{"vulnerability": "cve-2021-3007", "sightings": [{"uuid": "10e37d0c-4d47-405b-a759-1b8c5739f8c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3007", "type": "seen", "source": "https://gist.github.com/KrE80r/3deac6d66afa24e661d4ff3240e899a7", "content": "", "creation_timestamp": "2025-12-05T10:35:54.000000Z"}, {"uuid": "f2bea2ae-aac2-4a15-a518-843587b7d6e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3007", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mah44e6lsa22", "content": "", "creation_timestamp": "2025-12-20T21:02:57.624556Z"}, {"uuid": "8f8b700d-6fc1-4e8f-ba8b-d0a66dbe7208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3007", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/61767", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aCVE-2021-3007 Vulnerable Test Environment - Laminas/Zend Framework Deserialization RCE\nURL\uff1ahttps://github.com/KrE80r/cve-2021-3007-vulnerable\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2025-12-05T10:46:16.000000Z"}, {"uuid": "8471f6ec-8694-467f-9d22-847eee48d8a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3007", "type": "seen", "source": "Telegram/WtJrROt8lM6WHR-fB1g4_YMxbxFBlPxavIyCnf0PfRbxbYQ", "content": "", "creation_timestamp": "2025-12-05T15:00:08.000000Z"}, {"uuid": "24fc9040-c0c5-4afb-acbe-c922e3b162f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3007", "type": "published-proof-of-concept", "source": "https://t.me/cKure/3596", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 CVE-2021-3007: RCE \u2018Bug\u2019 in Popular PHP Scripting Framework Zend.\n\nhttps://threatpost.com/rce-bug-php-scripting-framework/162773/", "creation_timestamp": "2021-01-06T05:08:25.000000Z"}, {"uuid": "ecdf42af-e5e5-44c1-a33c-f1302c383aea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3007", "type": "seen", "source": "https://t.me/BleepingComputer/8858", "content": "Zend Framework remote code execution vulnerability revealed\n\nAn untrusted deserialization vulnerability has been disclosed in Zend Framework which can be used by attackers to achieve remote code execution on PHP sites. Portions of Laminas Project may also be impacted by this flaw, tracked as CVE-2021-3007. [...]\n\nhttps://www.bleepingcomputer.com/news/security/zend-framework-remote-code-execution-vulnerability-revealed/", "creation_timestamp": "2021-01-04T16:42:54.000000Z"}, {"uuid": "d9c02869-d458-4d9c-a314-bf4010542a0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3007", "type": "seen", "source": "https://t.me/CyberGovIL/1057", "content": "3134 | \u05d4\u05ea\u05e8\u05e2\u05d4 - \u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d1- Zend Framework\n\n\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea (CVE-2021-3007) \u05d4\u05e0\u05d5\u05d1\u05e2\u05ea \u05de\u05ea\u05d4\u05dc\u05d9\u05da \u05d3\u05d4-\u05e1\u05d9\u05e8\u05d9\u05d0\u05dc\u05d9\u05d6\u05e6\u05d9\u05d4 (deserialization) \u05dc\u05d0 \u05ea\u05e7\u05d9\u05df \u05d4\u05ea\u05d2\u05dc\u05ea\u05d4 \u05d1-Zend Framework, \u05d5\u05d1\u05e4\u05e8\u05d5\u05d9\u05e7\u05d8 \u05d4\u05d4\u05de\u05e9\u05da Laminas.\n\n\u05e7\u05d9\u05d9\u05de\u05ea \u05de\u05d7\u05dc\u05d5\u05e7\u05ea \u05d4\u05d0\u05dd \u05de\u05e7\u05d5\u05e8 \u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d4\u05d5\u05d0 \u05d1-Framework \u05d0\u05d5 \u05d1\u05e7\u05d5\u05d3 \u05d4\u05d0\u05e4\u05dc\u05d9\u05e7\u05d8\u05d9\u05d1\u05d9 \u05d4\u05de\u05d5\u05e8\u05e5 \u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea\u05d4, \u05d0\u05d5 \u05d0\u05e3 \u05d1\u05e9\u05e4\u05ea PHP \u05e2\u05e6\u05de\u05d4, \u05d0\u05da \u05ea\u05d5\u05e6\u05d0\u05ea \u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d1\u05e8\u05d5\u05e8\u05d4 \u05d5\u05d4\u05d9\u05d0 \u05e2\u05dc\u05d5\u05dc\u05d4 \u05dc\u05d0\u05e4\u05e9\u05e8 \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 (RCE) \u05d1\u05ea\u05e0\u05d0\u05d9\u05dd \u05de\u05e1\u05d5\u05d9\u05de\u05d9\u05dd.", "creation_timestamp": "2021-01-06T15:17:43.000000Z"}, {"uuid": "48b15490-006a-44a6-a524-22518d70ab08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3007", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityIL/1829", "content": "\u05de\u05e2\u05e8\u05da \u05d4\u05e1\u05d9\u05d9\u05d1\u05e8 \u05d4\u05dc\u05d0\u05d5\u05de\u05d9:\n\n\u05d4\u05ea\u05e8\u05e2\u05d4 - \u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d1- Zend Framework\n\n\u05e9\u05dc\u05d5\u05dd \u05e8\u05d1,\n\n1. \u05e4\u05d2\u05d9\u05e2\u05d5\u05ea (CVE-2021-3007) \u05d4\u05e0\u05d5\u05d1\u05e2\u05ea \u05de\u05ea\u05d4\u05dc\u05d9\u05da \u05d3\u05d4-\u05e1\u05d9\u05e8\u05d9\u05d0\u05dc\u05d9\u05d6\u05e6\u05d9\u05d4 (deserialization) \u05dc\u05d0 \u05ea\u05e7\u05d9\u05df \u05d4\u05ea\u05d2\u05dc\u05ea\u05d4 \u05d1-Zend Framework, \u05d5\u05d1\u05e4\u05e8\u05d5\u05d9\u05e7\u05d8 \u05d4\u05d4\u05de\u05e9\u05da Laminas.\n\n2. \u05e7\u05d9\u05d9\u05de\u05ea \u05de\u05d7\u05dc\u05d5\u05e7\u05ea \u05d4\u05d0\u05dd \u05de\u05e7\u05d5\u05e8 \u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d4\u05d5\u05d0 \u05d1-Framework \u05d0\u05d5 \u05d1\u05e7\u05d5\u05d3 \u05d4\u05d0\u05e4\u05dc\u05d9\u05e7\u05d8\u05d9\u05d1\u05d9 \u05d4\u05de\u05d5\u05e8\u05e5 \u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea\u05d4, \u05d0\u05d5 \u05d0\u05e3 \u05d1\u05e9\u05e4\u05ea PHP \u05e2\u05e6\u05de\u05d4, \u05d0\u05da \u05ea\u05d5\u05e6\u05d0\u05ea \u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d1\u05e8\u05d5\u05e8\u05d4 \u05d5\u05d4\u05d9\u05d0 \u05e2\u05dc\u05d5\u05dc\u05d4 \u05dc\u05d0\u05e4\u05e9\u05e8 \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 (RCE) \u05d1\u05ea\u05e0\u05d0\u05d9\u05dd \u05de\u05e1\u05d5\u05d9\u05de\u05d9\u05dd.", "creation_timestamp": "2021-01-06T16:21:24.000000Z"}, {"uuid": "c5947f02-9e84-4287-a079-ed59d2d8d16a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3007", "type": "published-proof-of-concept", "source": "https://t.me/reconshell/273", "content": "CVE-2021-3007: Zend Framework Remote Code Execution Vulnerability\n\n#RCE #ZendFramework #CVE-2021-3007 #Vulnerability\n\nhttps://reconshell.com/cve-2021-3007-zend-framework-remote-code-execution-vulnerability/", "creation_timestamp": "2021-01-11T13:16:41.000000Z"}, {"uuid": "9f9699a0-16c0-4865-8e02-3005cff95de3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30070", "type": "seen", "source": "https://t.me/cibsecurity/48334", "content": "\u203c CVE-2021-30070 \u203c\n\nAn issue was discovered in HestiaCP before v1.3.5. Attackers are able to arbitrarily install packages due to values taken from the pgk [] parameter in the update request being transmitted to the operating system's package manager.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-18T12:41:21.000000Z"}, {"uuid": "404ccb4d-5bd5-4f13-86bb-27baa8c54fb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3007", "type": "seen", "source": "https://t.me/cibsecurity/21520", "content": "\u203c CVE-2021-3007 \u203c\n\nZend Framework 3.0.0 has a deserialization vulnerability that can lead to remote code execution if the content is controllable, related to the __destruct method of the Zend\\Http\\Response\\Stream class in Stream.php. NOTE: the code may be related to Laminas Project laminas-http. Zend Framework is no longer supported by the maintainer. However, not all Zend Framework 3.0.0 vulnerabilities exist in a Laminas Project release.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-04T07:36:17.000000Z"}, {"uuid": "5cbfd09c-7673-4c4f-abdb-1b1e748120ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3007", "type": "seen", "source": "https://t.me/CyberSecurityIL/607", "content": "\u05de\u05e2\u05e8\u05da \u05d4\u05e1\u05d9\u05d9\u05d1\u05e8 \u05d4\u05dc\u05d0\u05d5\u05de\u05d9:\n\n\u05d4\u05ea\u05e8\u05e2\u05d4 - \u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d1- Zend Framework\n\n\u05e9\u05dc\u05d5\u05dd \u05e8\u05d1,\n\n1. \u05e4\u05d2\u05d9\u05e2\u05d5\u05ea (CVE-2021-3007) \u05d4\u05e0\u05d5\u05d1\u05e2\u05ea \u05de\u05ea\u05d4\u05dc\u05d9\u05da \u05d3\u05d4-\u05e1\u05d9\u05e8\u05d9\u05d0\u05dc\u05d9\u05d6\u05e6\u05d9\u05d4 (deserialization) \u05dc\u05d0 \u05ea\u05e7\u05d9\u05df \u05d4\u05ea\u05d2\u05dc\u05ea\u05d4 \u05d1-Zend Framework, \u05d5\u05d1\u05e4\u05e8\u05d5\u05d9\u05e7\u05d8 \u05d4\u05d4\u05de\u05e9\u05da Laminas.\n\n2. \u05e7\u05d9\u05d9\u05de\u05ea \u05de\u05d7\u05dc\u05d5\u05e7\u05ea \u05d4\u05d0\u05dd \u05de\u05e7\u05d5\u05e8 \u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d4\u05d5\u05d0 \u05d1-Framework \u05d0\u05d5 \u05d1\u05e7\u05d5\u05d3 \u05d4\u05d0\u05e4\u05dc\u05d9\u05e7\u05d8\u05d9\u05d1\u05d9 \u05d4\u05de\u05d5\u05e8\u05e5 \u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea\u05d4, \u05d0\u05d5 \u05d0\u05e3 \u05d1\u05e9\u05e4\u05ea PHP \u05e2\u05e6\u05de\u05d4, \u05d0\u05da \u05ea\u05d5\u05e6\u05d0\u05ea \u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d1\u05e8\u05d5\u05e8\u05d4 \u05d5\u05d4\u05d9\u05d0 \u05e2\u05dc\u05d5\u05dc\u05d4 \u05dc\u05d0\u05e4\u05e9\u05e8 \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 (RCE) \u05d1\u05ea\u05e0\u05d0\u05d9\u05dd \u05de\u05e1\u05d5\u05d9\u05de\u05d9\u05dd.", "creation_timestamp": "2021-01-06T16:21:24.000000Z"}, {"uuid": "f88900f9-90d7-4a6a-85dc-cd64e69b0fc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3007", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2432", "content": "#exploit\nCVE-2021-3007:\nZend Framework 3.0 RCE\nhttps://www.bleepingcomputer.com/news/security/zend-framework-remote-code-execution-vulnerability-revealed\n]-> Vulnerable destructor in\u00a0Zend Framework and Laminas Project:\nhttps://github.com/laminas/laminas-http/blob/2.15.x/src/Response/Stream.php#L285", "creation_timestamp": "2024-09-16T16:06:40.000000Z"}, {"uuid": "7dc8c540-bc50-4a26-8183-a31711fcf7aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3007", "type": "seen", "source": "https://t.me/KaitNews/8788", "content": "\u26a0\ufe0f \u06a9\u0645\u067e\u06cc\u0646 \u0645\u062e\u0631\u0628\u06cc \u06a9\u0647 \u0628\u0627 \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0646 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0628\u0627 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 Linux \u0648 \u0628\u0627 \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u062d\u06cc\u0627\u062a\u06cc \u062f\u0631 \u0633\u0647 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0627\u0642\u062f\u0627\u0645 \u0628\u0647 \u0622\u0644\u0648\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0622\u0646\u200c\u0647\u0627 \u0628\u0647 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 FreakOut \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\u0628\u062f\u0627\u0641\u0632\u0627\u0631 FreakOut \u062f\u0627\u0631\u0627\u06cc \u0642\u0627\u0628\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u0645\u062a\u0639\u062f\u062f\u06cc \u0627\u0633\u062a \u06a9\u0647 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0622\u0644\u0648\u062f\u0647 \u0634\u062f\u0647 \u0631\u0627 \u0642\u0627\u062f\u0631 \u0628\u0647 \u0627\u062c\u0631\u0627\u06cc \u0627\u0646\u0648\u0627\u0639 \u062d\u0645\u0644\u0627\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 TerraMaster\u060c \u0628\u0633\u062a\u0631 Zend Framework (\u06cc\u0627 Laminas Project) \u0648 Liferay Portal \u0641\u0647\u0631\u0633\u062a \u0627\u06cc\u0646 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u0647\u0627 \u0631\u0627 \u062a\u0634\u06a9\u06cc\u0644 \u0645\u06cc\u200c\u062f\u0647\u0646\u062f. \u0648\u062c\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0647\u0631 \u0633\u0647 \u0622\u0646\u200c\u0647\u0627 \u06a9\u0647 \u062f\u0631 \u06a9\u0645\u067e\u06cc\u0646 FreakOut \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647\u200c\u0627\u0646\u062f \u067e\u0631\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0628\u0648\u062f\u0646 \u0648 \u0648\u062c\u0648\u062f \u0636\u0639\u0641\u200c\u0647\u0627\u06cc\u06cc \u062d\u06cc\u0627\u062a\u06cc \u062f\u0631 \u0622\u0646\u200c\u0647\u0627\u0633\u062a. \u0627\u06af\u0631 \u0686\u0647 \u062a\u0645\u0627\u0645\u06cc \u0628\u0627\u06af\u200c\u0647\u0627\u06cc Exploit \u0634\u062f\u0647 \u0627\u06cc\u0646 \u06a9\u0645\u067e\u06cc\u0646 \u062a\u0631\u0645\u06cc\u0645 \u0634\u062f\u0647\u200c\u0627\u0646\u062f \u0627\u0645\u0627 \u0646\u0645\u0648\u0646\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0647\u0645\u0686\u0646\u0627\u0646 \u0628\u0647\u200c\u0633\u0627\u062f\u06af\u06cc \u0642\u0627\u0628\u0644 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0647\u0633\u062a\u0646\u062f.\n\n\u0628\u0637\u0648\u0631 \u0645\u062b\u0627\u0644 TerraMaster \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u062f\u0631 \u062a\u062c\u0647\u06cc\u0632\u0627\u062a NAS \u0628\u0627 \u0628\u0631\u0646\u062f\u06cc \u0628\u0627 \u0647\u0645\u06cc\u0646 \u0639\u0646\u0648\u0627\u0646 \u0627\u0633\u062a. \u0646\u0633\u062e\u0647 \u06f4,\u06f2.\u06f0\u06f6 \u0648 \u0646\u0633\u062e \u0642\u0628\u0644 \u0627\u0632 \u0622\u0646 \u0628\u0647 \u0628\u0627\u06af\u06cc \u0627\u0632 \u0646\u0648\u0639 \u0627\u062c\u0631\u0627\u06cc \u0641\u0631\u0645\u0627\u0646 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (Remote Command Execution) \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-\u06f2\u06f0\u06f2\u06f0-\u06f2\u06f8\u06f1\u06f8\u06f8 \u0648 \u062f\u0631\u062c\u0647 \u062d\u0633\u0627\u0633\u06cc\u062a \u062d\u06cc\u0627\u062a\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0647\u0633\u062a\u0646\u062f.\n\n\u0647\u0645\u0686\u0646\u06cc\u0646 Zend Framework \u0645\u062c\u0645\u0648\u0639\u0647\u200c\u0627\u06cc \u0627\u0632 \u0628\u0633\u062a\u0647\u200c\u0647\u0627\u06cc \u062d\u0631\u0641\u0647\u200c\u0627\u06cc PHP \u0627\u0633\u062a \u06a9\u0647 \u0628\u06cc\u0634 \u0627\u0632 \u06f5\u06f7\u06f0 \u0645\u06cc\u0644\u06cc\u0648\u0646 \u0646\u0635\u0628 \u0631\u0627 \u062f\u0631 \u06a9\u0627\u0631\u0646\u0627\u0645\u0647 \u062f\u0627\u0631\u062f. \u0646\u0633\u062e\u0647 \u06f3,\u06f0.\u06f0 \u0622\u0646 \u062d\u0627\u0648\u06cc \u0628\u0627\u06af\u06cc \u062d\u06cc\u0627\u062a\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-\u06f2\u06f0\u06f2\u06f1-\u06f3\u06f0\u06f0\u06f7 \u0627\u0633\u062a \u06a9\u0647 Exploit \u0622\u0646 \u0645\u0647\u0627\u062c\u0645 \u0631\u0627 \u0642\u0627\u062f\u0631 \u0628\u0647 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u06cc\u0634\u062a\u0631 (\u0628\u0647 \u0647\u0645\u0631\u0627\u0647 IOCs):\nhttps://research.checkpoint.com/2021/freakout-leveraging-newest-vulnerabilities-for-creating-a-botnet/\n\n@KaitNews", "creation_timestamp": "2026-07-26T07:01:50.480290Z"}, {"uuid": "79862068-7b31-48bf-b6b8-cfd4f0f3f54a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3007", "type": "published-proof-of-concept", "source": "https://t.me/KaitNews/8788", "content": "\u26a0\ufe0f \u06a9\u0645\u067e\u06cc\u0646 \u0645\u062e\u0631\u0628\u06cc \u06a9\u0647 \u0628\u0627 \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0646 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0628\u0627 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 Linux \u0648 \u0628\u0627 \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u062d\u06cc\u0627\u062a\u06cc \u062f\u0631 \u0633\u0647 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0627\u0642\u062f\u0627\u0645 \u0628\u0647 \u0622\u0644\u0648\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0622\u0646\u200c\u0647\u0627 \u0628\u0647 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 FreakOut \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\u0628\u062f\u0627\u0641\u0632\u0627\u0631 FreakOut \u062f\u0627\u0631\u0627\u06cc \u0642\u0627\u0628\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u0645\u062a\u0639\u062f\u062f\u06cc \u0627\u0633\u062a \u06a9\u0647 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0622\u0644\u0648\u062f\u0647 \u0634\u062f\u0647 \u0631\u0627 \u0642\u0627\u062f\u0631 \u0628\u0647 \u0627\u062c\u0631\u0627\u06cc \u0627\u0646\u0648\u0627\u0639 \u062d\u0645\u0644\u0627\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 TerraMaster\u060c \u0628\u0633\u062a\u0631 Zend Framework (\u06cc\u0627 Laminas Project) \u0648 Liferay Portal \u0641\u0647\u0631\u0633\u062a \u0627\u06cc\u0646 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u0647\u0627 \u0631\u0627 \u062a\u0634\u06a9\u06cc\u0644 \u0645\u06cc\u200c\u062f\u0647\u0646\u062f. \u0648\u062c\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0647\u0631 \u0633\u0647 \u0622\u0646\u200c\u0647\u0627 \u06a9\u0647 \u062f\u0631 \u06a9\u0645\u067e\u06cc\u0646 FreakOut \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647\u200c\u0627\u0646\u062f \u067e\u0631\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0628\u0648\u062f\u0646 \u0648 \u0648\u062c\u0648\u062f \u0636\u0639\u0641\u200c\u0647\u0627\u06cc\u06cc \u062d\u06cc\u0627\u062a\u06cc \u062f\u0631 \u0622\u0646\u200c\u0647\u0627\u0633\u062a. \u0627\u06af\u0631 \u0686\u0647 \u062a\u0645\u0627\u0645\u06cc \u0628\u0627\u06af\u200c\u0647\u0627\u06cc Exploit \u0634\u062f\u0647 \u0627\u06cc\u0646 \u06a9\u0645\u067e\u06cc\u0646 \u062a\u0631\u0645\u06cc\u0645 \u0634\u062f\u0647\u200c\u0627\u0646\u062f \u0627\u0645\u0627 \u0646\u0645\u0648\u0646\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0647\u0645\u0686\u0646\u0627\u0646 \u0628\u0647\u200c\u0633\u0627\u062f\u06af\u06cc \u0642\u0627\u0628\u0644 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0647\u0633\u062a\u0646\u062f.\n\n\u0628\u0637\u0648\u0631 \u0645\u062b\u0627\u0644 TerraMaster \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u062f\u0631 \u062a\u062c\u0647\u06cc\u0632\u0627\u062a NAS \u0628\u0627 \u0628\u0631\u0646\u062f\u06cc \u0628\u0627 \u0647\u0645\u06cc\u0646 \u0639\u0646\u0648\u0627\u0646 \u0627\u0633\u062a. \u0646\u0633\u062e\u0647 \u06f4,\u06f2.\u06f0\u06f6 \u0648 \u0646\u0633\u062e \u0642\u0628\u0644 \u0627\u0632 \u0622\u0646 \u0628\u0647 \u0628\u0627\u06af\u06cc \u0627\u0632 \u0646\u0648\u0639 \u0627\u062c\u0631\u0627\u06cc \u0641\u0631\u0645\u0627\u0646 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (Remote Command Execution) \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-\u06f2\u06f0\u06f2\u06f0-\u06f2\u06f8\u06f1\u06f8\u06f8 \u0648 \u062f\u0631\u062c\u0647 \u062d\u0633\u0627\u0633\u06cc\u062a \u062d\u06cc\u0627\u062a\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0647\u0633\u062a\u0646\u062f.\n\n\u0647\u0645\u0686\u0646\u06cc\u0646 Zend Framework \u0645\u062c\u0645\u0648\u0639\u0647\u200c\u0627\u06cc \u0627\u0632 \u0628\u0633\u062a\u0647\u200c\u0647\u0627\u06cc \u062d\u0631\u0641\u0647\u200c\u0627\u06cc PHP \u0627\u0633\u062a \u06a9\u0647 \u0628\u06cc\u0634 \u0627\u0632 \u06f5\u06f7\u06f0 \u0645\u06cc\u0644\u06cc\u0648\u0646 \u0646\u0635\u0628 \u0631\u0627 \u062f\u0631 \u06a9\u0627\u0631\u0646\u0627\u0645\u0647 \u062f\u0627\u0631\u062f. \u0646\u0633\u062e\u0647 \u06f3,\u06f0.\u06f0 \u0622\u0646 \u062d\u0627\u0648\u06cc \u0628\u0627\u06af\u06cc \u062d\u06cc\u0627\u062a\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-\u06f2\u06f0\u06f2\u06f1-\u06f3\u06f0\u06f0\u06f7 \u0627\u0633\u062a \u06a9\u0647 Exploit \u0622\u0646 \u0645\u0647\u0627\u062c\u0645 \u0631\u0627 \u0642\u0627\u062f\u0631 \u0628\u0647 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u06cc\u0634\u062a\u0631 (\u0628\u0647 \u0647\u0645\u0631\u0627\u0647 IOCs):\nhttps://research.checkpoint.com/2021/freakout-leveraging-newest-vulnerabilities-for-creating-a-botnet/\n\n@KaitNews", "creation_timestamp": "2026-07-29T01:00:04.480041Z"}, {"uuid": "bd6696d1-6609-442e-8eac-30c6d5aca83a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3007", "type": "seen", "source": "https://t.me/cissp/2000", "content": "1. From a Small BAT File to Mass Logger Infostealer\nhttps://isc.sans.edu/forums/diary/From+a+small+BAT+file+to+Mass+Logger+infostealer/26946\n\n2. Dridex Banking Trojan\nhttps://research.checkpoint.com/2021/stopping-serial-killer-catching-the-next-strike\n\nReverse Engineering Samsung's Real-time Kernel Protection - A Samsung RKP Compendium\nhttps://blog.longterm.io/samsung_rkp.html\n\nZend Framework 3.0 remote code execution vulnerability revealed (PoC for CVE-2021-3007)\nhttps://www.bleepingcomputer.com/news/security/zend-framework-remote-code-execution-vulnerability-revealed\n\n1. Thread_t UAF problem in the XNU kernel (PoC)\nhttps://blog.pangu.io/?p=230\n\n2. Exploit for LG Q710ULM (Stylo 4 AMZ variant) for writing arbitrary contents to eMMC and patching aboot via S-EL3 warmboot takeover\nhttps://douevenknow.us/post/639414006930702336/tying-it-all-together-pwning-to-own-on-lg-phones\nPoC:\nhttps://github.com/shinyquagsire23/Q710-SIGNhax-EL3-Warmboot\n\n3. SysWhispers2: AV/EDR evasion via direct system calls\nhttps://securityonline.info/syswhispers2-av-edr-evasion-via-direct-system-calls", "creation_timestamp": "2026-09-01T17:01:08.710957Z"}, {"uuid": "33ef8571-17cc-4af5-b8de-5ba053f89e97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3007", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2000", "content": "1. From a Small BAT File to Mass Logger Infostealer\nhttps://isc.sans.edu/forums/diary/From+a+small+BAT+file+to+Mass+Logger+infostealer/26946\n\n2. Dridex Banking Trojan\nhttps://research.checkpoint.com/2021/stopping-serial-killer-catching-the-next-strike\n\nReverse Engineering Samsung's Real-time Kernel Protection - A Samsung RKP Compendium\nhttps://blog.longterm.io/samsung_rkp.html\n\nZend Framework 3.0 remote code execution vulnerability revealed (PoC for CVE-2021-3007)\nhttps://www.bleepingcomputer.com/news/security/zend-framework-remote-code-execution-vulnerability-revealed\n\n1. Thread_t UAF problem in the XNU kernel (PoC)\nhttps://blog.pangu.io/?p=230\n\n2. Exploit for LG Q710ULM (Stylo 4 AMZ variant) for writing arbitrary contents to eMMC and patching aboot via S-EL3 warmboot takeover\nhttps://douevenknow.us/post/639414006930702336/tying-it-all-together-pwning-to-own-on-lg-phones\nPoC:\nhttps://github.com/shinyquagsire23/Q710-SIGNhax-EL3-Warmboot\n\n3. SysWhispers2: AV/EDR evasion via direct system calls\nhttps://securityonline.info/syswhispers2-av-edr-evasion-via-direct-system-calls", "creation_timestamp": "2026-09-11T22:00:05.265870Z"}]}