{"vulnerability": "CVE-2021-47936", "sightings": [{"uuid": "0cd6d0ca-cedb-4950-a483-520b8824ce46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-47936", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlj6teveoq2k", "content": "CVE-2021-47936 - OpenCATS 0.9.4 Remote Code Execution via Resume Upload\nCVE ID : CVE-2021-47936\n \n Published : May 10, 2026, 1:16 p.m. | 3\u00a0hours, 9\u00a0minutes ago\n \n Description : OpenCATS 0.9.4 contains a remote code execution vulnerability that allows unauthenticated attackers ...", "creation_timestamp": "2026-05-10T16:34:05.383756Z"}, {"uuid": "1ce3d81b-3b8d-47d2-9ce0-8c62c26382a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-47936", "type": "seen", "source": "https://t.me/shimiscyberworld/1340", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-10\n\n\ud83d\udcca 15 vulnerabilities detected today \u2014 5 \ud83d\udd34 Critical, 10 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2021-47923 (9.8) \u2014 OpenCart 3.0.3.8 Session Fixation Vulnerability\u2026\n  \u2022 CVE-2021-47932 (9.8) \u2014 WordPress TheCartPress Unauthenticated Admin Creation\u2026\n  \u2022 CVE-2021-47933 (9.8) \u2014 WordPress MStore API Critical RCE: Unauthenticated File\u2026\n  \u2022 CVE-2021-47936 (9.8) \u2014 OpenCATS 0.9.4 Critical RCE via Malicious Resume Uploads\n  \u2022 CVE-2021-47940 (9.8) \u2014 WordPress Plugin Download From Files: Critical\u2026\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2021-47935 (8.8) \u2014 Sentry 8.2.0 RCE: Authenticated Superusers Can Execute\u2026\n  \u2022 CVE-2021-47937 (8.8) \u2014 e107 CMS RCE (CVE-2021-47937) Allows Authenticated Theme\u2026\n  \u2022 CVE-2021-47938 (8.8) \u2014 ImpressCMS 1.4.2 RCE: Authenticated Attackers Can Execute\u2026\n  \u2022 CVE-2021-47939 (8.8) \u2014 Evolution CMS RCE (CVE-2021-47939) Allows Authenticated\u2026\n  \u2022 CVE-2021-47943 (8.8) \u2014 TextPattern CMS RCE (CVE-2021-47943) Allows Authenticated\u2026\n  \u2022 CVE-2021-47949 (8.8) \u2014 CyberPanel 2.1 RCE via Symlink Attack (CVE-2021-47949)\n  \u2022 CVE-2022-50944 (8.8) \u2014 Aero CMS 0.0.1 Vulnerability Allows Authenticated PHP Code\u2026\n  \u2022 CVE-2021-47928 (8.2) \u2014 Opencart TMD Vendor System Blind SQLi Exposes User Data\n  \u2022 CVE-2021-47930 (8.2) \u2014 CVE-2021-47930: Unauthenticated SQLi in Balbooa Joomla\u2026\n  \u2022 CVE-2021-47941 (8.2) \u2014 WordPress Plugin Survey & Poll SQLi Puts Data at Risk\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:08.379213Z"}, {"uuid": "9894ec9d-cf35-4979-a922-d27e67ffac73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-47936", "type": "seen", "source": "https://t.me/shimiscyberworld/1336", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2021-47936 \u2014 CVSS 9.8\nOpenCATS 0.9.4 Critical RCE via Malicious Resume Uploads\n\nCVE-2021-47936 \u2014 OpenCATS 0.9.4 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands by uploading malicious PHP files \n\n\ud83d\udd34 Critical \u00b7 3 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2021-47936 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:10.854344Z"}, {"uuid": "b05e6708-d408-48e8-9895-43e9432ce50f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-47936", "type": "seen", "source": "https://t.me/shimiscyberworld/1336", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2021-47936 \u2014 CVSS 9.8\nOpenCATS 0.9.4 Critical RCE via Malicious Resume Uploads\n\nCVE-2021-47936 \u2014 OpenCATS 0.9.4 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands by uploading malicious PHP files \n\n\ud83d\udd34 Critical \u00b7 3 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2021-47936 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:41.093672Z"}, {"uuid": "fe3b08f2-642e-439a-92fc-4ae09705c794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-47936", "type": "seen", "source": "https://t.me/shimiscyberworld/1340", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-10\n\n\ud83d\udcca 15 vulnerabilities detected today \u2014 5 \ud83d\udd34 Critical, 10 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2021-47923 (9.8) \u2014 OpenCart 3.0.3.8 Session Fixation Vulnerability\u2026\n  \u2022 CVE-2021-47932 (9.8) \u2014 WordPress TheCartPress Unauthenticated Admin Creation\u2026\n  \u2022 CVE-2021-47933 (9.8) \u2014 WordPress MStore API Critical RCE: Unauthenticated File\u2026\n  \u2022 CVE-2021-47936 (9.8) \u2014 OpenCATS 0.9.4 Critical RCE via Malicious Resume Uploads\n  \u2022 CVE-2021-47940 (9.8) \u2014 WordPress Plugin Download From Files: Critical\u2026\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2021-47935 (8.8) \u2014 Sentry 8.2.0 RCE: Authenticated Superusers Can Execute\u2026\n  \u2022 CVE-2021-47937 (8.8) \u2014 e107 CMS RCE (CVE-2021-47937) Allows Authenticated Theme\u2026\n  \u2022 CVE-2021-47938 (8.8) \u2014 ImpressCMS 1.4.2 RCE: Authenticated Attackers Can Execute\u2026\n  \u2022 CVE-2021-47939 (8.8) \u2014 Evolution CMS RCE (CVE-2021-47939) Allows Authenticated\u2026\n  \u2022 CVE-2021-47943 (8.8) \u2014 TextPattern CMS RCE (CVE-2021-47943) Allows Authenticated\u2026\n  \u2022 CVE-2021-47949 (8.8) \u2014 CyberPanel 2.1 RCE via Symlink Attack (CVE-2021-47949)\n  \u2022 CVE-2022-50944 (8.8) \u2014 Aero CMS 0.0.1 Vulnerability Allows Authenticated PHP Code\u2026\n  \u2022 CVE-2021-47928 (8.2) \u2014 Opencart TMD Vendor System Blind SQLi Exposes User Data\n  \u2022 CVE-2021-47930 (8.2) \u2014 CVE-2021-47930: Unauthenticated SQLi in Balbooa Joomla\u2026\n  \u2022 CVE-2021-47941 (8.2) \u2014 WordPress Plugin Survey & Poll SQLi Puts Data at Risk\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:42.154700Z"}]}