{"vulnerability": "CVE-2021-4182", "sightings": [{"uuid": "bfaa1624-cd83-4def-b1e5-0fa509f59062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41826", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-41826.yaml", "content": "", "creation_timestamp": "2023-04-27T09:58:59.000000Z"}, {"uuid": "27a4a2d4-2f9d-426e-890a-000487c97f9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41823", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11433", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2021-41823\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Web Application Firewall (WAF) in Kemp LoadMaster 7.2.54.1 allows certain uses of onmouseover to bypass an XSS protection mechanism.\n\ud83d\udccf Published: 2023-01-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-11T14:44:50.606Z\n\ud83d\udd17 References:\n1. https://pastebin.com/kpx9Nvbf", "creation_timestamp": "2025-04-11T14:51:07.000000Z"}, {"uuid": "03526b92-e367-408f-a8c6-718a026df5ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41823", "type": "seen", "source": "https://t.me/cibsecurity/55720", "content": "\u203c CVE-2021-41823 \u203c\n\nThe Web Application Firewall (WAF) in Kemp LoadMaster 7.2.54.1 allows certain uses of onmouseover to bypass an XSS protection mechanism.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-01T12:15:43.000000Z"}, {"uuid": "7e0d9ff1-d76b-431f-a352-b4dc3a9af18c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-4182", "type": "seen", "source": "https://t.me/cibsecurity/34771", "content": "\u203c CVE-2021-4182 \u203c\n\nCrash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-31T00:34:27.000000Z"}, {"uuid": "6d8189c9-3139-43eb-8262-a162095af695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41825", "type": "seen", "source": "https://t.me/cibsecurity/30259", "content": "\u203c CVE-2021-41825 \u203c\n\nVerint Workforce Optimization (WFO) 15.2.5.1033 allows HTML injection via the /wfo/control/signin username parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-08T20:40:27.000000Z"}, {"uuid": "25fd6d8e-44b8-418a-a6d0-67508a6b01ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41821", "type": "seen", "source": "https://t.me/cibsecurity/29696", "content": "\u203c CVE-2021-41821 \u203c\n\nWazuh Manager in Wazuh through 4.1.5 is affected by a remote Integer Underflow vulnerability that might lead to denial of service. A crafted message must be sent from an authenticated agent to the manager.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-30T02:37:18.000000Z"}, {"uuid": "9b9f1461-3058-4ecc-a3de-376ce9f81bf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41825", "type": "seen", "source": "https://t.me/hacking_Attack/26547", "content": "HTML injection is a type of injection vulnerability that occurs when a user is able to control an input point and is able to inject\u2026Continue reading on Medium \u00bb (https://0xy37.medium.com/my-first-cve-cve-2021-41825-verint-workforce-optimization-html-injection-6dd450e7f2af?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:18.339184Z"}, {"uuid": "2e34836b-9e50-4fab-8011-253f2a0ebc4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41825", "type": "seen", "source": "https://t.me/hacking_Attack/26545", "content": "My first CVE! CVE-2021\u201341825: Verint Workforce Optimization-HTML Injection\nhttps://0xy37.medium.com/my-first-cve-cve-2021-41825-verint-workforce-optimization-html-injection-6dd450e7f2af?source=rss------bug_bounty-5\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:18.287570Z"}, {"uuid": "4ef1fbda-d75d-4f37-b9d0-f4ab48ae913f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41826", "type": "seen", "source": "https://t.me/hacking_Attack/25696", "content": "Exploit Collector\nPlaceOS 1.2109.1 Open Redirection\n\nhttps://2.bp.blogspot.com/-x_QP5QrO-tY/WWlvkxoh72I/AAAAAAAAIQ4/t-2dHNJyeE0-qZNxsCg7sgdho_ipgPgbgCLcBGAs/s1600/h98.png \nPlaceOS version 1.2109.1 suffers from an open redirection vulnerability.\n\nMD5 | 6f70e87acde8d9e251e8e05831b475b8\n\nDownload\n# Exploit Title: PlaceOS 1.2109.1 - Open Redirection\n# Date: 29-09-2021\n# Exploit Author: Hamza Khedr @ Accenture Austalia AARO Team\n# Vendor Homepage: https://place.technology/\n# Software Link: https://github.com/PlaceOS\n# Version: < 1.29.10\n# Tested on: Ubuntu 20.04\n# CVE: CVE-2021-41826\n#\n#\n# PoC:  \"https://office.example.com/auth/logout?continue=//attacker.com\"\n#           \"https://office.example.com/auth/logout?continue=.attacker.com\"\n#           \"https://office.example.com/auth/logout?continue=:password@attacker.com\"\n#\n#\n# Reference: https://github.com/PlaceOS/auth/issues/36\n#                  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41826\n#                  https://nvd.nist.gov/vuln/detail/CVE-2021-41826\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:19.665887Z"}, {"uuid": "e2025f3b-cbb8-47d4-a7a9-78e52e3c9238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41825", "type": "seen", "source": "https://t.me/hacking_Attack/26545", "content": "My first CVE! CVE-2021\u201341825: Verint Workforce Optimization-HTML Injection\nhttps://0xy37.medium.com/my-first-cve-cve-2021-41825-verint-workforce-optimization-html-injection-6dd450e7f2af?source=rss------bug_bounty-5\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:46.317307Z"}, {"uuid": "5e405079-3513-48c9-bb21-45076c6aeae7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41825", "type": "seen", "source": "https://t.me/hacking_Attack/26547", "content": "HTML injection is a type of injection vulnerability that occurs when a user is able to control an input point and is able to inject\u2026Continue reading on Medium \u00bb (https://0xy37.medium.com/my-first-cve-cve-2021-41825-verint-workforce-optimization-html-injection-6dd450e7f2af?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:46.353179Z"}, {"uuid": "a2c46046-6d0c-461f-8c6e-4f46373e0404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41826", "type": "seen", "source": "https://t.me/hacking_Attack/25696", "content": "Exploit Collector\nPlaceOS 1.2109.1 Open Redirection\n\nhttps://2.bp.blogspot.com/-x_QP5QrO-tY/WWlvkxoh72I/AAAAAAAAIQ4/t-2dHNJyeE0-qZNxsCg7sgdho_ipgPgbgCLcBGAs/s1600/h98.png \nPlaceOS version 1.2109.1 suffers from an open redirection vulnerability.\n\nMD5 | 6f70e87acde8d9e251e8e05831b475b8\n\nDownload\n# Exploit Title: PlaceOS 1.2109.1 - Open Redirection\n# Date: 29-09-2021\n# Exploit Author: Hamza Khedr @ Accenture Austalia AARO Team\n# Vendor Homepage: https://place.technology/\n# Software Link: https://github.com/PlaceOS\n# Version: < 1.29.10\n# Tested on: Ubuntu 20.04\n# CVE: CVE-2021-41826\n#\n#\n# PoC:  \"https://office.example.com/auth/logout?continue=//attacker.com\"\n#           \"https://office.example.com/auth/logout?continue=.attacker.com\"\n#           \"https://office.example.com/auth/logout?continue=:password@attacker.com\"\n#\n#\n# Reference: https://github.com/PlaceOS/auth/issues/36\n#                  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41826\n#                  https://nvd.nist.gov/vuln/detail/CVE-2021-41826\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:48.935696Z"}, {"uuid": "1fce823c-7737-4b80-87b4-1c8a6ad69bd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41825", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/26547", "content": "HTML injection is a type of injection vulnerability that occurs when a user is able to control an input point and is able to inject\u2026Continue reading on Medium \u00bb (https://0xy37.medium.com/my-first-cve-cve-2021-41825-verint-workforce-optimization-html-injection-6dd450e7f2af?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T11:00:03.704354Z"}, {"uuid": "706d2c9c-9d0f-4a0e-a8de-379419f06bea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41825", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/26545", "content": "My first CVE! CVE-2021\u201341825: Verint Workforce Optimization-HTML Injection\nhttps://0xy37.medium.com/my-first-cve-cve-2021-41825-verint-workforce-optimization-html-injection-6dd450e7f2af?source=rss------bug_bounty-5\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T11:00:03.750584Z"}, {"uuid": "fb9f6234-463d-488f-942d-2088769f9a82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41826", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/25696", "content": "Exploit Collector\nPlaceOS 1.2109.1 Open Redirection\n\nhttps://2.bp.blogspot.com/-x_QP5QrO-tY/WWlvkxoh72I/AAAAAAAAIQ4/t-2dHNJyeE0-qZNxsCg7sgdho_ipgPgbgCLcBGAs/s1600/h98.png \nPlaceOS version 1.2109.1 suffers from an open redirection vulnerability.\n\nMD5 | 6f70e87acde8d9e251e8e05831b475b8\n\nDownload\n# Exploit Title: PlaceOS 1.2109.1 - Open Redirection\n# Date: 29-09-2021\n# Exploit Author: Hamza Khedr @ Accenture Austalia AARO Team\n# Vendor Homepage: https://place.technology/\n# Software Link: https://github.com/PlaceOS\n# Version: < 1.29.10\n# Tested on: Ubuntu 20.04\n# CVE: CVE-2021-41826\n#\n#\n# PoC:  \"https://office.example.com/auth/logout?continue=//attacker.com\"\n#           \"https://office.example.com/auth/logout?continue=.attacker.com\"\n#           \"https://office.example.com/auth/logout?continue=:password@attacker.com\"\n#\n#\n# Reference: https://github.com/PlaceOS/auth/issues/36\n#                  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41826\n#                  https://nvd.nist.gov/vuln/detail/CVE-2021-41826\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T13:00:05.766297Z"}, {"uuid": "cbdd2ef3-a959-4be0-82e8-42f4df1eb98c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41826", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/25696", "content": "Exploit Collector\nPlaceOS 1.2109.1 Open Redirection\n\nhttps://2.bp.blogspot.com/-x_QP5QrO-tY/WWlvkxoh72I/AAAAAAAAIQ4/t-2dHNJyeE0-qZNxsCg7sgdho_ipgPgbgCLcBGAs/s1600/h98.png \nPlaceOS version 1.2109.1 suffers from an open redirection vulnerability.\n\nMD5 | 6f70e87acde8d9e251e8e05831b475b8\n\nDownload\n# Exploit Title: PlaceOS 1.2109.1 - Open Redirection\n# Date: 29-09-2021\n# Exploit Author: Hamza Khedr @ Accenture Austalia AARO Team\n# Vendor Homepage: https://place.technology/\n# Software Link: https://github.com/PlaceOS\n# Version: < 1.29.10\n# Tested on: Ubuntu 20.04\n# CVE: CVE-2021-41826\n#\n#\n# PoC:  \"https://office.example.com/auth/logout?continue=//attacker.com\"\n#           \"https://office.example.com/auth/logout?continue=.attacker.com\"\n#           \"https://office.example.com/auth/logout?continue=:password@attacker.com\"\n#\n#\n# Reference: https://github.com/PlaceOS/auth/issues/36\n#                  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41826\n#                  https://nvd.nist.gov/vuln/detail/CVE-2021-41826\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T00:00:45.485767Z"}, {"uuid": "292bf700-a4ee-47a3-9a5b-cfe0dcebaec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41825", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/26545", "content": "My first CVE! CVE-2021\u201341825: Verint Workforce Optimization-HTML Injection\nhttps://0xy37.medium.com/my-first-cve-cve-2021-41825-verint-workforce-optimization-html-injection-6dd450e7f2af?source=rss------bug_bounty-5\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T00:00:47.753885Z"}, {"uuid": "deda55bb-8b18-49c6-bb7b-93dea5877348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41825", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/26547", "content": "HTML injection is a type of injection vulnerability that occurs when a user is able to control an input point and is able to inject\u2026Continue reading on Medium \u00bb (https://0xy37.medium.com/my-first-cve-cve-2021-41825-verint-workforce-optimization-html-injection-6dd450e7f2af?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T00:00:47.709563Z"}]}