{"vulnerability": "cve-2021-4415", "sightings": [{"uuid": "e89a90e3-9fa3-4684-ab59-5892760bd080", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44150", "type": "seen", "source": "https://t.me/cibsecurity/32827", "content": "\u203c CVE-2021-44150 \u203c\n\nThe client in tusdotnet through 2.5.0 relies on SHA-1 to prevent spoofing of file content.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-23T00:20:09.000000Z"}, {"uuid": "b42a7a67-cf60-4bf8-8a08-500c8897e25b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44159", "type": "seen", "source": "https://t.me/cibsecurity/34264", "content": "\u203c CVE-2021-44159 \u203c\n\n4MOSAn GCB Doctor\u00e2\u20ac\u2122s file upload function has improper user privilege control. A remote attacker can upload arbitrary files including webshell files without authentication and execute arbitrary code in order to perform arbitrary system operations or deny of service attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-20T07:40:33.000000Z"}, {"uuid": "d1b6c15c-3855-40d2-be99-159dc1bae60e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44151", "type": "seen", "source": "https://t.me/cibsecurity/33788", "content": "\u203c CVE-2021-44151 \u203c\n\nAn issue was discovered in Reprise RLM 14.2. As the session cookies are small, an attacker can hijack any existing sessions by bruteforcing the 4 hex-character session cookie on the Windows version (the Linux version appears to have 8 characters). An attacker can obtain the static part of the cookie (cookie name) by first making a request to any page on the application (e.g., /goforms/menu) and saving the name of the cookie sent with the response. The attacker can then use the name of the cookie and try to request that same page, setting a random value for the cookie. If any user has an active session, the page should return with the authorized content, when a valid cookie value is hit.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-28T18:24:07.000000Z"}, {"uuid": "bcbda2e5-5b02-4a21-ac8d-a8aab6190f1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44154", "type": "seen", "source": "https://t.me/cibsecurity/33786", "content": "\u203c CVE-2021-44154 \u203c\n\nAn issue was discovered in Reprise RLM 14.2. By using an admin account, an attacker can write a payload to /goform/edit_opt, which will then be triggered when running the diagnostics (via /goform/diagnostics_doit), resulting in a buffer overflow.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-13T07:12:48.000000Z"}, {"uuid": "88ca5804-bd19-4748-8f3b-862d92d303fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44155", "type": "seen", "source": "https://t.me/cibsecurity/33787", "content": "\u203c CVE-2021-44155 \u203c\n\nAn issue was discovered in /goform/login_process in Reprise RLM 14.2. When an attacker attempts to login, the response if a username is valid includes Login Failed, but does not include this string if the username is invalid. This allows an attacker to enumerate valid users.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-13T07:12:49.000000Z"}, {"uuid": "dcda5677-b7a1-467e-b99b-f6f536179b7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44152", "type": "seen", "source": "https://t.me/arpsyndicate/2776", "content": "#ExploitObserverAlert\n\nCVE-2021-44152\n\nDESCRIPTION: Exploit Observer has 5 entries in 3 file formats related to CVE-2021-44152. An issue was discovered in Reprise RLM 14.2. Because /goform/change_password_process does not verify authentication or authorization, an unauthenticated user can change the password of any existing user. This allows an attacker to change the password of any known user, thereby preventing valid users from accessing the system and granting the attacker full access to that user's account.\n\nFIRST-EPSS: 0.865970000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2024-01-15T09:45:59.000000Z"}, {"uuid": "0e6ce846-d359-4477-8727-336260b29b0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44158", "type": "seen", "source": "https://t.me/cibsecurity/34834", "content": "\u203c CVE-2021-44158 \u203c\n\nASUS RT-AX56U Wi-Fi Router is vulnerable to stack-based buffer overflow due to improper validation for httpd parameter length. An authenticated local area network attacker can launch arbitrary code execution to control the system or disrupt service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-03T12:38:09.000000Z"}, {"uuid": "f80ffb02-037f-4c62-bda0-6d236b26d1ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44153", "type": "seen", "source": "https://t.me/cibsecurity/33791", "content": "\u203c CVE-2021-44153 \u203c\n\nAn issue was discovered in Reprise RLM 14.2. When editing the license file, it is possible for an admin user to enable an option to run arbitrary executables, as demonstrated by an ISV demo \"C:\\Windows\\System32\\calc.exe\" entry. An attacker can exploit this to run a malicious binary on startup, or when triggering the Reread/Restart Servers function on the webserver. (Exploitation does not require CVE-2018-15573, because the license file is meant to be changed in the application.)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-13T07:12:56.000000Z"}, {"uuid": "ad349efc-0452-49c3-ac43-b8617c923a75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44152", "type": "seen", "source": "https://t.me/cibsecurity/33793", "content": "\u203c CVE-2021-44152 \u203c\n\nAn issue was discovered in Reprise RLM 14.2. Because /goform/change_password_process does not verify authentication or authorization, an unauthenticated user can change the password of any existing user. This allows an attacker to change the password of any known user, thereby preventing valid users from accessing the system and granting the attacker full access to that user's account.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-13T07:12:57.000000Z"}]}