{"vulnerability": "CVE-2021-25374", "sightings": [{"uuid": "44d0f872-e763-40ae-8217-929df6be4d34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-25374", "type": "seen", "source": "MISP/4b1d9a68-9289-4a5a-8d07-53c8d2e9d153", "content": "", "creation_timestamp": "2024-11-14T06:09:06.000000Z"}, {"uuid": "4764d394-54b1-44cf-8102-bee61faa57d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-25374", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3097", "content": "#exploit\nCVE-2021-25374:\nAn improper authorization vulnerability in Samsung Members \"samsungrewards\" scheme for deeplink in versions 2.4.83.9 in Android <=8.1, 3.9.00.9 in Android <=9.0 allows remote attackers to access a user data related with Samsung Account\n]-> Samsung Account Access Script (1-day):\nhttps://github.com/FSecureLABS/CVE-2021-25374_Samsung-Account-Access", "creation_timestamp": "2022-07-05T04:33:08.000000Z"}, {"uuid": "019fd4cd-a2b2-4fe5-932b-1f5911689d67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-25374", "type": "seen", "source": "https://t.me/cissp/2933", "content": "exploit\nCVE-2021-25374:\nAn improper authorization vulnerability in Samsung Members \"samsungrewards\" scheme for deeplink in versions 2.4.83.9 in Android <=8.1, 3.9.00.9 in Android <=9.0 allows remote attackers to access a user data related with Samsung Account\n]-> Samsung Account Access Script (1-day PoC):\nhttps://github.com/FSecureLABS/CVE-2021-25374_Samsung-Account-Access\n\nMalware analysis\nA deep dive into Saint Bot, a new downloader\ud83d\ude0a\nhttps://blog.malwarebytes.com/threat-analysis/2021/04/a-deep-dive-into-saint-bot-downloader\n\nWLANSecurity\nCVE-2021-3297:\nOn Zyxel NBG2105 V1.00(AAGU.2)C0 devices, setting the login cookie to 1 provides administrator access (PoC)\nhttps://github.com/Sec504/Zyxel-NBG2105-CVE-2021-3297\n\nThreat Research:\nGamifying machine learning for stronger security and AI models\ud83e\uddd0\nhttps://www.microsoft.com/security/blog/2021/04/08/gamifying-machine-learning-for-stronger-security-and-ai-models", "creation_timestamp": "2026-09-01T17:00:55.140626Z"}, {"uuid": "99f94a9c-7794-477f-8b64-6fbcb517a381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-25374", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2933", "content": "exploit\nCVE-2021-25374:\nAn improper authorization vulnerability in Samsung Members \"samsungrewards\" scheme for deeplink in versions 2.4.83.9 in Android <=8.1, 3.9.00.9 in Android <=9.0 allows remote attackers to access a user data related with Samsung Account\n]-> Samsung Account Access Script (1-day PoC):\nhttps://github.com/FSecureLABS/CVE-2021-25374_Samsung-Account-Access\n\nMalware analysis\nA deep dive into Saint Bot, a new downloader\ud83d\ude0a\nhttps://blog.malwarebytes.com/threat-analysis/2021/04/a-deep-dive-into-saint-bot-downloader\n\nWLANSecurity\nCVE-2021-3297:\nOn Zyxel NBG2105 V1.00(AAGU.2)C0 devices, setting the login cookie to 1 provides administrator access (PoC)\nhttps://github.com/Sec504/Zyxel-NBG2105-CVE-2021-3297\n\nThreat Research:\nGamifying machine learning for stronger security and AI models\ud83e\uddd0\nhttps://www.microsoft.com/security/blog/2021/04/08/gamifying-machine-learning-for-stronger-security-and-ai-models", "creation_timestamp": "2026-09-11T10:00:05.268380Z"}]}