{"vulnerability": "CVE-2021-45467", "sightings": [{"uuid": "b628ab24-bdc6-45a7-88c8-cc98098d1ff2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45467", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m47cvwqu6u2u", "content": "", "creation_timestamp": "2025-10-27T21:02:34.191626Z"}, {"uuid": "66f11585-b5cc-4e69-b784-5ccd55c84cea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45467", "type": "published-proof-of-concept", "source": "https://t.me/cKure/8656", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 CVE-2021-45467: CWP CentOS Web Panel \u2013 preauth RCE.\n\nhttps://octagon.net/blog/2022/01/22/cve-2021-45467-cwp-centos-web-panel-preauth-rce/", "creation_timestamp": "2022-01-23T05:52:34.000000Z"}, {"uuid": "4f5312c9-db0a-4ea7-9058-1acdf98b7601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45467", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11528", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2021-45467\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, an unauthenticated attacker can use %00 bytes to cause /user/loader.php to register an arbitrary API key, as demonstrated by a /user/loader.php?api=1&scripts= .%00./.%00./api/account_new_create&acc=guadaapi URI. Any number of %00 instances can be used, e.g., .%00%00%00./.%00%00%00./api/account_new_create could also be used for the scripts parameter.\n\ud83d\udccf Published: 2022-12-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-12T00:06:13.609Z\n\ud83d\udd17 References:\n1. https://control-webpanel.com/changelog\n2. https://octagon.net/blog/2022/01/22/cve-2021-45467-cwp-centos-web-panel-preauth-rce/", "creation_timestamp": "2025-04-12T00:51:06.000000Z"}, {"uuid": "8dd634b8-e8a1-4b63-94fa-5fcc4d0c0340", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45467", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11635", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2021-45466\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, attackers can make a crafted request to api/?api=add_server&DHCP= to add an authorized_keys text file in the /resources/ folder.\n\ud83d\udccf Published: 2022-12-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-14T15:45:40.679Z\n\ud83d\udd17 References:\n1. https://control-webpanel.com/changelog\n2. https://octagon.net/blog/2022/01/22/cve-2021-45467-cwp-centos-web-panel-preauth-rce/", "creation_timestamp": "2025-04-14T15:53:36.000000Z"}, {"uuid": "ff23498b-2eb2-40a1-ac76-917277c90591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45467", "type": "seen", "source": "https://t.me/proxy_bar/572", "content": "\u042d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e ! \ud83c\udf83\ud83c\udf83\u2620\ufe0f\n1. \u0424\u043e\u0440\u043a \u0441\u0442\u0430\u0440\u043e\u0433\u043e \u0434\u043e\u0431\u0440\u043e\u0433\u043e Armitage \n2. CVE-2022-0185: Detecting and mitigating Linux Kernel vulnerability causing container escape \u0442\u0443\u0442\n3. CVE-2021-45467: CWP CentOS Web Panel \u2013 preauth RCE  \u0442\u0443\u0442 \n4. \u041d\u0443 \u0438 \u0441\u0430\u043c\u044b\u0439 \u0436\u0438\u0440 \u043d\u0430  \u0441\u0435\u0433\u043e\u0434\u043d\u044f - \u0432\u043e\u0440\u0443\u0435\u043c  \u0447\u0438\u0441\u0442\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438  \u043e\u0442 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 VeraCrypt (\u043f\u0440\u0438\u0435\u043c\u043d\u0438\u043a\u0430 TrueCrypt) \u043e\u0431\u0443\u0447\u0430\u044e\u0449\u0430\u044f GIF\u043a\u0430 \u0432 \u043f\u043e\u0434\u0430\u0440\u043e\u043a, \u0432\u0441\u0435 \u0442\u0443\u0442", "creation_timestamp": "2022-01-25T13:53:20.000000Z"}, {"uuid": "5af325c5-67d9-4ce1-b5bd-6699ac2ecd98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45467", "type": "seen", "source": "https://t.me/true_secator/2555", "content": "\u041f\u0430\u043d\u0435\u043b\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Linux \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0447\u0430\u0441\u0442\u043d\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 Control Web Panel (CWP) \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 (RCE) \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Linux.\n \n\u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 CWP \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b: CentOS, Rocky Linux, Alma Linux \u0438 Oracle Linux.\n \n\u041e\u0448\u0438\u0431\u043a\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f (CVE-2021-45467) \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2021-45466), \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0435 \u0432 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u043a RCE, \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u041f\u0430\u0443\u043b\u043e\u0441\u043e\u043c \u0419\u0438\u0431\u0435\u043b\u043e \u0438\u0437 Octagon Networks.\n \n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0434\u0440\u0430\u0437\u0443\u043c\u0435\u0432\u0430\u0435\u0442 \u043e\u0431\u0445\u043e\u0434 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0434\u043e\u0431\u0440\u0430\u0442\u044c\u0441\u044f \u0434\u043e \u0440\u0430\u0437\u0434\u0435\u043b\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0433\u043e API \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n \n\u042d\u0442\u043e\u0442 \u0442\u0440\u044e\u043a \u043c\u043e\u0436\u043d\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0443\u0442\u0435\u043c \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u043a\u043b\u044e\u0447\u0430 API \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043e\u0448\u0438\u0431\u043a\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430 \u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 authorized_keys \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0434\u0435\u0444\u0435\u043a\u0442 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u0430.\n \n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u044b \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c PoC \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Linux \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c CWP \u0431\u0443\u0434\u0443\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.\n \n\u041d\u043e \u0432\u043e\u0442 \u0432 \u0447\u0435\u043c \u0434\u0438\u043b\u0435\u043c\u043c\u0430.\n \n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430, \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 30 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c CWP. \u041f\u043e \u0434\u0440\u0443\u0433\u0438\u043c \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f\u043c, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u043f\u043e\u0447\u0442\u0438 80 000 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 CWP \u043d\u0430 BinaryEdge. \u0412 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 Shodan \u0438 Censys \u043c\u043e\u0436\u043d\u043e \u0440\u0430\u0441\u0448\u0430\u0440\u0438\u0442\u044c \u0431\u043e\u043b\u0435\u0435 200 000 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0434\u043b\u044f RCE \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432.", "creation_timestamp": "2022-01-25T19:33:44.000000Z"}, {"uuid": "c533eda2-c569-4898-b579-a7a30ebb0277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45467", "type": "seen", "source": "https://t.me/cibsecurity/55337", "content": "\u203c CVE-2021-45467 \u203c\n\nIn CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, an unauthenticated attacker can use %00 bytes to cause /user/loader.php to register an arbitrary API key, as demonstrated by a /user/loader.php?api=1&scripts= .%00./.%00./api/account_new_create&acc=guadaapi URI. Any number of %00 instances can be used, e.g., .%00%00%00./.%00%00%00./api/account_new_create could also be used for the scripts parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-26T07:40:42.000000Z"}, {"uuid": "9d9c5ec8-b532-4446-8038-5594fe8fdd82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45467", "type": "seen", "source": "https://t.me/BlueRedTeam/1652", "content": "#exploit\n\nCVE-2021-45467:\nCWP CentOS Web Panel - preauth RCE\n\nhttps://octagon.net/blog/2022/01/22/cve-2021-45467-cwp-centos-web-panel-preauth-rce\n- \n\nCVE-2021-30949:\nXNU kernel use-after-free in mach_msg\n\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2232\n\n@BlueRedTeam", "creation_timestamp": "2022-01-25T10:14:52.000000Z"}, {"uuid": "c11aecf1-2c55-4c52-97d6-83cedd52de61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45467", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/5265", "content": "#exploit\n1. CVE-2021-45467:\nCWP CentOS Web Panel - preauth RCE\nhttps://octagon.net/blog/2022/01/22/cve-2021-45467-cwp-centos-web-panel-preauth-rce\n\n2. CVE-2021-30949:\nXNU kernel use-after-free in mach_msg\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2232", "creation_timestamp": "2022-01-24T11:03:01.000000Z"}, {"uuid": "882a7755-ebcc-4b78-9346-729dd84b9ab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45467", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/5324", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (Jan 1-31)\n\nCVE-2021-44228 - Apache Log4j2\nCVE-2021-40444 - Microsoft MSHTML RCE\nCVE-2021-4034 - LPE vuln was found on polkit's pkexec utility\nCVE-2022-0185 - Linux Kernel Container Escape in Kubernetes\nCVE-2022-21907 - HTTP Protocol Stack RCE\nCVE-2022-21882 - Win32k Window Object Type Confusion\nCVE-2021-20038 - SonicWall SMA-100 Unauth RCE\nCVE-2021-45467 - CWP CentOS Web Panel preauth RCE\nCVE-2021-42392 - Unauth RCE in H2 Database Console\nCVE-2022-21658 - Vulnerability in Rust", "creation_timestamp": "2024-10-15T10:29:54.000000Z"}, {"uuid": "267579ec-5a50-41ef-9e78-e69e1adc7445", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45467", "type": "seen", "source": "https://t.me/bhhub/714", "content": "#BugBountyTips of the Day\n2FA-Bypass-Techniques   1 Response Manipulation 2 Status Code Manipulation 3 2FA Code Leakage in Response 4 JS File Analysis 5 2FA Code Reusability 6 Lack of Brute-Force Protection  @TodayCyberNews  #bugbounty #bugbountytips #bugbountytip #cybersecurity #infosec #2FA #bypass\n---\nFind the bug in the code!   The solution will be posted in today's #securityexplained series.   Source: @SonarSource   #appsec #infosec #bugbountytips #hacking  https://t.co/Prdc5ZiVIE\n---\nNever think there are no bugs in highley tested programs  Tip: inject in login parameters #bugbountytip #bugbounty #bughunting  https://t.co/DXpEv1xuSG\n---\nCloudflare #XSS WAF Bypass @nav1n0x  Payload: \"%2Bself[%2F*foo*%2F'alert'%2F*bar*%2F](self[%2F*foo*%2F'document'%2F*bar*%2F]['domain'])%2F%2F  It's an ongoing program, so I had to mask the URL.   #bugbountytips #infosec #CloudflareWAF #WAFBypass  https://t.co/0IiKCaZrfT\n---\nCross Site Scripting (XSS) Akamai WAF Bypass @akazh18  try this payload :  <!--><svg+onload=%27top[%2fal%2f%2esource%2b%2fert%2f%2esource](document.cookie)%27>  #xss #waf #bugbounty #bugbountytip #bugbountytips  https://t.co/YCE9fCQvtl\n---\n.%00./ is the new ..;/   CVE-2021-45467: beautiful preauth root RCE chain I found on CentOS Web Panel servers by bypassing common PHP function used for LFI protection & file write bug. RCE seems extemely widespread, pls patch!!!! #bugbounty #bugbountytip    https://t.co/XRGLk4L5D9\n---\nOur first blog post is up!   CVE-2021-45467: Preauth RCE in CentOS Web Panel affecting 200k+ web servers on Shodan (pls patch). We bypass strstr() based LFI protection and put a shell on the server.   https://t.co/DvyakBkajj #bugbounty #bugbountytip  https://t.co/0Z0cPU6HFl", "creation_timestamp": "2022-01-23T13:37:04.000000Z"}, {"uuid": "bbb46ed0-85bf-4998-8b15-47f7b9cda404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45467", "type": "seen", "source": "https://t.me/onelab1337/2104", "content": "#exploit\n1. CVE-2021-45467:\nCWP CentOS Web Panel - preauth RCE\n\ud83d\udd17 See on Octagon\n\n2. CVE-2021-30949:\nXNU kernel use-after-free in mach_msg\n\ud83d\udd17 See on Chromium\n\nShare and support us \u2764\ufe0f\n@zero0lab", "creation_timestamp": "2026-08-09T04:44:40.413742Z"}, {"uuid": "aa9a4d10-1e83-455a-a569-71931e7eb9d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45467", "type": "seen", "source": "https://t.me/onelab1337/2104", "content": "#exploit\n1. CVE-2021-45467:\nCWP CentOS Web Panel - preauth RCE\n\ud83d\udd17 See on Octagon\n\n2. CVE-2021-30949:\nXNU kernel use-after-free in mach_msg\n\ud83d\udd17 See on Chromium\n\nShare and support us \u2764\ufe0f\n@zero0lab", "creation_timestamp": "2026-08-10T00:00:12.815103Z"}, {"uuid": "d9fb5ad1-5fd9-4cb9-86dd-49399149818e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45467", "type": "seen", "source": "https://t.me/Hackme_news/474", "content": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 \u0432\u0435\u0431-\u043f\u0430\u043d\u0435\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Linux \u041d\u0435\u0434\u0430\u0432\u043d\u043e \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Octagon Networks \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0432\u0435\u0431-\u043f\u0430\u043d\u0435\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (\u0440\u0430\u043d\u0435\u0435 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u0430\u043a \u0432\u0435\u0431-\u043f\u0430\u043d\u0435\u043b\u044c CentOS), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u043a\u0430\u043a CWP. \u0418\u0437-\u0437\u0430 \u044d\u0442\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043b\u0435\u0433\u043a\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Linux . CWP \u2014 \u044d\u0442\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0435\u0431-\u0445\u043e\u0441\u0442\u0438\u043d\u0433\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 200 000 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432.  \u0412\u0441\u0435\u0433\u043e \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 , \u0430 \u0438\u043c\u0435\u043d\u043d\u043e:\n\nCVE-2021-45467: \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (RCE).\nCVE-2021-45466: \u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u0430. https://shly.link/0t6fu", "creation_timestamp": "2026-09-01T17:00:11.319598Z"}, {"uuid": "b5762055-549a-45b5-aacb-a211fd149eaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45467", "type": "seen", "source": "https://t.me/hacking_Attack/39709", "content": "hacking: security in practice\nCVE-2021-45467: CWP CentOS Web Panel \u2013 preauth RCE\n\nsubmitted by /u/Gallus \n[link] [comments]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:58.899459Z"}, {"uuid": "962e8a25-e2f2-4653-ba98-45f2f608b482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45467", "type": "seen", "source": "https://t.me/hacking_Attack/40084", "content": "Black Hat Ethical Hacking\nCWP bugs allow code execution as root on Linux servers\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png CWP bugs allow code execution as root on Linux serversPost Views: 196 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute\nTwo security vulnerabilities that impact the Control Web Panel (CWP) software can be chained by unauthenticated attackers to gain remote code execution (RCE) as root on vulnerable Linux servers. CWP, previously known as CentOS Web Panel, is a free Linux control panel for managing dedicated web hosting\u00a0servers and virtual private servers.\n\nThe two security flaws found by Octagon Networks\u2019 Paulos Yibelo\u00a0are a file inclusion vulnerability (CVE-2021-45467) and a file write (CVE-2021-45466) bug that lead to RCE when chained together.\n\nIn short, successful exploitation requires bypassing security protections to prevent attackers from reaching the restricted API section without authentication.\n\nThis can be done by registering an API key using the file inclusion bug and creating a malicious authorized_keys file on the server using the file write flaw.\nSee Also: Complete Offensive Security and Ethical Hacking Course While the CVE-2021-45467 file inclusion vulnerability was patched, Octagon Networks says that they saw how \u201csome managed to reverse the patch and exploit some servers.\u201d\nOctagon Networks says that, while the CVE-2021-45467 file inclusion vulnerability was patched,\u00a0they saw how \u201csome managed to reverse the patch and exploit some servers.\u201d\n\nThe security researchers also said they would release a proof-of-concept exploit for this pre-auth RCE chain after enough Linux servers running CWP will get upgraded to the latest version.\nSee Also: McAfee Bug Can Be Exploited to Gain Windows SYSTEM Privileges According to CWP\u2019s developers, their software supports the following operating systems: CentOS, Rocky Linux, Alma Linux, and Oracle Linux\n\nWhile the CWP site claims that roughly 30,000 servers are running CWP, BleepingComputer found almost 80,000 Internet-exposed CWP servers\u00a0on BinaryEdge. \n\nOver 200,000 can also be found on\u00a0Shodan and Censys, according to the researchers who discovered the pre-authentication RCE chain.\nSee Also: OSINT Tool: Commit Stream Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSee Also: Stuxnet \u2013 A weapon made out of code that almost started WW3 Source: threatpost.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/mcafee-d2c-90x90.jpg McAfee Bug Can Be Exploited to Gain Windows SYSTEM Privileges1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/ezgif.com-gif-maker-12-90x90.jpg Cisco bug gives remote attackers root privileges via debug mode4 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/ezgif.com-gif-maker-11-1-90x90.jpg Beijing Olympics App Flaws Allow Man-in-the-Middle Attacks5 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/ezgif.com-gif-maker-10-90x90.jpg SSRF vulnerability in VMWare authentication software could allow access to user data6 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/Safari-Apple-navigateur-90x90.j[...]", "creation_timestamp": "2026-09-01T20:01:58.710878Z"}, {"uuid": "9741a81b-d6b2-484a-9dfa-eb4a7a8587c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45467", "type": "seen", "source": "https://t.me/hacking_Attack/40084", "content": "Black Hat Ethical Hacking\nCWP bugs allow code execution as root on Linux servers\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png CWP bugs allow code execution as root on Linux serversPost Views: 196 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute\nTwo security vulnerabilities that impact the Control Web Panel (CWP) software can be chained by unauthenticated attackers to gain remote code execution (RCE) as root on vulnerable Linux servers. CWP, previously known as CentOS Web Panel, is a free Linux control panel for managing dedicated web hosting\u00a0servers and virtual private servers.\n\nThe two security flaws found by Octagon Networks\u2019 Paulos Yibelo\u00a0are a file inclusion vulnerability (CVE-2021-45467) and a file write (CVE-2021-45466) bug that lead to RCE when chained together.\n\nIn short, successful exploitation requires bypassing security protections to prevent attackers from reaching the restricted API section without authentication.\n\nThis can be done by registering an API key using the file inclusion bug and creating a malicious authorized_keys file on the server using the file write flaw.\nSee Also: Complete Offensive Security and Ethical Hacking Course While the CVE-2021-45467 file inclusion vulnerability was patched, Octagon Networks says that they saw how \u201csome managed to reverse the patch and exploit some servers.\u201d\nOctagon Networks says that, while the CVE-2021-45467 file inclusion vulnerability was patched,\u00a0they saw how \u201csome managed to reverse the patch and exploit some servers.\u201d\n\nThe security researchers also said they would release a proof-of-concept exploit for this pre-auth RCE chain after enough Linux servers running CWP will get upgraded to the latest version.\nSee Also: McAfee Bug Can Be Exploited to Gain Windows SYSTEM Privileges According to CWP\u2019s developers, their software supports the following operating systems: CentOS, Rocky Linux, Alma Linux, and Oracle Linux\n\nWhile the CWP site claims that roughly 30,000 servers are running CWP, BleepingComputer found almost 80,000 Internet-exposed CWP servers\u00a0on BinaryEdge. \n\nOver 200,000 can also be found on\u00a0Shodan and Censys, according to the researchers who discovered the pre-authentication RCE chain.\nSee Also: OSINT Tool: Commit Stream Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSee Also: Stuxnet \u2013 A weapon made out of code that almost started WW3 Source: threatpost.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/mcafee-d2c-90x90.jpg McAfee Bug Can Be Exploited to Gain Windows SYSTEM Privileges1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/ezgif.com-gif-maker-12-90x90.jpg Cisco bug gives remote attackers root privileges via debug mode4 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/ezgif.com-gif-maker-11-1-90x90.jpg Beijing Olympics App Flaws Allow Man-in-the-Middle Attacks5 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/ezgif.com-gif-maker-10-90x90.jpg SSRF vulnerability in VMWare authentication software could allow access to user data6 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/Safari-Apple-navigateur-90x90.j[...]", "creation_timestamp": "2026-09-02T01:02:21.180349Z"}, {"uuid": "ae53cfcf-e1de-4f77-8ddf-a62b7565174b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45467", "type": "seen", "source": "https://t.me/hacking_Attack/39709", "content": "hacking: security in practice\nCVE-2021-45467: CWP CentOS Web Panel \u2013 preauth RCE\n\nsubmitted by /u/Gallus \n[link] [comments]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:21.399668Z"}, {"uuid": "4a83ada3-fd7c-44f9-b205-67065d701eae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-45467", "type": "seen", "source": "https://t.me/Hackme_news/474", "content": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 \u0432\u0435\u0431-\u043f\u0430\u043d\u0435\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Linux \u041d\u0435\u0434\u0430\u0432\u043d\u043e \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Octagon Networks \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0432\u0435\u0431-\u043f\u0430\u043d\u0435\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (\u0440\u0430\u043d\u0435\u0435 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u0430\u043a \u0432\u0435\u0431-\u043f\u0430\u043d\u0435\u043b\u044c CentOS), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u043a\u0430\u043a CWP. \u0418\u0437-\u0437\u0430 \u044d\u0442\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043b\u0435\u0433\u043a\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Linux . CWP \u2014 \u044d\u0442\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0435\u0431-\u0445\u043e\u0441\u0442\u0438\u043d\u0433\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 200 000 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432.  \u0412\u0441\u0435\u0433\u043e \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 , \u0430 \u0438\u043c\u0435\u043d\u043d\u043e:\n\nCVE-2021-45467: \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (RCE).\nCVE-2021-45466: \u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u0430. https://shly.link/0t6fu", "creation_timestamp": "2026-09-02T01:03:45.816013Z"}]}