{"vulnerability": "CVE-2021-3160", "sightings": [{"uuid": "c8b75490-d86f-42be-b426-5c2179d92543", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31602", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-16)", "content": "", "creation_timestamp": "2025-01-16T00:00:00.000000Z"}, {"uuid": "2f108303-fe79-42cd-862e-8ea32e694a05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31602", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-28)", "content": "", "creation_timestamp": "2024-10-28T00:00:00.000000Z"}, {"uuid": "0c9fab1b-9d8a-4f66-8975-03bdeb8fb8b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31602", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-04)", "content": "", "creation_timestamp": "2024-11-04T00:00:00.000000Z"}, {"uuid": "ad285edb-693c-4580-9484-7c087b89af83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31602", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-11)", "content": "", "creation_timestamp": "2024-11-11T00:00:00.000000Z"}, {"uuid": "c6b1d051-91c0-479d-bde7-1d0ab2f28a4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31602", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-27)", "content": "", "creation_timestamp": "2024-11-27T00:00:00.000000Z"}, {"uuid": "926159cc-ab3b-4903-8d92-7b7c28391deb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31602", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-28)", "content": "", "creation_timestamp": "2024-11-28T00:00:00.000000Z"}, {"uuid": "6e11d8f7-3b5c-42f0-a743-f2728f01192b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31602", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-05)", "content": "", "creation_timestamp": "2025-02-05T00:00:00.000000Z"}, {"uuid": "f8b277b8-b0f3-49ea-9220-60d578ba8753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31602", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-15)", "content": "", "creation_timestamp": "2025-03-15T00:00:00.000000Z"}, {"uuid": "12081a8a-1be3-41b0-81a3-464d3726fd00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31602", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-07)", "content": "", "creation_timestamp": "2025-04-07T00:00:00.000000Z"}, {"uuid": "96113ab9-fea9-4ad9-9b33-bf989fb0a8d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31602", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-08)", "content": "", "creation_timestamp": "2025-04-08T00:00:00.000000Z"}, {"uuid": "f250c24b-d4a2-453d-8e0c-5cf8dc87cc5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31602", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-12)", "content": "", "creation_timestamp": "2025-04-12T00:00:00.000000Z"}, {"uuid": "90156355-7ae5-4270-94bf-8aca36dd7a99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31602", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-01)", "content": "", "creation_timestamp": "2025-07-01T00:00:00.000000Z"}, {"uuid": "97018ab2-6746-43f4-80b9-3a763922911f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31602", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-21)", "content": "", "creation_timestamp": "2025-04-21T00:00:00.000000Z"}, {"uuid": "e1c88eb1-5364-4cbf-9655-2b9ce9f6575e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31602", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-31)", "content": "", "creation_timestamp": "2025-07-31T00:00:00.000000Z"}, {"uuid": "2d660fc0-1cce-4ec8-9cea-946aa21cba7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31602", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-01)", "content": "", "creation_timestamp": "2025-08-01T00:00:00.000000Z"}, {"uuid": "f45c5e08-ba5c-4cb8-bd4e-1dcf7fafabc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31602", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-19)", "content": "", "creation_timestamp": "2025-12-19T00:00:00.000000Z"}, {"uuid": "525aa705-1d5b-442f-9807-1a2c03199de0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31602", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-31)", "content": "", "creation_timestamp": "2025-12-31T00:00:00.000000Z"}, {"uuid": "f26744f1-af81-4f6c-9f63-d9a05f45a697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31602", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-06)", "content": "", "creation_timestamp": "2026-01-06T00:00:00.000000Z"}, {"uuid": "008d1220-6785-4863-be07-3cd8b14c326a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31602", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-15)", "content": "", "creation_timestamp": "2026-01-15T00:00:00.000000Z"}, {"uuid": "58339b5a-85e4-4dfa-9ec5-c47df98b1d67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31602", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-19)", "content": "", "creation_timestamp": "2026-01-19T00:00:00.000000Z"}, {"uuid": "8291c91e-b78e-43c4-b9e5-4151d44703f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31602", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-20)", "content": "", "creation_timestamp": "2026-01-20T00:00:00.000000Z"}, {"uuid": "ab86d836-da84-43da-bd30-0a5ecc9f6a11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31607", "type": "seen", "source": "https://t.me/reconshell/682", "content": "CVE-2021-31607\n\nIn SaltStack Salt 2016.9 through 3002.6, a command injection vulnerability exists in the snapper module that allows for local privilege escalation on a minion.\n\nhttps://cve.reconshell.com/cve/CVE-2021-31607", "creation_timestamp": "2021-04-23T15:10:12.000000Z"}, {"uuid": "b5265f37-2ec2-41a5-9865-7bf5bfc6eeb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31608", "type": "seen", "source": "https://t.me/cibsecurity/53109", "content": "\u203c CVE-2021-31608 \u203c\n\nProofpoint Enterprise Protection before 18.8.0 allows a Bypass of a Security Control.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-18T00:17:58.000000Z"}, {"uuid": "be78e924-42a1-4439-b6b9-f0d29cf8911c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31604", "type": "seen", "source": "https://t.me/cibsecurity/29429", "content": "\u203c CVE-2021-31604 \u203c\n\nfurlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-27T12:34:30.000000Z"}, {"uuid": "1fc5ec37-3895-4167-9ae4-3cd211e4847b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31600", "type": "seen", "source": "https://t.me/cibsecurity/31955", "content": "\u203c CVE-2021-31600 \u203c\n\nAn issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. They implement a series of web services using the SOAP protocol to allow scripting interaction with the backend server. An authenticated user (regardless of privileges) can list all valid usernames.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-08T07:28:42.000000Z"}, {"uuid": "1408b129-647b-4e14-a9e7-2cc5c64b6c65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31602", "type": "seen", "source": "https://t.me/cibsecurity/31947", "content": "\u203c CVE-2021-31602 \u203c\n\nAn issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. The Security Model has different layers of Access Control. One of these layers is the applicationContext security, which is defined in the applicationContext-spring-security.xml file. The default configuration allows an unauthenticated user with no previous knowledge of the platform settings to extract pieces of information without possessing valid credentials.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-08T07:28:33.000000Z"}, {"uuid": "80e08525-1586-46b2-8518-a1a8888b8675", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31601", "type": "seen", "source": "https://t.me/cibsecurity/31945", "content": "\u203c CVE-2021-31601 \u203c\n\nAn issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. They implement a series of web services using the SOAP protocol to allow scripting interaction with the backend server. An authenticated user (regardless of privileges) can list all databases connection details and credentials.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-08T07:28:31.000000Z"}, {"uuid": "a28951f0-f6e6-4702-bf57-860d6a3fc0be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31606", "type": "seen", "source": "https://t.me/cibsecurity/29433", "content": "\u203c CVE-2021-31606 \u203c\n\nfurlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-27T12:34:35.000000Z"}, {"uuid": "ab43b10f-d87c-4cbd-8b24-f298f272966d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31605", "type": "seen", "source": "https://t.me/cibsecurity/29430", "content": "\u203c CVE-2021-31605 \u203c\n\nfurlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the server via signal%20SIGTERM.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-27T12:34:32.000000Z"}, {"uuid": "24b3f1af-4af0-485c-8f35-2ca05d447dfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31609", "type": "seen", "source": "https://t.me/cibsecurity/28311", "content": "\u203c CVE-2021-31609 \u203c\n\nThe Bluetooth Classic implementation in Silicon Labs iWRAP 6.3.0 and earlier does not properly handle the reception of an oversized LMP packet greater than 17 bytes, allowing attackers in radio range to trigger a crash in WT32i via a crafted LMP packet.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-07T12:17:06.000000Z"}, {"uuid": "d75ededa-8671-49ea-af9e-a18331dccb67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3160", "type": "seen", "source": "https://t.me/cibsecurity/22804", "content": "\u203c CVE-2021-3160 \u203c\n\nDeserialization of untrusted data in the login page of ASSUWEB 359.3 build 1 subcomponent of ACA ASSUREX RENTES product allows a remote attacker to inject unsecure serialized Java object using a specially crafted HTTP request, resulting in an unauthenticated remote code execution on the server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-28T22:39:06.000000Z"}, {"uuid": "2ab4808a-8e3b-47bb-939a-a533ca763426", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31607", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3446", "content": "#exploit\nCVE-2021-31607:\nSaltStack Minion Privledge Escaltion in Snapper Module (PoC)\nhttps://github.com/EdgeSecurityTeam/Vulnerability/blob/main/SaltStack%E5%91%BD%E4%BB%A4%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E%EF%BC%88CVE-2021-31607%EF%BC%89.md\n]-> https://sec.stealthcopter.com/saltstack-snapper-minion-privledge-escaltion", "creation_timestamp": "2021-05-24T20:04:04.000000Z"}, {"uuid": "e50be905-6936-40b8-bd2f-300173feb779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31602", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-30)", "content": "", "creation_timestamp": "2026-05-30T00:00:00.000000Z"}, {"uuid": "54a680b0-bf3d-42e4-bc28-84ad40cef835", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31602", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7c44147b-33c9-404d-b12c-66e27bf1c2d0", "content": "", "creation_timestamp": "2026-06-19T12:46:04.714599Z"}, {"uuid": "55ec7301-b0e8-44d7-86c0-957aec3c209c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31602", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-20)", "content": "", "creation_timestamp": "2026-06-20T00:00:00.000000Z"}, {"uuid": "7193075f-b4e5-42f8-a15f-e2487f228d09", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31602", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/11d7f448-90c5-4fcd-bef1-dbc24bb03ada", "content": "", "creation_timestamp": "2026-06-23T14:03:27.264045Z"}, {"uuid": "0294ddf6-9a75-4e2c-9f3b-4d0e6ea21082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31602", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-24)", "content": "", "creation_timestamp": "2026-06-25T10:15:24.728965Z"}, {"uuid": "201778b7-9cd0-4707-a675-df779c7268d9", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-31602", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cc3f7f8d-615c-4463-ac98-4c6bfb10d05c", "content": "", "creation_timestamp": "2026-06-30T09:22:35.884603Z"}, {"uuid": "c7755c14-adfd-4ed6-b531-e6b694c45d13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31602", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-17)", "content": "", "creation_timestamp": "2026-08-18T10:15:12.731206Z"}, {"uuid": "a8f8b571-0207-4047-b3db-d869c94c5544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31607", "type": "seen", "source": "https://t.me/cissp/3272", "content": "Exhaust EL1 memory from the app sandbox\nhttps://saaramar.github.io/iOS_memory_exhaustion_writeup\n\nPreventing memory inspection on Windows\nhttps://secret.club/2021/05/23/big-memory.html\n\nexploit\nCVE-2021-31607:\nSaltStack Minion Privledge Escaltion in Snapper Module (PoC)\nhttps://github.com/EdgeSecurityTeam/Vulnerability/blob/main/SaltStack%E5%91%BD%E4%BB%A4%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E%EF%BC%88CVE-2021-31607%EF%BC%89.md\n]-> https://sec.stealthcopter.com/saltstack-snapper-minion-privledge-escaltion\n\nVulnerability analysis and exploits for privacy protection apps from the top five Android vendors\nhttps://xlab.tencent.com/cn/2021/05/14/A-Mirage-of-Safety-Bug-Finding-and-Exploit-Techniques-of-Top-Android-Vendors-Privacy-Protection-Apps\n\nCloud Security\nOn Establishing a Cloud Security Program\nhttps://www.marcolancini.it/2021/blog-cloud-security-roadmap\n]-> A Cloud Security Roadmap Template:\nhttps://roadmap.cloudsecdocs.com", "creation_timestamp": "2026-09-01T17:00:49.852702Z"}, {"uuid": "072a6ae1-af59-4e55-990d-fc6ecae20efd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31600", "type": "seen", "source": "https://t.me/hacking_Attack/30300", "content": "Exploit Collector\nPentaho Business Analytics / Pentaho Business Server 9.1 User Enumeration\n\nhttps://4.bp.blogspot.com/-dyIqvjR3K84/WWlvfXt5NkI/AAAAAAAAIQA/Fvmwfk3J4TgcxqdY3USv0_rN_ZW9VtW1ACLcBGAs/s1600/h85.png \nPentaho implements a series of web services using the SOAP protocol to allow scripting interaction with the backend server. HAWSEC identified that the services userRoleListService and ServiceAction exposed through the /pentaho/webservices/userRoleListService and /pentaho/ServiceAction?action=SecurityDetails endpoints are not enforcing sufficient access controls. Specifically, an authenticated user can list all application usernames present in the Jackrabbit Repository.\n\nMD5 | 4473d7f48fb807803a782756210b0a90\n\nDownload\nProduct: Pentaho Business Analytics / Pentaho Business Server\nVendor / Manufacturer: Hitachi Vantara\nAffected Version(s): <=\nVulnerability Type: Jackrabbit User Enumeration\nSolution Status: Fix Released on public GitHub repository\nManufacturer Notification:  8th February 2021\nSolution Date: Wont fix\nPublic Disclosure: 01 November 2021\nCVE Reference: CVE-2021-31600\nAuthor(s) of Advisory: Alberto Favero ( HawSec ) & Altion Malka\n\n--- ### --- ### ---\n\nProduct Description:\n\nPentaho is business intelligence (BI) software that provides data\nintegration, OLAP services, reporting, information dashboards, data mining\nand extract, transform, load (ETL) capabilities. Its headquarters are in\nOrlando, Florida. Pentaho was acquired by Hitachi Data Systems in 2015 and\nin 2017 became part of Hitachi Vantara.\n\n( Source: https://en.wikipedia.org/wiki/Pentaho )\n\n--- ### --- ### ---\n\nVulnerability Details:\n\nPentaho implements a series of web services using the SOAP protocol to\nallow scripting interaction with the backend server. HAWSEC identified that\nthe services userRoleListService and ServiceAction exposed through the\n\"/pentaho/webservices/userRoleListService\" and\n\"/pentaho/ServiceAction?action=SecurityDetails\" endpoints are not enforcing\nsufficient access controls. Specifically, an authenticated user can list\nall application usernames present in the Jackrabbit Repository.\n\n--- ### --- ### ---\n\nProof of Concept (PoC):\n\nSee Ginger ( https://github.com/HawSec/ginger )\n\nor\n\n--- ~~~ --- ~~~ ---\nPOST /pentaho/webservices/userRoleListService HTTP/1.1\nHost: localhost:8080\nConnection: close\nCookie: JSESSIONID=878BCFF82EC40D06F72D64172CAC98B4;\nSOAPAction:\nContent-Type: text/xml; charset=UTF-8\nContent-Length: 244\n\nxmlns:soapenv=\"http://schemas.xmlsoap.org/soap/envelope/\"\nxmlns:ws=\"http://ws.userrole.security.platform.pentaho.org/\">\n\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:10.628501Z"}, {"uuid": "00c8d422-1afe-450e-9f92-2c5595727d66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31609", "type": "seen", "source": "https://t.me/hacking_Attack/22454", "content": "io can lead to DoS in laptops and smartphones. Researchers were able to achieve this using gear containing Intel AX200 SoCs and Qualcomm WCN3990 SoCs.\n\nOne of the DoS bugs (CVE-2021-34147) exists because of a failure in the SoC to free resources upon receiving an invalid LMP_timing_accuracy_response from a connected BT device (i.e., a \u201cslave,\u201d according to the paper:\n\n\u201cThe attacker can exhaust the SoC by (a) paging, (b) sending the malformed packet, and (c) disconnecting without sending LMP_detach,\u201d researchers wrote. \u201cThese steps are repeated with a different BT address (i.e., BDAddress) until the SoC is exhausted from accepting new connections. On exhaustion, the SoC fails to recover itself and disrupts current active connections, triggering firmware crashes sporadically.\u201d\n\nThe researchers were able to forcibly disconnect slave BT devices from Windows and Linux laptops, and cause BT headset disruptions on Pocophone F1 and Oppo Reno 5G smartphones.\n\nAnother DoS bug (CVE pending) affects only devices using the Intel AX200 SoC.\n\nIt\u2019s triggered when an oversized LMP_timing_accuracy_request (i.e., bigger than 17 bytes) is sent to an AX200 slave.\n\n\u201cThis temporarily corrupts AX200 firmware, which responds incorrectly during a subsequent BT connection and eventually disables the paging scan procedure,\u201d researchers explained. \u201cThus, scanning AX200 works, but no connection is established from an external BT device.\u201d\n\nAside from disconnecting master BT devices connected to a vulnerable laptop and leading to sporadic BT firmware crashes, this state of affairs can also be used for man-in-the-middle (MiTM) attacks. Bad actors can easily trick a user into connecting to the attacker\u2019s BT hardware instead of the legitimate device, researchers noted \u2013 with persistence.\n\n\u201cIndeed, the user needs to manually re-enable BT to restore functionality,\u201d they said, adding, \u201cDue to the number of smartphones and laptops vulnerable to such attacks, and the common use of BT connectivity during video-conference calls and music streaming, updating the affected devices is essential.\u201d See Also: Hacking Stories: Andrian Lamo \u2013 The \u2018homeless\u2019 HackerBT Audio Product FreezesA third attack scenario was discovered while probing various BT speakers (specifically the Mi Portable Bluetooth Speaker \u2013 MDZ-36-DB, BT Headphone and BT Audio Modules) and an unbranded BT audio receiver.\n\nThey all are variously subject to a series of bugs (CVE-2021-31609 andCVE-2021-31612, failures when sending oversized LMP packets; CVE-2021-31613, truncated packets; CVE-2021-31611, starting procedures out-of-order; and CVE-2021-28135, CVE-2021-28155 and CVE-2021-31717, feature response flooding).\n\nSuccessful exploits can \u201cfreeze\u201d devices, requiring the user to manually turn on unresponsive devices afterwards. For the Xiaomi MDZ-36-DBs and JBL TUNE 500BTs, this can be done while the user is actively playing music, researchers noted.\n\n\u201cAlthough issues were found in SoCs targeted to audio products, the BT implementation can be reused in a number of SoCs destined to different BT products,\u201d they added.\n\nThese are just a few of the possible exploit scenarios; a full vulnerability listing with descriptions can be found here.\n\nThe researchers have released\u00a0a BrakTooth\u00a0proof-of-concept (PoC) tool for vendors producing BT SoCs, modules and products \u2013 available for them to use to check their gear\u2019s vulnerability.\n\nBlueTooth vulnerabilities are particularly concerning given the vast footprint that they can impact, and unfortunately, they\u2019re not that uncommon. For more, please see Threatpost\u2019s recent previous BlueTooth bug coverage:\n\n* Bluetooth Bug Opens Devices to Man-in-the-Middle Attacks\n* Bluetooth Bug Allows Man-in-the-Middle Attacks on Phones\n* Bluetooth Spoofing Bug Affects Billions of IoT Devices\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/wordpress_[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:25.311464Z"}, {"uuid": "37f1dcc2-90e3-44d5-aecd-3f1583b78bdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31600", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/30300", "content": "Exploit Collector\nPentaho Business Analytics / Pentaho Business Server 9.1 User Enumeration\n\nhttps://4.bp.blogspot.com/-dyIqvjR3K84/WWlvfXt5NkI/AAAAAAAAIQA/Fvmwfk3J4TgcxqdY3USv0_rN_ZW9VtW1ACLcBGAs/s1600/h85.png \nPentaho implements a series of web services using the SOAP protocol to allow scripting interaction with the backend server. HAWSEC identified that the services userRoleListService and ServiceAction exposed through the /pentaho/webservices/userRoleListService and /pentaho/ServiceAction?action=SecurityDetails endpoints are not enforcing sufficient access controls. Specifically, an authenticated user can list all application usernames present in the Jackrabbit Repository.\n\nMD5 | 4473d7f48fb807803a782756210b0a90\n\nDownload\nProduct: Pentaho Business Analytics / Pentaho Business Server\nVendor / Manufacturer: Hitachi Vantara\nAffected Version(s): <=\nVulnerability Type: Jackrabbit User Enumeration\nSolution Status: Fix Released on public GitHub repository\nManufacturer Notification:  8th February 2021\nSolution Date: Wont fix\nPublic Disclosure: 01 November 2021\nCVE Reference: CVE-2021-31600\nAuthor(s) of Advisory: Alberto Favero ( HawSec ) & Altion Malka\n\n--- ### --- ### ---\n\nProduct Description:\n\nPentaho is business intelligence (BI) software that provides data\nintegration, OLAP services, reporting, information dashboards, data mining\nand extract, transform, load (ETL) capabilities. Its headquarters are in\nOrlando, Florida. Pentaho was acquired by Hitachi Data Systems in 2015 and\nin 2017 became part of Hitachi Vantara.\n\n( Source: https://en.wikipedia.org/wiki/Pentaho )\n\n--- ### --- ### ---\n\nVulnerability Details:\n\nPentaho implements a series of web services using the SOAP protocol to\nallow scripting interaction with the backend server. HAWSEC identified that\nthe services userRoleListService and ServiceAction exposed through the\n\"/pentaho/webservices/userRoleListService\" and\n\"/pentaho/ServiceAction?action=SecurityDetails\" endpoints are not enforcing\nsufficient access controls. Specifically, an authenticated user can list\nall application usernames present in the Jackrabbit Repository.\n\n--- ### --- ### ---\n\nProof of Concept (PoC):\n\nSee Ginger ( https://github.com/HawSec/ginger )\n\nor\n\n--- ~~~ --- ~~~ ---\nPOST /pentaho/webservices/userRoleListService HTTP/1.1\nHost: localhost:8080\nConnection: close\nCookie: JSESSIONID=878BCFF82EC40D06F72D64172CAC98B4;\nSOAPAction:\nContent-Type: text/xml; charset=UTF-8\nContent-Length: 244\n\nxmlns:soapenv=\"http://schemas.xmlsoap.org/soap/envelope/\"\nxmlns:ws=\"http://ws.userrole.security.platform.pentaho.org/\">\n\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T06:00:06.047284Z"}, {"uuid": "bd3116b8-8449-43d6-9595-e0a8518a76fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31609", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/22454", "content": "io can lead to DoS in laptops and smartphones. Researchers were able to achieve this using gear containing Intel AX200 SoCs and Qualcomm WCN3990 SoCs.\n\nOne of the DoS bugs (CVE-2021-34147) exists because of a failure in the SoC to free resources upon receiving an invalid LMP_timing_accuracy_response from a connected BT device (i.e., a \u201cslave,\u201d according to the paper:\n\n\u201cThe attacker can exhaust the SoC by (a) paging, (b) sending the malformed packet, and (c) disconnecting without sending LMP_detach,\u201d researchers wrote. \u201cThese steps are repeated with a different BT address (i.e., BDAddress) until the SoC is exhausted from accepting new connections. On exhaustion, the SoC fails to recover itself and disrupts current active connections, triggering firmware crashes sporadically.\u201d\n\nThe researchers were able to forcibly disconnect slave BT devices from Windows and Linux laptops, and cause BT headset disruptions on Pocophone F1 and Oppo Reno 5G smartphones.\n\nAnother DoS bug (CVE pending) affects only devices using the Intel AX200 SoC.\n\nIt\u2019s triggered when an oversized LMP_timing_accuracy_request (i.e., bigger than 17 bytes) is sent to an AX200 slave.\n\n\u201cThis temporarily corrupts AX200 firmware, which responds incorrectly during a subsequent BT connection and eventually disables the paging scan procedure,\u201d researchers explained. \u201cThus, scanning AX200 works, but no connection is established from an external BT device.\u201d\n\nAside from disconnecting master BT devices connected to a vulnerable laptop and leading to sporadic BT firmware crashes, this state of affairs can also be used for man-in-the-middle (MiTM) attacks. Bad actors can easily trick a user into connecting to the attacker\u2019s BT hardware instead of the legitimate device, researchers noted \u2013 with persistence.\n\n\u201cIndeed, the user needs to manually re-enable BT to restore functionality,\u201d they said, adding, \u201cDue to the number of smartphones and laptops vulnerable to such attacks, and the common use of BT connectivity during video-conference calls and music streaming, updating the affected devices is essential.\u201d See Also: Hacking Stories: Andrian Lamo \u2013 The \u2018homeless\u2019 HackerBT Audio Product FreezesA third attack scenario was discovered while probing various BT speakers (specifically the Mi Portable Bluetooth Speaker \u2013 MDZ-36-DB, BT Headphone and BT Audio Modules) and an unbranded BT audio receiver.\n\nThey all are variously subject to a series of bugs (CVE-2021-31609 andCVE-2021-31612, failures when sending oversized LMP packets; CVE-2021-31613, truncated packets; CVE-2021-31611, starting procedures out-of-order; and CVE-2021-28135, CVE-2021-28155 and CVE-2021-31717, feature response flooding).\n\nSuccessful exploits can \u201cfreeze\u201d devices, requiring the user to manually turn on unresponsive devices afterwards. For the Xiaomi MDZ-36-DBs and JBL TUNE 500BTs, this can be done while the user is actively playing music, researchers noted.\n\n\u201cAlthough issues were found in SoCs targeted to audio products, the BT implementation can be reused in a number of SoCs destined to different BT products,\u201d they added.\n\nThese are just a few of the possible exploit scenarios; a full vulnerability listing with descriptions can be found here.\n\nThe researchers have released\u00a0a BrakTooth\u00a0proof-of-concept (PoC) tool for vendors producing BT SoCs, modules and products \u2013 available for them to use to check their gear\u2019s vulnerability.\n\nBlueTooth vulnerabilities are particularly concerning given the vast footprint that they can impact, and unfortunately, they\u2019re not that uncommon. For more, please see Threatpost\u2019s recent previous BlueTooth bug coverage:\n\n* Bluetooth Bug Opens Devices to Man-in-the-Middle Attacks\n* Bluetooth Bug Allows Man-in-the-Middle Attacks on Phones\n* Bluetooth Spoofing Bug Affects Billions of IoT Devices\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/wordpress_[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T17:00:04.334578Z"}, {"uuid": "f9de8fb3-f15a-4013-996b-ea9fdfef783b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31607", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3272", "content": "Exhaust EL1 memory from the app sandbox\nhttps://saaramar.github.io/iOS_memory_exhaustion_writeup\n\nPreventing memory inspection on Windows\nhttps://secret.club/2021/05/23/big-memory.html\n\nexploit\nCVE-2021-31607:\nSaltStack Minion Privledge Escaltion in Snapper Module (PoC)\nhttps://github.com/EdgeSecurityTeam/Vulnerability/blob/main/SaltStack%E5%91%BD%E4%BB%A4%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E%EF%BC%88CVE-2021-31607%EF%BC%89.md\n]-> https://sec.stealthcopter.com/saltstack-snapper-minion-privledge-escaltion\n\nVulnerability analysis and exploits for privacy protection apps from the top five Android vendors\nhttps://xlab.tencent.com/cn/2021/05/14/A-Mirage-of-Safety-Bug-Finding-and-Exploit-Techniques-of-Top-Android-Vendors-Privacy-Protection-Apps\n\nCloud Security\nOn Establishing a Cloud Security Program\nhttps://www.marcolancini.it/2021/blog-cloud-security-roadmap\n]-> A Cloud Security Roadmap Template:\nhttps://roadmap.cloudsecdocs.com", "creation_timestamp": "2026-09-11T05:00:04.703663Z"}]}