https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 15:44:46 +0000 https://vulnerability.circl.lu/sighting/ed0740a9-2d4b-41d8-8d22-969679fea772/export {"uuid": "ed0740a9-2d4b-41d8-8d22-969679fea772", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2770", "content": "CVE-2021-21389:\nBuddyPress < 7.2.1 - REST API Privilege Escalation to RCE (PoC)\nhttps://github.com/HoangKien1020/CVE-2021-21389\n\nCVE-2021-22192:\nAn issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing unauthorized authenticated users to execute arbitrary code on the server (PoC)\nhttps://github.com/lyy289065406/CVE-2021-22192\n\nRed Team Tactics:\n1. Local privilege escalation in OpenVAS\ud83d\ude33\nhttps://csal.medium.com/pentesters-tricks-local-privilege-escalation-in-openvas-fe933d7f161f\n2. How to bypass CloudFlare bot protection\nhttps://jychp.medium.com/how-to-bypass-cloudflare-bot-protection-1f2c6c0c36fb\n3. A tool for generating fake code signing certificates or signing real ones\nhttps://github.com/Tylous/Limelighter\n4. Obfuscate specific windows apis with different apis\nhttps://github.com/d35ha/CallObfuscator\n5. XSS to make Privilege Escalation to be Super Admin\nhttps://melotover.medium.com/how-i-leveraged-xss-to-make-privilege-escalation-to-be-super-admin-e120b6090451\n6. CVE-2020-17453:\nXSS In WSO2 Carbon Management Console\nPoC:\nhttps://example[.]com/carbon/admin/login.jsp?msgId=%27;alert(1)//", "creation_timestamp": "2026-09-11T14:00:06.182818Z"} {"uuid": "ed0740a9-2d4b-41d8-8d22-969679fea772", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2770", "content": "CVE-2021-21389:\nBuddyPress < 7.2.1 - REST API Privilege Escalation to RCE (PoC)\nhttps://github.com/HoangKien1020/CVE-2021-21389\n\nCVE-2021-22192:\nAn issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing unauthorized authenticated users to execute arbitrary code on the server (PoC)\nhttps://github.com/lyy289065406/CVE-2021-22192\n\nRed Team Tactics:\n1. Local privilege escalation in OpenVAS\ud83d\ude33\nhttps://csal.medium.com/pentesters-tricks-local-privilege-escalation-in-openvas-fe933d7f161f\n2. How to bypass CloudFlare bot protection\nhttps://jychp.medium.com/how-to-bypass-cloudflare-bot-protection-1f2c6c0c36fb\n3. A tool for generating fake code signing certificates or signing real ones\nhttps://github.com/Tylous/Limelighter\n4. Obfuscate specific windows apis with different apis\nhttps://github.com/d35ha/CallObfuscator\n5. XSS to make Privilege Escalation to be Super Admin\nhttps://melotover.medium.com/how-i-leveraged-xss-to-make-privilege-escalation-to-be-super-admin-e120b6090451\n6. CVE-2020-17453:\nXSS In WSO2 Carbon Management Console\nPoC:\nhttps://example[.]com/carbon/admin/login.jsp?msgId=%27;alert(1)//", "creation_timestamp": "2026-09-11T14:00:06.182818Z"} https://vulnerability.circl.lu/sighting/ed0740a9-2d4b-41d8-8d22-969679fea772/export Fri, 11 Sep 2026 14:00:06 +0000 https://vulnerability.circl.lu/sighting/9547cf36-c64b-44d2-8b2d-927219c70276/export {"uuid": "9547cf36-c64b-44d2-8b2d-927219c70276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-08)", "content": "", "creation_timestamp": "2026-09-09T10:00:08.791366Z"} {"uuid": "9547cf36-c64b-44d2-8b2d-927219c70276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-08)", "content": "", "creation_timestamp": "2026-09-09T10:00:08.791366Z"} https://vulnerability.circl.lu/sighting/9547cf36-c64b-44d2-8b2d-927219c70276/export Wed, 09 Sep 2026 10:00:08 +0000 https://vulnerability.circl.lu/sighting/a7be0cde-e69d-46f1-af8d-ea4a2494a27a/export {"uuid": "a7be0cde-e69d-46f1-af8d-ea4a2494a27a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "seen", "source": "https://t.me/cissp/2770", "content": "CVE-2021-21389:\nBuddyPress < 7.2.1 - REST API Privilege Escalation to RCE (PoC)\nhttps://github.com/HoangKien1020/CVE-2021-21389\n\nCVE-2021-22192:\nAn issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing unauthorized authenticated users to execute arbitrary code on the server (PoC)\nhttps://github.com/lyy289065406/CVE-2021-22192\n\nRed Team Tactics:\n1. Local privilege escalation in OpenVAS\ud83d\ude33\nhttps://csal.medium.com/pentesters-tricks-local-privilege-escalation-in-openvas-fe933d7f161f\n2. How to bypass CloudFlare bot protection\nhttps://jychp.medium.com/how-to-bypass-cloudflare-bot-protection-1f2c6c0c36fb\n3. A tool for generating fake code signing certificates or signing real ones\nhttps://github.com/Tylous/Limelighter\n4. Obfuscate specific windows apis with different apis\nhttps://github.com/d35ha/CallObfuscator\n5. XSS to make Privilege Escalation to be Super Admin\nhttps://melotover.medium.com/how-i-leveraged-xss-to-make-privilege-escalation-to-be-super-admin-e120b6090451\n6. CVE-2020-17453:\nXSS In WSO2 Carbon Management Console\nPoC:\nhttps://example[.]com/carbon/admin/login.jsp?msgId=%27;alert(1)//", "creation_timestamp": "2026-09-01T17:00:56.144891Z"} {"uuid": "a7be0cde-e69d-46f1-af8d-ea4a2494a27a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "seen", "source": "https://t.me/cissp/2770", "content": "CVE-2021-21389:\nBuddyPress < 7.2.1 - REST API Privilege Escalation to RCE (PoC)\nhttps://github.com/HoangKien1020/CVE-2021-21389\n\nCVE-2021-22192:\nAn issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing unauthorized authenticated users to execute arbitrary code on the server (PoC)\nhttps://github.com/lyy289065406/CVE-2021-22192\n\nRed Team Tactics:\n1. Local privilege escalation in OpenVAS\ud83d\ude33\nhttps://csal.medium.com/pentesters-tricks-local-privilege-escalation-in-openvas-fe933d7f161f\n2. How to bypass CloudFlare bot protection\nhttps://jychp.medium.com/how-to-bypass-cloudflare-bot-protection-1f2c6c0c36fb\n3. A tool for generating fake code signing certificates or signing real ones\nhttps://github.com/Tylous/Limelighter\n4. Obfuscate specific windows apis with different apis\nhttps://github.com/d35ha/CallObfuscator\n5. XSS to make Privilege Escalation to be Super Admin\nhttps://melotover.medium.com/how-i-leveraged-xss-to-make-privilege-escalation-to-be-super-admin-e120b6090451\n6. CVE-2020-17453:\nXSS In WSO2 Carbon Management Console\nPoC:\nhttps://example[.]com/carbon/admin/login.jsp?msgId=%27;alert(1)//", "creation_timestamp": "2026-09-01T17:00:56.144891Z"} https://vulnerability.circl.lu/sighting/a7be0cde-e69d-46f1-af8d-ea4a2494a27a/export Tue, 01 Sep 2026 17:00:56 +0000 https://vulnerability.circl.lu/sighting/9218c283-3330-4c6e-bc12-4e85cc454371/export {"uuid": "9218c283-3330-4c6e-bc12-4e85cc454371", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-20)", "content": "", "creation_timestamp": "2026-08-21T10:00:20.797276Z"} {"uuid": "9218c283-3330-4c6e-bc12-4e85cc454371", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-20)", "content": "", "creation_timestamp": "2026-08-21T10:00:20.797276Z"} https://vulnerability.circl.lu/sighting/9218c283-3330-4c6e-bc12-4e85cc454371/export Fri, 21 Aug 2026 10:00:20 +0000 https://vulnerability.circl.lu/sighting/f3fc8f5e-fffb-4a7b-880e-22ef2694316c/export {"uuid": "f3fc8f5e-fffb-4a7b-880e-22ef2694316c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-18)", "content": "", "creation_timestamp": "2026-08-19T10:00:10.509190Z"} {"uuid": "f3fc8f5e-fffb-4a7b-880e-22ef2694316c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-18)", "content": "", "creation_timestamp": "2026-08-19T10:00:10.509190Z"} https://vulnerability.circl.lu/sighting/f3fc8f5e-fffb-4a7b-880e-22ef2694316c/export Wed, 19 Aug 2026 10:00:10 +0000 https://vulnerability.circl.lu/sighting/8024ad14-8527-4614-a254-e2ae6838570a/export {"uuid": "8024ad14-8527-4614-a254-e2ae6838570a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-09)", "content": "", "creation_timestamp": "2026-08-10T10:00:08.413871Z"} {"uuid": "8024ad14-8527-4614-a254-e2ae6838570a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-09)", "content": "", "creation_timestamp": "2026-08-10T10:00:08.413871Z"} https://vulnerability.circl.lu/sighting/8024ad14-8527-4614-a254-e2ae6838570a/export Mon, 10 Aug 2026 10:00:08 +0000 https://vulnerability.circl.lu/sighting/1d20c42c-972a-4761-9179-92543d8f6d2f/export {"uuid": "1d20c42c-972a-4761-9179-92543d8f6d2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-07)", "content": "", "creation_timestamp": "2026-08-08T10:47:51.095545Z"} {"uuid": "1d20c42c-972a-4761-9179-92543d8f6d2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-07)", "content": "", "creation_timestamp": "2026-08-08T10:47:51.095545Z"} https://vulnerability.circl.lu/sighting/1d20c42c-972a-4761-9179-92543d8f6d2f/export Sat, 08 Aug 2026 10:47:51 +0000 https://vulnerability.circl.lu/sighting/3f13bc03-5d13-41cc-84fd-bfd62fa0e55d/export {"uuid": "3f13bc03-5d13-41cc-84fd-bfd62fa0e55d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-31)", "content": "", "creation_timestamp": "2026-08-01T10:00:06.637616Z"} {"uuid": "3f13bc03-5d13-41cc-84fd-bfd62fa0e55d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-31)", "content": "", "creation_timestamp": "2026-08-01T10:00:06.637616Z"} https://vulnerability.circl.lu/sighting/3f13bc03-5d13-41cc-84fd-bfd62fa0e55d/export Sat, 01 Aug 2026 10:00:06 +0000 https://vulnerability.circl.lu/sighting/002e975d-eada-4e48-8b80-e8d790f42c84/export {"uuid": "002e975d-eada-4e48-8b80-e8d790f42c84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-28)", "content": "", "creation_timestamp": "2026-07-29T10:00:13.762605Z"} {"uuid": "002e975d-eada-4e48-8b80-e8d790f42c84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-28)", "content": "", "creation_timestamp": "2026-07-29T10:00:13.762605Z"} https://vulnerability.circl.lu/sighting/002e975d-eada-4e48-8b80-e8d790f42c84/export Wed, 29 Jul 2026 10:00:13 +0000 https://vulnerability.circl.lu/sighting/50f7f527-b854-4c14-b93a-9942fd58aee8/export {"uuid": "50f7f527-b854-4c14-b93a-9942fd58aee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-03)", "content": "", "creation_timestamp": "2026-07-04T10:00:06.043670Z"} {"uuid": "50f7f527-b854-4c14-b93a-9942fd58aee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21389", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-03)", "content": "", "creation_timestamp": "2026-07-04T10:00:06.043670Z"} https://vulnerability.circl.lu/sighting/50f7f527-b854-4c14-b93a-9942fd58aee8/export Sat, 04 Jul 2026 10:00:06 +0000