{"vulnerability": "CVE-2021-1497", "sightings": [{"uuid": "8d224118-1567-4ff7-aeb6-bf2565057bfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2021-11-20T09:53:52.000000Z"}, {"uuid": "68c5919a-d3c4-42c2-b124-d34cce8d504f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:17.000000Z"}, {"uuid": "ba55fbdd-3b49-428c-99b4-b41a324b7744", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971115", "content": "", "creation_timestamp": "2024-12-24T20:24:28.553750Z"}, {"uuid": "183ed5ba-896d-4053-b3c4-69d260f1c4cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-30)", "content": "", "creation_timestamp": "2025-01-30T00:00:00.000000Z"}, {"uuid": "fd82d113-6cf6-4259-a18d-02c702540968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-26)", "content": "", "creation_timestamp": "2025-01-26T00:00:00.000000Z"}, {"uuid": "dc8a6b18-cd96-4e23-8883-6ce95a4dac3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-03)", "content": "", "creation_timestamp": "2025-02-03T00:00:00.000000Z"}, {"uuid": "3e723937-4ff5-46f6-a0a5-07648dea8bdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:44.000000Z"}, {"uuid": "fe5e5e18-cacf-467c-a071-af00e3c29535", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-31)", "content": "", "creation_timestamp": "2025-01-31T00:00:00.000000Z"}, {"uuid": "7c415d96-2bb0-4f4f-ac9e-80d5be20bf53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-31)", "content": "", "creation_timestamp": "2025-01-31T00:00:00.000000Z"}, {"uuid": "ad2c76e2-dfff-456b-b98e-f21ff1d9b073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-29)", "content": "", "creation_timestamp": "2025-01-29T00:00:00.000000Z"}, {"uuid": "52394fd0-5195-4c3b-b653-6c77ca79c03e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-30)", "content": "", "creation_timestamp": "2025-03-30T00:00:00.000000Z"}, {"uuid": "b75b25aa-f78a-4b91-b1c1-6684b3465557", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "content": "", "creation_timestamp": "2025-01-26T00:00:00.000000Z"}, {"uuid": "ec1d7166-b2b2-4ea8-b0c5-5c2215713aed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:33.000000Z"}, {"uuid": "295f3c5b-4f16-479a-bcff-05f29d06536f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-08)", "content": "", "creation_timestamp": "2025-02-08T00:00:00.000000Z"}, {"uuid": "69f14509-74dd-4f67-bd9c-ceed64b3ab49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-05)", "content": "", "creation_timestamp": "2025-03-05T00:00:00.000000Z"}, {"uuid": "e3e786f6-8eea-4848-8123-787b9f682ffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-27)", "content": "", "creation_timestamp": "2025-02-27T00:00:00.000000Z"}, {"uuid": "b1202e97-2e73-4967-8115-0f82201b5660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-08)", "content": "", "creation_timestamp": "2025-03-08T00:00:00.000000Z"}, {"uuid": "11340bc3-dfd9-4038-84e1-7d686fb66f0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-22)", "content": "", "creation_timestamp": "2025-02-22T00:00:00.000000Z"}, {"uuid": "775f720c-c6c5-49d0-9b0a-160d3b3cfdd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-26)", "content": "", "creation_timestamp": "2025-02-26T00:00:00.000000Z"}, {"uuid": "1d6d5fc6-1bdd-4c6b-a593-32c7c174c755", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-09)", "content": "", "creation_timestamp": "2025-03-09T00:00:00.000000Z"}, {"uuid": "b0bd9988-50ab-4503-b470-895471558b19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-14)", "content": "", "creation_timestamp": "2025-03-14T00:00:00.000000Z"}, {"uuid": "a965e14c-293d-4e12-8832-23a0002d44fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-12)", "content": "", "creation_timestamp": "2025-03-12T00:00:00.000000Z"}, {"uuid": "241b4142-d3b8-4d67-8d7c-d8f0c17a8537", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-17)", "content": "", "creation_timestamp": "2025-02-17T00:00:00.000000Z"}, {"uuid": "3c811dee-5e77-400d-bc77-14caf4dc3d36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-17)", "content": "", "creation_timestamp": "2025-02-17T00:00:00.000000Z"}, {"uuid": "5a013565-9cd8-442b-b363-4cb8e12422fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-16)", "content": "", "creation_timestamp": "2025-03-16T00:00:00.000000Z"}, {"uuid": "2ab2f1a8-06fa-4f2a-bf77-8a0eb12c243e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-18)", "content": "", "creation_timestamp": "2025-02-18T00:00:00.000000Z"}, {"uuid": "f8c82d5d-878f-4642-8f4e-d95c76bfb498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-11)", "content": "", "creation_timestamp": "2025-03-11T00:00:00.000000Z"}, {"uuid": "ee0499ca-535b-477b-ad71-839469d201c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:50.000000Z"}, {"uuid": "f60f0c1a-dcae-4fad-97c9-ae304912bfea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-17)", "content": "", "creation_timestamp": "2025-03-17T00:00:00.000000Z"}, {"uuid": "97ca1a9f-8150-426a-81bd-c2e1cb0c831d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-08)", "content": "", "creation_timestamp": "2025-03-08T00:00:00.000000Z"}, {"uuid": "f2eba0c4-5537-4177-a73d-5940ca99e158", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-02)", "content": "", "creation_timestamp": "2025-03-02T00:00:00.000000Z"}, {"uuid": "0afe57d6-5e35-4f18-bb64-f17842a70bf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-15)", "content": "", "creation_timestamp": "2025-03-15T00:00:00.000000Z"}, {"uuid": "c9b6128c-0277-4a63-8a11-be72230c56dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-21)", "content": "", "creation_timestamp": "2025-06-21T00:00:00.000000Z"}, {"uuid": "792c5c62-b911-4ec3-a05d-8befb5cc451a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-06)", "content": "", "creation_timestamp": "2025-04-06T00:00:00.000000Z"}, {"uuid": "120bb5b9-bdf8-44cd-9502-d7d6a6c95e28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-23)", "content": "", "creation_timestamp": "2025-05-23T00:00:00.000000Z"}, {"uuid": "1056b17e-4d27-410f-817c-e483e53f5d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-01)", "content": "", "creation_timestamp": "2025-07-01T00:00:00.000000Z"}, {"uuid": "db0944ef-f27e-4345-b18a-01c9875ce5fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-26)", "content": "", "creation_timestamp": "2025-05-26T00:00:00.000000Z"}, {"uuid": "a11fab18-3bed-41cb-975f-a8a739cd9be4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-16)", "content": "", "creation_timestamp": "2025-04-16T00:00:00.000000Z"}, {"uuid": "70590bad-45ad-40ac-94c4-bf533d226069", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-16)", "content": "", "creation_timestamp": "2025-04-16T00:00:00.000000Z"}, {"uuid": "b018fe8b-e2a9-41f6-b36d-798b63c33403", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-21)", "content": "", "creation_timestamp": "2025-04-21T00:00:00.000000Z"}, {"uuid": "62037f12-6815-43c1-87d5-a7c453e27dc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-22)", "content": "", "creation_timestamp": "2025-04-22T00:00:00.000000Z"}, {"uuid": "e8e0676e-c40a-45df-981c-ad28e20f3586", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-24)", "content": "", "creation_timestamp": "2025-04-24T00:00:00.000000Z"}, {"uuid": "e99ee350-cb34-4f7c-bfd7-ab0bf82394e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-26)", "content": "", "creation_timestamp": "2025-04-26T00:00:00.000000Z"}, {"uuid": "60e3195a-243d-4294-9334-261aff9bacd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-26)", "content": "", "creation_timestamp": "2025-04-26T00:00:00.000000Z"}, {"uuid": "fe3592f8-ed23-41c3-8f3c-be7ccadd23d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-31)", "content": "", "creation_timestamp": "2025-05-31T00:00:00.000000Z"}, {"uuid": "38ce50f8-6ac0-4d7e-b0a7-8f5f4ae8fe00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-22)", "content": "", "creation_timestamp": "2025-05-22T00:00:00.000000Z"}, {"uuid": "5058acc9-c85f-4b8d-b4a1-09208358e97b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-31)", "content": "", "creation_timestamp": "2025-05-31T00:00:00.000000Z"}, {"uuid": "661b338a-45fc-480e-b9d3-f1dc2816472c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-27)", "content": "", "creation_timestamp": "2025-05-27T00:00:00.000000Z"}, {"uuid": "6c363d0d-6e54-4705-af3a-d875fdb3605e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-25)", "content": "", "creation_timestamp": "2025-05-25T00:00:00.000000Z"}, {"uuid": "f9eb8f36-9778-405d-9211-6ede617f97ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-06)", "content": "", "creation_timestamp": "2025-07-06T00:00:00.000000Z"}, {"uuid": "8bc8d13d-55f2-4365-a242-774a97f71e1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-04)", "content": "", "creation_timestamp": "2025-07-04T00:00:00.000000Z"}, {"uuid": "d3ab7fde-d76c-450b-ac89-8afc51ea150f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-07)", "content": "", "creation_timestamp": "2025-11-07T00:00:00.000000Z"}, {"uuid": "b5fd0f38-dc5d-48c6-b549-1c72625896ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-07)", "content": "", "creation_timestamp": "2025-11-07T00:00:00.000000Z"}, {"uuid": "ed882b71-9385-4112-8640-38b46904e00e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-02)", "content": "", "creation_timestamp": "2025-10-02T00:00:00.000000Z"}, {"uuid": "f8a2245f-c0f0-46ac-ab8d-d6dd17966650", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-03)", "content": "", "creation_timestamp": "2025-10-03T00:00:00.000000Z"}, {"uuid": "3dad57b0-0521-4fa1-8eb4-2d324c9d574e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-14)", "content": "", "creation_timestamp": "2025-08-14T00:00:00.000000Z"}, {"uuid": "45985065-4f9a-4ab5-bf30-04fb514ff2bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-16)", "content": "", "creation_timestamp": "2025-08-16T00:00:00.000000Z"}, {"uuid": "e3fdb8ef-fe89-410d-a970-23bc21a283ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-20)", "content": "", "creation_timestamp": "2025-08-20T00:00:00.000000Z"}, {"uuid": "ed57d0a5-529f-4b87-9fa1-c874c34b2c0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/cisco_hyperflex_hx_data_platform_cmd_exec.rb", "content": "", "creation_timestamp": "2021-06-03T21:31:54.000000Z"}, {"uuid": "81a9ac95-d54a-4ef2-be96-d53b78adc368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-15)", "content": "", "creation_timestamp": "2025-09-15T00:00:00.000000Z"}, {"uuid": "36ba4b62-a333-49fe-a9ea-0f4fcb0995a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-18)", "content": "", "creation_timestamp": "2025-09-18T00:00:00.000000Z"}, {"uuid": "220335b8-1dc8-4c26-a99e-f2f6fdc2115d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-02)", "content": "", "creation_timestamp": "2025-09-02T00:00:00.000000Z"}, {"uuid": "6c19d4cf-e7fb-4b42-a274-c289c408767c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-04)", "content": "", "creation_timestamp": "2025-09-04T00:00:00.000000Z"}, {"uuid": "672903b9-d815-43e8-96b4-19651972c2bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-20)", "content": "", "creation_timestamp": "2026-02-20T00:00:00.000000Z"}, {"uuid": "bbe9b957-634f-4f97-92a7-2a3fbd40b10f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-10)", "content": "", "creation_timestamp": "2026-02-10T00:00:00.000000Z"}, {"uuid": "a24d504e-446b-40db-bd60-37a277cc1650", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-05)", "content": "", "creation_timestamp": "2026-01-05T00:00:00.000000Z"}, {"uuid": "7c4a9da9-93b0-4486-8bd2-4e771110c96a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-05)", "content": "", "creation_timestamp": "2026-01-05T00:00:00.000000Z"}, {"uuid": "39cbc451-3e2c-487a-b726-e7c42b9b8956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-28)", "content": "", "creation_timestamp": "2026-03-28T00:00:00.000000Z"}, {"uuid": "8c3a60cd-e124-47eb-bca1-ac62dfbb53f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-20)", "content": "", "creation_timestamp": "2026-03-20T00:00:00.000000Z"}, {"uuid": "21cf499c-7366-4a38-a064-f730462a0987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-23)", "content": "", "creation_timestamp": "2026-01-23T00:00:00.000000Z"}, {"uuid": "ef93f9f3-d220-4849-aa30-278d28cc5a5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bcef49f2-23ef-41d7-bfbd-17399d5d6596", "content": "", "creation_timestamp": "2026-02-02T12:28:40.013395Z"}, {"uuid": "24bf76fe-ab10-44cb-98fc-9e179a7fc70c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-05)", "content": "", "creation_timestamp": "2026-04-05T00:00:00.000000Z"}, {"uuid": "7b6674c4-1834-49f2-89df-3373abd0b34d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "https://t.me/itsec_news/1954", "content": "\u200b\u26a1\ufe0f \u0421\u0442\u0430\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Cisco \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0432\u0442\u043e\u0440\u0443\u044e \u0436\u0438\u0437\u043d\u044c.\n\n\ud83d\udcac \u041c\u043d\u043e\u0433\u0438\u0435 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u043c\u0435\u044e\u0449\u0438\u0445 \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \"\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f\" \u0438\u043b\u0438 \"\u0432\u044b\u0441\u043e\u043a\u0430\u044f\", \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b 4-5 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u043d\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043b\u0438 \u043f\u0430\u0442\u0447\u0438, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0442\u044c\u0441\u044f \u0430\u0442\u0430\u043a\u0430\u043c \u0441 \u0438\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c.\n\u041d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 20 \u0441\u0442\u0430\u0440\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u041f\u041e Cisco IOS, NX-OS \u0438 HyperFlex.\n\n\"\u0412 \u043c\u0430\u0440\u0442\u0435 2022 \u0433\u043e\u0434\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0435 Cisco Product Security Incident Response Team (PSIRT) \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u043f\u043e\u043f\u044b\u0442\u043a\u0430\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435. \u041c\u044b \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u041f\u041e\", \u2013 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0438.\n\n\u0412 \u043f\u044f\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u0445 Cisco \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043b\u0430 \u043f\u044f\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (\u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434, \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438\u043b\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0438) \u0438 \u0434\u0430\u043b\u0430 \u0441\u043e\u0432\u0435\u0442\u044b \u043f\u043e \u0438\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043f\u0440\u043e \u0431\u0440\u0435\u0448\u0438 \u0432 \u0437\u0430\u0449\u0438\u0442\u0435, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0435 \u043e\u0446\u0435\u043d\u043a\u0443 9.8 \u0438\u0437 10 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS:\n\n\u2014 CVE-2017-12240;\n\u2014 CVE-2018-0171;\n\u2014 CVE-2018-0125;\n\u2014 CVE-2021-1497;\n\u2014 CVE-2018-0147.\n\n\u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 Cisco IOS \u0438 IOS XE, \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b RV132W \u0438 RV134W, HyperFlex HX \u0438 Secure Access Control System (ACS).\n\nCisco \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 15 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439, \u043a\u0430\u0441\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u043c\u0435\u043d\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0432 Cisco IOS \u0438 IOS XE, \u0438 \u043e\u0434\u043d\u0443 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044e, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u0443\u044e RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 Small Business \u0441\u0435\u0440\u0438\u0438 RV.\n\n\u0421\u043e \u0432\u0441\u0435\u043c\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c\u0438 \u043c\u043e\u0436\u043d\u043e \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 Cisco.\n\n#Cisco \n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2022-12-20T16:28:45.000000Z"}, {"uuid": "4da12e80-6e59-4f06-8a8e-e93bdad6f844", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "https://t.me/ics_cert/431", "content": "\u0647\u0634\u062f\u0627\u0631 \u062f\u0631\u062e\u0635\u0648\u0635 \u0686\u0646\u062f\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 \u0645\u062d\u0635\u0648\u0644\u0627\u062a \u0633\u06cc\u0633\u06a9\u0648 \u0627\u0632 \u062c\u0645\u0644\u0647 CVE-2021-1468 \u0648 CVE-2021-1497 \u06a9\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647\u060c \u062d\u0645\u0644\u0647 DoS \u0648 \u062f\u0633\u062a\u0631\u0633\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0631\u0627 \u0645\u06cc \u062f\u0647\u062f.\n\n\u0628\u0631\u0627\u06cc \u062f\u0631\u06cc\u0627\u0641\u062a \u0622\u062e\u0631\u06cc\u0646 \u062a\u0648\u0635\u06cc\u0647 \u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0632\u06cc\u0631 \u0633\u0627\u062e\u062a\u0647\u200c\u0627\u06cc \u062d\u06cc\u0627\u062a\u06cc \u0648\u200c\u0633\u06cc\u0633\u062a\u0645 \u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0635\u0646\u0639\u062a\u06cc \u0628\u0647 \u06a9\u0627\u0646\u0627\u0644 \u0632\u06cc\u0631 \u0628\u067e\u06cc\u0648\u0646\u062f\u06cc\u062f:\nHTTPS://t.me/ics_cert", "creation_timestamp": "2021-05-07T11:58:58.000000Z"}, {"uuid": "1d6d404f-5a10-4fe7-93f5-cac32c41f5ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "https://t.me/ics_cert/679", "content": "\u0633\u06cc\u0633\u06a9\u0648 \u0645\u062c\u0645\u0648\u0639\u0647 \u0627\u06cc \u0627\u0632 \u062a\u0648\u0635\u06cc\u0647 \u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0631\u0627 \u0628\u0647 \u0631\u0648\u0632 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a \u062a\u0627 \u062f\u0631 \u0645\u0648\u0631\u062f \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u062e\u0631\u0628 \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627\u06cc \u062c\u062f\u06cc \u06a9\u0647 \u062f\u0633\u062a\u06af\u0627\u0647 \u0647\u0627\u06cc \u0634\u0628\u06a9\u0647 \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc \u062f\u0647\u0646\u062f \u0647\u0634\u062f\u0627\u0631 \u062f\u0647\u062f.\n\n\u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u0628\u0627\u06af\u200c\u0647\u0627\u06cc \u0645\u0647\u0645 \u0648 \u062d\u06cc\u0627\u062a\u06cc 4-5 \u0633\u0627\u0644 \u067e\u06cc\u0634 \u0628\u0631\u0637\u0631\u0641 \u0634\u062f\u0646\u062f\u060c \u0627\u0645\u0627 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u062e\u0648\u062f \u0631\u0627 \u0627\u0635\u0644\u0627\u062d \u0646\u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f\u060c \u0647\u0645\u0686\u0646\u0627\u0646 \u0622\u0646\u0647\u0627 \u0631\u0627 \u062a\u062c\u0631\u0628\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f.\n\n\u0647\u0641\u062a\u0647 \u06af\u0630\u0634\u062a\u0647\u060c \u063a\u0648\u0644 \u0641\u0646\u0627\u0648\u0631\u06cc \u0647\u0634\u062f\u0627\u0631\u0647\u0627\u06cc \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0631\u0627 \u0628\u0647 \u0628\u06cc\u0634 \u0627\u0632 20 \u0628\u0648\u0644\u062a\u0646 \u0627\u0636\u0627\u0641\u0647 \u06a9\u0631\u062f \u06a9\u0647 \u0645\u0633\u0627\u0626\u0644 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0631\u0627 \u062f\u0631 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 Cisco IOS\u060c NX-OS \u0648 HyperFlex \u0634\u0631\u062d \u0645\u06cc \u062f\u0647\u062f.\n\n\u062f\u0631 \u0645\u0627\u0631\u0633 2022\u060c \u0633\u06cc\u0633\u06a9\u0648 (PSIRT) \u0627\u0632 \u062a\u0644\u0627\u0634\u200c\u0647\u0627\u06cc \u0628\u06cc\u0634\u062a\u0631\u06cc \u0628\u0631\u0627\u06cc \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0634\u0631\u0627\u06cc\u0637 \u062f\u0646\u06cc\u0627\u06cc \u0648\u0627\u0642\u0639\u06cc \u0622\u06af\u0627\u0647 \u0634\u062f. \u0633\u06cc\u0633\u06a9\u0648 \u0647\u0645\u0686\u0646\u0627\u0646 \u0628\u0647 \u0634\u062f\u062a \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 \u0631\u0627 \u062a\u0634\u0648\u06cc\u0642 \u0645\u06cc \u06a9\u0646\u062f \u06a9\u0647 \u0628\u0647 \u0646\u0633\u062e\u0647 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 \u0627\u0635\u0644\u0627\u062d \u0634\u062f\u0647 \u0645\u0647\u0627\u062c\u0631\u062a \u06a9\u0646\u0646\u062f.\n\n\u067e\u0646\u062c \u0645\u0648\u0631\u062f \u0627\u0632 \u062a\u0648\u0635\u06cc\u0647\u200c\u0647\u0627\u06cc \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0634\u062f\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u062d\u06cc\u0627\u062a\u06cc \u0631\u0627 \u0645\u0648\u0631\u062f \u0628\u0631\u0631\u0633\u06cc \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u0646\u062f \u06a9\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u062f\u0633\u062a\u06cc\u0627\u0628\u06cc \u0628\u0647 RCE\u060c \u0627\u06cc\u062c\u0627\u062f DoS \u06cc\u0627 \u0627\u062c\u0631\u0627\u06cc \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0628\u062f\u0647\u0646\u062f.\n\n\u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632 CVSS 9.8\u060c \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0642\u0627\u0628\u0644 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0628\u0647\u200c\u0639\u0646\u0648\u0627\u0646 CVE-2017-12240\u060c CVE-2018-0171\u060c CVE-2018-0125\u060c CVE-2021-1497\u060c \u0648 CVE-2018-0147 \u0631\u062f\u06cc\u0627\u0628\u06cc \u0645\u06cc\u200c\u0634\u0648\u0646\u062f. \u0627\u0634\u06a9\u0627\u0644\u0627\u062a Cisco IOS \u0648 IOS XE\u060c \u0631\u0648\u062a\u0631\u0647\u0627\u06cc RV132W \u0648 RV134W\u060c HyperFlex HX \u0648 ACS \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc \u062f\u0647\u0646\u062f.\n\n\u0633\u06cc\u0633\u06a9\u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 15 \u0628\u0648\u0644\u062a\u0646 \u0631\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0631\u062f \u06a9\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0628\u0627 \u0634\u062f\u062a \u0628\u0627\u0644\u0627 \u0631\u0627 \u062f\u0631 Cisco IOS \u0648 IOS XE \u0628\u0631\u0631\u0633\u06cc \u0645\u06cc\u200c\u06a9\u0631\u062f \u0648 \u06cc\u06a9\u06cc \u0627\u0632 \u0622\u0646\u0647\u0627 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u06cc\u06a9 \u0645\u0634\u06a9\u0644 \u0627\u0635\u0644\u06cc \u062f\u0631 \u0627\u062c\u0631\u0627\u06cc \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u062f\u0644\u062e\u0648\u0627\u0647 \u062f\u0631 \u0631\u0648\u062a\u0631\u0647\u0627\u06cc \u0633\u0631\u06cc Small Business RV \u0628\u0648\u062f.\n\n\u0686\u0646\u062f\u06cc\u0646 \u0628\u0648\u0644\u062a\u0646 \u0646\u06cc\u0632 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f \u06a9\u0647 \u0628\u0627\u06af\u200c\u0647\u0627\u06cc \u0628\u0627 \u062f\u0631\u062c\u0647 \u0645\u062a\u0648\u0633\u0637 \u0631\u0627 \u0634\u0631\u062d \u0645\u06cc\u200c\u062f\u0647\u0646\u062f.\n\n\u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627 \u0636\u0631\u0648\u0631\u06cc\u0633\u062a \u062a\u0627 \u0631\u0627\u0647\u0646\u0645\u0627\u06cc\u06cc\u200c\u0647\u0627\u06cc \u0633\u06cc\u0633\u06a9\u0648 \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0631\u062f\u0647 \u0648 \u0647\u0631 \u06af\u0648\u0646\u0647 \u0627\u0635\u0644\u0627\u062d\u0627\u062a \u0644\u0627\u0632\u0645 \u0631\u0627 \u062f\u0631 \u0627\u0633\u0631\u0639 \u0648\u0642\u062a \u0627\u0639\u0645\u0627\u0644 \u06a9\u0646\u0646\u062f.\n\n\ud83d\udc6e\u200d\u2640\ufe0f\ud83d\udc6e\u200d\u2640\ufe0f \u0628\u0627\u0632\u0646\u0634\u0631 \u0645\u0637\u0627\u0644\u0628 \u0627\u06cc\u0646 \u06a9\u0627\u0646\u0627\u0644 \u0635\u0631\u0641\u0627 \u0628\u0627 \u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u06a9\u0627\u0645\u0644 \u06a9\u0627\u0646\u0627\u0644 \u0645\u062c\u0627\u0632 \u0645\u06cc\u0628\u0627\u0634\u062f.\n\n\ud83c\udfed\u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\n\u0627\u062f\u0645\u06cc\u0646:\nhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u062a\u0648\u06cc\u06cc\u062a\u0631:\nhttps://twitter.com/icscerti", "creation_timestamp": "2022-12-23T11:06:28.000000Z"}, {"uuid": "5aa01326-6bb8-4f07-acac-3ab8872ca16b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "https://t.me/ptswarm/34", "content": "Cisco fixed two Unauth RCEs and an Arbitrary File Upload in HyperFlex HX Data Platform found by our researchers Nikita Abramov and Mikhail Klyuchnikov.\n\nCVE-2021-1497\nCVE-2021-1498\nCVE-2021-1499\n\nAdvisory: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hyperflex-rce-TjjNrkpR", "creation_timestamp": "2021-05-06T13:51:34.000000Z"}, {"uuid": "1fc666df-9549-4db7-a3a9-10f9d1b2da6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "https://t.me/arpsyndicate/1223", "content": "#ExploitObserverAlert\n\nCVE-2021-1497\n\nDESCRIPTION: Exploit Observer has 17 entries related to CVE-2021-1497. Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.\n\nFIRST-EPSS: 0.975140000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-12-04T14:01:25.000000Z"}, {"uuid": "70497141-358f-47ac-a6ff-e69aaf73a113", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "https://t.me/true_secator/3847", "content": "Cisco \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0440\u044f\u0434 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043e \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0445 \u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u041c\u043d\u043e\u0433\u0438\u0435 \u0438\u0437 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b 4\u20135 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u043d\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0441\u0442\u0430\u043b\u043a\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0441 \u043d\u0438\u043c\u0438.\n\n\u041d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0433\u0438\u0433\u0430\u043d\u0442 \u0434\u043e\u0431\u0430\u0432\u0438\u043b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0432 20 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u0439 \u0441 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u041f\u041e Cisco IOS, NX-OS \u0438 HyperFlex.\n\n\u0412 \u043c\u0430\u0440\u0442\u0435 2022 \u0433\u043e\u0434\u0430 Cisco (PSIRT) \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u043f\u044b\u0442\u043a\u0430\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\u00a0Cisco \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u041f\u041e.\n\n\u041f\u044f\u0442\u044c \u0438\u0437 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f RCE, \u0432\u044b\u0437\u0432\u0430\u0442\u044c DoS \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u0418\u043c\u0435\u044f \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 9,8, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a\u00a0CVE-2017-12240, CVE-2018-0171, CVE-2018-0125, CVE-2021-1497 \u0438 CVE-2018-0147. \u0411\u0430\u0433\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 Cisco IOS \u0438 IOS XE, \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b RV132W \u0438 RV134W, HyperFlex HX \u0438 ACS.\n\nCisco \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 15 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u0439, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 Cisco IOS \u0438 IOS XE, \u0438 \u043e\u0434\u043d\u0443, \u043a\u0430\u0441\u0430\u044e\u0449\u0443\u044e\u0441\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Small Business RV.\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u0439 \u0441 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u043e\u0448\u0438\u0431\u043e\u043a \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0441 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c\u0438 Cisco\u00a0\u0438 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.", "creation_timestamp": "2022-12-19T17:20:10.000000Z"}, {"uuid": "99c074bf-1145-4316-a416-fe010d237561", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3543", "content": "#exploit\nCisco HyperFlex HX Data Platform Command Execution (CVE-2021-1497/1498)\nhttps://packetstormsecurity.com/files/162976/cisco_hyperflex_hx_data_platform_cmd_exec.rb.txt", "creation_timestamp": "2021-06-05T13:00:01.000000Z"}, {"uuid": "2523faea-4e64-4262-8534-a119e5cc7988", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3687", "content": "#Threat_Research\n1. Announcing a unified vulnerability schema for open source\nhttps://security.googleblog.com/2021/06/announcing-unified-vulnerability-schema.html\n2. Cisco Hyperflex HX Auth Handling RCE\n(PoC for CVE-2021-1497)\nhttps://www.zerodayinitiative.com/blog/2021/6/23/cve-2021-1497-cisco-hyperflex-hx-auth-handling-remote-command-execution\n3. A Vulnerability To Hack iCloud Accounts\nhttps://thezerohack.com/apple-vulnerability-bug-bounty", "creation_timestamp": "2022-06-01T19:08:26.000000Z"}, {"uuid": "57b318f9-430c-4f89-add7-18ed1d076279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4424", "content": "#Threat_Research\nCisco Hyperflex:\nRCE Through Login Form and Other Findings (CVE-2021-1497, CVE-2021-1498, CVE-2021-1499)\nhttps://swarm.ptsecurity.com/cisco-hyperflex-how-we-got-rce-through-login-form-and-other-findings", "creation_timestamp": "2021-10-02T16:33:01.000000Z"}, {"uuid": "50cc62ea-5795-40ec-adfa-90c4fd91c02c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-09)", "content": "", "creation_timestamp": "2026-05-09T00:00:00.000000Z"}, {"uuid": "15e19e69-bb40-4fcb-bbb9-b6f5622b7a92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-08)", "content": "", "creation_timestamp": "2026-06-08T00:00:00.000000Z"}, {"uuid": "012dc245-75a8-4223-9005-7ec01d853239", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fea112ef-9a7d-439d-a24f-2f0e6c14227e", "content": "", "creation_timestamp": "2026-06-19T12:47:57.685849Z"}, {"uuid": "a3bc750d-633d-43a2-b27b-5885e4f62e98", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/85bd3643-c0e9-4ad3-82a8-88a31f9072ad", "content": "", "creation_timestamp": "2026-06-23T14:04:45.811927Z"}, {"uuid": "08fbfe65-8acd-4036-8485-b3ec420fa494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-25)", "content": "", "creation_timestamp": "2026-06-26T10:15:13.533768Z"}, {"uuid": "424bb82b-1aa8-4923-a7ed-fd59ba380233", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/84af859d-9d64-4564-b756-0b55e5e44a5f", "content": "", "creation_timestamp": "2026-06-30T09:23:41.968495Z"}, {"uuid": "0f4ce009-8bee-44a7-bc7b-dc03b8b0773c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/multiple-vulnerabilities-in-internet-facing-systems-targeting-hong-kong-s-education-sector_20260724", "content": "", "creation_timestamp": "2026-07-24T12:45:05.352930Z"}, {"uuid": "c6ee059f-dd0b-43d9-aa26-ba10c43a5ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-24)", "content": "", "creation_timestamp": "2026-07-25T10:15:18.634003Z"}, {"uuid": "073c61f1-0e9e-44a3-977f-79e882b28269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "https://t.me/cissp/6494", "content": "Below are the critical vulnerabilities being exploited in attacks in the wild:\n\nCVE-2017-12240 (CVSS score of 9.8) \u2013 The vulnerability affects the DHCP relay subsystem in IOS and IOS XE software. The vulnerability could be exploited by a remote and unauthenticated attacker that can execute arbitrary code and gain full control of the targeted system. The flaw could be also exploited to cause a denial-of-service (DoS) condition by triggering a buffer overflow via specially crafted DHCPv4 packets.\n\nCVE-2018-0125 (CVSS score of 9.8) \u2013 A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system, including issuing commands with root privileges. \n\nCVE-2018-0147 (CVSS score of 9.8) \u2013 The vulnerability is a Java deserialization issue that affects Cisco Access Control System (ACS) that can be exploited by an unauthenticated, remote attacker to execute arbitrary commands with root privileges on an affected device.\n\nCVE-2018-0171 (CVSS score of 9.8) \u2013 The vulnerability affects the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software, it could be exploited by an unauthenticated, remote attacker to cause a reload of a vulnerable device or to execute arbitrary code on an affected device.\n\nCVE-2021-1497 (CVSS score of 9.8) \u2013  The vulnerability is a Command Injection issue that resides in the web-based management interface of Cisco HyperFlex HX.\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.10.27", "creation_timestamp": "2026-09-01T17:00:23.800134Z"}, {"uuid": "8397aecc-76bf-463e-a0d8-c5bf18b30423", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "https://t.me/cissp/4519", "content": "Malware analysis\n1. GriftHorse Android Trojan\nhttps://blog.zimperium.com/grifthorse-android-trojan-steals-millions-from-over-10-million-victims-globally\n2. GhostEmperor: From ProxyLogon to kernel mode\nhttps://securelist.com/ghostemperor-from-proxylogon-to-kernel-mode/104407\n\nThreat Research\nCisco Hyperflex:\nRCE Through Login Form and Other Findings (CVE-2021-1497, CVE-2021-1498, CVE-2021-1499)\nhttps://swarm.ptsecurity.com/cisco-hyperflex-how-we-got-rce-through-login-form-and-other-findings\n\nRed Team Tactics\n1. Determine if the WebClient Service (WebDAV) is running on a remote system\nhttps://github.com/xforcered/GetWebDAVStatus\n2. Invoke-DLLClone - Koppeling x Metatwin x LazySign\nhttps://redteamer.tips/appdata-is-a-mistake-introducing-invoke-dllclone\n]-> https://github.com/jfmaes/Invoke-DLLClone\n\nexploit\nCVE-2021-24604 :\nThe Availability Calendar WordPress plugin <1.2.2 does not sanitise or escape its Category Names before outputting them in page/post where the associated shortcode is embed, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed\nhttps://github.com/AlAIAL90/CVE-2021-24604\n\n\n\u200e", "creation_timestamp": "2026-09-01T17:00:39.177455Z"}, {"uuid": "e78d2554-ac92-4ec8-b74d-b0cbb6fdb684", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "https://t.me/cissp/3338", "content": "Malware analysis\ud83e\udd2a\nSharpPanda: Chinese APT Group Targets Southeast Asian Government With Previously Unknown Backdoor\nhttps://research.checkpoint.com/2021/chinese-apt-group-targets-southeast-asian-government-with-previously-unknown-backdoor\n\nThreat Research\ud83d\ude11\n1. AppCache Vulnerabilities\n(CVE-2020-6399, CVE-2021-21168)\nhttps://blog.lbherrera.me/posts/appcache-forgotten-tales\n2. WordPress Redirect Hack\nhttps://blog.sucuri.net/2021/06/wordpress-redirect-hack-via-test0-com-default7-com.html\n\nOffensive security\n1. XSS in the AWS Console\nhttps://frichetten.com/blog/xss_in_aws_console\n2. Various BIOS Utilities for Modding/Research\nhttps://github.com/platomav/BIOSUtilities#vaio-packaging-manager-extractor\n\nexploit\nCisco HyperFlex HX Data Platform Command Execution (CVE-2021-1497/1498)\nhttps://packetstormsecurity.com/files/162976/cisco_hyperflex_hx_data_platform_cmd_exec.rb.txt\n\nA curated list of backdoor learning resources\ud83e\udd78\nhttps://github.com/THUYimingLi/backdoor-learning-resources", "creation_timestamp": "2026-09-01T17:00:49.076856Z"}, {"uuid": "abff4d3a-d065-44d4-8abe-eb07e01d482c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "https://t.me/cissp/3555", "content": "Malware analysis\n1. Building Your Own Dynamic Malware Analysis\u00a0Lab\ud83d\udc4d\ud83c\udffd\nhttps://hackerspot.net/2021/06/21/building-your-own-dynamic-malware-analysis-lab\n2. ReverseRat - a new remote access trojan\ud83e\udd13\nhttps://blog.lumen.com/suspected-pakistani-actor-compromises-indian-power-company-with-new-reverserat/?utm_source=rss&utm_medium=rss&utm_campaign=suspected-pakistani-actor-compromises-indian-power-company-with-new-reverserat\n\nThreat Research\n1. Announcing a unified vulnerability schema for open source\ud83d\ude43\nhttps://security.googleblog.com/2021/06/announcing-unified-vulnerability-schema.html?m=1\n2. Cisco Hyperflex HX Auth Handling RCE (PoC for CVE-2021-1497)\nhttps://www.zerodayinitiative.com/blog/2021/6/23/cve-2021-1497-cisco-hyperflex-hx-auth-handling-remote-command-execution\n3. A Vulnerability To Hack iCloud Accounts\ud83d\ude01\nhttps://thezerohack.com/apple-vulnerability-bug-bounty\n\nOffensivesecurity\nGhost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device\ud83e\udd13\nhttps://github.com/EntySec/Ghost\n\nexploit\nCVE-2021-32537:\nAn out-of-bounds memory access that leads to pool corruption in the Windows kernel\nhttps://github.com/0vercl0k/CVE-2021-32537", "creation_timestamp": "2026-09-01T17:00:47.367207Z"}, {"uuid": "bb7b0456-6bbe-4fd4-8066-e07a693bfd3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "https://t.me/hacking_Attack/19651", "content": "be very successful, cheap and easy to carry out.\u201d\nSee Also: Offensive Security Tool: Mimikatz In addition to the router bug, Juniper researchers observed the following known vulnerabilities being exploited to gain initial access to target devices:\n\n* CVE-2020-29557 (DLink routers)\n* CVE-2021-1497 and CVE-2021-1498 (Cisco HyperFlex)\n* CVE-2021-31755 (Tenda AC11)\n* CVE-2021-22502 (MicroFocus OBR)\n* CVE-2021-22506 (MicroFocus AM)\n\nIn fact, the attackers have been continuously adding new exploits to its arsenal, according to the posting, and CVE-2021-20090 is unlikely to be the last.\n\n\u201cIt is clear that threat actors keep an eye on all disclosed vulnerabilities,\u201d researchers concluded. \u201cWhenever an exploit PoC is published, it often takes them very little time to integrate it into their platform and launch attacks.\u201d\n\nTo avoid compromise, users should update their firmware on the router. See Also: Hacking Stories: Andrian Lamo \u2013 The \u2018homeless\u2019 Hacker \u201cIn the case of IoT devices or home gateways, the situation is much worse as most users are not tech-savvy and even those who are do not get informed about potential vulnerabilities and patches to apply,\u201d according to Juniper. \u201cThe only sure way to remedy this issue is to require vendors to offer zero-down-time automatic updates.\u201d\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/cisco-patch-90x90.png Critical Cisco Bug in VPN Routers Allows Remote Takeover1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/delete-telegram-message-e1628177080885-90x90.jpg MacOS Flaw in Telegram Retrieves Deleted Messages4 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/spam-call-90x90.jpg Black Hat: \u2018I\u2019m Calling About Your Car Warranty\u2019, aka PII Hijinx5 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Google-Chrome-Browser-Management-90x90.png Bugs in Chrome\u2019s JavaScript engine can lead to powerful exploits. This project aims to stop them6 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/chinese-flag-keyboard-internet-istock-90x90.jpg DeadRinger: Chinese APTs strike major telecommunications companies1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/public-wifi-90x90.jpg NSA Warns Public Networks are Hacker Hotbeds1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/iran-thumb-90x90.jpg Hackers used never-before-seen wiper in recent attack on Iranian train system2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/PunkSpider-90x90.png Reboot of PunkSpider Tool at DEF CON Stirs Debate2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/apple-mac-security-90x90.jpg Apple Patches Actively Exploited Zero-Day in iOS, MacOS2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/Windows-Abstract-90x90.jpg Microsoft Rushes Fix for \u2018PetitPotam\u2019 Attack PoC2 weeks ago\nstyle=\"display:block; text-align:center;\"\n data-ad-layout=\"in-article\"\n data-ad-format=\"fluid\"\n data-ad-client=\"ca-pub-6620833063853657\"\n data-ad-slot=\"4517761481\"> \nThe post Auth Bypass Bug Exploited, Affecting Millions of Routers first appeared on Black Hat Ethical Hacking.\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:29.574312Z"}, {"uuid": "38dfd41e-827a-42ba-b7cf-0137e5c32218", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "https://t.me/hacking_Attack/7642", "content": "it up and prevent it from functioning properly.\n\n\u201cThe vulnerability is due to insufficient handling of API requests to the affected system,\u201d according to Cisco. Cisco HyperFlex HX Command-Injection BugsThe HyperFlex HX software is used to manage hybrid IT environments by converging the oversight of the various applications that enterprises house within data centers \u2013 across both traditional and cloud-native/containerized applications.\n\nCisco said Wednesday\u00a0that multiple vulnerabilities in the platform\u2019s web-based management interface could allow an unauthenticated, remote attacker to perform command-injection attacks against an affected device.\n\nCisco has patched two security bugs in HyperFlex HX in total:\n\n* CVE-2021-1497: Critical Installer Virtual Machine Command-Injection Vulnerability\n* CVE-2021-1498: High-Severity Data Platform Command-Injection Vulnerability\n\nThe first is a critical flaw with a 9.8 CVSS rating,\n\n\u201cThis vulnerability is due to insufficient validation of user-supplied input,\u201d according to Cisco. \u201cA successful exploit could allow the attacker to execute arbitrary commands on an affected device as the root user.\u201d See Also: Hacking Stories: Xbox UndergroundThe second bug rates 7.2 on the CVSS scale, and is due to insufficient validation of user-supplied input, according to Cisco, which added, \u201cA successful exploit could allow the attacker to execute arbitrary commands on an affected device as the tomcat8 user.\u201d\n\nBoth flaws can be exploited by sending a crafted request to the web-based management interface.\n\nThese are just the latest bugs addressed by the tech behemoth this year. In February, Cisco addressed a critical vulnerability\u00a0in its intersite policy manager software for the Nexus 3000 Series switches and Nexus 9000 Series switches that could allow a remote attacker to bypass authentication. And in January, it killed a high-severity flaw\u00a0in its smart Wi-Fi solution for retailers that could allow a remote attacker to alter the password of any account user on affected systems.\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Untitled-design-1-1-90x90.png New Crypto-Stealer \u2018Panda\u2019 Spread via Discord1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Untitled-design-1-90x90.png Hundreds of Millions of Dell Users at Risk from Kernel-Privilege Bugs2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/HPE-corp-logo-90x90.jpg Hewlett Packard Enterprise Plugs Critical Bug in Edge Platform Tool3 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Untitled-design-90x90.png Chinese hackers targeting Russian nuclear submarine design firm with PortDoor malware4 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/F5-Big-IP-e1619725870974-90x90.jpg F5 Big-IP Vulnerable to Security-Bypass Bug7 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Google-Chrome-Browser-1-90x90.jpg Google Chrome V8 Bug Allows Remote Code-Execution1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/apple_logo_store-90x90.jpg Apple Patches Zero-Day MacOS Bug That Can Bypass Anti-Malware Defenses1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/nvidia-90x90.jpg Nvidia Warns: Severe Security Bugs in GPU Driver, vGPU Software1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Telegram_Messagees-90x90.jpg Telegram Platform Abused in \u2018ToxicEye\u2019 Malware Campaigns2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-1-4-90x90.png Mount Locker Ransomware Aggressively Changes Up Tactics2 weeks ago\nThe post Critical Cisco SD-WAN, HyperFlex Bugs Threaten Corporate Networks first appeared on Black Hat Et[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:44.209648Z"}, {"uuid": "eb8e2e1f-854e-4282-9b79-17fa1d374542", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "https://t.me/hacking_Attack/19651", "content": "be very successful, cheap and easy to carry out.\u201d\nSee Also: Offensive Security Tool: Mimikatz In addition to the router bug, Juniper researchers observed the following known vulnerabilities being exploited to gain initial access to target devices:\n\n* CVE-2020-29557 (DLink routers)\n* CVE-2021-1497 and CVE-2021-1498 (Cisco HyperFlex)\n* CVE-2021-31755 (Tenda AC11)\n* CVE-2021-22502 (MicroFocus OBR)\n* CVE-2021-22506 (MicroFocus AM)\n\nIn fact, the attackers have been continuously adding new exploits to its arsenal, according to the posting, and CVE-2021-20090 is unlikely to be the last.\n\n\u201cIt is clear that threat actors keep an eye on all disclosed vulnerabilities,\u201d researchers concluded. \u201cWhenever an exploit PoC is published, it often takes them very little time to integrate it into their platform and launch attacks.\u201d\n\nTo avoid compromise, users should update their firmware on the router. See Also: Hacking Stories: Andrian Lamo \u2013 The \u2018homeless\u2019 Hacker \u201cIn the case of IoT devices or home gateways, the situation is much worse as most users are not tech-savvy and even those who are do not get informed about potential vulnerabilities and patches to apply,\u201d according to Juniper. \u201cThe only sure way to remedy this issue is to require vendors to offer zero-down-time automatic updates.\u201d\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/cisco-patch-90x90.png Critical Cisco Bug in VPN Routers Allows Remote Takeover1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/delete-telegram-message-e1628177080885-90x90.jpg MacOS Flaw in Telegram Retrieves Deleted Messages4 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/spam-call-90x90.jpg Black Hat: \u2018I\u2019m Calling About Your Car Warranty\u2019, aka PII Hijinx5 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Google-Chrome-Browser-Management-90x90.png Bugs in Chrome\u2019s JavaScript engine can lead to powerful exploits. This project aims to stop them6 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/chinese-flag-keyboard-internet-istock-90x90.jpg DeadRinger: Chinese APTs strike major telecommunications companies1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/public-wifi-90x90.jpg NSA Warns Public Networks are Hacker Hotbeds1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/iran-thumb-90x90.jpg Hackers used never-before-seen wiper in recent attack on Iranian train system2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/PunkSpider-90x90.png Reboot of PunkSpider Tool at DEF CON Stirs Debate2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/apple-mac-security-90x90.jpg Apple Patches Actively Exploited Zero-Day in iOS, MacOS2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/Windows-Abstract-90x90.jpg Microsoft Rushes Fix for \u2018PetitPotam\u2019 Attack PoC2 weeks ago\nstyle=\"display:block; text-align:center;\"\n data-ad-layout=\"in-article\"\n data-ad-format=\"fluid\"\n data-ad-client=\"ca-pub-6620833063853657\"\n data-ad-slot=\"4517761481\"> \nThe post Auth Bypass Bug Exploited, Affecting Millions of Routers first appeared on Black Hat Ethical Hacking.\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:03:04.205809Z"}, {"uuid": "b045498f-be42-4a6f-a367-756e75ae7f9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "https://t.me/hacking_Attack/7642", "content": "it up and prevent it from functioning properly.\n\n\u201cThe vulnerability is due to insufficient handling of API requests to the affected system,\u201d according to Cisco. Cisco HyperFlex HX Command-Injection BugsThe HyperFlex HX software is used to manage hybrid IT environments by converging the oversight of the various applications that enterprises house within data centers \u2013 across both traditional and cloud-native/containerized applications.\n\nCisco said Wednesday\u00a0that multiple vulnerabilities in the platform\u2019s web-based management interface could allow an unauthenticated, remote attacker to perform command-injection attacks against an affected device.\n\nCisco has patched two security bugs in HyperFlex HX in total:\n\n* CVE-2021-1497: Critical Installer Virtual Machine Command-Injection Vulnerability\n* CVE-2021-1498: High-Severity Data Platform Command-Injection Vulnerability\n\nThe first is a critical flaw with a 9.8 CVSS rating,\n\n\u201cThis vulnerability is due to insufficient validation of user-supplied input,\u201d according to Cisco. \u201cA successful exploit could allow the attacker to execute arbitrary commands on an affected device as the root user.\u201d See Also: Hacking Stories: Xbox UndergroundThe second bug rates 7.2 on the CVSS scale, and is due to insufficient validation of user-supplied input, according to Cisco, which added, \u201cA successful exploit could allow the attacker to execute arbitrary commands on an affected device as the tomcat8 user.\u201d\n\nBoth flaws can be exploited by sending a crafted request to the web-based management interface.\n\nThese are just the latest bugs addressed by the tech behemoth this year. In February, Cisco addressed a critical vulnerability\u00a0in its intersite policy manager software for the Nexus 3000 Series switches and Nexus 9000 Series switches that could allow a remote attacker to bypass authentication. And in January, it killed a high-severity flaw\u00a0in its smart Wi-Fi solution for retailers that could allow a remote attacker to alter the password of any account user on affected systems.\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Untitled-design-1-1-90x90.png New Crypto-Stealer \u2018Panda\u2019 Spread via Discord1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Untitled-design-1-90x90.png Hundreds of Millions of Dell Users at Risk from Kernel-Privilege Bugs2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/HPE-corp-logo-90x90.jpg Hewlett Packard Enterprise Plugs Critical Bug in Edge Platform Tool3 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Untitled-design-90x90.png Chinese hackers targeting Russian nuclear submarine design firm with PortDoor malware4 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/F5-Big-IP-e1619725870974-90x90.jpg F5 Big-IP Vulnerable to Security-Bypass Bug7 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Google-Chrome-Browser-1-90x90.jpg Google Chrome V8 Bug Allows Remote Code-Execution1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/apple_logo_store-90x90.jpg Apple Patches Zero-Day MacOS Bug That Can Bypass Anti-Malware Defenses1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/nvidia-90x90.jpg Nvidia Warns: Severe Security Bugs in GPU Driver, vGPU Software1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Telegram_Messagees-90x90.jpg Telegram Platform Abused in \u2018ToxicEye\u2019 Malware Campaigns2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-1-4-90x90.png Mount Locker Ransomware Aggressively Changes Up Tactics2 weeks ago\nThe post Critical Cisco SD-WAN, HyperFlex Bugs Threaten Corporate Networks first appeared on Black Hat Et[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:03:19.674322Z"}, {"uuid": "7c10bd5a-d3d8-402e-a27d-c27841038d74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "https://t.me/cissp/6494", "content": "Below are the critical vulnerabilities being exploited in attacks in the wild:\n\nCVE-2017-12240 (CVSS score of 9.8) \u2013 The vulnerability affects the DHCP relay subsystem in IOS and IOS XE software. The vulnerability could be exploited by a remote and unauthenticated attacker that can execute arbitrary code and gain full control of the targeted system. The flaw could be also exploited to cause a denial-of-service (DoS) condition by triggering a buffer overflow via specially crafted DHCPv4 packets.\n\nCVE-2018-0125 (CVSS score of 9.8) \u2013 A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system, including issuing commands with root privileges. \n\nCVE-2018-0147 (CVSS score of 9.8) \u2013 The vulnerability is a Java deserialization issue that affects Cisco Access Control System (ACS) that can be exploited by an unauthenticated, remote attacker to execute arbitrary commands with root privileges on an affected device.\n\nCVE-2018-0171 (CVSS score of 9.8) \u2013 The vulnerability affects the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software, it could be exploited by an unauthenticated, remote attacker to cause a reload of a vulnerable device or to execute arbitrary code on an affected device.\n\nCVE-2021-1497 (CVSS score of 9.8) \u2013  The vulnerability is a Command Injection issue that resides in the web-based management interface of Cisco HyperFlex HX.\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.10.27", "creation_timestamp": "2026-09-02T01:04:05.346223Z"}, {"uuid": "38195e9a-ed31-45a0-b1da-77731336095b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "https://t.me/cissp/3555", "content": "Malware analysis\n1. Building Your Own Dynamic Malware Analysis\u00a0Lab\ud83d\udc4d\ud83c\udffd\nhttps://hackerspot.net/2021/06/21/building-your-own-dynamic-malware-analysis-lab\n2. ReverseRat - a new remote access trojan\ud83e\udd13\nhttps://blog.lumen.com/suspected-pakistani-actor-compromises-indian-power-company-with-new-reverserat/?utm_source=rss&utm_medium=rss&utm_campaign=suspected-pakistani-actor-compromises-indian-power-company-with-new-reverserat\n\nThreat Research\n1. Announcing a unified vulnerability schema for open source\ud83d\ude43\nhttps://security.googleblog.com/2021/06/announcing-unified-vulnerability-schema.html?m=1\n2. Cisco Hyperflex HX Auth Handling RCE (PoC for CVE-2021-1497)\nhttps://www.zerodayinitiative.com/blog/2021/6/23/cve-2021-1497-cisco-hyperflex-hx-auth-handling-remote-command-execution\n3. A Vulnerability To Hack iCloud Accounts\ud83d\ude01\nhttps://thezerohack.com/apple-vulnerability-bug-bounty\n\nOffensivesecurity\nGhost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device\ud83e\udd13\nhttps://github.com/EntySec/Ghost\n\nexploit\nCVE-2021-32537:\nAn out-of-bounds memory access that leads to pool corruption in the Windows kernel\nhttps://github.com/0vercl0k/CVE-2021-32537", "creation_timestamp": "2026-09-02T01:04:35.131434Z"}, {"uuid": "65092ebf-3c73-494c-b9cd-2647920e415b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "https://t.me/cissp/4519", "content": "Malware analysis\n1. GriftHorse Android Trojan\nhttps://blog.zimperium.com/grifthorse-android-trojan-steals-millions-from-over-10-million-victims-globally\n2. GhostEmperor: From ProxyLogon to kernel mode\nhttps://securelist.com/ghostemperor-from-proxylogon-to-kernel-mode/104407\n\nThreat Research\nCisco Hyperflex:\nRCE Through Login Form and Other Findings (CVE-2021-1497, CVE-2021-1498, CVE-2021-1499)\nhttps://swarm.ptsecurity.com/cisco-hyperflex-how-we-got-rce-through-login-form-and-other-findings\n\nRed Team Tactics\n1. Determine if the WebClient Service (WebDAV) is running on a remote system\nhttps://github.com/xforcered/GetWebDAVStatus\n2. Invoke-DLLClone - Koppeling x Metatwin x LazySign\nhttps://redteamer.tips/appdata-is-a-mistake-introducing-invoke-dllclone\n]-> https://github.com/jfmaes/Invoke-DLLClone\n\nexploit\nCVE-2021-24604 :\nThe Availability Calendar WordPress plugin <1.2.2 does not sanitise or escape its Category Names before outputting them in page/post where the associated shortcode is embed, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed\nhttps://github.com/AlAIAL90/CVE-2021-24604\n\n\n\u200e", "creation_timestamp": "2026-09-02T01:04:24.364429Z"}, {"uuid": "89a193a1-0002-4397-a43b-ccaf6f382527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "https://t.me/cissp/3338", "content": "Malware analysis\ud83e\udd2a\nSharpPanda: Chinese APT Group Targets Southeast Asian Government With Previously Unknown Backdoor\nhttps://research.checkpoint.com/2021/chinese-apt-group-targets-southeast-asian-government-with-previously-unknown-backdoor\n\nThreat Research\ud83d\ude11\n1. AppCache Vulnerabilities\n(CVE-2020-6399, CVE-2021-21168)\nhttps://blog.lbherrera.me/posts/appcache-forgotten-tales\n2. WordPress Redirect Hack\nhttps://blog.sucuri.net/2021/06/wordpress-redirect-hack-via-test0-com-default7-com.html\n\nOffensive security\n1. XSS in the AWS Console\nhttps://frichetten.com/blog/xss_in_aws_console\n2. Various BIOS Utilities for Modding/Research\nhttps://github.com/platomav/BIOSUtilities#vaio-packaging-manager-extractor\n\nexploit\nCisco HyperFlex HX Data Platform Command Execution (CVE-2021-1497/1498)\nhttps://packetstormsecurity.com/files/162976/cisco_hyperflex_hx_data_platform_cmd_exec.rb.txt\n\nA curated list of backdoor learning resources\ud83e\udd78\nhttps://github.com/THUYimingLi/backdoor-learning-resources", "creation_timestamp": "2026-09-02T01:04:36.992503Z"}, {"uuid": "a5c28615-b79e-4a0f-acd8-173d5cf16a64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "https://t.me/hacking_Attack/19651", "content": "be very successful, cheap and easy to carry out.\u201d\nSee Also: Offensive Security Tool: Mimikatz In addition to the router bug, Juniper researchers observed the following known vulnerabilities being exploited to gain initial access to target devices:\n\n* CVE-2020-29557 (DLink routers)\n* CVE-2021-1497 and CVE-2021-1498 (Cisco HyperFlex)\n* CVE-2021-31755 (Tenda AC11)\n* CVE-2021-22502 (MicroFocus OBR)\n* CVE-2021-22506 (MicroFocus AM)\n\nIn fact, the attackers have been continuously adding new exploits to its arsenal, according to the posting, and CVE-2021-20090 is unlikely to be the last.\n\n\u201cIt is clear that threat actors keep an eye on all disclosed vulnerabilities,\u201d researchers concluded. \u201cWhenever an exploit PoC is published, it often takes them very little time to integrate it into their platform and launch attacks.\u201d\n\nTo avoid compromise, users should update their firmware on the router. See Also: Hacking Stories: Andrian Lamo \u2013 The \u2018homeless\u2019 Hacker \u201cIn the case of IoT devices or home gateways, the situation is much worse as most users are not tech-savvy and even those who are do not get informed about potential vulnerabilities and patches to apply,\u201d according to Juniper. \u201cThe only sure way to remedy this issue is to require vendors to offer zero-down-time automatic updates.\u201d\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/cisco-patch-90x90.png Critical Cisco Bug in VPN Routers Allows Remote Takeover1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/delete-telegram-message-e1628177080885-90x90.jpg MacOS Flaw in Telegram Retrieves Deleted Messages4 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/spam-call-90x90.jpg Black Hat: \u2018I\u2019m Calling About Your Car Warranty\u2019, aka PII Hijinx5 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Google-Chrome-Browser-Management-90x90.png Bugs in Chrome\u2019s JavaScript engine can lead to powerful exploits. This project aims to stop them6 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/chinese-flag-keyboard-internet-istock-90x90.jpg DeadRinger: Chinese APTs strike major telecommunications companies1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/public-wifi-90x90.jpg NSA Warns Public Networks are Hacker Hotbeds1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/iran-thumb-90x90.jpg Hackers used never-before-seen wiper in recent attack on Iranian train system2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/PunkSpider-90x90.png Reboot of PunkSpider Tool at DEF CON Stirs Debate2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/apple-mac-security-90x90.jpg Apple Patches Actively Exploited Zero-Day in iOS, MacOS2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/Windows-Abstract-90x90.jpg Microsoft Rushes Fix for \u2018PetitPotam\u2019 Attack PoC2 weeks ago\nstyle=\"display:block; text-align:center;\"\n data-ad-layout=\"in-article\"\n data-ad-format=\"fluid\"\n data-ad-client=\"ca-pub-6620833063853657\"\n data-ad-slot=\"4517761481\"> \nThe post Auth Bypass Bug Exploited, Affecting Millions of Routers first appeared on Black Hat Ethical Hacking.\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T20:00:04.425393Z"}, {"uuid": "64d0467c-f37c-4823-bed1-9b72a4f5bc74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "https://t.me/hacking_Attack/19651", "content": "be very successful, cheap and easy to carry out.\u201d\nSee Also: Offensive Security Tool: Mimikatz In addition to the router bug, Juniper researchers observed the following known vulnerabilities being exploited to gain initial access to target devices:\n\n* CVE-2020-29557 (DLink routers)\n* CVE-2021-1497 and CVE-2021-1498 (Cisco HyperFlex)\n* CVE-2021-31755 (Tenda AC11)\n* CVE-2021-22502 (MicroFocus OBR)\n* CVE-2021-22506 (MicroFocus AM)\n\nIn fact, the attackers have been continuously adding new exploits to its arsenal, according to the posting, and CVE-2021-20090 is unlikely to be the last.\n\n\u201cIt is clear that threat actors keep an eye on all disclosed vulnerabilities,\u201d researchers concluded. \u201cWhenever an exploit PoC is published, it often takes them very little time to integrate it into their platform and launch attacks.\u201d\n\nTo avoid compromise, users should update their firmware on the router. See Also: Hacking Stories: Andrian Lamo \u2013 The \u2018homeless\u2019 Hacker \u201cIn the case of IoT devices or home gateways, the situation is much worse as most users are not tech-savvy and even those who are do not get informed about potential vulnerabilities and patches to apply,\u201d according to Juniper. \u201cThe only sure way to remedy this issue is to require vendors to offer zero-down-time automatic updates.\u201d\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/cisco-patch-90x90.png Critical Cisco Bug in VPN Routers Allows Remote Takeover1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/delete-telegram-message-e1628177080885-90x90.jpg MacOS Flaw in Telegram Retrieves Deleted Messages4 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/spam-call-90x90.jpg Black Hat: \u2018I\u2019m Calling About Your Car Warranty\u2019, aka PII Hijinx5 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Google-Chrome-Browser-Management-90x90.png Bugs in Chrome\u2019s JavaScript engine can lead to powerful exploits. This project aims to stop them6 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/chinese-flag-keyboard-internet-istock-90x90.jpg DeadRinger: Chinese APTs strike major telecommunications companies1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/public-wifi-90x90.jpg NSA Warns Public Networks are Hacker Hotbeds1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/iran-thumb-90x90.jpg Hackers used never-before-seen wiper in recent attack on Iranian train system2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/PunkSpider-90x90.png Reboot of PunkSpider Tool at DEF CON Stirs Debate2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/apple-mac-security-90x90.jpg Apple Patches Actively Exploited Zero-Day in iOS, MacOS2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/Windows-Abstract-90x90.jpg Microsoft Rushes Fix for \u2018PetitPotam\u2019 Attack PoC2 weeks ago\nstyle=\"display:block; text-align:center;\"\n data-ad-layout=\"in-article\"\n data-ad-format=\"fluid\"\n data-ad-client=\"ca-pub-6620833063853657\"\n data-ad-slot=\"4517761481\"> \nThe post Auth Bypass Bug Exploited, Affecting Millions of Routers first appeared on Black Hat Ethical Hacking.\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T00:00:25.534274Z"}, {"uuid": "7879af60-1301-416c-958b-7d1dff084c54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/cisco_hyperflex_hx_data_platform_cmd_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd, x86, x64\", \"author\": [\"Nikita Abramov\", \"Mikhail Klyuchnikov\", \"wvu \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated command injection in Cisco\\n          HyperFlex HX Data Platform's /storfs-asup endpoint to execute shell\\n          commands as the Tomcat user.\", \"disclosure_date\": \"2021-05-05\", \"fullname\": \"exploit/linux/http/cisco_hyperflex_hx_data_platform_cmd_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:54:55 +0000\", \"name\": \"Cisco HyperFlex HX Data Platform Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/cisco_hyperflex_hx_data_platform_cmd_exec.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/cisco_hyperflex_hx_data_platform_cmd_exec\", \"references\": [\"CVE-2021-1497\", \"CVE-2021-1498\", \"URL-https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hyperflex-rce-TjjNrkpR\", \"URL-https://attackerkb.com/assessments/4f532147-b27b-4079-aed1-5cfdc402cf5c\", \"URL-https://twitter.com/ptswarm/status/1390300625129201664\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Unix Command\", \"Linux Dropper\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:26.997072Z"}, {"uuid": "ab71fe5e-5e2b-4e1a-bce7-e11f6d038705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "https://t.me/hacking_Attack/7642", "content": "it up and prevent it from functioning properly.\n\n\u201cThe vulnerability is due to insufficient handling of API requests to the affected system,\u201d according to Cisco. Cisco HyperFlex HX Command-Injection BugsThe HyperFlex HX software is used to manage hybrid IT environments by converging the oversight of the various applications that enterprises house within data centers \u2013 across both traditional and cloud-native/containerized applications.\n\nCisco said Wednesday\u00a0that multiple vulnerabilities in the platform\u2019s web-based management interface could allow an unauthenticated, remote attacker to perform command-injection attacks against an affected device.\n\nCisco has patched two security bugs in HyperFlex HX in total:\n\n* CVE-2021-1497: Critical Installer Virtual Machine Command-Injection Vulnerability\n* CVE-2021-1498: High-Severity Data Platform Command-Injection Vulnerability\n\nThe first is a critical flaw with a 9.8 CVSS rating,\n\n\u201cThis vulnerability is due to insufficient validation of user-supplied input,\u201d according to Cisco. \u201cA successful exploit could allow the attacker to execute arbitrary commands on an affected device as the root user.\u201d See Also: Hacking Stories: Xbox UndergroundThe second bug rates 7.2 on the CVSS scale, and is due to insufficient validation of user-supplied input, according to Cisco, which added, \u201cA successful exploit could allow the attacker to execute arbitrary commands on an affected device as the tomcat8 user.\u201d\n\nBoth flaws can be exploited by sending a crafted request to the web-based management interface.\n\nThese are just the latest bugs addressed by the tech behemoth this year. In February, Cisco addressed a critical vulnerability\u00a0in its intersite policy manager software for the Nexus 3000 Series switches and Nexus 9000 Series switches that could allow a remote attacker to bypass authentication. And in January, it killed a high-severity flaw\u00a0in its smart Wi-Fi solution for retailers that could allow a remote attacker to alter the password of any account user on affected systems.\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Untitled-design-1-1-90x90.png New Crypto-Stealer \u2018Panda\u2019 Spread via Discord1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Untitled-design-1-90x90.png Hundreds of Millions of Dell Users at Risk from Kernel-Privilege Bugs2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/HPE-corp-logo-90x90.jpg Hewlett Packard Enterprise Plugs Critical Bug in Edge Platform Tool3 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Untitled-design-90x90.png Chinese hackers targeting Russian nuclear submarine design firm with PortDoor malware4 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/F5-Big-IP-e1619725870974-90x90.jpg F5 Big-IP Vulnerable to Security-Bypass Bug7 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Google-Chrome-Browser-1-90x90.jpg Google Chrome V8 Bug Allows Remote Code-Execution1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/apple_logo_store-90x90.jpg Apple Patches Zero-Day MacOS Bug That Can Bypass Anti-Malware Defenses1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/nvidia-90x90.jpg Nvidia Warns: Severe Security Bugs in GPU Driver, vGPU Software1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Telegram_Messagees-90x90.jpg Telegram Platform Abused in \u2018ToxicEye\u2019 Malware Campaigns2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-1-4-90x90.png Mount Locker Ransomware Aggressively Changes Up Tactics2 weeks ago\nThe post Critical Cisco SD-WAN, HyperFlex Bugs Threaten Corporate Networks first appeared on Black Hat Et[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T08:00:06.098003Z"}, {"uuid": "f54dd185-9c6a-445e-baad-1176fa0c2281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "https://t.me/hacking_Attack/7642", "content": "it up and prevent it from functioning properly.\n\n\u201cThe vulnerability is due to insufficient handling of API requests to the affected system,\u201d according to Cisco. Cisco HyperFlex HX Command-Injection BugsThe HyperFlex HX software is used to manage hybrid IT environments by converging the oversight of the various applications that enterprises house within data centers \u2013 across both traditional and cloud-native/containerized applications.\n\nCisco said Wednesday\u00a0that multiple vulnerabilities in the platform\u2019s web-based management interface could allow an unauthenticated, remote attacker to perform command-injection attacks against an affected device.\n\nCisco has patched two security bugs in HyperFlex HX in total:\n\n* CVE-2021-1497: Critical Installer Virtual Machine Command-Injection Vulnerability\n* CVE-2021-1498: High-Severity Data Platform Command-Injection Vulnerability\n\nThe first is a critical flaw with a 9.8 CVSS rating,\n\n\u201cThis vulnerability is due to insufficient validation of user-supplied input,\u201d according to Cisco. \u201cA successful exploit could allow the attacker to execute arbitrary commands on an affected device as the root user.\u201d See Also: Hacking Stories: Xbox UndergroundThe second bug rates 7.2 on the CVSS scale, and is due to insufficient validation of user-supplied input, according to Cisco, which added, \u201cA successful exploit could allow the attacker to execute arbitrary commands on an affected device as the tomcat8 user.\u201d\n\nBoth flaws can be exploited by sending a crafted request to the web-based management interface.\n\nThese are just the latest bugs addressed by the tech behemoth this year. In February, Cisco addressed a critical vulnerability\u00a0in its intersite policy manager software for the Nexus 3000 Series switches and Nexus 9000 Series switches that could allow a remote attacker to bypass authentication. And in January, it killed a high-severity flaw\u00a0in its smart Wi-Fi solution for retailers that could allow a remote attacker to alter the password of any account user on affected systems.\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Untitled-design-1-1-90x90.png New Crypto-Stealer \u2018Panda\u2019 Spread via Discord1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Untitled-design-1-90x90.png Hundreds of Millions of Dell Users at Risk from Kernel-Privilege Bugs2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/HPE-corp-logo-90x90.jpg Hewlett Packard Enterprise Plugs Critical Bug in Edge Platform Tool3 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/05/Untitled-design-90x90.png Chinese hackers targeting Russian nuclear submarine design firm with PortDoor malware4 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/F5-Big-IP-e1619725870974-90x90.jpg F5 Big-IP Vulnerable to Security-Bypass Bug7 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Google-Chrome-Browser-1-90x90.jpg Google Chrome V8 Bug Allows Remote Code-Execution1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/apple_logo_store-90x90.jpg Apple Patches Zero-Day MacOS Bug That Can Bypass Anti-Malware Defenses1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/nvidia-90x90.jpg Nvidia Warns: Severe Security Bugs in GPU Driver, vGPU Software1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Telegram_Messagees-90x90.jpg Telegram Platform Abused in \u2018ToxicEye\u2019 Malware Campaigns2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/Untitled-design-1-4-90x90.png Mount Locker Ransomware Aggressively Changes Up Tactics2 weeks ago\nThe post Critical Cisco SD-WAN, HyperFlex Bugs Threaten Corporate Networks first appeared on Black Hat Et[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-09T00:00:37.725447Z"}, {"uuid": "a4ceee9b-0bd7-4484-a9a6-7154120eb7a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "https://t.me/cissp/6494", "content": "Below are the critical vulnerabilities being exploited in attacks in the wild:\n\nCVE-2017-12240 (CVSS score of 9.8) \u2013 The vulnerability affects the DHCP relay subsystem in IOS and IOS XE software. The vulnerability could be exploited by a remote and unauthenticated attacker that can execute arbitrary code and gain full control of the targeted system. The flaw could be also exploited to cause a denial-of-service (DoS) condition by triggering a buffer overflow via specially crafted DHCPv4 packets.\n\nCVE-2018-0125 (CVSS score of 9.8) \u2013 A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system, including issuing commands with root privileges. \n\nCVE-2018-0147 (CVSS score of 9.8) \u2013 The vulnerability is a Java deserialization issue that affects Cisco Access Control System (ACS) that can be exploited by an unauthenticated, remote attacker to execute arbitrary commands with root privileges on an affected device.\n\nCVE-2018-0171 (CVSS score of 9.8) \u2013 The vulnerability affects the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software, it could be exploited by an unauthenticated, remote attacker to cause a reload of a vulnerable device or to execute arbitrary code on an affected device.\n\nCVE-2021-1497 (CVSS score of 9.8) \u2013  The vulnerability is a Command Injection issue that resides in the web-based management interface of Cisco HyperFlex HX.\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.10.27", "creation_timestamp": "2026-09-10T04:00:04.948999Z"}, {"uuid": "9eb7d896-f9e4-4b36-bfc6-58b5cab208e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4519", "content": "Malware analysis\n1. GriftHorse Android Trojan\nhttps://blog.zimperium.com/grifthorse-android-trojan-steals-millions-from-over-10-million-victims-globally\n2. GhostEmperor: From ProxyLogon to kernel mode\nhttps://securelist.com/ghostemperor-from-proxylogon-to-kernel-mode/104407\n\nThreat Research\nCisco Hyperflex:\nRCE Through Login Form and Other Findings (CVE-2021-1497, CVE-2021-1498, CVE-2021-1499)\nhttps://swarm.ptsecurity.com/cisco-hyperflex-how-we-got-rce-through-login-form-and-other-findings\n\nRed Team Tactics\n1. Determine if the WebClient Service (WebDAV) is running on a remote system\nhttps://github.com/xforcered/GetWebDAVStatus\n2. Invoke-DLLClone - Koppeling x Metatwin x LazySign\nhttps://redteamer.tips/appdata-is-a-mistake-introducing-invoke-dllclone\n]-> https://github.com/jfmaes/Invoke-DLLClone\n\nexploit\nCVE-2021-24604 :\nThe Availability Calendar WordPress plugin <1.2.2 does not sanitise or escape its Category Names before outputting them in page/post where the associated shortcode is embed, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed\nhttps://github.com/AlAIAL90/CVE-2021-24604\n\n\n\u200e", "creation_timestamp": "2026-09-10T18:00:04.959675Z"}, {"uuid": "609da8aa-1d81-43e1-8d92-598a7e719c15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4519", "content": "Malware analysis\n1. GriftHorse Android Trojan\nhttps://blog.zimperium.com/grifthorse-android-trojan-steals-millions-from-over-10-million-victims-globally\n2. GhostEmperor: From ProxyLogon to kernel mode\nhttps://securelist.com/ghostemperor-from-proxylogon-to-kernel-mode/104407\n\nThreat Research\nCisco Hyperflex:\nRCE Through Login Form and Other Findings (CVE-2021-1497, CVE-2021-1498, CVE-2021-1499)\nhttps://swarm.ptsecurity.com/cisco-hyperflex-how-we-got-rce-through-login-form-and-other-findings\n\nRed Team Tactics\n1. Determine if the WebClient Service (WebDAV) is running on a remote system\nhttps://github.com/xforcered/GetWebDAVStatus\n2. Invoke-DLLClone - Koppeling x Metatwin x LazySign\nhttps://redteamer.tips/appdata-is-a-mistake-introducing-invoke-dllclone\n]-> https://github.com/jfmaes/Invoke-DLLClone\n\nexploit\nCVE-2021-24604 :\nThe Availability Calendar WordPress plugin <1.2.2 does not sanitise or escape its Category Names before outputting them in page/post where the associated shortcode is embed, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed\nhttps://github.com/AlAIAL90/CVE-2021-24604\n\n\n\u200e", "creation_timestamp": "2026-09-11T00:00:30.970260Z"}, {"uuid": "1a73c667-9677-4f32-96c1-8a7d632ef234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "seen", "source": "https://t.me/cissp/6494", "content": "Below are the critical vulnerabilities being exploited in attacks in the wild:\n\nCVE-2017-12240 (CVSS score of 9.8) \u2013 The vulnerability affects the DHCP relay subsystem in IOS and IOS XE software. The vulnerability could be exploited by a remote and unauthenticated attacker that can execute arbitrary code and gain full control of the targeted system. The flaw could be also exploited to cause a denial-of-service (DoS) condition by triggering a buffer overflow via specially crafted DHCPv4 packets.\n\nCVE-2018-0125 (CVSS score of 9.8) \u2013 A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system, including issuing commands with root privileges. \n\nCVE-2018-0147 (CVSS score of 9.8) \u2013 The vulnerability is a Java deserialization issue that affects Cisco Access Control System (ACS) that can be exploited by an unauthenticated, remote attacker to execute arbitrary commands with root privileges on an affected device.\n\nCVE-2018-0171 (CVSS score of 9.8) \u2013 The vulnerability affects the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software, it could be exploited by an unauthenticated, remote attacker to cause a reload of a vulnerable device or to execute arbitrary code on an affected device.\n\nCVE-2021-1497 (CVSS score of 9.8) \u2013  The vulnerability is a Command Injection issue that resides in the web-based management interface of Cisco HyperFlex HX.\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.10.27", "creation_timestamp": "2026-09-11T00:00:53.047467Z"}, {"uuid": "dd836b55-bdd4-425e-aec0-e7756e177581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3555", "content": "Malware analysis\n1. Building Your Own Dynamic Malware Analysis\u00a0Lab\ud83d\udc4d\ud83c\udffd\nhttps://hackerspot.net/2021/06/21/building-your-own-dynamic-malware-analysis-lab\n2. ReverseRat - a new remote access trojan\ud83e\udd13\nhttps://blog.lumen.com/suspected-pakistani-actor-compromises-indian-power-company-with-new-reverserat/?utm_source=rss&utm_medium=rss&utm_campaign=suspected-pakistani-actor-compromises-indian-power-company-with-new-reverserat\n\nThreat Research\n1. Announcing a unified vulnerability schema for open source\ud83d\ude43\nhttps://security.googleblog.com/2021/06/announcing-unified-vulnerability-schema.html?m=1\n2. Cisco Hyperflex HX Auth Handling RCE (PoC for CVE-2021-1497)\nhttps://www.zerodayinitiative.com/blog/2021/6/23/cve-2021-1497-cisco-hyperflex-hx-auth-handling-remote-command-execution\n3. A Vulnerability To Hack iCloud Accounts\ud83d\ude01\nhttps://thezerohack.com/apple-vulnerability-bug-bounty\n\nOffensivesecurity\nGhost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device\ud83e\udd13\nhttps://github.com/EntySec/Ghost\n\nexploit\nCVE-2021-32537:\nAn out-of-bounds memory access that leads to pool corruption in the Windows kernel\nhttps://github.com/0vercl0k/CVE-2021-32537", "creation_timestamp": "2026-09-11T03:00:04.664493Z"}, {"uuid": "5f9aee46-c709-4f72-86eb-bf30e5cec081", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3338", "content": "Malware analysis\ud83e\udd2a\nSharpPanda: Chinese APT Group Targets Southeast Asian Government With Previously Unknown Backdoor\nhttps://research.checkpoint.com/2021/chinese-apt-group-targets-southeast-asian-government-with-previously-unknown-backdoor\n\nThreat Research\ud83d\ude11\n1. AppCache Vulnerabilities\n(CVE-2020-6399, CVE-2021-21168)\nhttps://blog.lbherrera.me/posts/appcache-forgotten-tales\n2. WordPress Redirect Hack\nhttps://blog.sucuri.net/2021/06/wordpress-redirect-hack-via-test0-com-default7-com.html\n\nOffensive security\n1. XSS in the AWS Console\nhttps://frichetten.com/blog/xss_in_aws_console\n2. Various BIOS Utilities for Modding/Research\nhttps://github.com/platomav/BIOSUtilities#vaio-packaging-manager-extractor\n\nexploit\nCisco HyperFlex HX Data Platform Command Execution (CVE-2021-1497/1498)\nhttps://packetstormsecurity.com/files/162976/cisco_hyperflex_hx_data_platform_cmd_exec.rb.txt\n\nA curated list of backdoor learning resources\ud83e\udd78\nhttps://github.com/THUYimingLi/backdoor-learning-resources", "creation_timestamp": "2026-09-11T04:00:04.710992Z"}, {"uuid": "74245f85-506a-4a3c-9fa7-eb43e649a6e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3338", "content": "Malware analysis\ud83e\udd2a\nSharpPanda: Chinese APT Group Targets Southeast Asian Government With Previously Unknown Backdoor\nhttps://research.checkpoint.com/2021/chinese-apt-group-targets-southeast-asian-government-with-previously-unknown-backdoor\n\nThreat Research\ud83d\ude11\n1. AppCache Vulnerabilities\n(CVE-2020-6399, CVE-2021-21168)\nhttps://blog.lbherrera.me/posts/appcache-forgotten-tales\n2. WordPress Redirect Hack\nhttps://blog.sucuri.net/2021/06/wordpress-redirect-hack-via-test0-com-default7-com.html\n\nOffensive security\n1. XSS in the AWS Console\nhttps://frichetten.com/blog/xss_in_aws_console\n2. Various BIOS Utilities for Modding/Research\nhttps://github.com/platomav/BIOSUtilities#vaio-packaging-manager-extractor\n\nexploit\nCisco HyperFlex HX Data Platform Command Execution (CVE-2021-1497/1498)\nhttps://packetstormsecurity.com/files/162976/cisco_hyperflex_hx_data_platform_cmd_exec.rb.txt\n\nA curated list of backdoor learning resources\ud83e\udd78\nhttps://github.com/THUYimingLi/backdoor-learning-resources", "creation_timestamp": "2026-09-12T00:00:53.069231Z"}, {"uuid": "5ad3ba83-7444-4fea-86e9-f2b7e48e88d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1497", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3555", "content": "Malware analysis\n1. Building Your Own Dynamic Malware Analysis\u00a0Lab\ud83d\udc4d\ud83c\udffd\nhttps://hackerspot.net/2021/06/21/building-your-own-dynamic-malware-analysis-lab\n2. ReverseRat - a new remote access trojan\ud83e\udd13\nhttps://blog.lumen.com/suspected-pakistani-actor-compromises-indian-power-company-with-new-reverserat/?utm_source=rss&utm_medium=rss&utm_campaign=suspected-pakistani-actor-compromises-indian-power-company-with-new-reverserat\n\nThreat Research\n1. Announcing a unified vulnerability schema for open source\ud83d\ude43\nhttps://security.googleblog.com/2021/06/announcing-unified-vulnerability-schema.html?m=1\n2. Cisco Hyperflex HX Auth Handling RCE (PoC for CVE-2021-1497)\nhttps://www.zerodayinitiative.com/blog/2021/6/23/cve-2021-1497-cisco-hyperflex-hx-auth-handling-remote-command-execution\n3. A Vulnerability To Hack iCloud Accounts\ud83d\ude01\nhttps://thezerohack.com/apple-vulnerability-bug-bounty\n\nOffensivesecurity\nGhost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device\ud83e\udd13\nhttps://github.com/EntySec/Ghost\n\nexploit\nCVE-2021-32537:\nAn out-of-bounds memory access that leads to pool corruption in the Windows kernel\nhttps://github.com/0vercl0k/CVE-2021-32537", "creation_timestamp": "2026-09-12T00:00:54.519922Z"}]}