{"vulnerability": "cve-2021-3004", "sightings": [{"uuid": "3a1b988d-b2fd-45a4-bc04-6db0890417e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30047", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2mzleio3g2g", "content": "", "creation_timestamp": "2025-10-07T21:02:42.989290Z"}, {"uuid": "e37c3317-49cb-4e0d-ac8f-2289717ff9ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30047", "type": "published-proof-of-concept", "source": "Telegram/lSKUBbxJCxOb1e_v4rg4yYNIU2n_deDdr-hSjgYPsZR8pZY", "content": "", "creation_timestamp": "2025-06-21T09:00:04.000000Z"}, {"uuid": "e5faf6de-ce05-4f9c-b0c8-7d621d8cdf9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30047", "type": "published-proof-of-concept", "source": "Telegram/jR54vFgQa8KMRSVzAhCfx3fjAopnr4_oPgNaKtxIiYByBYw", "content": "", "creation_timestamp": "2025-06-17T03:00:06.000000Z"}, {"uuid": "49664b32-eba7-423f-b7c8-72566b18054f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30047", "type": "published-proof-of-concept", "source": "Telegram/QF2qL8FTH9lFpTSo7F-ILTZgkF0xG80ALl6tqjxGUgHwniE", "content": "", "creation_timestamp": "2025-06-10T03:00:05.000000Z"}, {"uuid": "37acbe13-d842-4cda-840e-2178e11f77a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30047", "type": "published-proof-of-concept", "source": "Telegram/2TnVzSP-TW49SZ4NBNsRluATR26nPOTgv5eNkkY-jAlnnfg", "content": "", "creation_timestamp": "2025-06-11T21:00:06.000000Z"}, {"uuid": "46939bf0-1e07-4707-b918-7712b893cbf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30042", "type": "seen", "source": "https://t.me/pwnwiki_zhchannel/242", "content": "CVE-2021-30030 CVE-2021-30034 CVE-2021-30039 CVE-2021-30042 RemoteClinic 2.0 \u5b58\u5132\u578bXSS\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-30030_CVE-2021-30034_CVE-2021-30039_CVE-2021-30042_RemoteClinic_2.0_%E5%AD%98%E5%84%B2%E5%9E%8BXSS%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-04-22T11:28:08.000000Z"}, {"uuid": "88739976-8183-442f-b26d-918d892f2b1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30044", "type": "published-proof-of-concept", "source": "https://t.me/pwnwiki_zhchannel/227", "content": "CVE-2021-30044 RemoteClinic 2 XSS\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-30044_RemoteClinic_2_XSS%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-04-21T12:08:11.000000Z"}, {"uuid": "330414eb-9b9a-43f3-bb93-8d3396a2f8bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30049", "type": "seen", "source": "https://t.me/cibsecurity/26379", "content": "\u203c CVE-2021-30049 \u203c\n\nSysAid 20.3.64 b14 is affected by Cross Site Scripting (XSS) via a /KeepAlive.jsp?stamp= URI.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-07-22T16:36:27.000000Z"}, {"uuid": "c9fddfa7-90af-49d9-ae4d-5b9386a346fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3004", "type": "seen", "source": "https://t.me/cibsecurity/21514", "content": "\u203c CVE-2021-3004 \u203c\n\nThe _deposit function in the smart contract implementation for Stable Yield Credit (yCREDIT), an Ethereum token, has certain incorrect calculations. An attacker can obtain more yCREDIT tokens than they should.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-03T07:34:56.000000Z"}, {"uuid": "af376394-a4da-42dd-b3d2-a24ea41c3c91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30042", "type": "seen", "source": "https://t.me/hacking_Attack/5994", "content": "Exploit Collector\nRemoteClinic 2.0 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-DuI_c3FaBwQ/WWlvaHZ97uI/AAAAAAAAIO8/N3071iSnuSkvxUt6NQQ_hoJeYx39DTurQCLcBGAs/s1600/h61.png \nRemoteClinic version 2.0 suffers from multiple persistent cross site scripting vulnerabilities.\n\nMD5 | 595ad2c6469d900f430693ecfc6768cb\n\nDownload\n# Exploit Title: RemoteClinic 2.0 - 'Multiple' Stored Cross-Site Scripting (XSS)\n# Date: 13/04/2021\n# Exploit Author: Saud Ahmad\n# Vendor Homepage: https://remoteclinic.io/\n# Software Link: https://github.com/remoteclinic/RemoteClinic\n# Version: 2.0\n# Tested on: Windows 10\n# CVE : CVE-2021-30030, CVE-2021-30034, CVE-2021-30039, CVE-2021-30042\n\n#Steps to Reproduce:\n\n1)Login in Application as Doctor.\n2)Register a Patient with Full Name Field as XSS Payload: XSS\">x \n3)After Register Patient, go to \"Patients\" endpoint.\n4)XSS Executed.\n\nFor Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/1\n\n#Steps to Reproduce:\n\n1)Login in Application as Doctor.\n2)Register a Patient.\n3)After Register Patient, a page redirect to Register Report Page. \n4)Here is \"Symptoms\" Field as XSS Payload: XSS\">x \n4)After Register Report, Click on home which is \"dashboard\" endpoint.\n5)XSS Executed.\n\nFor Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/5\n\n#Steps to Reproduce:\n\n1)Login in Application as Doctor.\n2)Register a Patient.\n3)After Register Patient, a page redirect to Register Report Page. \n4)When you scroll down page two fields there \"Fever\" and \"Blood Pressure\", both are vulnerable to XSS, inject XSS Payload in both Fields: XSS\">x \n4)After Register Report, Click on home.\n5)Now Click on Report, XSS Executed.\n\nFor Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/8\n\n#Steps to Reproduce:\n\n1)Login in Application as Doctor.\n2)Register a New Clinic.\n3)Here is four fields \"Clinic Name\", \"Clinic Address\", \"Clinic City\" and \"Clinic Contact\". All are vulnerable to XSS. \n4)Inject XSS Payload in all Fields: XSS\">x \n4)Now go to Clinic Directory.\n5)Click on that Clinic.\n6)XSS Executed.\n\nFor Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/11\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:02:46.046204Z"}, {"uuid": "933eab39-d7fd-41cc-aa72-ef914b7482e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30042", "type": "seen", "source": "https://t.me/hacking_Attack/5994", "content": "Exploit Collector\nRemoteClinic 2.0 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-DuI_c3FaBwQ/WWlvaHZ97uI/AAAAAAAAIO8/N3071iSnuSkvxUt6NQQ_hoJeYx39DTurQCLcBGAs/s1600/h61.png \nRemoteClinic version 2.0 suffers from multiple persistent cross site scripting vulnerabilities.\n\nMD5 | 595ad2c6469d900f430693ecfc6768cb\n\nDownload\n# Exploit Title: RemoteClinic 2.0 - 'Multiple' Stored Cross-Site Scripting (XSS)\n# Date: 13/04/2021\n# Exploit Author: Saud Ahmad\n# Vendor Homepage: https://remoteclinic.io/\n# Software Link: https://github.com/remoteclinic/RemoteClinic\n# Version: 2.0\n# Tested on: Windows 10\n# CVE : CVE-2021-30030, CVE-2021-30034, CVE-2021-30039, CVE-2021-30042\n\n#Steps to Reproduce:\n\n1)Login in Application as Doctor.\n2)Register a Patient with Full Name Field as XSS Payload: XSS\">x \n3)After Register Patient, go to \"Patients\" endpoint.\n4)XSS Executed.\n\nFor Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/1\n\n#Steps to Reproduce:\n\n1)Login in Application as Doctor.\n2)Register a Patient.\n3)After Register Patient, a page redirect to Register Report Page. \n4)Here is \"Symptoms\" Field as XSS Payload: XSS\">x \n4)After Register Report, Click on home which is \"dashboard\" endpoint.\n5)XSS Executed.\n\nFor Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/5\n\n#Steps to Reproduce:\n\n1)Login in Application as Doctor.\n2)Register a Patient.\n3)After Register Patient, a page redirect to Register Report Page. \n4)When you scroll down page two fields there \"Fever\" and \"Blood Pressure\", both are vulnerable to XSS, inject XSS Payload in both Fields: XSS\">x \n4)After Register Report, Click on home.\n5)Now Click on Report, XSS Executed.\n\nFor Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/8\n\n#Steps to Reproduce:\n\n1)Login in Application as Doctor.\n2)Register a New Clinic.\n3)Here is four fields \"Clinic Name\", \"Clinic Address\", \"Clinic City\" and \"Clinic Contact\". All are vulnerable to XSS. \n4)Inject XSS Payload in all Fields: XSS\">x \n4)Now go to Clinic Directory.\n5)Click on that Clinic.\n6)XSS Executed.\n\nFor Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/11\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:03:22.206228Z"}, {"uuid": "ce9c9743-75e5-4f16-9914-bb5f67fac3cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30042", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/5994", "content": "Exploit Collector\nRemoteClinic 2.0 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-DuI_c3FaBwQ/WWlvaHZ97uI/AAAAAAAAIO8/N3071iSnuSkvxUt6NQQ_hoJeYx39DTurQCLcBGAs/s1600/h61.png \nRemoteClinic version 2.0 suffers from multiple persistent cross site scripting vulnerabilities.\n\nMD5 | 595ad2c6469d900f430693ecfc6768cb\n\nDownload\n# Exploit Title: RemoteClinic 2.0 - 'Multiple' Stored Cross-Site Scripting (XSS)\n# Date: 13/04/2021\n# Exploit Author: Saud Ahmad\n# Vendor Homepage: https://remoteclinic.io/\n# Software Link: https://github.com/remoteclinic/RemoteClinic\n# Version: 2.0\n# Tested on: Windows 10\n# CVE : CVE-2021-30030, CVE-2021-30034, CVE-2021-30039, CVE-2021-30042\n\n#Steps to Reproduce:\n\n1)Login in Application as Doctor.\n2)Register a Patient with Full Name Field as XSS Payload: XSS\">x \n3)After Register Patient, go to \"Patients\" endpoint.\n4)XSS Executed.\n\nFor Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/1\n\n#Steps to Reproduce:\n\n1)Login in Application as Doctor.\n2)Register a Patient.\n3)After Register Patient, a page redirect to Register Report Page. \n4)Here is \"Symptoms\" Field as XSS Payload: XSS\">x \n4)After Register Report, Click on home which is \"dashboard\" endpoint.\n5)XSS Executed.\n\nFor Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/5\n\n#Steps to Reproduce:\n\n1)Login in Application as Doctor.\n2)Register a Patient.\n3)After Register Patient, a page redirect to Register Report Page. \n4)When you scroll down page two fields there \"Fever\" and \"Blood Pressure\", both are vulnerable to XSS, inject XSS Payload in both Fields: XSS\">x \n4)After Register Report, Click on home.\n5)Now Click on Report, XSS Executed.\n\nFor Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/8\n\n#Steps to Reproduce:\n\n1)Login in Application as Doctor.\n2)Register a New Clinic.\n3)Here is four fields \"Clinic Name\", \"Clinic Address\", \"Clinic City\" and \"Clinic Contact\". All are vulnerable to XSS. \n4)Inject XSS Payload in all Fields: XSS\">x \n4)Now go to Clinic Directory.\n5)Click on that Clinic.\n6)XSS Executed.\n\nFor Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/11\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-08T10:00:07.336234Z"}, {"uuid": "aa4fad89-3c6c-4712-b860-eb2b533b04f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30042", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/5994", "content": "Exploit Collector\nRemoteClinic 2.0 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-DuI_c3FaBwQ/WWlvaHZ97uI/AAAAAAAAIO8/N3071iSnuSkvxUt6NQQ_hoJeYx39DTurQCLcBGAs/s1600/h61.png \nRemoteClinic version 2.0 suffers from multiple persistent cross site scripting vulnerabilities.\n\nMD5 | 595ad2c6469d900f430693ecfc6768cb\n\nDownload\n# Exploit Title: RemoteClinic 2.0 - 'Multiple' Stored Cross-Site Scripting (XSS)\n# Date: 13/04/2021\n# Exploit Author: Saud Ahmad\n# Vendor Homepage: https://remoteclinic.io/\n# Software Link: https://github.com/remoteclinic/RemoteClinic\n# Version: 2.0\n# Tested on: Windows 10\n# CVE : CVE-2021-30030, CVE-2021-30034, CVE-2021-30039, CVE-2021-30042\n\n#Steps to Reproduce:\n\n1)Login in Application as Doctor.\n2)Register a Patient with Full Name Field as XSS Payload: XSS\">x \n3)After Register Patient, go to \"Patients\" endpoint.\n4)XSS Executed.\n\nFor Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/1\n\n#Steps to Reproduce:\n\n1)Login in Application as Doctor.\n2)Register a Patient.\n3)After Register Patient, a page redirect to Register Report Page. \n4)Here is \"Symptoms\" Field as XSS Payload: XSS\">x \n4)After Register Report, Click on home which is \"dashboard\" endpoint.\n5)XSS Executed.\n\nFor Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/5\n\n#Steps to Reproduce:\n\n1)Login in Application as Doctor.\n2)Register a Patient.\n3)After Register Patient, a page redirect to Register Report Page. \n4)When you scroll down page two fields there \"Fever\" and \"Blood Pressure\", both are vulnerable to XSS, inject XSS Payload in both Fields: XSS\">x \n4)After Register Report, Click on home.\n5)Now Click on Report, XSS Executed.\n\nFor Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/8\n\n#Steps to Reproduce:\n\n1)Login in Application as Doctor.\n2)Register a New Clinic.\n3)Here is four fields \"Clinic Name\", \"Clinic Address\", \"Clinic City\" and \"Clinic Contact\". All are vulnerable to XSS. \n4)Inject XSS Payload in all Fields: XSS\">x \n4)Now go to Clinic Directory.\n5)Click on that Clinic.\n6)XSS Executed.\n\nFor Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/11\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-09T00:00:34.039533Z"}]}