{"vulnerability": "CVE-2021-1167", "sightings": [{"uuid": "ae06b674-01e6-481e-8603-8d4d2e7cee6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1167", "type": "seen", "source": "MISP/ff609a8d-f954-4542-8026-3484de2d1331", "content": "", "creation_timestamp": "2024-11-14T06:07:37.000000Z"}, {"uuid": "34d7bf45-2e37-4c1e-bd71-57077bec9163", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1167", "type": "seen", "source": "https://t.me/pwnwiki_zhchannel/562", "content": "CVE-2021-1167 Cisco RV110W 1.2.1.7 \u62d2\u7d55\u670d\u52d9\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-1167_Cisco_RV110W_1.2.1.7_%E6%8B%92%E7%B5%95%E6%9C%8D%E5%8B%99%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-05-31T04:10:20.000000Z"}, {"uuid": "c338b18d-f8f8-465b-8811-44cb689b4d47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1167", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2498", "content": "#exploit\nCVE-2021-1167:\nCisco Router RV110W (ver.1-2-1-7) - 'vpn_account' DoS\nhttps://packetstormsecurity.com/files/160953/ciscorv110w1217-dos.txt", "creation_timestamp": "2024-09-16T16:11:14.000000Z"}, {"uuid": "ca98b60a-731d-4444-913f-20f81a074949", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1167", "type": "seen", "source": "https://t.me/cissp/2081", "content": "Analyzing a buffer overflow in the DLINK DIR-645 with Qiling (PoC)\nPart 1:\nhttps://github.com/nahueldsanchez/blogpost_qiling_dlink_1\nPart 2:\nhttps://github.com/nahueldsanchez/blogpost_qiling_dlink_2\n\n1. macOS Post-Exploitation Shenanigans with VSCode Extensions\nhttps://www.mdsec.co.uk/2021/01/macos-post-exploitation-shenanigans-with-vscode-extensions\n\n2. jQuery XSS Examples (CVE-2020-11022, CVE-2020-11023)\nhttps://snyk.io/vuln/SNYK-JS-JQUERY-565129\nPoCs:\nhttps://vulnerabledoma.in/jquery_htmlPrefilter_xss.html\n\nThreat Group Cards\nA Threat Actor Encyclopedia\nhttps://apt.thaicert.or.th/cgi-bin/listgroups.cgi\n\n\"Hunting for Bugs in Windows Mini-Filter Drivers\", 2021.\n// mini-filter drivers are an under-appreciated source of privilege escalation bugs on Windows\nhttps://googleprojectzero.blogspot.com/2021/01/hunting-for-bugs-in-windows-mini-filter.html?m=1\n\nCVE-2021-1167:\nCisco Router RV110W (ver.1-2-1-7) - 'vpn_account' DoS (PoC)\nhttps://packetstormsecurity.com/files/160953/ciscorv110w1217-dos.txt\n\n1. Going Rogue - a Mastermind behind Android Malware Returns with a New RAT\nhttps://research.checkpoint.com/2021/going-rogue-a-mastermind-behind-android-malware-returns-with-a-new-rat\n\n2. Higaisa or Winnti? APT41 backdoors, old and new\nhttps://www.ptsecurity.com/ww-en/analytics/pt-esc-threat-intelligence/higaisa-or-winnti-apt-41-backdoors-old-and-new\n\n3. Dynamically analyzing a heavily obfuscated Excel 4 macro malicious file\nhttps://isc.sans.edu/forums/diary/Dynamically+analyzing+a+heavily+obfuscated+Excel+4+macro+malicious+file/26986", "creation_timestamp": "2026-09-01T17:01:06.625204Z"}, {"uuid": "f0cd4ed1-9311-46fb-9b77-2ee56ff3c294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1167", "type": "seen", "source": "https://t.me/cissp/2081", "content": "Analyzing a buffer overflow in the DLINK DIR-645 with Qiling (PoC)\nPart 1:\nhttps://github.com/nahueldsanchez/blogpost_qiling_dlink_1\nPart 2:\nhttps://github.com/nahueldsanchez/blogpost_qiling_dlink_2\n\n1. macOS Post-Exploitation Shenanigans with VSCode Extensions\nhttps://www.mdsec.co.uk/2021/01/macos-post-exploitation-shenanigans-with-vscode-extensions\n\n2. jQuery XSS Examples (CVE-2020-11022, CVE-2020-11023)\nhttps://snyk.io/vuln/SNYK-JS-JQUERY-565129\nPoCs:\nhttps://vulnerabledoma.in/jquery_htmlPrefilter_xss.html\n\nThreat Group Cards\nA Threat Actor Encyclopedia\nhttps://apt.thaicert.or.th/cgi-bin/listgroups.cgi\n\n\"Hunting for Bugs in Windows Mini-Filter Drivers\", 2021.\n// mini-filter drivers are an under-appreciated source of privilege escalation bugs on Windows\nhttps://googleprojectzero.blogspot.com/2021/01/hunting-for-bugs-in-windows-mini-filter.html?m=1\n\nCVE-2021-1167:\nCisco Router RV110W (ver.1-2-1-7) - 'vpn_account' DoS (PoC)\nhttps://packetstormsecurity.com/files/160953/ciscorv110w1217-dos.txt\n\n1. Going Rogue - a Mastermind behind Android Malware Returns with a New RAT\nhttps://research.checkpoint.com/2021/going-rogue-a-mastermind-behind-android-malware-returns-with-a-new-rat\n\n2. Higaisa or Winnti? APT41 backdoors, old and new\nhttps://www.ptsecurity.com/ww-en/analytics/pt-esc-threat-intelligence/higaisa-or-winnti-apt-41-backdoors-old-and-new\n\n3. Dynamically analyzing a heavily obfuscated Excel 4 macro malicious file\nhttps://isc.sans.edu/forums/diary/Dynamically+analyzing+a+heavily+obfuscated+Excel+4+macro+malicious+file/26986", "creation_timestamp": "2026-09-02T01:04:56.613251Z"}, {"uuid": "e7033b79-00f7-49d7-8af7-dfccb6deda56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1167", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2081", "content": "Analyzing a buffer overflow in the DLINK DIR-645 with Qiling (PoC)\nPart 1:\nhttps://github.com/nahueldsanchez/blogpost_qiling_dlink_1\nPart 2:\nhttps://github.com/nahueldsanchez/blogpost_qiling_dlink_2\n\n1. macOS Post-Exploitation Shenanigans with VSCode Extensions\nhttps://www.mdsec.co.uk/2021/01/macos-post-exploitation-shenanigans-with-vscode-extensions\n\n2. jQuery XSS Examples (CVE-2020-11022, CVE-2020-11023)\nhttps://snyk.io/vuln/SNYK-JS-JQUERY-565129\nPoCs:\nhttps://vulnerabledoma.in/jquery_htmlPrefilter_xss.html\n\nThreat Group Cards\nA Threat Actor Encyclopedia\nhttps://apt.thaicert.or.th/cgi-bin/listgroups.cgi\n\n\"Hunting for Bugs in Windows Mini-Filter Drivers\", 2021.\n// mini-filter drivers are an under-appreciated source of privilege escalation bugs on Windows\nhttps://googleprojectzero.blogspot.com/2021/01/hunting-for-bugs-in-windows-mini-filter.html?m=1\n\nCVE-2021-1167:\nCisco Router RV110W (ver.1-2-1-7) - 'vpn_account' DoS (PoC)\nhttps://packetstormsecurity.com/files/160953/ciscorv110w1217-dos.txt\n\n1. Going Rogue - a Mastermind behind Android Malware Returns with a New RAT\nhttps://research.checkpoint.com/2021/going-rogue-a-mastermind-behind-android-malware-returns-with-a-new-rat\n\n2. Higaisa or Winnti? APT41 backdoors, old and new\nhttps://www.ptsecurity.com/ww-en/analytics/pt-esc-threat-intelligence/higaisa-or-winnti-apt-41-backdoors-old-and-new\n\n3. Dynamically analyzing a heavily obfuscated Excel 4 macro malicious file\nhttps://isc.sans.edu/forums/diary/Dynamically+analyzing+a+heavily+obfuscated+Excel+4+macro+malicious+file/26986", "creation_timestamp": "2026-09-11T21:00:04.980662Z"}, {"uuid": "e98e8b96-898a-4b0b-a55f-950d18780d9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1167", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2081", "content": "Analyzing a buffer overflow in the DLINK DIR-645 with Qiling (PoC)\nPart 1:\nhttps://github.com/nahueldsanchez/blogpost_qiling_dlink_1\nPart 2:\nhttps://github.com/nahueldsanchez/blogpost_qiling_dlink_2\n\n1. macOS Post-Exploitation Shenanigans with VSCode Extensions\nhttps://www.mdsec.co.uk/2021/01/macos-post-exploitation-shenanigans-with-vscode-extensions\n\n2. jQuery XSS Examples (CVE-2020-11022, CVE-2020-11023)\nhttps://snyk.io/vuln/SNYK-JS-JQUERY-565129\nPoCs:\nhttps://vulnerabledoma.in/jquery_htmlPrefilter_xss.html\n\nThreat Group Cards\nA Threat Actor Encyclopedia\nhttps://apt.thaicert.or.th/cgi-bin/listgroups.cgi\n\n\"Hunting for Bugs in Windows Mini-Filter Drivers\", 2021.\n// mini-filter drivers are an under-appreciated source of privilege escalation bugs on Windows\nhttps://googleprojectzero.blogspot.com/2021/01/hunting-for-bugs-in-windows-mini-filter.html?m=1\n\nCVE-2021-1167:\nCisco Router RV110W (ver.1-2-1-7) - 'vpn_account' DoS (PoC)\nhttps://packetstormsecurity.com/files/160953/ciscorv110w1217-dos.txt\n\n1. Going Rogue - a Mastermind behind Android Malware Returns with a New RAT\nhttps://research.checkpoint.com/2021/going-rogue-a-mastermind-behind-android-malware-returns-with-a-new-rat\n\n2. Higaisa or Winnti? APT41 backdoors, old and new\nhttps://www.ptsecurity.com/ww-en/analytics/pt-esc-threat-intelligence/higaisa-or-winnti-apt-41-backdoors-old-and-new\n\n3. Dynamically analyzing a heavily obfuscated Excel 4 macro malicious file\nhttps://isc.sans.edu/forums/diary/Dynamically+analyzing+a+heavily+obfuscated+Excel+4+macro+malicious+file/26986", "creation_timestamp": "2026-09-12T00:00:29.542836Z"}]}