{"vulnerability": "cve-2021-37915", "sightings": [{"uuid": "d7e558db-51de-4494-932c-37925396a8a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37915", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4614", "content": "#exploit\n1. Exploiting Grandstream HT801 ATA\n(CVE-2021-37748, CVE-2021-37915)\nhttps://www.secforce.com/blog/exploiting-grandstream-ht801-ata-cve-2021-37748-cve-2021-37915\n]-> PoC: https://github.com/SECFORCE/CVE-2021-37748\n\n2. Finding An Unauthenticated RCE in MovableType (CVE-2021-20837)\nhttps://nemesis.sh/posts/movable-type-0day\n]-> PoC: https://github.com/ghost-nemesis/cve-2021-20837-poc", "creation_timestamp": "2024-08-05T18:55:24.000000Z"}, {"uuid": "0273750a-3bd8-4362-ad61-afc697727ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37915", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1794", "content": "Exploiting Grandstream HT801 ATA (CVE-2021-37748, CVE-2021-37915) https://www.secforce.com/blog/exploiting-grandstream-ht801-ata-cve-2021-37748-cve-2021-37915/", "creation_timestamp": "2026-08-03T04:06:25.052910Z"}, {"uuid": "18f4947a-696a-4b27-8059-e224a448d113", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37915", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1794", "content": "Exploiting Grandstream HT801 ATA (CVE-2021-37748, CVE-2021-37915) https://www.secforce.com/blog/exploiting-grandstream-ht801-ata-cve-2021-37748-cve-2021-37915/", "creation_timestamp": "2026-08-04T00:00:50.648971Z"}, {"uuid": "73e256e0-15f0-4f77-9e55-4e5ef388e025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37915", "type": "seen", "source": "https://t.me/reverseame/1794", "content": "Exploiting Grandstream HT801 ATA (CVE-2021-37748, CVE-2021-37915) https://www.secforce.com/blog/exploiting-grandstream-ht801-ata-cve-2021-37748-cve-2021-37915/", "creation_timestamp": "2026-07-29T12:02:51.752633Z"}, {"uuid": "0336e53b-f5e5-4bf1-b03d-42d475ab1c96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37915", "type": "seen", "source": "https://t.me/reverseame/1794", "content": "Exploiting Grandstream HT801 ATA (CVE-2021-37748, CVE-2021-37915) https://www.secforce.com/blog/exploiting-grandstream-ht801-ata-cve-2021-37748-cve-2021-37915/", "creation_timestamp": "2026-07-30T00:02:41.789427Z"}, {"uuid": "1a8cf58f-1e05-41f9-a1d7-d61a10c0a355", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37915", "type": "seen", "source": "https://t.me/cissp/4682", "content": "Cloud Security\nAttacking Azure/Azure AD\nhttps://hausec.com/2021/10/26/attacking-azure-azure-ad-part-ii\n\nRed Team Tactics\nBypassing ModSecurity WAF\nhttp://blog.h3xstream.com/2021/10/bypassing-modsecurity-waf.html?m=1\n]-> A Scientific Notation Bug in MySQL left AWS WAF Clients Vulnerable to SQL Injection:\nhttps://www.gosecure.net/blog/2021/10/19/a-scientific-notation-bug-in-mysql-left-aws-waf-clients-vulnerable-to-sql-injection\n\nOffensive security\nExploiting an ARM-only race condition:\nHow to exploit a double free vulnerability in 2021\nhttps://github.com/stong/how-to-exploit-a-double-free\n]-> Exploit Code:\nhttps://github.com/stong/how-to-exploit-a-double-free/blob/master/solve.py\n\nThreat Research\n1. Exploiting Grandstream HT801 ATA\n(CVE-2021-37748, CVE-2021-37915)\nhttps://www.secforce.com/blog/exploiting-grandstream-ht801-ata-cve-2021-37748-cve-2021-37915\n]-> PoC:\nhttps://github.com/SECFORCE/CVE-2021-37748\n\n2. Finding An Unauthenticated RCE Vulnerability in MovableType (CVE-2021-20837)\nhttps://nemesis.sh/posts/movable-type-0day\n]-> PoC:\nhttps://github.com/ghost-nemesis/cve-2021-20837-poc\n\nMalware analysis\n1. UltimaSMS Android Malware\nhttps://blog.avast.com/premium-sms-scam-apps-on-play-store-avast\n2. Firefox Proxy Malware\nhttps://blog.mozilla.org/security/2021/10/25/securing-the-proxy-api-for-firefox-add-ons\n3. Craigslist E-Mail Hijack\nhttps://www.inky.com/blog/urgency-mail-relay-serve-phishers-well-on-craigslist\n\n\n\u200e\u200b", "creation_timestamp": "2026-09-01T17:00:37.227786Z"}, {"uuid": "6462b296-40a1-4234-a586-2f98fa077ee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37915", "type": "seen", "source": "https://t.me/cissp/4682", "content": "Cloud Security\nAttacking Azure/Azure AD\nhttps://hausec.com/2021/10/26/attacking-azure-azure-ad-part-ii\n\nRed Team Tactics\nBypassing ModSecurity WAF\nhttp://blog.h3xstream.com/2021/10/bypassing-modsecurity-waf.html?m=1\n]-> A Scientific Notation Bug in MySQL left AWS WAF Clients Vulnerable to SQL Injection:\nhttps://www.gosecure.net/blog/2021/10/19/a-scientific-notation-bug-in-mysql-left-aws-waf-clients-vulnerable-to-sql-injection\n\nOffensive security\nExploiting an ARM-only race condition:\nHow to exploit a double free vulnerability in 2021\nhttps://github.com/stong/how-to-exploit-a-double-free\n]-> Exploit Code:\nhttps://github.com/stong/how-to-exploit-a-double-free/blob/master/solve.py\n\nThreat Research\n1. Exploiting Grandstream HT801 ATA\n(CVE-2021-37748, CVE-2021-37915)\nhttps://www.secforce.com/blog/exploiting-grandstream-ht801-ata-cve-2021-37748-cve-2021-37915\n]-> PoC:\nhttps://github.com/SECFORCE/CVE-2021-37748\n\n2. Finding An Unauthenticated RCE Vulnerability in MovableType (CVE-2021-20837)\nhttps://nemesis.sh/posts/movable-type-0day\n]-> PoC:\nhttps://github.com/ghost-nemesis/cve-2021-20837-poc\n\nMalware analysis\n1. UltimaSMS Android Malware\nhttps://blog.avast.com/premium-sms-scam-apps-on-play-store-avast\n2. Firefox Proxy Malware\nhttps://blog.mozilla.org/security/2021/10/25/securing-the-proxy-api-for-firefox-add-ons\n3. Craigslist E-Mail Hijack\nhttps://www.inky.com/blog/urgency-mail-relay-serve-phishers-well-on-craigslist\n\n\n\u200e\u200b", "creation_timestamp": "2026-09-02T01:04:22.057858Z"}]}