{"vulnerability": "CVE-2021-3186", "sightings": [{"uuid": "b78b8554-18db-4418-8e57-bcb397ae5b88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31862", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-31862.yaml", "content": "", "creation_timestamp": "2023-04-27T09:58:59.000000Z"}, {"uuid": "e4aae88a-ecc0-4d5a-b52a-1ff5bf2c33b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31862", "type": "seen", "source": "https://t.me/cibsecurity/31446", "content": "\u203c CVE-2021-31862 \u203c\n\nSysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-29T14:18:09.000000Z"}, {"uuid": "07370621-efe4-4808-a58c-44dca4d2496a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31869", "type": "seen", "source": "https://t.me/cibsecurity/26871", "content": "\u203c CVE-2021-31869 \u203c\n\nPimcore AdminBundle version 6.8.0 and earlier suffers from a SQL injection issue in the specificID variable used by the application. This issue was fixed in version 6.9.4 of the product.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-05T03:23:17.000000Z"}, {"uuid": "cae5b0f3-2fb2-4d7f-a33b-b52b5a64bce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31867", "type": "seen", "source": "https://t.me/cibsecurity/26869", "content": "\u203c CVE-2021-31867 \u203c\n\nPimcore Customer Data Framework version 3.0.0 and earlier suffers from a Boolean-based blind SQL injection issue in the $id parameter of the SegmentAssignmentController.php component of the application. This issue was fixed in version 3.0.2 of the product.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-05T03:23:15.000000Z"}, {"uuid": "0bb2da91-a61e-4e1f-82b3-2ee4ac4aaa90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3186", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2584", "content": "#WLAN_Security\nTenda AC5 AC1200 Wireless - \"WiFi Name & Password\" Stored Cross Site Scripting (PoC for CVE-2021-3186)\nhttps://www.exploit-db.com/exploits/49478", "creation_timestamp": "2021-02-08T05:22:54.000000Z"}, {"uuid": "74e548a0-a59d-41f0-8651-de2472a6256a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31862", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4625", "content": "#exploit\n1. CVE-2021-31862:\nSysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication\nhttps://github.com/RobertDra/CVE-2021-31862\n\n2. Research and PoC exploits for ONLYOFFICE\n(CVE-2021-25829, CVE-2021-25830, CVE-2021-25831, CVE-2021-25832, CVE-2021-25833)\nhttps://github.com/merrychap/POC-onlyoffice/tree/master", "creation_timestamp": "2021-10-30T14:32:34.000000Z"}, {"uuid": "63c762b5-8777-427a-a92d-c75e2234c35d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31862", "type": "seen", "source": "https://t.me/cissp/4713", "content": "Threat Research\n1. Shrootless Vulnerability in MacOS (CVE-2021-30892)\nhttps://www.microsoft.com/security/blog/2021/10/28/microsoft-finds-new-macos-vulnerability-shrootless-that-could-bypass-system-integrity-protection\n2. Apple XAR - Arbitrary File Write (CVE-2021-30833)\nhttps://research.nccgroup.com/2021/10/28/technical-advisory-apple-xar-arbitrary-file-write-cve-2021-30833\n\nexploit\n1. CVE-2021-31862:\nSysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication\nhttps://github.com/RobertDra/CVE-2021-31862\n\n2. Research and PoC exploits for ONLYOFFICE\n(CVE-2021-25829, CVE-2021-25830, CVE-2021-25831, CVE-2021-25832, CVE-2021-25833)\nhttps://github.com/merrychap/POC-onlyoffice/tree/master\n\nMalware analysis\n1. More Malicious NPM Libraries\nhttps://www.theregister.com/2021/10/27/npm_roblox_ransomware\n2. New AbstractEmu malware roots Android devices\nhttps://blog.lookout.com/lookout-discovers-global-rooting-malware-campaign\n\nCloud Security\nSnowcat: World\u2019s First Dedicated Security Scanner for Istio\nhttps://www.praetorian.com/blog/introducing-snowcat\n]-> https://github.com/praetorian-inc/snowcat", "creation_timestamp": "2026-09-01T17:00:37.012433Z"}, {"uuid": "c494734a-b2c4-4280-b79a-a9ad88c25cc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3186", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2232", "content": "Tenda AC5 AC1200 Wireless - \"WiFi Name & Password\" Stored Cross Site Scripting (PoC for CVE-2021-3186)\nhttps://www.exploit-db.com/exploits/49478\n\n1. TeamTNT delivers malware with new detection evasion tool\nhttps://cybersecurity.att.com/blogs/labs-research/teamtnt-delivers-malware-with-new-detection-evasion-tool#When:11:00:00Z\n2. Analysis of THREATNEEDLE C&C Communication\nhttps://medium.com/s2wlab/analysis-of-threatneedle-c-c-communication-feat-google-tag-warning-to-researchers-782aa51cf74\n\n1. FComm - C2 Lateral Movement/Additional communication method for the PoshC2 framework\nhttps://labs.nettitude.com/blog/introducing-fcomm-c2-lateral-movement\n2. New Docker Container Escape Bug\nhttps://www.intezer.com/blog/research/how-we-hacked-azure-functions-and-escaped-docker\n]-> PoC:\nhttps://github.com/tsarpaul/Azure-Functions-EoP-PoC\n\n\nNAT Slipstreaming v2.0:\nNew Attack Variant Can Expose All Internal Network Devices to The Internet\nhttps://www.armis.com/resources/iot-security-blog/nat-slipstreaming-v2-0-new-attack-variant-can-expose-all-internal-network-devices-to-the-internet\n// Vulnerable products:\n1. OpenWRT/VyOS, a Linux based router/firewall distribution, with kernel 4.14+\n2. Various consumer grade Linux routers, with likely older kernel versions\n3. Fortigate FG64 VM, 60E firewall appliance, Fortigate CGNAT of two local ISPs\n4. Cisco ASAv VM\n5. Cisco csr1000v VM (same software as IOS XE routers)\n6. HPE vsr1000 VM\n7. Sonicwall TZ300 appliance", "creation_timestamp": "2026-09-01T17:01:03.654246Z"}, {"uuid": "88b94969-d0d0-498c-86ca-96eb5d7916d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31862", "type": "seen", "source": "https://t.me/cissp/4713", "content": "Threat Research\n1. Shrootless Vulnerability in MacOS (CVE-2021-30892)\nhttps://www.microsoft.com/security/blog/2021/10/28/microsoft-finds-new-macos-vulnerability-shrootless-that-could-bypass-system-integrity-protection\n2. Apple XAR - Arbitrary File Write (CVE-2021-30833)\nhttps://research.nccgroup.com/2021/10/28/technical-advisory-apple-xar-arbitrary-file-write-cve-2021-30833\n\nexploit\n1. CVE-2021-31862:\nSysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication\nhttps://github.com/RobertDra/CVE-2021-31862\n\n2. Research and PoC exploits for ONLYOFFICE\n(CVE-2021-25829, CVE-2021-25830, CVE-2021-25831, CVE-2021-25832, CVE-2021-25833)\nhttps://github.com/merrychap/POC-onlyoffice/tree/master\n\nMalware analysis\n1. More Malicious NPM Libraries\nhttps://www.theregister.com/2021/10/27/npm_roblox_ransomware\n2. New AbstractEmu malware roots Android devices\nhttps://blog.lookout.com/lookout-discovers-global-rooting-malware-campaign\n\nCloud Security\nSnowcat: World\u2019s First Dedicated Security Scanner for Istio\nhttps://www.praetorian.com/blog/introducing-snowcat\n]-> https://github.com/praetorian-inc/snowcat", "creation_timestamp": "2026-09-02T01:04:21.814528Z"}, {"uuid": "22fd0395-ec01-4fd3-9ea4-6afa28218b30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3186", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2232", "content": "Tenda AC5 AC1200 Wireless - \"WiFi Name & Password\" Stored Cross Site Scripting (PoC for CVE-2021-3186)\nhttps://www.exploit-db.com/exploits/49478\n\n1. TeamTNT delivers malware with new detection evasion tool\nhttps://cybersecurity.att.com/blogs/labs-research/teamtnt-delivers-malware-with-new-detection-evasion-tool#When:11:00:00Z\n2. Analysis of THREATNEEDLE C&C Communication\nhttps://medium.com/s2wlab/analysis-of-threatneedle-c-c-communication-feat-google-tag-warning-to-researchers-782aa51cf74\n\n1. FComm - C2 Lateral Movement/Additional communication method for the PoshC2 framework\nhttps://labs.nettitude.com/blog/introducing-fcomm-c2-lateral-movement\n2. New Docker Container Escape Bug\nhttps://www.intezer.com/blog/research/how-we-hacked-azure-functions-and-escaped-docker\n]-> PoC:\nhttps://github.com/tsarpaul/Azure-Functions-EoP-PoC\n\n\nNAT Slipstreaming v2.0:\nNew Attack Variant Can Expose All Internal Network Devices to The Internet\nhttps://www.armis.com/resources/iot-security-blog/nat-slipstreaming-v2-0-new-attack-variant-can-expose-all-internal-network-devices-to-the-internet\n// Vulnerable products:\n1. OpenWRT/VyOS, a Linux based router/firewall distribution, with kernel 4.14+\n2. Various consumer grade Linux routers, with likely older kernel versions\n3. Fortigate FG64 VM, 60E firewall appliance, Fortigate CGNAT of two local ISPs\n4. Cisco ASAv VM\n5. Cisco csr1000v VM (same software as IOS XE routers)\n6. HPE vsr1000 VM\n7. Sonicwall TZ300 appliance", "creation_timestamp": "2026-09-02T01:04:53.655570Z"}]}