{"vulnerability": "cve-2021-3176", "sightings": [{"uuid": "1f593fbd-8bbc-48b5-9712-d80b6a16addc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31762", "type": "seen", "source": "MISP/8e9b3bed-1887-43d9-873a-1ebd13fea7f8", "content": "", "creation_timestamp": "2024-11-14T06:08:53.000000Z"}, {"uuid": "1f6403fe-6286-4c4b-bb31-bad0b7322576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31762", "type": "seen", "source": "https://t.me/jokerplstaeen/15957", "content": "In the last month I worked with @joker_plstaeen finding bugs at Webmin, and we were able to register 3 CVEs and 7 more are being registered\n\nCVE-2021-31760\nCVE-2021-31761\nCVE-2021-31762\n\n#admin", "creation_timestamp": "2023-04-18T19:18:40.000000Z"}, {"uuid": "16dfedc2-1c1b-435d-87c7-276d11d20d4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31760", "type": "seen", "source": "https://t.me/jokerplstaeen/15957", "content": "In the last month I worked with @joker_plstaeen finding bugs at Webmin, and we were able to register 3 CVEs and 7 more are being registered\n\nCVE-2021-31760\nCVE-2021-31761\nCVE-2021-31762\n\n#admin", "creation_timestamp": "2023-04-18T19:18:40.000000Z"}, {"uuid": "12824446-4c75-4966-bd6e-d3119d5f5688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31761", "type": "seen", "source": "https://t.me/jokerplstaeen/15957", "content": "In the last month I worked with @joker_plstaeen finding bugs at Webmin, and we were able to register 3 CVEs and 7 more are being registered\n\nCVE-2021-31760\nCVE-2021-31761\nCVE-2021-31762\n\n#admin", "creation_timestamp": "2023-04-18T19:18:40.000000Z"}, {"uuid": "da6e921e-6634-42ed-9c5f-c5f12348343d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31762", "type": "published-proof-of-concept", "source": "https://t.me/pwnwiki_zhchannel/259", "content": "CVE-2021-31762 Webmin CSRF\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-31762_Webmin_CSRF%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-04-25T10:27:48.000000Z"}, {"uuid": "7890a8ab-8256-4d26-b1aa-2b9576dcba83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31761", "type": "published-proof-of-concept", "source": "https://t.me/pwnwiki_zhchannel/258", "content": "CVE-2021-31761 Webmin XSS&\u9060\u7a0b\u547d\u4ee4\u57f7\u884c\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-31761_Webmin_XSS%26%E9%81%A0%E7%A8%8B%E5%91%BD%E4%BB%A4%E5%9F%B7%E8%A1%8C%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-04-25T10:27:00.000000Z"}, {"uuid": "790d836d-a1ac-4939-ab9b-85ecdac8b168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31760", "type": "published-proof-of-concept", "source": "https://t.me/pwnwiki_zhchannel/257", "content": "CVE-2021-31760 Webmin CSRF&\u9060\u7a0b\u547d\u4ee4\u57f7\u884c\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-31760_Webmin_CSRF%26%E9%81%A0%E7%A8%8B%E5%91%BD%E4%BB%A4%E5%9F%B7%E8%A1%8C%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-04-25T10:24:56.000000Z"}, {"uuid": "2edc1e50-5db2-445c-af9f-bb579607f27c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31769", "type": "seen", "source": "https://t.me/cibsecurity/25572", "content": "\u203c CVE-2021-31769 \u203c\n\nMyQ Server in MyQ X Smart before 8.2 allows remote code execution by unprivileged users because administrative session data can be read in the %PROGRAMFILES%\\MyQ\\PHP\\Sessions directory. The \"Select server file\" feature is only intended for administrators but actually does not require authorization. An attacker can inject arbitrary OS commands (such as commands to create new .php files) via the Task Scheduler component.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-06-21T14:15:03.000000Z"}, {"uuid": "417dfbe4-4000-443f-af90-0e6cc68c40dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31762", "type": "seen", "source": "https://t.me/pwnwiki_zhchannel/775", "content": "CVE-2021-31762 Webmin 1.973 CSRF\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-31762_Webmin_1.973_CSRF%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-09-21T04:42:13.000000Z"}, {"uuid": "7994918f-a466-42f8-ba1c-24ec1521d448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31762", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3207", "content": "CVE-2021-31760/\nCVE-2021-31761/\nCVE-2021-31762:\nExploiting a CSRF/XSS/CSRF attack to get a RCE through the Webmin's running process feature (PoC)\nhttps://github.com/Mesh3l911/CVE-2021-31760\nhttps://github.com/Mesh3l911/CVE-2021-31761\nhttps://github.com/Mesh3l911/CVE-2021-31762", "creation_timestamp": "2021-04-25T13:43:01.000000Z"}, {"uuid": "c7563f1f-e406-42ed-8c1e-3a161fcfced2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31761", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3207", "content": "CVE-2021-31760/\nCVE-2021-31761/\nCVE-2021-31762:\nExploiting a CSRF/XSS/CSRF attack to get a RCE through the Webmin's running process feature (PoC)\nhttps://github.com/Mesh3l911/CVE-2021-31760\nhttps://github.com/Mesh3l911/CVE-2021-31761\nhttps://github.com/Mesh3l911/CVE-2021-31762", "creation_timestamp": "2021-04-25T13:43:01.000000Z"}, {"uuid": "de28d793-aca3-4aa7-913a-031f322730bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31760", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3207", "content": "CVE-2021-31760/\nCVE-2021-31761/\nCVE-2021-31762:\nExploiting a CSRF/XSS/CSRF attack to get a RCE through the Webmin's running process feature (PoC)\nhttps://github.com/Mesh3l911/CVE-2021-31760\nhttps://github.com/Mesh3l911/CVE-2021-31761\nhttps://github.com/Mesh3l911/CVE-2021-31762", "creation_timestamp": "2021-04-25T13:43:01.000000Z"}]}