{"vulnerability": "cve-2021-2256", "sightings": [{"uuid": "05abf7c4-2de9-44c8-8ad7-d351b7f27982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22567", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12645", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2021-22567\n\ud83d\udd25 CVSS Score: 4.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L)\n\ud83d\udd39 Description: Bidirectional Unicode text can be interpreted and compiled differently than how it appears in editors which can be exploited to get nefarious code passed a code review by appearing benign. An attacker could embed a source that is invisible to a code reviewer that modifies the behavior of a program in unexpected ways.\n\ud83d\udccf Published: 2022-01-05T10:55:11.851Z\n\ud83d\udccf Modified: 2025-04-21T13:57:18.231Z\n\ud83d\udd17 References:\n1. https://github.com/dart-lang/sdk/blob/main/CHANGELOG.md\n2. https://github.com/dart-lang/sdk/commit/52519ea8eb4780c468c4c2ed00e7c8046ccfed41", "creation_timestamp": "2025-04-21T14:01:59.000000Z"}, {"uuid": "94a644ec-5b5b-4951-b7ca-00596cced919", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22569", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12646", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2021-22569\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small malicious payload can occupy the parser for several minutes by creating large numbers of short-lived objects that cause frequent, repeated pauses. We recommend upgrading libraries beyond the vulnerable versions.\n\ud83d\udccf Published: 2022-01-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-21T13:57:08.444Z\n\ud83d\udd17 References:\n1. https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39330\n2. https://cloud.google.com/support/bulletins#gcp-2022-001\n3. http://www.openwall.com/lists/oss-security/2022/01/12/4\n4. http://www.openwall.com/lists/oss-security/2022/01/12/7\n5. https://www.oracle.com/security-alerts/cpuapr2022.html\n6. https://lists.debian.org/debian-lts-announce/2023/04/msg00019.html", "creation_timestamp": "2025-04-21T14:02:00.000000Z"}, {"uuid": "7f3fa519-5f3c-47f9-8d6b-85d3b9b8dcca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22569", "type": "exploited", "source": "https://t.me/true_secator/5001", "content": "\u041a\u0430\u043a \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043d\u0430\u043c \u043f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u0438, \u043f\u043e\u0447\u0442\u0438 \u043d\u0438\u0433\u0434\u0435 \u0438 \u043d\u0438\u043a\u0435\u043c \u043d\u0435 \u0431\u044b\u043b \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d \u0432\u044b\u0448\u0435\u0434\u0448\u0438\u0439 \u0435\u0449\u0435 17 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Atlassian.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 2 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 26 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430.\u00a0\n\n\u0421\u0440\u0435\u0434\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 - \u0443\u0436\u0435 \u0437\u043d\u0430\u043a\u043e\u043c\u0430\u044f \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u044f\u043c CVE-2023-22515 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 10,0, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Confluence Data Center \u0438 Server \u0438 CVE-2019-13990 \u0441 9,8 \u0432 Jira Service Management Data Center \u0438 Server.\n\n\u041f\u043e\u0447\u0442\u0438 \u0432\u0441\u0435 \u043e\u0441\u0442\u0430\u0432\u0448\u0438\u0435\u0441\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 7,5, \u043a\u0440\u043e\u043c\u0435 \u0434\u0432\u0443\u0445: CVE-2023-22514 - 7,8, \u0430 CVE-2021-22569 - 5,5.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043a\u0430\u0436\u0434\u0443\u044e \u0441\u043c\u044b\u0441\u043b\u0430 \u043d\u0435\u0442 - \u043b\u0443\u0447\u0448\u0435 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043a \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u0443.\n\n\u041e\u0442\u043c\u0435\u0442\u0438\u043c \u043b\u0438\u0448\u044c, \u0447\u0442\u043e PoC \u0434\u043b\u044f \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0433\u043e Atlassian Confluence 0-day (CVE-2023-22515) \u0431\u044b\u043b \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u00a0\u0432 Metasploit \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0437\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u0435\u043b\u044c\u00a0\u0434\u043e \u044d\u0442\u043e\u0433\u043e.\n\n\u0421\u0430\u043c\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u043e\u0442\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u043c DarkShadow (\u0438\u043b\u0438 Oro0lxy) \u0441 14 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430, \u0435\u0449\u0435 \u0434\u043e \u0435\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f 4 \u043e\u043a\u0442\u044f\u0431\u0440\u044f.", "creation_timestamp": "2023-10-24T18:10:06.000000Z"}, {"uuid": "92634b58-24cb-4812-8590-06bf589e5cb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22566", "type": "seen", "source": "https://t.me/cibsecurity/35689", "content": "\u203c CVE-2021-22566 \u203c\n\nAn incorrect setting of UXN bits within mmu_flags_to_s1_pte_attr lead to privileged executable pages being mapped as executable from an unprivileged context. This can be leveraged by an attacker to bypass executability restrictions of kernel-mode pages from user-mode. An incorrect setting of PXN bits within mmu_flags_to_s1_pte_attr lead to unprivileged executable pages being mapped as executable from a privileged context. This can be leveraged by an attacker to bypass executability restrictions of user-mode pages from kernel-mode. Typically this allows a potential attacker to circumvent a mitigation, making exploitation of potential kernel-mode vulnerabilities easier. We recommend updating kernel beyond commit 7d731b4e9599088ac3073956933559da7bca6a00 and rebuilding.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-18T16:24:01.000000Z"}, {"uuid": "b172149e-98ce-4dec-8deb-539dbc3cae22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22569", "type": "seen", "source": "https://t.me/cibsecurity/35166", "content": "\u203c CVE-2021-22569 \u203c\n\nAn issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small malicious payload can occupy the parser for several minutes by creating large numbers of short-lived objects that cause frequent, repeated pauses. We recommend upgrading libraries beyond the vulnerable versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-10T16:21:04.000000Z"}, {"uuid": "880f0daa-960f-419b-862e-60c59dafd555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22567", "type": "seen", "source": "https://t.me/cibsecurity/34973", "content": "\u203c CVE-2021-22567 \u203c\n\nBidirectional Unicode text can be interpreted and compiled differently than how it appears in editors which can be exploited to get nefarious code passed a code review by appearing benign. An attacker could embed a source that is invisible to a code reviewer that modifies the behavior of a program in unexpected ways.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-05T14:40:40.000000Z"}, {"uuid": "7df89c7a-5c10-4580-8d70-03280fba0206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22568", "type": "published-proof-of-concept", "source": "https://t.me/cibsecurity/33717", "content": "\u203c CVE-2021-22568 \u203c\n\nWhen using the dart pub publish command to publish a package to a third-party package server, the request would be authenticated with an oauth2 access_token that is valid for publishing on pub.dev. Using these obtained credentials, an attacker can impersonate the user on pub.dev. We recommend upgrading past https://github.com/dart-lang/sdk/commit/d787e78d21e12ec1ef712d229940b1172aafcdf8 or beyond version 2.15.0\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-09T20:23:58.000000Z"}, {"uuid": "68f6a9da-4d0c-4270-85df-79db8534ca3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22565", "type": "seen", "source": "https://t.me/cibsecurity/33678", "content": "\u203c CVE-2021-22565 \u203c\n\nAn attacker could prematurely expire a verification code, making it unusable by the patient, making the patient unable to upload their TEKs to generate exposure notifications. We recommend upgrading the Exposure Notification server to V1.1.2 or greater.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-09T16:23:41.000000Z"}, {"uuid": "42ee07b2-b210-482d-a943-159e0f6ef82b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22564", "type": "published-proof-of-concept", "source": "https://t.me/cibsecurity/31542", "content": "\u203c CVE-2021-22564 \u203c\n\nFor certain valid JPEG XL images with a size slightly larger than an integer number of groups (256x256 pixels) when processing the groups out of order the decoder can perform an out of bounds copy of image pixels from an image buffer in the heap to another. This copy can occur when processing the right or bottom edges of the image, but only when groups are processed in certain order. Groups can be processed out of order in multi-threaded decoding environments with heavy thread load but also with images that contain the groups in an arbitrary order in the file. It is recommended to upgrade past 0.6.0 or patch with https://github.com/libjxl/libjxl/pull/775\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-01T15:21:19.000000Z"}, {"uuid": "8a9e2cfa-042d-43c8-a749-bfc4f14656e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22563", "type": "published-proof-of-concept", "source": "https://t.me/cibsecurity/31541", "content": "\u203c CVE-2021-22563 \u203c\n\nInvalid JPEG XL images using libjxl can cause an out of bounds access on a std::vector> when rendering splines. The OOB read access can either lead to a segfault, or rendering splines based on other process memory. It is recommended to upgrade past 0.6.0 or patch with https://github.com/libjxl/libjxl/pull/757\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-01T15:21:18.000000Z"}]}