{"vulnerability": "CVE-2021-33035", "sightings": [{"uuid": "071b8ece-076a-4dfc-9118-f2bbe7a97a55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-33035", "type": "published-proof-of-concept", "source": "https://t.me/cKure/7240", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 A malicious document could lead to RCE in Apache OpenOffice (CVE-2021-33035).\n\nhttps://www.helpnetsecurity.com/2021/09/22/cve-2021-33035/", "creation_timestamp": "2021-09-22T17:36:48.000000Z"}, {"uuid": "185d8510-5e4d-4111-98f6-2faf56a623ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-33035", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4329", "content": "#exploit\nCVE-2021-33035:\nCode Execution in Apache OpenOffice\nhttps://medium.com/csg-govtech/all-your-d-base-are-belong-to-us-part-1-code-execution-in-apache-openoffice-cve-2021-33035-767fc7d6daf7", "creation_timestamp": "2024-05-14T02:37:59.000000Z"}, {"uuid": "e8f40962-4c5e-4d00-b386-a78ef85efe6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-33035", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/4416", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (Sep 1-30)\nCVE-2021-40444 - Microsoft MSHTML RCE\nhttps://t.me/cybersecuritytechnologies/4276\nCVE-2021-26084 - Confluence Server Webwork OGNL Inj\nhttps://t.me/cybersecuritytechnologies/4202\nCVE-2021-22005 - vCenter Server contains - arbitrary file upload\nhttps://t.me/cybersecuritytechnologies/4401\nCVE-2021-30860 - Zero-Click iPhone Exploit\nhttps://t.me/cybersecuritytechnologies/4318\nCVE-2021-38647 - OMIGOD RCE Vuln in Multiple Azure Linux Deployments\nhttps://t.me/cybersecuritytechnologies/4315\nCVE-2021-30632 - Out of bounds write in V8\nhttps://t.me/cybersecuritytechnologies/4342\nCVE-2021-33035 - Code Execution in Apache OpenOffice\nhttps://t.me/cybersecuritytechnologies/4329\nCVE-2021-38112 - AWS WorkSpaces Desktop Client RCE\nhttps://t.me/cybersecuritytechnologies/4358\nCVE-2021-30740 / CVE-2021-30768 - A malicious application may be able to execute arbitrary code with kernel privileges\nhttps://mobile.twitter.com/infinityABCDE/status/1437596340222038017", "creation_timestamp": "2021-10-01T11:01:01.000000Z"}, {"uuid": "75b6421e-bc6d-44f2-91f0-bb8fcd6a7e75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-33035", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1672", "content": "All Your (d)Base Are Belong To Us, Part 1: Code Execution in Apache OpenOffice (CVE-2021-33035) https://spaceraccoon.dev/all-your-d-base-are-belong-to-us-part-1-code-execution-in-apache-openoffice?pk_campaign=rss-feed", "creation_timestamp": "2026-08-03T05:00:03.719856Z"}, {"uuid": "bdfd973a-5014-4c92-9568-d441eb108145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-33035", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1672", "content": "All Your (d)Base Are Belong To Us, Part 1: Code Execution in Apache OpenOffice (CVE-2021-33035) https://spaceraccoon.dev/all-your-d-base-are-belong-to-us-part-1-code-execution-in-apache-openoffice?pk_campaign=rss-feed", "creation_timestamp": "2026-08-04T00:00:48.795322Z"}, {"uuid": "1446f350-a18d-4c37-a48a-f8b78cccd651", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-33035", "type": "seen", "source": "https://t.me/reverseame/1672", "content": "All Your (d)Base Are Belong To Us, Part 1: Code Execution in Apache OpenOffice (CVE-2021-33035) https://spaceraccoon.dev/all-your-d-base-are-belong-to-us-part-1-code-execution-in-apache-openoffice?pk_campaign=rss-feed", "creation_timestamp": "2026-07-29T12:02:52.848423Z"}, {"uuid": "605bc428-2e9a-498a-a34c-2b56ef0998bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-33035", "type": "seen", "source": "https://t.me/reverseame/1672", "content": "All Your (d)Base Are Belong To Us, Part 1: Code Execution in Apache OpenOffice (CVE-2021-33035) https://spaceraccoon.dev/all-your-d-base-are-belong-to-us-part-1-code-execution-in-apache-openoffice?pk_campaign=rss-feed", "creation_timestamp": "2026-07-30T00:02:43.300327Z"}, {"uuid": "c174bc0f-e96f-4b09-81fc-6023ac882779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-33035", "type": "seen", "source": "https://t.me/cissp/4401", "content": "Threat Research\nSeventh Inferno vulnerability\n(some NETGEAR smart switches)\ud83d\ude42\nhttps://gynvael.coldwind.pl/?id=742\n\nRed Team Tactics\n1. NinjaC2 V2.1:\nNew webshell agent, more features and updated AV bypass\nhttps://github.com/ahmedkhlief/Ninja\n2. CVE-2021-33193:\nRequest splitting via HTTP/2 method injection and mod_proxy\nhttps://github.com/CHYbeta/OddProxyDemo/tree/master/mod_proxy/demo1\n3. Ultimate Phish Tool\nhttps://github.com/gasayminajj/robophish\n\nOffensive security\nBeginners Guide to 0day/CVE AppSec Research\ud83d\ude00\nhttps://0xboku.com/2021/09/14/0dayappsecBeginnerGuide.html\n\nCVE-2021-33035:\nCode Execution in Apache OpenOffice\nhttps://medium.com/csg-govtech/all-your-d-base-are-belong-to-us-part-1-code-execution-in-apache-openoffice-cve-2021-33035-767fc7d6daf7", "creation_timestamp": "2026-09-01T17:00:40.377764Z"}, {"uuid": "941b230e-56b5-428e-baf3-b6ad1b97f9f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-33035", "type": "seen", "source": "https://t.me/cissp/4401", "content": "Threat Research\nSeventh Inferno vulnerability\n(some NETGEAR smart switches)\ud83d\ude42\nhttps://gynvael.coldwind.pl/?id=742\n\nRed Team Tactics\n1. NinjaC2 V2.1:\nNew webshell agent, more features and updated AV bypass\nhttps://github.com/ahmedkhlief/Ninja\n2. CVE-2021-33193:\nRequest splitting via HTTP/2 method injection and mod_proxy\nhttps://github.com/CHYbeta/OddProxyDemo/tree/master/mod_proxy/demo1\n3. Ultimate Phish Tool\nhttps://github.com/gasayminajj/robophish\n\nOffensive security\nBeginners Guide to 0day/CVE AppSec Research\ud83d\ude00\nhttps://0xboku.com/2021/09/14/0dayappsecBeginnerGuide.html\n\nCVE-2021-33035:\nCode Execution in Apache OpenOffice\nhttps://medium.com/csg-govtech/all-your-d-base-are-belong-to-us-part-1-code-execution-in-apache-openoffice-cve-2021-33035-767fc7d6daf7", "creation_timestamp": "2026-09-02T01:04:25.306579Z"}, {"uuid": "f76936b6-bc3e-4851-b8a5-f79ca5f121ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-33035", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4401", "content": "Threat Research\nSeventh Inferno vulnerability\n(some NETGEAR smart switches)\ud83d\ude42\nhttps://gynvael.coldwind.pl/?id=742\n\nRed Team Tactics\n1. NinjaC2 V2.1:\nNew webshell agent, more features and updated AV bypass\nhttps://github.com/ahmedkhlief/Ninja\n2. CVE-2021-33193:\nRequest splitting via HTTP/2 method injection and mod_proxy\nhttps://github.com/CHYbeta/OddProxyDemo/tree/master/mod_proxy/demo1\n3. Ultimate Phish Tool\nhttps://github.com/gasayminajj/robophish\n\nOffensive security\nBeginners Guide to 0day/CVE AppSec Research\ud83d\ude00\nhttps://0xboku.com/2021/09/14/0dayappsecBeginnerGuide.html\n\nCVE-2021-33035:\nCode Execution in Apache OpenOffice\nhttps://medium.com/csg-govtech/all-your-d-base-are-belong-to-us-part-1-code-execution-in-apache-openoffice-cve-2021-33035-767fc7d6daf7", "creation_timestamp": "2026-09-10T19:00:05.212849Z"}, {"uuid": "0cf7a6e7-c825-4b62-8719-ba0543ff2b80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-33035", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4401", "content": "Threat Research\nSeventh Inferno vulnerability\n(some NETGEAR smart switches)\ud83d\ude42\nhttps://gynvael.coldwind.pl/?id=742\n\nRed Team Tactics\n1. NinjaC2 V2.1:\nNew webshell agent, more features and updated AV bypass\nhttps://github.com/ahmedkhlief/Ninja\n2. CVE-2021-33193:\nRequest splitting via HTTP/2 method injection and mod_proxy\nhttps://github.com/CHYbeta/OddProxyDemo/tree/master/mod_proxy/demo1\n3. Ultimate Phish Tool\nhttps://github.com/gasayminajj/robophish\n\nOffensive security\nBeginners Guide to 0day/CVE AppSec Research\ud83d\ude00\nhttps://0xboku.com/2021/09/14/0dayappsecBeginnerGuide.html\n\nCVE-2021-33035:\nCode Execution in Apache OpenOffice\nhttps://medium.com/csg-govtech/all-your-d-base-are-belong-to-us-part-1-code-execution-in-apache-openoffice-cve-2021-33035-767fc7d6daf7", "creation_timestamp": "2026-09-11T00:00:29.780357Z"}]}