https://vulnerability.circl.lu/sightings/feed 2026-10-10T15:44:45.828343+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/ed0740a9-2d4b-41d8-8d22-969679fea772/export 2026-10-10T15:44:45.855673+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ed0740a9-2d4b-41d8-8d22-969679fea772", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2770", "content": "CVE-2021-21389:\nBuddyPress < 7.2.1 - REST API Privilege Escalation to RCE (PoC)\nhttps://github.com/HoangKien1020/CVE-2021-21389\n\nCVE-2021-22192:\nAn issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing unauthorized authenticated users to execute arbitrary code on the server (PoC)\nhttps://github.com/lyy289065406/CVE-2021-22192\n\nRed Team Tactics:\n1. Local privilege escalation in OpenVAS\ud83d\ude33\nhttps://csal.medium.com/pentesters-tricks-local-privilege-escalation-in-openvas-fe933d7f161f\n2. How to bypass CloudFlare bot protection\nhttps://jychp.medium.com/how-to-bypass-cloudflare-bot-protection-1f2c6c0c36fb\n3. A tool for generating fake code signing certificates or signing real ones\nhttps://github.com/Tylous/Limelighter\n4. Obfuscate specific windows apis with different apis\nhttps://github.com/d35ha/CallObfuscator\n5. XSS to make Privilege Escalation to be Super Admin\nhttps://melotover.medium.com/how-i-leveraged-xss-to-make-privilege-escalation-to-be-super-admin-e120b6090451\n6. CVE-2020-17453:\nXSS In WSO2 Carbon Management Console\nPoC:\nhttps://example[.]com/carbon/admin/login.jsp?msgId=%27;alert(1)//", "creation_timestamp": "2026-09-11T14:00:06.182818Z"} 2026-09-11T14:00:06.182818+00:00 https://vulnerability.circl.lu/sighting/9547cf36-c64b-44d2-8b2d-927219c70276/export 2026-10-10T15:44:45.858048+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9547cf36-c64b-44d2-8b2d-927219c70276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-08)", "content": "", "creation_timestamp": "2026-09-09T10:00:08.791366Z"} 2026-09-09T10:00:08.791366+00:00 https://vulnerability.circl.lu/sighting/a7be0cde-e69d-46f1-af8d-ea4a2494a27a/export 2026-10-10T15:44:45.858146+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a7be0cde-e69d-46f1-af8d-ea4a2494a27a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "seen", "source": "https://t.me/cissp/2770", "content": "CVE-2021-21389:\nBuddyPress < 7.2.1 - REST API Privilege Escalation to RCE (PoC)\nhttps://github.com/HoangKien1020/CVE-2021-21389\n\nCVE-2021-22192:\nAn issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing unauthorized authenticated users to execute arbitrary code on the server (PoC)\nhttps://github.com/lyy289065406/CVE-2021-22192\n\nRed Team Tactics:\n1. Local privilege escalation in OpenVAS\ud83d\ude33\nhttps://csal.medium.com/pentesters-tricks-local-privilege-escalation-in-openvas-fe933d7f161f\n2. How to bypass CloudFlare bot protection\nhttps://jychp.medium.com/how-to-bypass-cloudflare-bot-protection-1f2c6c0c36fb\n3. A tool for generating fake code signing certificates or signing real ones\nhttps://github.com/Tylous/Limelighter\n4. Obfuscate specific windows apis with different apis\nhttps://github.com/d35ha/CallObfuscator\n5. XSS to make Privilege Escalation to be Super Admin\nhttps://melotover.medium.com/how-i-leveraged-xss-to-make-privilege-escalation-to-be-super-admin-e120b6090451\n6. CVE-2020-17453:\nXSS In WSO2 Carbon Management Console\nPoC:\nhttps://example[.]com/carbon/admin/login.jsp?msgId=%27;alert(1)//", "creation_timestamp": "2026-09-01T17:00:56.144891Z"} 2026-09-01T17:00:56.144891+00:00 https://vulnerability.circl.lu/sighting/9218c283-3330-4c6e-bc12-4e85cc454371/export 2026-10-10T15:44:45.858229+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9218c283-3330-4c6e-bc12-4e85cc454371", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-20)", "content": "", "creation_timestamp": "2026-08-21T10:00:20.797276Z"} 2026-08-21T10:00:20.797276+00:00 https://vulnerability.circl.lu/sighting/f3fc8f5e-fffb-4a7b-880e-22ef2694316c/export 2026-10-10T15:44:45.858301+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f3fc8f5e-fffb-4a7b-880e-22ef2694316c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-18)", "content": "", "creation_timestamp": "2026-08-19T10:00:10.509190Z"} 2026-08-19T10:00:10.509190+00:00 https://vulnerability.circl.lu/sighting/8024ad14-8527-4614-a254-e2ae6838570a/export 2026-10-10T15:44:45.858367+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8024ad14-8527-4614-a254-e2ae6838570a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-09)", "content": "", "creation_timestamp": "2026-08-10T10:00:08.413871Z"} 2026-08-10T10:00:08.413871+00:00 https://vulnerability.circl.lu/sighting/1d20c42c-972a-4761-9179-92543d8f6d2f/export 2026-10-10T15:44:45.858440+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1d20c42c-972a-4761-9179-92543d8f6d2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-07)", "content": "", "creation_timestamp": "2026-08-08T10:47:51.095545Z"} 2026-08-08T10:47:51.095545+00:00 https://vulnerability.circl.lu/sighting/3f13bc03-5d13-41cc-84fd-bfd62fa0e55d/export 2026-10-10T15:44:45.858507+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3f13bc03-5d13-41cc-84fd-bfd62fa0e55d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-31)", "content": "", "creation_timestamp": "2026-08-01T10:00:06.637616Z"} 2026-08-01T10:00:06.637616+00:00 https://vulnerability.circl.lu/sighting/002e975d-eada-4e48-8b80-e8d790f42c84/export 2026-10-10T15:44:45.858575+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "002e975d-eada-4e48-8b80-e8d790f42c84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-28)", "content": "", "creation_timestamp": "2026-07-29T10:00:13.762605Z"} 2026-07-29T10:00:13.762605+00:00 https://vulnerability.circl.lu/sighting/50f7f527-b854-4c14-b93a-9942fd58aee8/export 2026-10-10T15:44:45.858641+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "50f7f527-b854-4c14-b93a-9942fd58aee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-03)", "content": "", "creation_timestamp": "2026-07-04T10:00:06.043670Z"} 2026-07-04T10:00:06.043670+00:00