{"vulnerability": "CVE-2021-2290", "sightings": [{"uuid": "717a0a5a-5ea9-4d8d-ba66-7a40fb8650e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22900", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2021-11-20T09:53:52.000000Z"}, {"uuid": "758f15f9-29ec-4c97-80f1-0696c1299db8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22900", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:19.000000Z"}, {"uuid": "31967e9e-33c7-4759-86f1-5803bd5b02a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22900", "type": "seen", "source": "MISP/e79f8245-b190-403a-85c6-d66e9d129a20", "content": "", "creation_timestamp": "2024-11-14T06:09:25.000000Z"}, {"uuid": "531d6d18-a112-48d1-b7ab-02b7adc1ae5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22900", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2970952", "content": "", "creation_timestamp": "2024-12-24T20:22:13.940511Z"}, {"uuid": "e9089740-3779-478d-a544-6d198c70e1c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22900", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:53.000000Z"}, {"uuid": "feb575bc-693a-4f9a-8633-273faa12057c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-22900", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=570", "content": "", "creation_timestamp": "2026-03-17T15:00:08.372766Z"}, {"uuid": "b62ed558-7004-4ba8-9855-add331b3b0d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-22900", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_12/2021", "content": "", "creation_timestamp": "2026-03-17T14:56:15.452085Z"}, {"uuid": "9460a916-c799-4150-82f2-e0a16a68516a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-22900", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=570", "content": "", "creation_timestamp": "2021-04-21T04:00:00.000000Z"}, {"uuid": "3f33ba12-cc9f-493a-aab1-b55ff1e39e2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-22900", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_12/2021", "content": "", "creation_timestamp": "2021-04-20T15:25:01.000000Z"}, {"uuid": "20a68b21-258e-4e7d-85f8-96f9d3b85d8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22900", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8e3eb3e5-4e53-4f5e-aada-348a61a4eae8", "content": "", "creation_timestamp": "2026-02-02T12:29:00.168107Z"}, {"uuid": "25b803b6-22f5-4a29-942d-ab5a94ecb831", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22900", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8e3eb3e5-4e53-4f5e-aada-348a61a4eae8", "content": "", "creation_timestamp": "2026-02-02T12:29:00.168107Z"}, {"uuid": "0440dd84-9282-48a8-852a-f434476235be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22908", "type": "seen", "source": "https://t.me/cyberbannews_ir/3275", "content": "\ud83d\uded1\u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062c\u062f\u06cc \u062c\u062f\u06cc\u062f \u062f\u0631 \u0648\u06cc \u067e\u06cc \u0627\u0646 Pulse Secure\n\n\u0634\u0631\u06a9\u062a \u067e\u0634\u062a\u06cc\u0628\u0627\u0646 \u0648\u06cc \u067e\u06cc \u0627\u0646 \u067e\u0627\u0644\u0633 \u0633\u06a9\u06cc\u0648\u0631 \u06cc\u0639\u0646\u06cc Ivanti \u0647\u0634\u062f\u0627\u0631 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u06cc\u06a9 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062c\u062f\u06cc \u062f\u0631 \u067e\u0627\u0644\u0633 \u0633\u06a9\u06cc\u0648\u0631 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u06a9\u062f \u0631\u0627 \u0628\u0631\u0627\u06cc \u0645\u0647\u0627\u062c\u0645\u06cc\u0646 \u0645\u0647\u06cc\u0627 \u06a9\u0646\u062f.\n\n\u0627\u06cc\u0646 \u0646\u0642\u0635 \u0627\u0645\u0646\u06cc\u062a\u06cc (CVE-2021-22908) \u06a9\u0647 \u0646\u0645\u0631\u0647 8.50 \u0627\u0632 10 \u0631\u0627 \u0627\u0632 \u0644\u062d\u0627\u0638 \u0634\u062f\u062a \u0628\u0647 \u062b\u0628\u062a \u0631\u0633\u0627\u0646\u062f\u0647 \u0627\u0633\u062a\u060c \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0646\u0633\u062e\u0647 \u0647\u0627\u06cc 9.1Rx \u0648 9.0Rx \u0648\u06cc \u067e\u06cc \u0627\u0646 \u067e\u0627\u0644\u0633 \u0633\u06a9\u06cc\u0648\u0631 \u0631\u0627 \u062a\u062d\u062a \u0627\u0644\u0634\u0639\u0627\u0639 \u0642\u0631\u0627\u0631 \u062f\u0647\u062f. \n\n\u0637\u0628\u0642 \u06af\u0641\u062a\u0647 \u0645\u0631\u06a9\u0632 \u0647\u0645\u0627\u0647\u0646\u06af\u06cc \u0631\u062e\u062f\u0627\u062f\u0647\u0627\u06cc \u0631\u0627\u06cc\u0627\u0646\u0647 \u0627\u06cc\u060c \u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644 \u0646\u0634\u0627\u062a \u06af\u0631\u0641\u062a\u0647 \u0627\u0632 \u062a\u0648\u0627\u0646\u0627\u06cc\u06cc \u0627\u062a\u0635\u0627\u0644 \u062f\u0631\u06af\u0627\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0628\u0647 \u0642\u0627\u0628\u0644\u06cc\u062a Share \u0641\u0627\u06cc\u0644 \u0648\u06cc\u0646\u062f\u0648\u0632 \u0645\u06cc \u0628\u0627\u0634\u062f. \n\n#\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc\n\n\u2705 \u0628\u06cc\u0634\u062a\u0631 \u0628\u062e\u0648\u0627\u0646\u06cc\u062f:\nhttps://bit.ly/3flYV3z\n\n@cyberbannews_ir", "creation_timestamp": "2021-05-26T07:44:58.000000Z"}, {"uuid": "62c2b44f-6e3b-4b2a-9ca4-4c9495f30da9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22908", "type": "published-proof-of-concept", "source": "https://t.me/technical_private_cat/178", "content": "\u0417\u0434\u0440\u0430\u0441\u0442\u0432\u0443\u0439\u0442\u0435 \u0447\u0435\u0448\u0438\u0440\u0441\u043a\u0438\u0435 \u043a\u043e\u0442\u0438\u043a\u0438 \ud83d\udc31\ud83c\udfa9\n\u0427\u0442\u043e \u0442\u043e \u0434\u0430\u0432\u043d\u043e \u043c\u044b \u043e cve \u043d\u0435 \u0433\u043e\u0432\u0440\u0438\u043b\u0438 . \n\n\u0412\u043e\u0442 \u0432\u0430\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Windows \n\u042d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c  \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c SMB \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root CVE-2021-22908\n\u043d\u0435\u0435 \u0443\u0436\u0435 \u0435\u0441\u0442\u044c poc exploit .", "creation_timestamp": "2022-09-22T04:58:41.000000Z"}, {"uuid": "896447f2-1e8e-4bca-8ea3-cbfad9c8607e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22908", "type": "seen", "source": "https://t.me/technical_private_cat/179", "content": "Hello Cheshire cats \ud83d\udc31\ud83c\udfa9\nIt's been a while since we talked about cve. \n\nHere's a Windows vulnerability. \nThis is a buffer overflow vulnerability that allows a remote authenticated user with privileges to browse the SMB to execute arbitrary code on behalf of the root user CVE-2021-22908  it already has a poc exploit  .", "creation_timestamp": "2022-09-20T08:55:13.000000Z"}, {"uuid": "1c642ce8-3462-4f5f-b99d-fda822175b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22900", "type": "seen", "source": "https://t.me/arpsyndicate/1466", "content": "#ExploitObserverAlert\n\nCVE-2021-22900\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2021-22900. A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.\n\nFIRST-EPSS: 0.005140000\nNVD-IS: 5.9\nNVD-ES: 1.2", "creation_timestamp": "2023-12-05T11:35:41.000000Z"}, {"uuid": "80558c69-c369-48e2-9efe-e731257abcd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22908", "type": "seen", "source": "https://t.me/thehackernews/1240", "content": "A new high-severity buffer overflow vulnerability (CVE-2021-22908) has been reported in Pulse Connect Secure (PCS) that allows a remote, authenticated user with privileges to browse SMB shares to execute arbitrary code as the root user.\n\nRead: https://thehackernews.com/2021/05/new-high-severity-vulnerability.html", "creation_timestamp": "2021-05-25T09:41:01.000000Z"}, {"uuid": "ce2651cc-8b43-484e-a2d2-181f7083d840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22900", "type": "seen", "source": "https://t.me/Russian_OSINT/875", "content": "\u200b\u200b\ud83d\ude94 \u0424\u0411\u0420 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0441\u043f\u0438\u0441\u043e\u043a 30 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 2 \u0433\u043e\u0434\u0430\n\nCVE-2021-26855: It is a Microsoft Exchange Server Remote Code Execution\nCVE-2021-26857: It is a Microsoft Exchange Server Remote Code Execution\nCVE-2021-26858: It is a Microsoft Exchange Server Remote Code Execution\nCVE-2021-27065: It is a Microsoft Exchange Server Remote Code Execution\nCVE-2021-22893: It is an Improper Authentication vulnerability that is marked as critical\nCVE-2021-22894: It is a buffer overflow vulnerability that enables an attacker to execute arbitrary code\nCVE-2021-22899: It is a command injection vulnerability that enables an attacker to execute remote code\nCVE-2021-22900: It is an Improper Control of Generation of Code vulnerability\nCVE-2021-27101: It is an Improper Neutralization of Special Elements used in an SQL Command\nCVE-2021-27102: It is an Improper Neutralization of Special Elements used in an OS Command\nCVE-2021-27103: It is a Server-Side Request Forgery (SSRF) vulnerability\nCVE-2021-27104: It is an Improper Neutralization of Special Elements used in an OS Command vulnerability\nCVE-2021-21985: It is an Improper Input Validation vulnerability\nCVE-2018-13379: It is an Improper Limitation of a Pathname to a Restricted Directory (\u2018Path Traversal\u2019)\nCVE-2020-12812: It is an Improper Authentication vulnerability\nCVE-2019-5591: It is a Missing Authentication for Critical Function vulnerability\nCVE-2019-19781: It is an Improper Limitation of a Pathname to a Restricted Directory \nCVE 2019-11510: It is an Improper Limitation of a Pathname to a Restricted Directory\nCVE 2018-13379: It is an Improper Limitation of a Pathname to a Restricted Directory \nCVE 2020-5902: It is an Inclusion of Functionality from Untrusted Control Sphere and Improper Limitation of a Pathname to a Restricted Directory vulnerability \nCVE 2020-15505: It is an Insufficient Information vulnerability\nCVE-2017-11882: It is a Microsoft Office Memory Corruption vulnerability that enables an attacker to execute arbitrary code.\nCVE-2019-11580: It is an Insufficient Information vulnerability\nCVE-2018-7600: It is an Improper Input Validation vulnerability\nCVE 2019-18935: It is a Deserialization of Untrusted Data vulnerability\nCVE-2019-0604: It is a Microsoft SharePoint Remote Code Execution Vulnerability\nCVE-2020-0787: It is a Windows Background Intelligent Transfer Service Elevation of Privilege vulnerability\nCVE-2020-1472: It is a Netlogon Elevation of Privilege vulnerability \nCVE-2020-15505: It is an Insufficient Information vulnerability\nCVE-2020-0688: It is a Use of Hard-coded Credentials vulnerability", "creation_timestamp": "2021-07-29T17:59:02.000000Z"}, {"uuid": "e58a6567-c7d5-4529-ae32-629035897402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22909", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3462", "content": "#WLAN_Security\nUbiquiti Networks EdgeOS Improper Certificate Validation RCE Vulnerability/Firmware Update Bug (PoC for CVE-2021-22909)\nhttps://www.zerodayinitiative.com/blog/2021/5/24/cve-2021-22909-digging-into-a-ubiquiti-firmware-update-bug", "creation_timestamp": "2021-05-26T12:20:01.000000Z"}, {"uuid": "4e5d0322-1191-4041-86ab-ff6d6035ea03", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22900", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/8ade9ff1-7373-47c7-a660-c53240cd6fec", "content": "", "creation_timestamp": "2026-06-23T11:13:10.695934Z"}]}