": "MISP/06bb11a9-6fa0-4f2e-97b1-45ded48e4662", "content": "", "creation_timestamp": "2024-11-14T06:09:34.000000Z"}, {"uuid": "8d03f422-679f-4e9e-89ed-6413ea513f01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22937", "type": "published-proof-of-concept", "source": "Telegram/OlmIWfCf04jqftw8Cq-ou5J6g6om_6u_87bzbeyzb222HA", "content": "", "creation_timestamp": "2021-08-06T13:54:25.000000Z"}, {"uuid": "fc9da890-ea53-40fb-bf3e-16e8e4057936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22937", "type": "published-proof-of-concept", "source": "Telegram/PrpY9viYNwJsloEku2TiViFqt7xU58t-bPyhw4S2R6DOTw", "content": "", "creation_timestamp": "2021-08-06T17:57:30.000000Z"}, {"uuid": "53346052-053a-4400-9969-ccadc1ebd666", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22937", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityIL/4542", "content": "\u05d7\u05d5\u05dc\u05e9\u05d4 \u05d7\u05d3\u05e9\u05d4 \u05d1\u05de\u05d5\u05e6\u05e8 \u05e9\u05dc Pulse Secure \u05de\u05d0\u05e4\u05e9\u05e8 \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05e2\u05dd \u05d4\u05e8\u05e9\u05d0\u05d5\u05ea Root. \n\n\u05d1\u05d7\u05d5\u05d3\u05e9 \u05de\u05d0\u05d9 2021 \u05d3\u05d9\u05d5\u05d5\u05d7 \u05d7\u05d5\u05e7\u05e8 \u05d0\u05d1\u05d8\"\u05de \u05db\u05d9 \u05de\u05e6\u05d0 \u05d7\u05d5\u05dc\u05e9\u05d4 \u05d1\u05de\u05d5\u05e6\u05e8 Pulse Connect Secure \u05d4\u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05dc\u05d5 \u05dc\u05d4\u05e8\u05d9\u05e5 \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05e2\u05dd \u05d4\u05e8\u05e9\u05d0\u05d5\u05ea Root.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05d3\u05d5\u05d5\u05d7\u05d4 \u05dc\u05d7\u05d1\u05e8\u05ea Pulse Secure \u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea \u05e4\u05dc\u05d8\u05e4\u05d5\u05e8\u05de\u05ea HackerOne \u05d1\u05ea\u05d0\u05e8\u05d9\u05da 12.5.21 \u05d0\u05da \u05d1\u05de\u05e9\u05da \u05d7\u05d5\u05d3\u05e9\u05d9\u05d9\u05dd \"\u05d6\u05db\u05ea\u05d4\" \u05dc\u05d4\u05ea\u05e2\u05dc\u05de\u05d5\u05ea \u05de\u05e6\u05d3 Pulse Secure. \u05e8\u05e7 \u05d1-15.7.21 \u05d5\u05dc\u05d0\u05e8\u05d7 \u05e9\u05d1-HackerOne \u05d4\u05d5\u05d3\u05d9\u05e2\u05d5 \u05db\u05d9 \u05d1\u05d4\u05ea\u05d0\u05dd \u05dc\u05de\u05d3\u05d9\u05e0\u05d9\u05d5\u05ea \u05d4\u05d0\u05ea\u05e8 \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05ea\u05e4\u05d5\u05e8\u05e1\u05dd \u05d1\u05d0\u05d5\u05e4\u05df \u05e6\u05d9\u05d1\u05d5\u05e8\u05d9 \u05d1\u05e2\u05d5\u05d3 \u05de\u05e1\u05e4\u05e8 \u05d9\u05de\u05d9\u05dd \u05d4\u05d2\u05d9\u05d1\u05d5 \u05d1-Pulse Secure \u05d5\u05d3\u05d9\u05d5\u05d5\u05d7\u05d5 \u05db\u05d9 \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05ea\u05ea\u05d5\u05e7\u05df \u05d1\u05d4\u05e7\u05d3\u05dd \u05d5\u05d1\u05d9\u05e7\u05e9\u05d5 \u05dc\u05d0 \u05dc\u05e4\u05e8\u05e1\u05dd \u05d0\u05ea \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05e2\u05d3 \u05dc\u05ea\u05d9\u05e7\u05d5\u05df.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05d0\u05db\u05df \u05dc\u05d0 \u05e4\u05d5\u05e8\u05e1\u05de\u05d4 \u05d5\u05d4\u05e4\u05e8\u05e1\u05d5\u05dd \u05e0\u05d3\u05d7\u05d4 \u05e2\u05d3 \u05dc\u05d0\u05ea\u05de\u05d5\u05dc 5.8.21 \u05db\u05d0\u05e9\u05e8 Pulse Secure \u05e9\u05d7\u05e8\u05e8\u05d5 \u05e2\u05d3\u05db\u05d5\u05df \u05d1-2.8.21.\n\u05d4\u05d2\u05e8\u05e1\u05d4 \u05d4\u05de\u05e2\u05d5\u05d3\u05db\u05e0\u05ea \u05d4\u05d9\u05d0 9.1R12.\n\n(\u05ea\u05d5\u05d3\u05d4 \u05dc-Guy \u05e2\u05dc \u05d4\u05d4\u05e4\u05e0\u05d9\u05d9\u05d4 \u05dc\u05db\u05ea\u05d1\u05d4 \ud83d\ude4f\ud83c\udffb) \n\nhttps://t.me/CyberSecurityIL/1219\n\nhttps://research.nccgroup.com/2021/08/05/technical-advisory-pulse-connect-secure-rce-via-uncontrolled-archive-extraction-cve-2021-22937-patch-bypass/amp/", "creation_timestamp": "2021-08-06T14:51:28.000000Z"}, {"uuid": "51057238-79a1-4512-abcc-c29ef990229e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22937", "type": "seen", "source": "https://t.me/cibsecurity/27395", "content": "\u203c CVE-2021-22937 \u203c\n\nA vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform a file write via a maliciously crafted archive uploaded in the administrator web interface.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-16T22:14:53.000000Z"}, {"uuid": "2fd4f788-d5bf-4f75-8ab7-f2428ef96376", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22937", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4044", "content": "#Threat_Research\n1. Multiple Vulnerabilities in cPanel/WHM\nhttps://www.fortbridge.co.uk/research/multiple-vulnerabilities-in-cpanel-whm\n2. Pulse Connect Secure - RCE via Uncontrolled Archive Extraction - CVE-2021-22937 (Patch Bypass)\nhttps://research.nccgroup.com/2021/08/05/technical-advisory-pulse-connect-secure-rce-via-uncontrolled-archive-extraction-cve-2021-22937-patch-bypass", "creation_timestamp": "2021-08-11T12:29:23.000000Z"}, {"uuid": "20f125b8-b9a7-4fb6-ac95-562ff1962c9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22937", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4203", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (Aug 1-31)\nCVE-2021-1675 - Print Spooler EoP\nhttps://t.me/cybersecuritytechnologies/3723\nCVE-2021-31956 - Win NTFS EoP\nhttps://t.me/cybersecuritytechnologies/4110\nCVE-2021-36958 - Print Spooler RCE\nhttps://mobile.twitter.com/gentilkiwi/status/1416429860566847490?s=20\nCVE-2021-39137 - A consensus-vuln in go-eth\nCVE-2021-22937 - Pulse ConnSecure RCE\nhttps://t.me/cybersecuritytechnologies/4044\nCVE-2021-34473 - Pre-auth Path Confusion\nhttps://www.zerodayinitiative.com/blog/2021/8/17/from-pwn2own-2021-a-new-attack-surface-on-microsoft-exchange-proxyshell\nCVE-2021-21225 - Vuln in V8's Array.prototype.concat\nhttps://t.me/cybersecuritytechnologies/4090\nCVE-2021-20090 - Path traversal in Buffalo routers\nhttps://t.me/cybersecuritytechnologies/3986\nCVE-2021-26084 - Confluence Server Webwork OGNL Inj\nhttps://t.me/cybersecuritytechnologies/4202\nCVE-2021-3711 - Vulns in OpenSSL\nhttps://nakedsecurity.sophos.com/2021/08/27/big-bad-decryption-bug-in-openssl-but-no-cause-for-alarm", "creation_timestamp": "2021-09-02T11:05:07.000000Z"}, {"uuid": "cc02bfc2-0d67-4374-bc2b-e6c3c8641ac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22937", "type": "seen", "source": "https://t.me/cissp/4242", "content": "exploit\nCVE-2021-26084:\nConfluence Server Webwork OGNL Injection\nhttps://github.com/alt3kx/CVE-2021-26084_PoC\n]-> https://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md\n]-> RCE PoC:\nhttps://github.com/FanqXu/CVE-2021-26084\n\nAnalytics\nTop 10 Most Used Vulns of the Month (Aug 1-31)\nCVE-2021-1675 - Print Spooler EoP\nCVE-2021-31956 - Win NTFS EoP\nCVE-2021-36958 - Print Spooler RCE\nCVE-2021-39137 - A consensus-vuln in go-eth\nCVE-2021-22937 - Pulse ConnSecure RCE\nCVE-2021-34473 - Pre-auth Path Confusion\nhttps://www.zerodayinitiative.com/blog/2021/8/17/from-pwn2own-2021-a-new-attack-surface-on-microsoft-exchange-proxyshell\nCVE-2021-21225 - Vuln in V8's Array.prototype.concat\nCVE-2021-20090 - Path traversal in Buffalo routers\nCVE-2021-26084 - Confluence Server Webwork OGNL Inj\nCVE-2021-3711 - Vulns in OpenSSL\nhttps://nakedsecurity.sophos.com/2021/08/27/big-bad-decryption-bug-in-openssl-but-no-cause-for-alarm", "creation_timestamp": "2026-09-01T17:00:41.541090Z"}, {"uuid": "dfacd806-0e99-44ef-a4c7-07b356774147", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22937", "type": "seen", "source": "https://t.me/cissp/4013", "content": "Offensive security\nC2 profile generator for Cobalt Strike command and control servers designed to ensure evasion\nhttps://github.com/Tylous/SourcePoint\n]-> Malleable Command and Control:\nhttps://www.cobaltstrike.com/help-malleable-c2\n\nRed Team Tactics\nRelaying NTLM authentication over RPC again\nhttps://blog.compass-security.com/2021/08/relaying-ntlm-authentication-over-rpc-again\n\nThreat Research\n1. Multiple Vulnerabilities in cPanel/WHM\nhttps://www.fortbridge.co.uk/research/multiple-vulnerabilities-in-cpanel-whm\n2. Pulse Connect Secure - RCE via Uncontrolled Archive Extraction - CVE-2021-22937 (Patch Bypass)\nhttps://research.nccgroup.com/2021/08/05/technical-advisory-pulse-connect-secure-rce-via-uncontrolled-archive-extraction-cve-2021-22937-patch-bypass\n\nMalware analysis\n1. FlyTrap Android Malware Compromises Thousands of Facebook Accounts\nhttps://blog.zimperium.com/flytrap-android-malware-compromises-thousands-of-facebook-accounts\n2. XLSM Malware with MacroSheets\nhttps://www.mcafee.com/blogs/other-blogs/mcafee-labs/xlsm-malware-with-macrosheets\n\nexploit\n1. EasyAntiCheat Exploit to inject unsigned code into protected processes\nhttps://back.engineering/10/08/2021\n2. Having fun with a Use-After-Free in ProFTPd (CVE-2020-9273)\nhttps://adepts.of0x.cc/proftpd-cve-2020-9273-exploit", "creation_timestamp": "2026-09-01T17:00:42.986695Z"}, {"uuid": "286056b7-c057-4677-b199-fa0083ca5d06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22937", "type": "seen", "source": "https://t.me/cissp/4242", "content": "exploit\nCVE-2021-26084:\nConfluence Server Webwork OGNL Injection\nhttps://github.com/alt3kx/CVE-2021-26084_PoC\n]-> https://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md\n]-> RCE PoC:\nhttps://github.com/FanqXu/CVE-2021-26084\n\nAnalytics\nTop 10 Most Used Vulns of the Month (Aug 1-31)\nCVE-2021-1675 - Print Spooler EoP\nCVE-2021-31956 - Win NTFS EoP\nCVE-2021-36958 - Print Spooler RCE\nCVE-2021-39137 - A consensus-vuln in go-eth\nCVE-2021-22937 - Pulse ConnSecure RCE\nCVE-2021-34473 - Pre-auth Path Confusion\nhttps://www.zerodayinitiative.com/blog/2021/8/17/from-pwn2own-2021-a-new-attack-surface-on-microsoft-exchange-proxyshell\nCVE-2021-21225 - Vuln in V8's Array.prototype.concat\nCVE-2021-20090 - Path traversal in Buffalo routers\nCVE-2021-26084 - Confluence Server Webwork OGNL Inj\nCVE-2021-3711 - Vulns in OpenSSL\nhttps://nakedsecurity.sophos.com/2021/08/27/big-bad-decryption-bug-in-openssl-but-no-cause-for-alarm", "creation_timestamp": "2026-09-02T01:04:27.568089Z"}, {"uuid": "2fb0818d-921f-42b1-b799-ee1b19f4bd84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22937", "type": "seen", "source": "https://t.me/cissp/4013", "content": "Offensive security\nC2 profile generator for Cobalt Strike command and control servers designed to ensure evasion\nhttps://github.com/Tylous/SourcePoint\n]-> Malleable Command and Control:\nhttps://www.cobaltstrike.com/help-malleable-c2\n\nRed Team Tactics\nRelaying NTLM authentication over RPC again\nhttps://blog.compass-security.com/2021/08/relaying-ntlm-authentication-over-rpc-again\n\nThreat Research\n1. Multiple Vulnerabilities in cPanel/WHM\nhttps://www.fortbridge.co.uk/research/multiple-vulnerabilities-in-cpanel-whm\n2. Pulse Connect Secure - RCE via Uncontrolled Archive Extraction - CVE-2021-22937 (Patch Bypass)\nhttps://research.nccgroup.com/2021/08/05/technical-advisory-pulse-connect-secure-rce-via-uncontrolled-archive-extraction-cve-2021-22937-patch-bypass\n\nMalware analysis\n1. FlyTrap Android Malware Compromises Thousands of Facebook Accounts\nhttps://blog.zimperium.com/flytrap-android-malware-compromises-thousands-of-facebook-accounts\n2. XLSM Malware with MacroSheets\nhttps://www.mcafee.com/blogs/other-blogs/mcafee-labs/xlsm-malware-with-macrosheets\n\nexploit\n1. EasyAntiCheat Exploit to inject unsigned code into protected processes\nhttps://back.engineering/10/08/2021\n2. Having fun with a Use-After-Free in ProFTPd (CVE-2020-9273)\nhttps://adepts.of0x.cc/proftpd-cve-2020-9273-exploit", "creation_timestamp": "2026-09-02T01:04:30.188327Z"}, {"uuid": "cccc93b1-9d02-4b2a-9821-071c8e980bff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22937", "type": "seen", "source": "https://t.me/cissp/4242", "content": "exploit\nCVE-2021-26084:\nConfluence Server Webwork OGNL Injection\nhttps://github.com/alt3kx/CVE-2021-26084_PoC\n]-> https://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md\n]-> RCE PoC:\nhttps://github.com/FanqXu/CVE-2021-26084\n\nAnalytics\nTop 10 Most Used Vulns of the Month (Aug 1-31)\nCVE-2021-1675 - Print Spooler EoP\nCVE-2021-31956 - Win NTFS EoP\nCVE-2021-36958 - Print Spooler RCE\nCVE-2021-39137 - A consensus-vuln in go-eth\nCVE-2021-22937 - Pulse ConnSecure RCE\nCVE-2021-34473 - Pre-auth Path Confusion\nhttps://www.zerodayinitiative.com/blog/2021/8/17/from-pwn2own-2021-a-new-attack-surface-on-microsoft-exchange-proxyshell\nCVE-2021-21225 - Vuln in V8's Array.prototype.concat\nCVE-2021-20090 - Path traversal in Buffalo routers\nCVE-2021-26084 - Confluence Server Webwork OGNL Inj\nCVE-2021-3711 - Vulns in OpenSSL\nhttps://nakedsecurity.sophos.com/2021/08/27/big-bad-decryption-bug-in-openssl-but-no-cause-for-alarm", "creation_timestamp": "2026-09-10T21:00:05.061079Z"}, {"uuid": "dda2c362-6745-4740-a180-065875167348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22937", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4013", "content": "Offensive security\nC2 profile generator for Cobalt Strike command and control servers designed to ensure evasion\nhttps://github.com/Tylous/SourcePoint\n]-> Malleable Command and Control:\nhttps://www.cobaltstrike.com/help-malleable-c2\n\nRed Team Tactics\nRelaying NTLM authentication over RPC again\nhttps://blog.compass-security.com/2021/08/relaying-ntlm-authentication-over-rpc-again\n\nThreat Research\n1. Multiple Vulnerabilities in cPanel/WHM\nhttps://www.fortbridge.co.uk/research/multiple-vulnerabilities-in-cpanel-whm\n2. Pulse Connect Secure - RCE via Uncontrolled Archive Extraction - CVE-2021-22937 (Patch Bypass)\nhttps://research.nccgroup.com/2021/08/05/technical-advisory-pulse-connect-secure-rce-via-uncontrolled-archive-extraction-cve-2021-22937-patch-bypass\n\nMalware analysis\n1. FlyTrap Android Malware Compromises Thousands of Facebook Accounts\nhttps://blog.zimperium.com/flytrap-android-malware-compromises-thousands-of-facebook-accounts\n2. XLSM Malware with MacroSheets\nhttps://www.mcafee.com/blogs/other-blogs/mcafee-labs/xlsm-malware-with-macrosheets\n\nexploit\n1. EasyAntiCheat Exploit to inject unsigned code into protected processes\nhttps://back.engineering/10/08/2021\n2. Having fun with a Use-After-Free in ProFTPd (CVE-2020-9273)\nhttps://adepts.of0x.cc/proftpd-cve-2020-9273-exploit", "creation_timestamp": "2026-09-10T23:00:05.372518Z"}, {"uuid": "3c8c80d0-d5cf-41fa-a8ec-4df1f09371ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22937", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4013", "content": "Offensive security\nC2 profile generator for Cobalt Strike command and control servers designed to ensure evasion\nhttps://github.com/Tylous/SourcePoint\n]-> Malleable Command and Control:\nhttps://www.cobaltstrike.com/help-malleable-c2\n\nRed Team Tactics\nRelaying NTLM authentication over RPC again\nhttps://blog.compass-security.com/2021/08/relaying-ntlm-authentication-over-rpc-again\n\nThreat Research\n1. Multiple Vulnerabilities in cPanel/WHM\nhttps://www.fortbridge.co.uk/research/multiple-vulnerabilities-in-cpanel-whm\n2. Pulse Connect Secure - RCE via Uncontrolled Archive Extraction - CVE-2021-22937 (Patch Bypass)\nhttps://research.nccgroup.com/2021/08/05/technical-advisory-pulse-connect-secure-rce-via-uncontrolled-archive-extraction-cve-2021-22937-patch-bypass\n\nMalware analysis\n1. FlyTrap Android Malware Compromises Thousands of Facebook Accounts\nhttps://blog.zimperium.com/flytrap-android-malware-compromises-thousands-of-facebook-accounts\n2. XLSM Malware with MacroSheets\nhttps://www.mcafee.com/blogs/other-blogs/mcafee-labs/xlsm-malware-with-macrosheets\n\nexploit\n1. EasyAntiCheat Exploit to inject unsigned code into protected processes\nhttps://back.engineering/10/08/2021\n2. Having fun with a Use-After-Free in ProFTPd (CVE-2020-9273)\nhttps://adepts.of0x.cc/proftpd-cve-2020-9273-exploit", "creation_timestamp": "2026-09-11T00:00:09.952277Z"}, {"uuid": "d1d5205d-236e-49af-8335-179128f564d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22937", "type": "seen", "source": "https://t.me/cissp/4242", "content": "exploit\nCVE-2021-26084:\nConfluence Server Webwork OGNL Injection\nhttps://github.com/alt3kx/CVE-2021-26084_PoC\n]-> https://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md\n]-> RCE PoC:\nhttps://github.com/FanqXu/CVE-2021-26084\n\nAnalytics\nTop 10 Most Used Vulns of the Month (Aug 1-31)\nCVE-2021-1675 - Print Spooler EoP\nCVE-2021-31956 - Win NTFS EoP\nCVE-2021-36958 - Print Spooler RCE\nCVE-2021-39137 - A consensus-vuln in go-eth\nCVE-2021-22937 - Pulse ConnSecure RCE\nCVE-2021-34473 - Pre-auth Path Confusion\nhttps://www.zerodayinitiative.com/blog/2021/8/17/from-pwn2own-2021-a-new-attack-surface-on-microsoft-exchange-proxyshell\nCVE-2021-21225 - Vuln in V8's Array.prototype.concat\nCVE-2021-20090 - Path traversal in Buffalo routers\nCVE-2021-26084 - Confluence Server Webwork OGNL Inj\nCVE-2021-3711 - Vulns in OpenSSL\nhttps://nakedsecurity.sophos.com/2021/08/27/big-bad-decryption-bug-in-openssl-but-no-cause-for-alarm", "creation_timestamp": "2026-09-11T00:00:12.382352Z"}]}