{"vulnerability": "CVE-2021-20837", "sightings": [{"uuid": "9d8132b8-f75b-4c95-aef6-951bba4cd580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "exploited", "source": "https://www.exploit-db.com/exploits/50464", "content": "", "creation_timestamp": "2021-10-29T00:00:00.000000Z"}, {"uuid": "93aa1896-97b2-4d90-8619-d3bd6fb338d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-18)", "content": "", "creation_timestamp": "2025-01-18T00:00:00.000000Z"}, {"uuid": "2555c53d-29c9-4a36-85de-3d35caaf3b09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-30)", "content": "", "creation_timestamp": "2025-03-30T00:00:00.000000Z"}, {"uuid": "2e1407d5-70f6-4024-93d5-48a305afaf6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "content": "", "creation_timestamp": "2025-01-26T00:00:00.000000Z"}, {"uuid": "a0eb9c97-3eed-4794-8ce7-a94b2d593d8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-08)", "content": "", "creation_timestamp": "2025-02-08T00:00:00.000000Z"}, {"uuid": "22d0d051-2278-486f-85a1-08fadf98bcfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-27)", "content": "", "creation_timestamp": "2025-02-27T00:00:00.000000Z"}, {"uuid": "6a7504c4-0cfe-43d7-8b5e-2ef42754ba8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-18)", "content": "", "creation_timestamp": "2025-02-18T00:00:00.000000Z"}, {"uuid": "1cda1b7a-0b71-410d-be49-79afa2c8ded1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-11)", "content": "", "creation_timestamp": "2025-07-11T00:00:00.000000Z"}, {"uuid": "bcfea5cd-f56c-4813-81ee-7f278d417a1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-06)", "content": "", "creation_timestamp": "2025-04-06T00:00:00.000000Z"}, {"uuid": "0c8f3804-c4fc-4336-8ba9-e3f772a1c525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-17)", "content": "", "creation_timestamp": "2025-06-17T00:00:00.000000Z"}, {"uuid": "db2c46c6-82e7-4a17-b883-c148f802e499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-13)", "content": "", "creation_timestamp": "2025-06-13T00:00:00.000000Z"}, {"uuid": "3a519f22-1e64-46cd-8c89-75f6d09c643e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-12)", "content": "", "creation_timestamp": "2025-07-12T00:00:00.000000Z"}, {"uuid": "be16e3a4-fe12-4b2c-828c-937adc6724e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-16)", "content": "", "creation_timestamp": "2025-05-16T00:00:00.000000Z"}, {"uuid": "f67dfdc2-f3c6-4858-89d7-73538dd201e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-15)", "content": "", "creation_timestamp": "2025-07-15T00:00:00.000000Z"}, {"uuid": "41551a88-09b1-4de2-a991-449738bffe97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-28)", "content": "", "creation_timestamp": "2025-04-28T00:00:00.000000Z"}, {"uuid": "a7c5ef74-e031-4d38-a453-7e3541c81285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-06)", "content": "", "creation_timestamp": "2025-07-06T00:00:00.000000Z"}, {"uuid": "27299b12-1767-4b1e-899e-a64a03d81fce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-04)", "content": "", "creation_timestamp": "2025-07-04T00:00:00.000000Z"}, {"uuid": "7e0183df-7363-4d9c-b5ee-ea8cd8c640a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-24)", "content": "", "creation_timestamp": "2025-07-24T00:00:00.000000Z"}, {"uuid": "c0bd454f-6df7-4f49-9b37-5355bc9aab34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-07)", "content": "", "creation_timestamp": "2025-11-07T00:00:00.000000Z"}, {"uuid": "42dbb3aa-9409-485c-8925-1bd5d9b13eed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-29)", "content": "", "creation_timestamp": "2025-10-29T00:00:00.000000Z"}, {"uuid": "be9e8347-ec79-455f-92ed-c4a5e1077b02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-26)", "content": "", "creation_timestamp": "2025-07-26T00:00:00.000000Z"}, {"uuid": "3de64c3f-706b-4fe6-ac03-e5c6152e950e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-07)", "content": "", "creation_timestamp": "2025-11-07T00:00:00.000000Z"}, {"uuid": "71cdd3b2-319e-49de-af62-3f50d485ab8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-03)", "content": "", "creation_timestamp": "2025-08-03T00:00:00.000000Z"}, {"uuid": "29dd3de7-3a67-4c08-8828-50aab4185259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-03)", "content": "", "creation_timestamp": "2025-10-03T00:00:00.000000Z"}, {"uuid": "dab58657-7600-4120-b952-0f9296e83b81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-14)", "content": "", "creation_timestamp": "2025-08-14T00:00:00.000000Z"}, {"uuid": "7fc04669-56af-40e4-8402-a092dfbc9aa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-16)", "content": "", "creation_timestamp": "2025-08-16T00:00:00.000000Z"}, {"uuid": "3dbe19cf-a8cc-487d-afa3-35f22c340c14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-17)", "content": "", "creation_timestamp": "2025-08-17T00:00:00.000000Z"}, {"uuid": "06e6e8c7-ff24-4331-b524-5c607f9c9ea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-22)", "content": "", "creation_timestamp": "2025-09-22T00:00:00.000000Z"}, {"uuid": "f74cc76b-47dc-4218-807d-332c261b7443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-25)", "content": "", "creation_timestamp": "2025-11-25T00:00:00.000000Z"}, {"uuid": "b2938eba-27df-4bbd-b4fc-2133f7097095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-30)", "content": "", "creation_timestamp": "2025-11-30T00:00:00.000000Z"}, {"uuid": "7ae21c16-c4b4-4b6d-827d-5e26267f3bb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-31)", "content": "", "creation_timestamp": "2025-08-31T00:00:00.000000Z"}, {"uuid": "d72fd02b-f97b-4610-89ae-cc762e430974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-02)", "content": "", "creation_timestamp": "2025-12-02T00:00:00.000000Z"}, {"uuid": "19887dfa-0eb3-4f75-9b93-2459a5d5cc48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-05)", "content": "", "creation_timestamp": "2026-03-05T00:00:00.000000Z"}, {"uuid": "c714a0d5-ac91-4424-b226-edb550a6fe19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-04)", "content": "", "creation_timestamp": "2026-03-04T00:00:00.000000Z"}, {"uuid": "1e1c96bb-5edd-422a-b5be-da0328581a69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-08)", "content": "", "creation_timestamp": "2025-12-08T00:00:00.000000Z"}, {"uuid": "295aebdf-d8c2-45c9-b208-c4361f01edbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-12)", "content": "", "creation_timestamp": "2025-12-12T00:00:00.000000Z"}, {"uuid": "0d510113-b319-4450-827e-b183e3d93592", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-13)", "content": "", "creation_timestamp": "2025-12-13T00:00:00.000000Z"}, {"uuid": "b2a5f16b-02a2-42f7-9dd5-856f6b6f0c30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-14)", "content": "", "creation_timestamp": "2025-12-14T00:00:00.000000Z"}, {"uuid": "b63a2927-01ad-4902-b673-5e1546f47d2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-18)", "content": "", "creation_timestamp": "2025-12-18T00:00:00.000000Z"}, {"uuid": "8b943850-1e62-4ad3-bcb7-691dfa190ba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-01)", "content": "", "creation_timestamp": "2026-02-01T00:00:00.000000Z"}, {"uuid": "0e228b86-2862-4496-9e45-3df7da2bcc47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-30)", "content": "", "creation_timestamp": "2025-12-30T00:00:00.000000Z"}, {"uuid": "a4f33850-5522-4e46-8e1e-39b2b11dd24a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-13)", "content": "", "creation_timestamp": "2026-01-13T00:00:00.000000Z"}, {"uuid": "9465dd08-5ebf-46ae-ad02-0b0ad40ea836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-11)", "content": "", "creation_timestamp": "2026-03-11T00:00:00.000000Z"}, {"uuid": "328b57a3-5628-4203-ace2-d09c7a435bdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-20)", "content": "", "creation_timestamp": "2026-03-20T00:00:00.000000Z"}, {"uuid": "deaebbcd-b899-4953-b30d-bc9d78f27657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-24)", "content": "", "creation_timestamp": "2026-01-24T00:00:00.000000Z"}, {"uuid": "636ccaff-e200-4e2f-9673-70d3354bd053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "published-proof-of-concept", "source": "https://t.me/cKure/7792", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 PoC for the CVE-2021-20837: RCE in MovableType.\n\nhttps://github.com/ghost-nemesis/cve-2021-20837-poc", "creation_timestamp": "2021-10-27T16:40:30.000000Z"}, {"uuid": "539c9878-47ee-4c16-8763-4c87f103ef49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8979", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aXMLRPC RCE via MovableTypePoC CVE-2021-20837\nURL\uff1ahttps://github.com/lamcodeofpwnosec/CVE-2021-20837\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2024-11-09T11:45:35.000000Z"}, {"uuid": "c216fac9-bbe8-4590-81f3-164ed575401f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/745", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aPoC for the CVE-2021-20837 : RCE in MovableType\nURL\uff1ahttps://github.com/ghost-nemesis/cve-2021-20837-poc", "creation_timestamp": "2021-10-25T21:30:33.000000Z"}, {"uuid": "334bb0f7-432f-4521-8c65-307bdd6e40d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "published-proof-of-concept", "source": "https://t.me/hacker_trick/367", "content": "A framework for bug hunting or pentesting targeting websites that have #CVE-2021-41773 Vulnerability in public\nhttps://github.com/HightechSec/scarce-apache2\n\n#poc for the #CVE-2021-20837 RCE in MovableType\nhttps://github.com/ghost-nemesis/cve-2021-20837-poc", "creation_timestamp": "2021-10-31T14:29:50.000000Z"}, {"uuid": "3fd93167-7abd-45a8-8612-81868633a560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "published-proof-of-concept", "source": "Telegram/jFffxEfu5rloVlsrsYlIXWxsAwz4uANurobKSCk1YagZog", "content": "", "creation_timestamp": "2021-12-09T15:04:15.000000Z"}, {"uuid": "c08a4fdb-3ab7-419c-8666-7e003bb72bfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "published-proof-of-concept", "source": "Telegram/RjszAgCTUcf85JiziKOQOMoaY_lPel9cZEIDAG4jyne5Yg", "content": "", "creation_timestamp": "2021-11-01T01:28:27.000000Z"}, {"uuid": "a27390e2-85fe-4d16-a254-db70cdaa7d35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "exploited", "source": "https://t.me/DailyToolz/239", "content": "350K Vuln sites infected with this vulnerability (CVE-2021-20837)", "creation_timestamp": "2021-11-22T07:06:50.000000Z"}, {"uuid": "5d63d89c-d0af-463c-bacf-95545477d72c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "seen", "source": "Telegram/C26Dtoewe862BZAdWTP6KrOt5ySEPg6I4rpBueZ74e4FkKRz", "content": "", "creation_timestamp": "2021-11-25T23:40:40.000000Z"}, {"uuid": "60cde80c-feb4-4f19-9262-bc57be741ea1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4614", "content": "#exploit\n1. Exploiting Grandstream HT801 ATA\n(CVE-2021-37748, CVE-2021-37915)\nhttps://www.secforce.com/blog/exploiting-grandstream-ht801-ata-cve-2021-37748-cve-2021-37915\n]-> PoC: https://github.com/SECFORCE/CVE-2021-37748\n\n2. Finding An Unauthenticated RCE in MovableType (CVE-2021-20837)\nhttps://nemesis.sh/posts/movable-type-0day\n]-> PoC: https://github.com/ghost-nemesis/cve-2021-20837-poc", "creation_timestamp": "2024-08-05T18:55:24.000000Z"}, {"uuid": "bc3bf302-c824-49f1-b90a-2ab74f85b060", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4643", "content": "#exploit\nPoC for the CVE-2021-20837:\nRCE in MovableType\nhttps://github.com/ghost-nemesis/cve-2021-20837-poc", "creation_timestamp": "2021-10-31T16:37:38.000000Z"}, {"uuid": "220ed8f4-1026-43fb-a6ab-5691c046e760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-08)", "content": "", "creation_timestamp": "2026-06-08T00:00:00.000000Z"}, {"uuid": "5723174b-7023-4892-a4ed-27649d313e09", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/32bddd5f-71c8-4b12-ae2d-b07f17bd503a", "content": "", "creation_timestamp": "2026-06-19T12:46:10.198117Z"}, {"uuid": "654d9589-cdbc-4cb8-9b82-4ea6923f3d7f", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f38bf33a-6f2f-45da-ab86-f221bfb838fd", "content": "", "creation_timestamp": "2026-06-23T14:03:34.368657Z"}, {"uuid": "c7798898-bb35-4706-aeb3-564da1269fc8", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-20837", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/415cf380-bed2-47ba-8f7b-2c08be118fd6", "content": "", "creation_timestamp": "2026-06-30T09:22:49.266729Z"}, {"uuid": "d3f975bc-41a7-4718-8195-bdd53d5dca93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "seen", "source": "https://t.me/cissp/4722", "content": "Threat_Research\n1. Apache HTTP Server CVE-2021-42013, CVE-2021-41773 Exploited in the Wild\nhttps://blogs.juniper.net/en-us/threat-research/apache-http-server-cve-2021-42013-and-cve-2021-41773-exploited\n2. CVE-2021-39341:\nA vulnerability in the the OptinMonster plugin\nhttps://www.wordfence.com/blog/2021/10/1000000-sites-affected-by-optinmonster-vulnerabilities\n\nOffensive_security\n1. HatVenom is a HatSploit native payload generation and shellcode injection tool that provides support for common platforms and architectures\nhttps://github.com/EntySec/HatVenom\n2. GC2 - C&C application that allows an attacker to execute commands on the target machine using Google Sheet and exfiltrate data using Google Drive\nhttps://github.com/looCiprian/GC2-sheet\n\nMalware_analysis\nTA575 Uses \"Squid Game\" Lures to Distribute Dridex malware\nhttps://www.proofpoint.com/us/blog/threat-insight/ta575-uses-squid-game-lures-distribute-dridex-malware\n\nRed_Team_Tactics\nGet shells with JET, the Jolokia Exploitation Toolkit\nhttps://thinkloveshare.com/hacking/shells_with_jolokia_exploitation_toolkit\n]-> jolokia-exploitation-toolkit:\nhttps://github.com/laluka/jolokia-exploitation-toolkit\n\nexploit\nPoC for the CVE-2021-20837:\nRCE in MovableType\nhttps://github.com/ghost-nemesis/cve-2021-20837-poc", "creation_timestamp": "2026-09-01T17:00:36.815544Z"}, {"uuid": "1507b01f-388e-4eb6-8a6e-19604ca6aae8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "seen", "source": "https://t.me/cissp/4682", "content": "Cloud Security\nAttacking Azure/Azure AD\nhttps://hausec.com/2021/10/26/attacking-azure-azure-ad-part-ii\n\nRed Team Tactics\nBypassing ModSecurity WAF\nhttp://blog.h3xstream.com/2021/10/bypassing-modsecurity-waf.html?m=1\n]-> A Scientific Notation Bug in MySQL left AWS WAF Clients Vulnerable to SQL Injection:\nhttps://www.gosecure.net/blog/2021/10/19/a-scientific-notation-bug-in-mysql-left-aws-waf-clients-vulnerable-to-sql-injection\n\nOffensive security\nExploiting an ARM-only race condition:\nHow to exploit a double free vulnerability in 2021\nhttps://github.com/stong/how-to-exploit-a-double-free\n]-> Exploit Code:\nhttps://github.com/stong/how-to-exploit-a-double-free/blob/master/solve.py\n\nThreat Research\n1. Exploiting Grandstream HT801 ATA\n(CVE-2021-37748, CVE-2021-37915)\nhttps://www.secforce.com/blog/exploiting-grandstream-ht801-ata-cve-2021-37748-cve-2021-37915\n]-> PoC:\nhttps://github.com/SECFORCE/CVE-2021-37748\n\n2. Finding An Unauthenticated RCE Vulnerability in MovableType (CVE-2021-20837)\nhttps://nemesis.sh/posts/movable-type-0day\n]-> PoC:\nhttps://github.com/ghost-nemesis/cve-2021-20837-poc\n\nMalware analysis\n1. UltimaSMS Android Malware\nhttps://blog.avast.com/premium-sms-scam-apps-on-play-store-avast\n2. Firefox Proxy Malware\nhttps://blog.mozilla.org/security/2021/10/25/securing-the-proxy-api-for-firefox-add-ons\n3. Craigslist E-Mail Hijack\nhttps://www.inky.com/blog/urgency-mail-relay-serve-phishers-well-on-craigslist\n\n\n\u200e\u200b", "creation_timestamp": "2026-09-01T17:00:37.288292Z"}, {"uuid": "7c4ebca7-daed-47f8-b985-1552fcbc546f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "seen", "source": "https://t.me/cissp/4722", "content": "Threat_Research\n1. Apache HTTP Server CVE-2021-42013, CVE-2021-41773 Exploited in the Wild\nhttps://blogs.juniper.net/en-us/threat-research/apache-http-server-cve-2021-42013-and-cve-2021-41773-exploited\n2. CVE-2021-39341:\nA vulnerability in the the OptinMonster plugin\nhttps://www.wordfence.com/blog/2021/10/1000000-sites-affected-by-optinmonster-vulnerabilities\n\nOffensive_security\n1. HatVenom is a HatSploit native payload generation and shellcode injection tool that provides support for common platforms and architectures\nhttps://github.com/EntySec/HatVenom\n2. GC2 - C&C application that allows an attacker to execute commands on the target machine using Google Sheet and exfiltrate data using Google Drive\nhttps://github.com/looCiprian/GC2-sheet\n\nMalware_analysis\nTA575 Uses \"Squid Game\" Lures to Distribute Dridex malware\nhttps://www.proofpoint.com/us/blog/threat-insight/ta575-uses-squid-game-lures-distribute-dridex-malware\n\nRed_Team_Tactics\nGet shells with JET, the Jolokia Exploitation Toolkit\nhttps://thinkloveshare.com/hacking/shells_with_jolokia_exploitation_toolkit\n]-> jolokia-exploitation-toolkit:\nhttps://github.com/laluka/jolokia-exploitation-toolkit\n\nexploit\nPoC for the CVE-2021-20837:\nRCE in MovableType\nhttps://github.com/ghost-nemesis/cve-2021-20837-poc", "creation_timestamp": "2026-09-02T01:04:21.565806Z"}, {"uuid": "5ad2fe2e-7ebe-4222-ae5d-478ac868a06e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-20837", "type": "seen", "source": "https://t.me/cissp/4682", "content": "Cloud Security\nAttacking Azure/Azure AD\nhttps://hausec.com/2021/10/26/attacking-azure-azure-ad-part-ii\n\nRed Team Tactics\nBypassing ModSecurity WAF\nhttp://blog.h3xstream.com/2021/10/bypassing-modsecurity-waf.html?m=1\n]-> A Scientific Notation Bug in MySQL left AWS WAF Clients Vulnerable to SQL Injection:\nhttps://www.gosecure.net/blog/2021/10/19/a-scientific-notation-bug-in-mysql-left-aws-waf-clients-vulnerable-to-sql-injection\n\nOffensive security\nExploiting an ARM-only race condition:\nHow to exploit a double free vulnerability in 2021\nhttps://github.com/stong/how-to-exploit-a-double-free\n]-> Exploit Code:\nhttps://github.com/stong/how-to-exploit-a-double-free/blob/master/solve.py\n\nThreat Research\n1. Exploiting Grandstream HT801 ATA\n(CVE-2021-37748, CVE-2021-37915)\nhttps://www.secforce.com/blog/exploiting-grandstream-ht801-ata-cve-2021-37748-cve-2021-37915\n]-> PoC:\nhttps://github.com/SECFORCE/CVE-2021-37748\n\n2. Finding An Unauthenticated RCE Vulnerability in MovableType (CVE-2021-20837)\nhttps://nemesis.sh/posts/movable-type-0day\n]-> PoC:\nhttps://github.com/ghost-nemesis/cve-2021-20837-poc\n\nMalware analysis\n1. UltimaSMS Android Malware\nhttps://blog.avast.com/premium-sms-scam-apps-on-play-store-avast\n2. Firefox Proxy Malware\nhttps://blog.mozilla.org/security/2021/10/25/securing-the-proxy-api-for-firefox-add-ons\n3. Craigslist E-Mail Hijack\nhttps://www.inky.com/blog/urgency-mail-relay-serve-phishers-well-on-craigslist\n\n\n\u200e\u200b", "creation_timestamp": "2026-09-02T01:04:22.122668Z"}]}