{"vulnerability": "cve-2021-45428", "sightings": [{"uuid": "0773c511-c079-49bd-aabd-09128c3744fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45428", "type": "seen", "source": "https://t.me/cibsecurity/34859", "content": "\u203c CVE-2021-45428 \u203c\n\nTLR-2005KSH is affected by an incorrect access control vulnerability. THe PUT method is enabled so an attacker can upload arbitrary files including HTML and CGI formats.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-03T16:44:11.000000Z"}, {"uuid": "748707bc-9349-4db4-a2b6-ca4017f83cc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45428", "type": "seen", "source": "https://t.me/hacking_Attack/53064", "content": "Exploit Collector\nTLR-2005KSH Arbitrary File Upload\n\nhttps://3.bp.blogspot.com/-YTa6qox_ltk/WWlvNeWMUbI/AAAAAAAAIMc/0l9a_Kr-MFozVC5jeSwhLNgVZ9cZuXXlQCLcBGAs/s1600/h22.png \nTLR-2005KSH suffers from an arbitrary file upload vulnerability.\n\nSHA-256 | f7ccc88ff2a331dfcd6837d903e8a8b9647905703b086149bc856a1f4d52c2d9\n\nDownload\n# Exploit Title: TLR-2005KSH - Arbitrary File Upload\n# Date: 2022-05-11\n# Shodan Dork: title:\"Login to TLR-2021\"\n# Exploit Author: Ahmed Alroky\n# Author Company : Aiactive\n# Version: 1.0.0\n# Vendor home page : http://telesquare.co.kr/\n# Authentication Required: No\n# Tested on: Windows\n# CVE: CVE-2021-45428\n\n# Vulnerability Description\n# Due to the Via WebDAV (Web Distributed Authoring and Versioning),\n# on the remote server,telesquare TLR-2021 allows unauthorized users to upload\n# any file(e.g. asp, aspx, cfm, html, jhtml, jsp, shtml) which causes\n# remote code execution as well.\n# Due to the WebDAV, it is possible to upload the arbitrary\n# file utilizing the PUT method.\n\n# Proof-of-Concept\n# Request\nPUT /l6f3jd6cbf.txt HTTP/1.1\nHost: 223.62.114.233:8081\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:41.752870Z"}, {"uuid": "b327e169-f3a5-4855-879d-638f1c8f7958", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45428", "type": "seen", "source": "https://t.me/hacking_Attack/53064", "content": "Exploit Collector\nTLR-2005KSH Arbitrary File Upload\n\nhttps://3.bp.blogspot.com/-YTa6qox_ltk/WWlvNeWMUbI/AAAAAAAAIMc/0l9a_Kr-MFozVC5jeSwhLNgVZ9cZuXXlQCLcBGAs/s1600/h22.png \nTLR-2005KSH suffers from an arbitrary file upload vulnerability.\n\nSHA-256 | f7ccc88ff2a331dfcd6837d903e8a8b9647905703b086149bc856a1f4d52c2d9\n\nDownload\n# Exploit Title: TLR-2005KSH - Arbitrary File Upload\n# Date: 2022-05-11\n# Shodan Dork: title:\"Login to TLR-2021\"\n# Exploit Author: Ahmed Alroky\n# Author Company : Aiactive\n# Version: 1.0.0\n# Vendor home page : http://telesquare.co.kr/\n# Authentication Required: No\n# Tested on: Windows\n# CVE: CVE-2021-45428\n\n# Vulnerability Description\n# Due to the Via WebDAV (Web Distributed Authoring and Versioning),\n# on the remote server,telesquare TLR-2021 allows unauthorized users to upload\n# any file(e.g. asp, aspx, cfm, html, jhtml, jsp, shtml) which causes\n# remote code execution as well.\n# Due to the WebDAV, it is possible to upload the arbitrary\n# file utilizing the PUT method.\n\n# Proof-of-Concept\n# Request\nPUT /l6f3jd6cbf.txt HTTP/1.1\nHost: 223.62.114.233:8081\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:52.168861Z"}, {"uuid": "26bd51c7-22fd-49f9-bcb8-9d34b38cb1d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45428", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/53064", "content": "Exploit Collector\nTLR-2005KSH Arbitrary File Upload\n\nhttps://3.bp.blogspot.com/-YTa6qox_ltk/WWlvNeWMUbI/AAAAAAAAIMc/0l9a_Kr-MFozVC5jeSwhLNgVZ9cZuXXlQCLcBGAs/s1600/h22.png \nTLR-2005KSH suffers from an arbitrary file upload vulnerability.\n\nSHA-256 | f7ccc88ff2a331dfcd6837d903e8a8b9647905703b086149bc856a1f4d52c2d9\n\nDownload\n# Exploit Title: TLR-2005KSH - Arbitrary File Upload\n# Date: 2022-05-11\n# Shodan Dork: title:\"Login to TLR-2021\"\n# Exploit Author: Ahmed Alroky\n# Author Company : Aiactive\n# Version: 1.0.0\n# Vendor home page : http://telesquare.co.kr/\n# Authentication Required: No\n# Tested on: Windows\n# CVE: CVE-2021-45428\n\n# Vulnerability Description\n# Due to the Via WebDAV (Web Distributed Authoring and Versioning),\n# on the remote server,telesquare TLR-2021 allows unauthorized users to upload\n# any file(e.g. asp, aspx, cfm, html, jhtml, jsp, shtml) which causes\n# remote code execution as well.\n# Due to the WebDAV, it is possible to upload the arbitrary\n# file utilizing the PUT method.\n\n# Proof-of-Concept\n# Request\nPUT /l6f3jd6cbf.txt HTTP/1.1\nHost: 223.62.114.233:8081\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T22:00:05.223065Z"}, {"uuid": "070c3fc7-1c81-45e3-bcf0-13b61440b61b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45428", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/53064", "content": "Exploit Collector\nTLR-2005KSH Arbitrary File Upload\n\nhttps://3.bp.blogspot.com/-YTa6qox_ltk/WWlvNeWMUbI/AAAAAAAAIMc/0l9a_Kr-MFozVC5jeSwhLNgVZ9cZuXXlQCLcBGAs/s1600/h22.png \nTLR-2005KSH suffers from an arbitrary file upload vulnerability.\n\nSHA-256 | f7ccc88ff2a331dfcd6837d903e8a8b9647905703b086149bc856a1f4d52c2d9\n\nDownload\n# Exploit Title: TLR-2005KSH - Arbitrary File Upload\n# Date: 2022-05-11\n# Shodan Dork: title:\"Login to TLR-2021\"\n# Exploit Author: Ahmed Alroky\n# Author Company : Aiactive\n# Version: 1.0.0\n# Vendor home page : http://telesquare.co.kr/\n# Authentication Required: No\n# Tested on: Windows\n# CVE: CVE-2021-45428\n\n# Vulnerability Description\n# Due to the Via WebDAV (Web Distributed Authoring and Versioning),\n# on the remote server,telesquare TLR-2021 allows unauthorized users to upload\n# any file(e.g. asp, aspx, cfm, html, jhtml, jsp, shtml) which causes\n# remote code execution as well.\n# Due to the WebDAV, it is possible to upload the arbitrary\n# file utilizing the PUT method.\n\n# Proof-of-Concept\n# Request\nPUT /l6f3jd6cbf.txt HTTP/1.1\nHost: 223.62.114.233:8081\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:15.223734Z"}]}