{"vulnerability": "cve-2021-37840", "sightings": [{"uuid": "8cfc52c3-05ca-4c1a-b98f-7a8af46d3284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-37840", "type": "seen", "source": "https://t.me/GithubRedTeam/90195", "content": "", "creation_timestamp": "2026-07-13T22:00:20.914675Z"}, {"uuid": "896f8ff5-85f0-4ee9-9ffb-004e8611ca54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-37840", "type": "seen", "source": "https://t.me/GithubRedTeam/90195", "content": "", "creation_timestamp": "2026-07-14T00:00:36.899660Z"}, {"uuid": "593d6e0e-41bd-4577-bd68-1c0f1a53d79b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-37840", "type": "seen", "source": "https://t.me/cibsecurity/26685", "content": "\u203c CVE-2021-37840 \u203c\n\naaPanel through 6.8.12 allows Cross-Site WebSocket Hijacking (CSWH) involving OS commands within WebSocket messages at a ws:// URL for /webssh (the victim must have configured Terminal with at least one host). Successful exploitation depends on the browser used by a potential victim (e.g., exploitation can occur with Firefox but not Chrome).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-02T18:27:30.000000Z"}, {"uuid": "64aa40cb-6dd5-477b-8294-8dd602979fa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-37840", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/90195", "content": "", "creation_timestamp": "2026-07-15T00:00:19.657312Z"}]}