{"uuid": "64ba58f3-98ac-4f3f-a650-4a3cbfafa23e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27553", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3107", "content": "Malware analysis:\n1. New Variant of Buer Loader Written in Rust\nhttps://www.proofpoint.com/us/blog/threat-insight/new-variant-buer-loader-written-rust\n2. Trickbot Brief: Creds and Beacons\nhttps://thedfirreport.com/2021/05/02/trickbot-brief-creds-and-beacons\n\nexploit\nCVE-2021-27552:\nSQL injection vulnerability in /Final/edit_user.php via the id parameter\nhttps://github.com/sapkota2k20/CVE-2021-27552\n+\nCVE-2021-27553:\nIncorrect access control vulnerability that may lead to LPE through /Final/normal/dashboard.php\nhttps://github.com/sapkota2k20/CVE-2021-27553\n\nRed Team Tactics:\n1. Bypass firewall for traffic forwarding using webshell\ud83d\ude42\nhttps://github.com/FunnyWolf/pystinger\n2. Direct Memory Access (DMA) Attack Software\nhttps://github.com/ufrisk/pcileech\n\nBlue Team Techniques:\nNginx Security Tools:\u270c\ud83c\udffc\n1. A tool to look for common Nginx misconfigurations and vulnerabilities\nhttps://github.com/stark0de/nginxpwner\n2. A tool to discover Nginx alias traversal misconfiguration\nhttps://github.com/shibli2700/Kyubi", "creation_timestamp": "2026-09-12T00:00:48.586803Z"}