{"vulnerability": "CVE-2021-2324", "sightings": [{"uuid": "75e3470d-b4bb-4ef5-9c60-4e611614f4b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-23241", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-23241.yaml", "content": "", "creation_timestamp": "2023-04-27T09:58:59.000000Z"}, {"uuid": "f9ce8c92-786c-4b49-afea-8aa6ceb00c37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-23247", "type": "seen", "source": "https://t.me/cibsecurity/40044", "content": "\u203c CVE-2021-23247 \u203c\n\nA command injection vulerability found in quick game engine allows arbitrary remote code in quick app. Allows remote attacke0rs to gain arbitrary code execution in quick game engine\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-02T02:20:27.000000Z"}, {"uuid": "0407ec16-2f3a-47fc-a750-30909d5cc2ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-23246", "type": "seen", "source": "https://t.me/cibsecurity/38805", "content": "\u203c CVE-2021-23246 \u203c\n\nIn ACE2 ColorOS11, the attacker can obtain the foreground package name through permission promotion, resulting in user information disclosure.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-11T20:15:06.000000Z"}, {"uuid": "ef6f2e73-16aa-43b7-9504-cd32b415db8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-23244", "type": "seen", "source": "https://t.me/cibsecurity/34693", "content": "\u203c CVE-2021-23244 \u203c\n\nColorOS pregrant dangerous permissions to apps which are listed in a whitelist xml named default-grant-permissions.But some apps in whitelist is not installed, attacker can disguise app with the same package name to obtain dangerous permission.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-27T22:23:23.000000Z"}, {"uuid": "ca301a86-ca99-479d-9019-42b57f7da342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-23243", "type": "seen", "source": "https://t.me/cibsecurity/29462", "content": "\u203c CVE-2021-23243 \u203c\n\nIn Oppo's battery application, the third-party SDK provides the function of loading a third-party Provider, which can be used.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-27T16:35:03.000000Z"}, {"uuid": "b5e70467-b0ac-43f3-9815-593990cbc4fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-23241", "type": "published-proof-of-concept", "source": "https://t.me/cibsecurity/21795", "content": "\u203c CVE-2021-23241 \u203c\n\nMERCUSYS Mercury X18G 1.0.5 devices allow Directory Traversal via ../ in conjunction with a loginLess or login.htm URI (for authentication bypass) to the web server, as demonstrated by the /loginLess/../../etc/passwd URI.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-08T00:40:59.000000Z"}, {"uuid": "e32f6148-9622-4bc8-a5b8-9a0cd3848d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-23242", "type": "seen", "source": "https://t.me/cibsecurity/21792", "content": "\u203c CVE-2021-23242 \u203c\n\nMERCUSYS Mercury X18G 1.0.5 devices allow Directory Traversal via ../ to the UPnP server, as demonstrated by the /../../conf/template/uhttpd.json URI.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-08T00:40:53.000000Z"}]}