MTN Group: Remote code injection in Log4j on http://mtn1app.mtncameroon.net - CVE-2021-44228

The vulnerability CVE-2021-44228, a remote code injection flaw in Log4j, was discovered on the website http://mtn1app.mtncameroon.net. The vulnerability was confirmed to be present on the ports 8080 and 8443 of the website. The issue was demonstrated by retrieving the hostname of the affected...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

PoC exploit for CVE-2021-44228, a remote code execution vulnerab...

nuclei-templates

This is a GitHub repository for a community-driven project called "Nuclei Templates". The project provides a collection of templates for the Nuclei engine to find security vulnerabilities in applications. The repository contains various files and workflows for managing and updating the templates,...

STEWS - A Security Tool For Enumerating WebSockets

STEWS is a tool suite for security testing of WebSockets This research was first presented at OWASP Global AppSec US 2021 Features STEWS provides the ability to: Discover : find WebSockets endpoints on the web by testing a list of domains Fingerprint : determine what WebSockets server is running ...

CVE-2021-38147

creationtimestamp| type| source ---|---|--- 2021-11-29 12:33:17+00:00| seen| https://t.me/cibsecurity/33022 2024-06-07 17:17:05+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-38147.yaml...

FormaLMS 2.4.4 - Authentication Bypass Exploit

Exploit Title: FormaLMS 2.4.4 - Authentication Bypass Google Dork: inurl:index.php?r=adm/ Exploit Author: Cristian 'void' Giustini @ Hacktive Security Vendor Homepage: https://formalms.org Software Link: https://formalms.org Version: = 2.4.4 Tested on: Linux CVE : CVE-2021-43136 Info: An...

nuclei-templates

This repository is an offensive tool for nuclei templates, which are used to find security vulnerabilities in applications. The primary CVE ID present in the context is not explicitly mentioned, but the repository contains a workflow for CVE annotation. The target product/service or framework is...

CVE-2021-31682

creationtimestamp| type| source ---|---|--- 2021-10-22 16:39:20+00:00| seen| https://t.me/cibsecurity/31022 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-31682.yaml 2026-09-01 20:02:11+00:00| seen|...

Karma_V2 - A Passive Open Source Intelligence (OSINT) Automated Reconnaissance (Framework)

𝚔𝚊𝚛𝚖𝚊 𝚟𝟸 is a Passive Open Source Intelligence OSINT Automated Reconnaissance framework 𝚔𝚊𝚛𝚖𝚊 𝚟𝟸 can be used by Infosec Researchers, Penetration Testers, Bug Hunters to find deep information, more assets, WAF/CDN bypassed IPs, Internal/External Infra, Publicly exposed leaks and many more about...

CVE-2021-42566

creationtimestamp| type| source ---|---|--- 2021-10-18 12:36:46+00:00| seen| https://t.me/cibsecurity/30674 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-42566.yaml...

CVE-2021-41648

creationtimestamp| type| source ---|---|--- 2021-10-01 18:15:24+00:00| seen| https://t.me/cibsecurity/29810 2021-10-04 23:40:06+00:00| published-proof-of-concept| Telegram/SSxn4ORebYjTTM8NRue0KNcU6S-9T4AxTl2nPJ41jbiNiw 2023-04-27 09:58:59+00:00| confirmed|...

nuclei-templates

This is a community-curated list of templates for the nuclei engine to find security vulnerabilities in applications. The repository contains various templates for the scanner provided by the team and contributed by the community. The templates are the core of the nuclei scanner, which powers the...

CVE-2021-41097

creationtimestamp| type| source ---|---|--- 2021-09-27 22:34:53+00:00| seen| https://t.me/cibsecurity/29519 2026-01-28 03:48:04+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-41097.yaml 2026-01-29 21:02:28+00:00| seen|...

CVE-2021-24657

creationtimestamp| type| source ---|---|--- 2021-09-20 14:26:58+00:00| seen| https://t.me/cibsecurity/29093 2025-12-12 08:35:51+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-24657.yaml...

CVE-2021-39322

creationtimestamp| type| source ---|---|--- 2021-09-02 20:36:31+00:00| seen| https://t.me/cibsecurity/28226 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-39322.yaml...

Exploit for OS Command Injection in Draytek Vigor2960_Firmware

CVE-2020-8515 Draytek CVE-2020-8515 PoC I had kicking about...

CVE-2021-39320

creationtimestamp| type| source ---|---|--- 2021-09-01 18:35:35+00:00| seen| https://t.me/cibsecurity/28172 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-39320.yaml...

Exploit for OS Command Injection in Sophos Unified_Threat_Management

sophucked CVE-2020-25223 RCE PoC, gets reverse shell. Pre-auth...

CVE-2021-37598

creationtimestamp| type| source ---|---|--- 2021-08-19 22:18:17+00:00| seen| https://t.me/cibsecurity/27620 2026-01-13 07:46:33+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-37598.yaml 2026-01-14 21:03:03+00:00| seen|...

CVE-2021-24498

creationtimestamp| type| source ---|---|--- 2021-08-02 14:27:18+00:00| seen| https://t.me/cibsecurity/26653 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-24498.yaml 2025-07-08 21:02:37+00:00| seen|...