{"vulnerability": "cve-2021-45025", "sightings": [{"uuid": "533ca02d-d2a6-41ed-ab10-e90e2f30272d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-45025", "type": "published-proof-of-concept", "source": "https://t.me/MrVGunz/267", "content": "CVE-2021-45025 & -/-/45026 : CookieMonsteRCE - XSS to RCE Exploitation in Zena 4.2.1\nhttps://phoenix-sec.io/2022/06/17/Zena-CookieMonsteRCE.html\nRepo : https://github.com/JetP1ane/Zena", "creation_timestamp": "2022-06-27T15:50:43.000000Z"}, {"uuid": "d9caa490-27ce-4726-bf93-df46be65d5f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-45025", "type": "seen", "source": "https://t.me/cibsecurity/44721", "content": "\u203c CVE-2021-45025 \u203c\n\nASG technologies ( A Rocket Software Company) ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cleartext Storage of Sensitive Information in a Cookie.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-17T16:23:31.000000Z"}, {"uuid": "0097caab-2fc7-4331-9f64-f3c4de23b9cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-45025", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/6279", "content": "#exploit\nCVE-2021-45025/45026:\nCookieMonsteRCE - XSS to RCE Exploitation in Zena\nhttps://phoenix-sec.io/2022/06/17/Zena-CookieMonsteRCE.html\n]-> PoC: https://github.com/JetP1ane/Zena", "creation_timestamp": "2022-06-27T11:00:26.000000Z"}]}