{"vulnerability": "CVE-2021-3014", "sightings": [{"uuid": "a7e37faa-9b8d-41a3-9514-4112fc32fee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30149", "type": "seen", "source": "MISP/db590f1d-f0cf-4120-8ce3-24f4a9fde1a1", "content": "", "creation_timestamp": "2024-11-14T06:08:58.000000Z"}, {"uuid": "3ef8ce6b-f410-4fb0-b1b6-ba7d0d657878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30147", "type": "seen", "source": "MISP/22e7cd24-c7ef-4c63-bf56-ad0ad27f27d8", "content": "", "creation_timestamp": "2024-11-14T06:08:49.000000Z"}, {"uuid": "09fa039b-58ec-400f-a952-ba1d8222a610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3014", "type": "seen", "source": "https://t.me/MikrotikNews/122", "content": "RouterOS 6.49beta11 [Testing]\nReleased: 2021-02-03\n\nFixed: CVE-2021-3014\n\nFind download links and change-log in the Comments below. Feel free to talk about changes or problems in Mikrotik Chat", "creation_timestamp": "2021-02-03T17:02:13.000000Z"}, {"uuid": "32275ec9-ab4f-43f5-a659-5890e7836d4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3014", "type": "seen", "source": "https://t.me/MikrotikNews/125", "content": "RouterOS 6.47.9 [Long-term]\nReleased: 2021-02-09\n\nFixed: CVE-2021-3014\n\nFind download links and change-log in the Comments below. Feel free to talk about changes or problems in our chats: English, Russian", "creation_timestamp": "2021-02-21T11:13:36.000000Z"}, {"uuid": "aaa440aa-90b7-46af-a611-b0bc56fab62b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3014", "type": "seen", "source": "https://t.me/MikrotikNews/124", "content": "RouterOS 6.48.1 [Stable]\nReleased: 2021-02-05\n\nFixed: CVE-2021-3014\n\nFind download links and change-log in the Comments below. Feel free to talk about changes or problems in our chats: English, Russian", "creation_timestamp": "2021-02-21T11:15:17.000000Z"}, {"uuid": "99ffab2b-ae75-4736-b3c2-5992e2b5a7dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3014", "type": "seen", "source": "Telegram/863SGzZX28VyoAHTm3xgrOTMVB2eqS9aF2hAVVV87eo_Th9_", "content": "", "creation_timestamp": "2021-04-08T12:57:06.000000Z"}, {"uuid": "fecf42c7-a11c-4c36-8af5-45bbbce4f9fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30144", "type": "seen", "source": "https://t.me/arpsyndicate/2885", "content": "#ExploitObserverAlert\n\nCVE-2021-30144\n\nDESCRIPTION: Exploit Observer has 4 entries in 2 file formats related to CVE-2021-30144. The Dashboard plugin through 1.0.2 for GLPI allows remote low-privileged users to bypass access control on viewing information about the last ten events, the connected users, and the users in the tech category. For example, plugins/dashboard/front/main2.php can be used.\n\nFIRST-EPSS: 0.000820000\nNVD-IS: 1.4\nNVD-ES: 2.8", "creation_timestamp": "2024-01-16T22:20:12.000000Z"}, {"uuid": "a21e8081-9bff-4f15-8409-77285fbc41b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30149", "type": "published-proof-of-concept", "source": "https://t.me/pwnwiki_zhchannel/96", "content": "CVE-2021-30149 Composr 10.0.36 \u9060\u7a0b\u4ee3\u78bc\u57f7\u884c\u6f0f\u6d1e\nhttps://short.pwnwiki.org/?c=aA0dI9", "creation_timestamp": "2021-09-21T06:42:52.000000Z"}, {"uuid": "e3cc6cc6-778d-4300-a399-490e9fad7439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30147", "type": "published-proof-of-concept", "source": "https://t.me/pwnwiki_zhchannel/95", "content": "CVE-2021-30147 DMA Radius Manager 4.4.0 \u8de8\u7ad9\u8acb\u6c42\u507d\u9020\uff08CSRF\uff09\nhttps://short.pwnwiki.org/?c=SNFv0B", "creation_timestamp": "2021-09-21T06:42:52.000000Z"}, {"uuid": "b56ffbf3-5866-4ad4-b184-9dade961031e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3014", "type": "seen", "source": "https://t.me/cibsecurity/21553", "content": "\u203c CVE-2021-3014 \u203c\n\nIn MikroTik RouterOS through 2021-01-04, the hotspot login page is vulnerable to reflected XSS via the target parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-04T23:25:08.000000Z"}, {"uuid": "1dcfefb0-8892-4ac9-92ff-bfa0f4241bd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30146", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3071", "content": "#exploit\nCVE-2021-30146:\nSeafile 7.0.5 (2019) allows Persistent XSS via the \"share of library functionality\"", "creation_timestamp": "2021-04-07T11:01:20.000000Z"}, {"uuid": "60cd7831-472f-4c2f-b3eb-8a31fe9ac8e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30145", "type": "seen", "source": "Telegram/XOWZ03GAQaPFK4QUsQrA4nOgtkuM--Ud_LdqLjOt_VYCBWw", "content": "", "creation_timestamp": "2026-08-16T19:00:06.214447Z"}, {"uuid": "ead4fbb2-4a7b-44a9-82bc-bd937cd1f3bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30145", "type": "published-proof-of-concept", "source": "Telegram/XOWZ03GAQaPFK4QUsQrA4nOgtkuM--Ud_LdqLjOt_VYCBWw", "content": "", "creation_timestamp": "2026-08-17T00:00:09.288426Z"}, {"uuid": "6a4796f7-af8b-462d-a9d8-8f47df382f96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30146", "type": "seen", "source": "https://t.me/cissp/2889", "content": "exploit\nCVE-2021-30146:\nSeafile 7.0.5 (2019) allows Persistent XSS via the \"share of library functionality\"\n\nResearch\n\"A closer look at the security of React Native biometric libraries\", 2021.\nhttps://blog.nviso.eu/2021/04/06/a-closer-look-at-the-security-of-react-native-biometric-libraries\n\nRed Team Tactics:\n1. Revisiting MacOS X Kernel Rootkits (.pdf)\nhttps://vxug.fakedoma.in/papers/VXUG/Mirrors/phrack.org-%20Phrack%20Magazine%20.pdf\n2. Anti-Analysis Techniques Used in Excel 4.0 Macros\nhttps://www.goggleheadedhacker.com/blog/post/23\n3. Exploitation paths allowing you to use the Windows Privileges to elevate your rights within the OS\nhttps://github.com/gtworek/Priv2Admin\n4. Proxy Unix applications in the terminal\nhttps://posts.specterops.io/man-in-the-terminal-65476e6165b9\n]-> https://github.com/djhohnstein/cliProxy\n\nEliminating Data Races in Firefox - A Technical Report\nhttps://hacks.mozilla.org/2021/04/eliminating-data-races-in-firefox-a-technical-report\n\nOffensive security\nHow to bypass Cloudflare, Incapsula, SUCURI and another WAF\ud83d\udc4d\ud83c\udffd\nhttps://miloserdov.org/?p=2960", "creation_timestamp": "2026-09-01T17:00:55.276044Z"}, {"uuid": "f6a7118f-3236-4fe5-8e89-4d02ba56d131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30140", "type": "seen", "source": "https://t.me/hacking_Attack/54074", "content": "Exploit Collector\nLiquidFiles 3.4.15 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-4tZE0Y76jWM/WWlvMNv2FRI/AAAAAAAAIMQ/Di9LOyWyOssTbh7urhFnaBV0oE1qNf8CgCLcBGAs/s1600/h19.png \nLiquidFiles version 3.4.15 suffers from a cross site scripting vulnerability.\n\nSHA-256 | 64fb0fffa85d330dbc47f539a594fa8fcad4c9362b419983c93474d08ba4e151\n\nDownload\n=====[ Tempest Security Intelligence - ADV-12/2021\n]==========================\n\nLiquidFiles - 3.4.15\n\nAuthor: Rodolfo Tavares\n\nTempest Security Intelligence - Recife, Pernambuco - Brazil\n\n=====[ Table of Contents]==================================================\n* Overview\n* Detailed description\n* Timeline of disclosure\n* Thanks & Acknowledgements\n* References\n\n=====[ Vulnerability\nInformation]=============================================\n* Class: Improper Neutralization of Input During Web Page Generation\n('Cross-site Scripting') [CWE-79]\n\n* CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N\n\n=====[ Overview]========================================================\n* System affected : LiquidFiles\n* Software Version : Version  - 3.4.15\n* Impacts :\n* XSS: LiquidFiles 3.4.15 has stored XSS through the \"send email\"\nfunctionality when sending a file via email to an administrator. When a\nfile has no extension and contains malicious HTML / JavaScript content\n(such as SVG with HTML content), the payload is executed upon a click. This\nis fixed in 3.5.\n=====[ Detailed\ndescription]=================================================\n\n* Stored XSS at [http://localhost:8080/message/new]:\n\n* Steps to reproduce\n\n1 - Create a file without extension, with the content below inside\n```\n\n\n\n```\n2 - With an external user send an email with that file (without any\nextension) to admin or someone.\n\n3 -  With the admin account go to the menu click on \"Data\", inside the\n\"Data\" menu click at \"Messages\", and select the message that you sent at\nstep 2. At the table click on the filename row over your file, the\njavascript code will be executed.\n\n=====[ Timeline of\ndisclosure]===============================================\n\n11/Jan/2021 - Responsible disclosure was initiated with the vendor.\n12/Jan/2021 - LiquidFiles Support confirmed the issue;\n18/Fev/2021 - The vendor fixed the vulnerability the second stored XSS's\n06/Apr/2021 - CVEs was assigned and reserved as CVE-2021-30140\n\n=====[ Thanks & Acknowledgements]========================================\n* Tempest Security Intelligence [5]\n\n=====[ References ]=====================================================\n\n[1][ [\nhttps://cwe.mitre.org/data/definitions/79.html]|https://cwe.mitre.org/data/definitions/79.html\n]]\n[2][ [https://gist.github.com/rodnt/9f7d368fac38cafa7334598ec94fb167]]\n[3][ [https://www.tempest.com.br|\nhttps://www.tempest.com.br/]|https://www.tempest.com.br/]\n\n=====[ EOF ]===========================================================\n--\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:38.381018Z"}, {"uuid": "a8e7ca0c-6ed7-4996-ae0f-2adf5e51aa98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30147", "type": "seen", "source": "https://t.me/hacking_Attack/4224", "content": "Exploit Collector\nDMA Radius Manager 4.4.0 Cross Site Request Forgery\n\nhttps://4.bp.blogspot.com/-JipZY3hUF7s/WWlu7l1ccBI/AAAAAAAAIJc/HAISYb4KBsQdeIf6OzzYRuXiYaIkpQnmACLcBGAs/s1600/h110.png \nDMA Radius Manager version 4.4.0 suffers from a cross site request forgery vulnerability.\n\nMD5 | 531e4a4445ee19d136af401072188e0d\n\nDownload\n# Exploit Title: DMA Radius Manager 4.4.0 - Cross-Site Request Forgery (CSRF)\n# Date: April 8, 2021 (04/08/2021)\n# Exploit Author: Issac Briones\n# Vendor Homepage: http://www.dmasoftlab.com/\n# Software Download: https://sourceforge.net/projects/radiusmanager/\n# Version: 4.4.0\n# CVE: CVE-2021-30147\n< ! -- Change IP addr to IP addr that RADIUS manager is located -- >\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:02:47.746996Z"}, {"uuid": "642cb5c1-e170-4331-b9dd-08992caed539", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30149", "type": "seen", "source": "https://t.me/hacking_Attack/4232", "content": "Exploit Collector\nComposr 10.0.36 Shell Upload\n\nhttps://4.bp.blogspot.com/-gp6vAY2GXMM/WWlvG3cWkQI/AAAAAAAAILY/aMDesAGFEocqJU-7SaIaO870_Bbf2ZUHACLcBGAs/s1600/h139.png \nComposr version 10.0.36 suffers from a remote shell upload vulnerability.\n\nMD5 | 735eb24f76261ce2e85c105910c3e39c\n\nDownload\n# Exploit Title: Composr 10.0.36 - Remote Code Execution\n# Date: 04/06/2021\n# Exploit Author: Orion Hridoy\n# Vendor Homepage: https://compo.sr/\n# Software Link: https://compo.sr/download.htm\n# Version: 10.0.36\n# Tested on: Windows/Linux\n# CVE : CVE-2021-30149\n\nA RCE on Composr CMS has been discovered by BugsBD Private LTD. We have a galleries security issue which allows us to upload a PHP file. Whenever we upload an image from galleries, Composr allows us to upload only images. If we tried to upload a PHP file from galleries uploader it will say someone attempting hacking activities. But we have a security issue on the Upload In Bulk section. Whenever we check allowed extension in Upload in bulk function we can see PHP is completely prohibited. But whenever we tamper the request and change the extension we can see it will upload the PHP file without other or server side verification. This allows a user to upload malicious file even when they restricted it.\n\nSteps To Reproduce:\n1. Go to upload galleries.\n2. Upload a image and tamper the request and change the extension from .jpg to .php\n3. It will say hacking attempts, check the allowed extension and you can see it's not accepting PHP extension.\n4. Now go to upload in bulk option.\n5. Upload a image with PHP codes and tamper the request.\n6. Change extension from .jpg to .php\n7. It will get uploaded with the blocked PHP extension.\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:02:47.800545Z"}, {"uuid": "08ef0d6c-dcf2-498e-8898-1c85fe95f2f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30147", "type": "seen", "source": "https://t.me/hacking_Attack/4224", "content": "Exploit Collector\nDMA Radius Manager 4.4.0 Cross Site Request Forgery\n\nhttps://4.bp.blogspot.com/-JipZY3hUF7s/WWlu7l1ccBI/AAAAAAAAIJc/HAISYb4KBsQdeIf6OzzYRuXiYaIkpQnmACLcBGAs/s1600/h110.png \nDMA Radius Manager version 4.4.0 suffers from a cross site request forgery vulnerability.\n\nMD5 | 531e4a4445ee19d136af401072188e0d\n\nDownload\n# Exploit Title: DMA Radius Manager 4.4.0 - Cross-Site Request Forgery (CSRF)\n# Date: April 8, 2021 (04/08/2021)\n# Exploit Author: Issac Briones\n# Vendor Homepage: http://www.dmasoftlab.com/\n# Software Download: https://sourceforge.net/projects/radiusmanager/\n# Version: 4.4.0\n# CVE: CVE-2021-30147\n< ! -- Change IP addr to IP addr that RADIUS manager is located -- >\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:03:23.952830Z"}, {"uuid": "b98e2e23-ede2-4d39-a7fd-98da9e8766e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30140", "type": "seen", "source": "https://t.me/hacking_Attack/54074", "content": "Exploit Collector\nLiquidFiles 3.4.15 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-4tZE0Y76jWM/WWlvMNv2FRI/AAAAAAAAIMQ/Di9LOyWyOssTbh7urhFnaBV0oE1qNf8CgCLcBGAs/s1600/h19.png \nLiquidFiles version 3.4.15 suffers from a cross site scripting vulnerability.\n\nSHA-256 | 64fb0fffa85d330dbc47f539a594fa8fcad4c9362b419983c93474d08ba4e151\n\nDownload\n=====[ Tempest Security Intelligence - ADV-12/2021\n]==========================\n\nLiquidFiles - 3.4.15\n\nAuthor: Rodolfo Tavares\n\nTempest Security Intelligence - Recife, Pernambuco - Brazil\n\n=====[ Table of Contents]==================================================\n* Overview\n* Detailed description\n* Timeline of disclosure\n* Thanks & Acknowledgements\n* References\n\n=====[ Vulnerability\nInformation]=============================================\n* Class: Improper Neutralization of Input During Web Page Generation\n('Cross-site Scripting') [CWE-79]\n\n* CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N\n\n=====[ Overview]========================================================\n* System affected : LiquidFiles\n* Software Version : Version  - 3.4.15\n* Impacts :\n* XSS: LiquidFiles 3.4.15 has stored XSS through the \"send email\"\nfunctionality when sending a file via email to an administrator. When a\nfile has no extension and contains malicious HTML / JavaScript content\n(such as SVG with HTML content), the payload is executed upon a click. This\nis fixed in 3.5.\n=====[ Detailed\ndescription]=================================================\n\n* Stored XSS at [http://localhost:8080/message/new]:\n\n* Steps to reproduce\n\n1 - Create a file without extension, with the content below inside\n```\n\n\n\n```\n2 - With an external user send an email with that file (without any\nextension) to admin or someone.\n\n3 -  With the admin account go to the menu click on \"Data\", inside the\n\"Data\" menu click at \"Messages\", and select the message that you sent at\nstep 2. At the table click on the filename row over your file, the\njavascript code will be executed.\n\n=====[ Timeline of\ndisclosure]===============================================\n\n11/Jan/2021 - Responsible disclosure was initiated with the vendor.\n12/Jan/2021 - LiquidFiles Support confirmed the issue;\n18/Fev/2021 - The vendor fixed the vulnerability the second stored XSS's\n06/Apr/2021 - CVEs was assigned and reserved as CVE-2021-30140\n\n=====[ Thanks & Acknowledgements]========================================\n* Tempest Security Intelligence [5]\n\n=====[ References ]=====================================================\n\n[1][ [\nhttps://cwe.mitre.org/data/definitions/79.html]|https://cwe.mitre.org/data/definitions/79.html\n]]\n[2][ [https://gist.github.com/rodnt/9f7d368fac38cafa7334598ec94fb167]]\n[3][ [https://www.tempest.com.br|\nhttps://www.tempest.com.br/]|https://www.tempest.com.br/]\n\n=====[ EOF ]===========================================================\n--\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:48.859608Z"}, {"uuid": "997a6562-3aa2-49f0-af33-24465ba93fbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30149", "type": "seen", "source": "https://t.me/hacking_Attack/4232", "content": "Exploit Collector\nComposr 10.0.36 Shell Upload\n\nhttps://4.bp.blogspot.com/-gp6vAY2GXMM/WWlvG3cWkQI/AAAAAAAAILY/aMDesAGFEocqJU-7SaIaO870_Bbf2ZUHACLcBGAs/s1600/h139.png \nComposr version 10.0.36 suffers from a remote shell upload vulnerability.\n\nMD5 | 735eb24f76261ce2e85c105910c3e39c\n\nDownload\n# Exploit Title: Composr 10.0.36 - Remote Code Execution\n# Date: 04/06/2021\n# Exploit Author: Orion Hridoy\n# Vendor Homepage: https://compo.sr/\n# Software Link: https://compo.sr/download.htm\n# Version: 10.0.36\n# Tested on: Windows/Linux\n# CVE : CVE-2021-30149\n\nA RCE on Composr CMS has been discovered by BugsBD Private LTD. We have a galleries security issue which allows us to upload a PHP file. Whenever we upload an image from galleries, Composr allows us to upload only images. If we tried to upload a PHP file from galleries uploader it will say someone attempting hacking activities. But we have a security issue on the Upload In Bulk section. Whenever we check allowed extension in Upload in bulk function we can see PHP is completely prohibited. But whenever we tamper the request and change the extension we can see it will upload the PHP file without other or server side verification. This allows a user to upload malicious file even when they restricted it.\n\nSteps To Reproduce:\n1. Go to upload galleries.\n2. Upload a image and tamper the request and change the extension from .jpg to .php\n3. It will say hacking attempts, check the allowed extension and you can see it's not accepting PHP extension.\n4. Now go to upload in bulk option.\n5. Upload a image with PHP codes and tamper the request.\n6. Change extension from .jpg to .php\n7. It will get uploaded with the blocked PHP extension.\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:03:23.999611Z"}, {"uuid": "578f76b8-2a96-49ec-abfc-2d7ba48c0d80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30146", "type": "seen", "source": "https://t.me/cissp/2889", "content": "exploit\nCVE-2021-30146:\nSeafile 7.0.5 (2019) allows Persistent XSS via the \"share of library functionality\"\n\nResearch\n\"A closer look at the security of React Native biometric libraries\", 2021.\nhttps://blog.nviso.eu/2021/04/06/a-closer-look-at-the-security-of-react-native-biometric-libraries\n\nRed Team Tactics:\n1. Revisiting MacOS X Kernel Rootkits (.pdf)\nhttps://vxug.fakedoma.in/papers/VXUG/Mirrors/phrack.org-%20Phrack%20Magazine%20.pdf\n2. Anti-Analysis Techniques Used in Excel 4.0 Macros\nhttps://www.goggleheadedhacker.com/blog/post/23\n3. Exploitation paths allowing you to use the Windows Privileges to elevate your rights within the OS\nhttps://github.com/gtworek/Priv2Admin\n4. Proxy Unix applications in the terminal\nhttps://posts.specterops.io/man-in-the-terminal-65476e6165b9\n]-> https://github.com/djhohnstein/cliProxy\n\nEliminating Data Races in Firefox - A Technical Report\nhttps://hacks.mozilla.org/2021/04/eliminating-data-races-in-firefox-a-technical-report\n\nOffensive security\nHow to bypass Cloudflare, Incapsula, SUCURI and another WAF\ud83d\udc4d\ud83c\udffd\nhttps://miloserdov.org/?p=2960", "creation_timestamp": "2026-09-02T01:04:45.874782Z"}, {"uuid": "99505e24-f683-4a91-8d00-ee405031eb90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30140", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/54074", "content": "Exploit Collector\nLiquidFiles 3.4.15 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-4tZE0Y76jWM/WWlvMNv2FRI/AAAAAAAAIMQ/Di9LOyWyOssTbh7urhFnaBV0oE1qNf8CgCLcBGAs/s1600/h19.png \nLiquidFiles version 3.4.15 suffers from a cross site scripting vulnerability.\n\nSHA-256 | 64fb0fffa85d330dbc47f539a594fa8fcad4c9362b419983c93474d08ba4e151\n\nDownload\n=====[ Tempest Security Intelligence - ADV-12/2021\n]==========================\n\nLiquidFiles - 3.4.15\n\nAuthor: Rodolfo Tavares\n\nTempest Security Intelligence - Recife, Pernambuco - Brazil\n\n=====[ Table of Contents]==================================================\n* Overview\n* Detailed description\n* Timeline of disclosure\n* Thanks & Acknowledgements\n* References\n\n=====[ Vulnerability\nInformation]=============================================\n* Class: Improper Neutralization of Input During Web Page Generation\n('Cross-site Scripting') [CWE-79]\n\n* CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N\n\n=====[ Overview]========================================================\n* System affected : LiquidFiles\n* Software Version : Version  - 3.4.15\n* Impacts :\n* XSS: LiquidFiles 3.4.15 has stored XSS through the \"send email\"\nfunctionality when sending a file via email to an administrator. When a\nfile has no extension and contains malicious HTML / JavaScript content\n(such as SVG with HTML content), the payload is executed upon a click. This\nis fixed in 3.5.\n=====[ Detailed\ndescription]=================================================\n\n* Stored XSS at [http://localhost:8080/message/new]:\n\n* Steps to reproduce\n\n1 - Create a file without extension, with the content below inside\n```\n\n\n\n```\n2 - With an external user send an email with that file (without any\nextension) to admin or someone.\n\n3 -  With the admin account go to the menu click on \"Data\", inside the\n\"Data\" menu click at \"Messages\", and select the message that you sent at\nstep 2. At the table click on the filename row over your file, the\njavascript code will be executed.\n\n=====[ Timeline of\ndisclosure]===============================================\n\n11/Jan/2021 - Responsible disclosure was initiated with the vendor.\n12/Jan/2021 - LiquidFiles Support confirmed the issue;\n18/Fev/2021 - The vendor fixed the vulnerability the second stored XSS's\n06/Apr/2021 - CVEs was assigned and reserved as CVE-2021-30140\n\n=====[ Thanks & Acknowledgements]========================================\n* Tempest Security Intelligence [5]\n\n=====[ References ]=====================================================\n\n[1][ [\nhttps://cwe.mitre.org/data/definitions/79.html]|https://cwe.mitre.org/data/definitions/79.html\n]]\n[2][ [https://gist.github.com/rodnt/9f7d368fac38cafa7334598ec94fb167]]\n[3][ [https://www.tempest.com.br|\nhttps://www.tempest.com.br/]|https://www.tempest.com.br/]\n\n=====[ EOF ]===========================================================\n--\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T20:00:05.868994Z"}, {"uuid": "26405a2d-f5a8-4f5f-b208-efac01c33a8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30140", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/54074", "content": "Exploit Collector\nLiquidFiles 3.4.15 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-4tZE0Y76jWM/WWlvMNv2FRI/AAAAAAAAIMQ/Di9LOyWyOssTbh7urhFnaBV0oE1qNf8CgCLcBGAs/s1600/h19.png \nLiquidFiles version 3.4.15 suffers from a cross site scripting vulnerability.\n\nSHA-256 | 64fb0fffa85d330dbc47f539a594fa8fcad4c9362b419983c93474d08ba4e151\n\nDownload\n=====[ Tempest Security Intelligence - ADV-12/2021\n]==========================\n\nLiquidFiles - 3.4.15\n\nAuthor: Rodolfo Tavares\n\nTempest Security Intelligence - Recife, Pernambuco - Brazil\n\n=====[ Table of Contents]==================================================\n* Overview\n* Detailed description\n* Timeline of disclosure\n* Thanks & Acknowledgements\n* References\n\n=====[ Vulnerability\nInformation]=============================================\n* Class: Improper Neutralization of Input During Web Page Generation\n('Cross-site Scripting') [CWE-79]\n\n* CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N\n\n=====[ Overview]========================================================\n* System affected : LiquidFiles\n* Software Version : Version  - 3.4.15\n* Impacts :\n* XSS: LiquidFiles 3.4.15 has stored XSS through the \"send email\"\nfunctionality when sending a file via email to an administrator. When a\nfile has no extension and contains malicious HTML / JavaScript content\n(such as SVG with HTML content), the payload is executed upon a click. This\nis fixed in 3.5.\n=====[ Detailed\ndescription]=================================================\n\n* Stored XSS at [http://localhost:8080/message/new]:\n\n* Steps to reproduce\n\n1 - Create a file without extension, with the content below inside\n```\n\n\n\n```\n2 - With an external user send an email with that file (without any\nextension) to admin or someone.\n\n3 -  With the admin account go to the menu click on \"Data\", inside the\n\"Data\" menu click at \"Messages\", and select the message that you sent at\nstep 2. At the table click on the filename row over your file, the\njavascript code will be executed.\n\n=====[ Timeline of\ndisclosure]===============================================\n\n11/Jan/2021 - Responsible disclosure was initiated with the vendor.\n12/Jan/2021 - LiquidFiles Support confirmed the issue;\n18/Fev/2021 - The vendor fixed the vulnerability the second stored XSS's\n06/Apr/2021 - CVEs was assigned and reserved as CVE-2021-30140\n\n=====[ Thanks & Acknowledgements]========================================\n* Tempest Security Intelligence [5]\n\n=====[ References ]=====================================================\n\n[1][ [\nhttps://cwe.mitre.org/data/definitions/79.html]|https://cwe.mitre.org/data/definitions/79.html\n]]\n[2][ [https://gist.github.com/rodnt/9f7d368fac38cafa7334598ec94fb167]]\n[3][ [https://www.tempest.com.br|\nhttps://www.tempest.com.br/]|https://www.tempest.com.br/]\n\n=====[ EOF ]===========================================================\n--\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:37.383936Z"}, {"uuid": "b16ad9ae-2897-42b5-b649-b1cbe054ab4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30147", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/4224", "content": "Exploit Collector\nDMA Radius Manager 4.4.0 Cross Site Request Forgery\n\nhttps://4.bp.blogspot.com/-JipZY3hUF7s/WWlu7l1ccBI/AAAAAAAAIJc/HAISYb4KBsQdeIf6OzzYRuXiYaIkpQnmACLcBGAs/s1600/h110.png \nDMA Radius Manager version 4.4.0 suffers from a cross site request forgery vulnerability.\n\nMD5 | 531e4a4445ee19d136af401072188e0d\n\nDownload\n# Exploit Title: DMA Radius Manager 4.4.0 - Cross-Site Request Forgery (CSRF)\n# Date: April 8, 2021 (04/08/2021)\n# Exploit Author: Issac Briones\n# Vendor Homepage: http://www.dmasoftlab.com/\n# Software Download: https://sourceforge.net/projects/radiusmanager/\n# Version: 4.4.0\n# CVE: CVE-2021-30147\n< ! -- Change IP addr to IP addr that RADIUS manager is located -- >\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-08T11:00:04.893609Z"}, {"uuid": "a82d6a51-8fe0-4cda-93b6-fd954c985664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30149", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/4232", "content": "Exploit Collector\nComposr 10.0.36 Shell Upload\n\nhttps://4.bp.blogspot.com/-gp6vAY2GXMM/WWlvG3cWkQI/AAAAAAAAILY/aMDesAGFEocqJU-7SaIaO870_Bbf2ZUHACLcBGAs/s1600/h139.png \nComposr version 10.0.36 suffers from a remote shell upload vulnerability.\n\nMD5 | 735eb24f76261ce2e85c105910c3e39c\n\nDownload\n# Exploit Title: Composr 10.0.36 - Remote Code Execution\n# Date: 04/06/2021\n# Exploit Author: Orion Hridoy\n# Vendor Homepage: https://compo.sr/\n# Software Link: https://compo.sr/download.htm\n# Version: 10.0.36\n# Tested on: Windows/Linux\n# CVE : CVE-2021-30149\n\nA RCE on Composr CMS has been discovered by BugsBD Private LTD. We have a galleries security issue which allows us to upload a PHP file. Whenever we upload an image from galleries, Composr allows us to upload only images. If we tried to upload a PHP file from galleries uploader it will say someone attempting hacking activities. But we have a security issue on the Upload In Bulk section. Whenever we check allowed extension in Upload in bulk function we can see PHP is completely prohibited. But whenever we tamper the request and change the extension we can see it will upload the PHP file without other or server side verification. This allows a user to upload malicious file even when they restricted it.\n\nSteps To Reproduce:\n1. Go to upload galleries.\n2. Upload a image and tamper the request and change the extension from .jpg to .php\n3. It will say hacking attempts, check the allowed extension and you can see it's not accepting PHP extension.\n4. Now go to upload in bulk option.\n5. Upload a image with PHP codes and tamper the request.\n6. Change extension from .jpg to .php\n7. It will get uploaded with the blocked PHP extension.\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-08T12:00:05.685848Z"}, {"uuid": "6a7c7844-8712-4ab7-8498-f04bff3b55b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30149", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/4232", "content": "Exploit Collector\nComposr 10.0.36 Shell Upload\n\nhttps://4.bp.blogspot.com/-gp6vAY2GXMM/WWlvG3cWkQI/AAAAAAAAILY/aMDesAGFEocqJU-7SaIaO870_Bbf2ZUHACLcBGAs/s1600/h139.png \nComposr version 10.0.36 suffers from a remote shell upload vulnerability.\n\nMD5 | 735eb24f76261ce2e85c105910c3e39c\n\nDownload\n# Exploit Title: Composr 10.0.36 - Remote Code Execution\n# Date: 04/06/2021\n# Exploit Author: Orion Hridoy\n# Vendor Homepage: https://compo.sr/\n# Software Link: https://compo.sr/download.htm\n# Version: 10.0.36\n# Tested on: Windows/Linux\n# CVE : CVE-2021-30149\n\nA RCE on Composr CMS has been discovered by BugsBD Private LTD. We have a galleries security issue which allows us to upload a PHP file. Whenever we upload an image from galleries, Composr allows us to upload only images. If we tried to upload a PHP file from galleries uploader it will say someone attempting hacking activities. But we have a security issue on the Upload In Bulk section. Whenever we check allowed extension in Upload in bulk function we can see PHP is completely prohibited. But whenever we tamper the request and change the extension we can see it will upload the PHP file without other or server side verification. This allows a user to upload malicious file even when they restricted it.\n\nSteps To Reproduce:\n1. Go to upload galleries.\n2. Upload a image and tamper the request and change the extension from .jpg to .php\n3. It will say hacking attempts, check the allowed extension and you can see it's not accepting PHP extension.\n4. Now go to upload in bulk option.\n5. Upload a image with PHP codes and tamper the request.\n6. Change extension from .jpg to .php\n7. It will get uploaded with the blocked PHP extension.\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-09T00:00:31.536784Z"}, {"uuid": "8af62862-5088-4c5c-81d8-9560d6e29363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30147", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/4224", "content": "Exploit Collector\nDMA Radius Manager 4.4.0 Cross Site Request Forgery\n\nhttps://4.bp.blogspot.com/-JipZY3hUF7s/WWlu7l1ccBI/AAAAAAAAIJc/HAISYb4KBsQdeIf6OzzYRuXiYaIkpQnmACLcBGAs/s1600/h110.png \nDMA Radius Manager version 4.4.0 suffers from a cross site request forgery vulnerability.\n\nMD5 | 531e4a4445ee19d136af401072188e0d\n\nDownload\n# Exploit Title: DMA Radius Manager 4.4.0 - Cross-Site Request Forgery (CSRF)\n# Date: April 8, 2021 (04/08/2021)\n# Exploit Author: Issac Briones\n# Vendor Homepage: http://www.dmasoftlab.com/\n# Software Download: https://sourceforge.net/projects/radiusmanager/\n# Version: 4.4.0\n# CVE: CVE-2021-30147\n< ! -- Change IP addr to IP addr that RADIUS manager is located -- >\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-09T00:00:31.736183Z"}, {"uuid": "b77d19d2-5cdc-45af-98aa-2721ebd9a4df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30146", "type": "seen", "source": "https://t.me/cissp/2889", "content": "exploit\nCVE-2021-30146:\nSeafile 7.0.5 (2019) allows Persistent XSS via the \"share of library functionality\"\n\nResearch\n\"A closer look at the security of React Native biometric libraries\", 2021.\nhttps://blog.nviso.eu/2021/04/06/a-closer-look-at-the-security-of-react-native-biometric-libraries\n\nRed Team Tactics:\n1. Revisiting MacOS X Kernel Rootkits (.pdf)\nhttps://vxug.fakedoma.in/papers/VXUG/Mirrors/phrack.org-%20Phrack%20Magazine%20.pdf\n2. Anti-Analysis Techniques Used in Excel 4.0 Macros\nhttps://www.goggleheadedhacker.com/blog/post/23\n3. Exploitation paths allowing you to use the Windows Privileges to elevate your rights within the OS\nhttps://github.com/gtworek/Priv2Admin\n4. Proxy Unix applications in the terminal\nhttps://posts.specterops.io/man-in-the-terminal-65476e6165b9\n]-> https://github.com/djhohnstein/cliProxy\n\nEliminating Data Races in Firefox - A Technical Report\nhttps://hacks.mozilla.org/2021/04/eliminating-data-races-in-firefox-a-technical-report\n\nOffensive security\nHow to bypass Cloudflare, Incapsula, SUCURI and another WAF\ud83d\udc4d\ud83c\udffd\nhttps://miloserdov.org/?p=2960", "creation_timestamp": "2026-09-11T11:00:04.413563Z"}, {"uuid": "8e7cfe1d-7d1a-49df-b2e8-f3c5eadc5bca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30146", "type": "seen", "source": "https://t.me/cissp/2889", "content": "exploit\nCVE-2021-30146:\nSeafile 7.0.5 (2019) allows Persistent XSS via the \"share of library functionality\"\n\nResearch\n\"A closer look at the security of React Native biometric libraries\", 2021.\nhttps://blog.nviso.eu/2021/04/06/a-closer-look-at-the-security-of-react-native-biometric-libraries\n\nRed Team Tactics:\n1. Revisiting MacOS X Kernel Rootkits (.pdf)\nhttps://vxug.fakedoma.in/papers/VXUG/Mirrors/phrack.org-%20Phrack%20Magazine%20.pdf\n2. Anti-Analysis Techniques Used in Excel 4.0 Macros\nhttps://www.goggleheadedhacker.com/blog/post/23\n3. Exploitation paths allowing you to use the Windows Privileges to elevate your rights within the OS\nhttps://github.com/gtworek/Priv2Admin\n4. Proxy Unix applications in the terminal\nhttps://posts.specterops.io/man-in-the-terminal-65476e6165b9\n]-> https://github.com/djhohnstein/cliProxy\n\nEliminating Data Races in Firefox - A Technical Report\nhttps://hacks.mozilla.org/2021/04/eliminating-data-races-in-firefox-a-technical-report\n\nOffensive security\nHow to bypass Cloudflare, Incapsula, SUCURI and another WAF\ud83d\udc4d\ud83c\udffd\nhttps://miloserdov.org/?p=2960", "creation_timestamp": "2026-09-12T00:00:42.088336Z"}]}