{"vulnerability": "CVE-2021-27552", "sightings": [{"uuid": "c8e01b1b-ebf5-49d9-ba3c-d31910329fb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27552", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3282", "content": "#exploit\n1. CVE-2021-27552:\nSQL injection vulnerability in /Final/edit_user.php via the id parameter\nhttps://github.com/sapkota2k20/CVE-2021-27552\n\n2. CVE-2021-27553:\nIncorrect access control vulnerability that may lead to LPE through /Final/normal/dashboard.php\nhttps://github.com/sapkota2k20/CVE-2021-27553", "creation_timestamp": "2021-12-07T03:34:58.000000Z"}, {"uuid": "667e23c3-8821-4ad2-bb07-0808c86ae46f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27552", "type": "seen", "source": "https://t.me/cissp/3107", "content": "Malware analysis:\n1. New Variant of Buer Loader Written in Rust\nhttps://www.proofpoint.com/us/blog/threat-insight/new-variant-buer-loader-written-rust\n2. Trickbot Brief: Creds and Beacons\nhttps://thedfirreport.com/2021/05/02/trickbot-brief-creds-and-beacons\n\nexploit\nCVE-2021-27552:\nSQL injection vulnerability in /Final/edit_user.php via the id parameter\nhttps://github.com/sapkota2k20/CVE-2021-27552\n+\nCVE-2021-27553:\nIncorrect access control vulnerability that may lead to LPE through /Final/normal/dashboard.php\nhttps://github.com/sapkota2k20/CVE-2021-27553\n\nRed Team Tactics:\n1. Bypass firewall for traffic forwarding using webshell\ud83d\ude42\nhttps://github.com/FunnyWolf/pystinger\n2. Direct Memory Access (DMA) Attack Software\nhttps://github.com/ufrisk/pcileech\n\nBlue Team Techniques:\nNginx Security Tools:\u270c\ud83c\udffc\n1. A tool to look for common Nginx misconfigurations and vulnerabilities\nhttps://github.com/stark0de/nginxpwner\n2. A tool to discover Nginx alias traversal misconfiguration\nhttps://github.com/shibli2700/Kyubi", "creation_timestamp": "2026-09-01T17:00:51.248221Z"}, {"uuid": "797ac21e-8334-4028-9f5c-a735243f79fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27552", "type": "seen", "source": "https://t.me/cissp/3107", "content": "Malware analysis:\n1. New Variant of Buer Loader Written in Rust\nhttps://www.proofpoint.com/us/blog/threat-insight/new-variant-buer-loader-written-rust\n2. Trickbot Brief: Creds and Beacons\nhttps://thedfirreport.com/2021/05/02/trickbot-brief-creds-and-beacons\n\nexploit\nCVE-2021-27552:\nSQL injection vulnerability in /Final/edit_user.php via the id parameter\nhttps://github.com/sapkota2k20/CVE-2021-27552\n+\nCVE-2021-27553:\nIncorrect access control vulnerability that may lead to LPE through /Final/normal/dashboard.php\nhttps://github.com/sapkota2k20/CVE-2021-27553\n\nRed Team Tactics:\n1. Bypass firewall for traffic forwarding using webshell\ud83d\ude42\nhttps://github.com/FunnyWolf/pystinger\n2. Direct Memory Access (DMA) Attack Software\nhttps://github.com/ufrisk/pcileech\n\nBlue Team Techniques:\nNginx Security Tools:\u270c\ud83c\udffc\n1. A tool to look for common Nginx misconfigurations and vulnerabilities\nhttps://github.com/stark0de/nginxpwner\n2. A tool to discover Nginx alias traversal misconfiguration\nhttps://github.com/shibli2700/Kyubi", "creation_timestamp": "2026-09-02T01:04:40.521986Z"}, {"uuid": "ac5dfd35-1af7-4712-b703-aeb7a8404906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27552", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3107", "content": "Malware analysis:\n1. New Variant of Buer Loader Written in Rust\nhttps://www.proofpoint.com/us/blog/threat-insight/new-variant-buer-loader-written-rust\n2. Trickbot Brief: Creds and Beacons\nhttps://thedfirreport.com/2021/05/02/trickbot-brief-creds-and-beacons\n\nexploit\nCVE-2021-27552:\nSQL injection vulnerability in /Final/edit_user.php via the id parameter\nhttps://github.com/sapkota2k20/CVE-2021-27552\n+\nCVE-2021-27553:\nIncorrect access control vulnerability that may lead to LPE through /Final/normal/dashboard.php\nhttps://github.com/sapkota2k20/CVE-2021-27553\n\nRed Team Tactics:\n1. Bypass firewall for traffic forwarding using webshell\ud83d\ude42\nhttps://github.com/FunnyWolf/pystinger\n2. Direct Memory Access (DMA) Attack Software\nhttps://github.com/ufrisk/pcileech\n\nBlue Team Techniques:\nNginx Security Tools:\u270c\ud83c\udffc\n1. A tool to look for common Nginx misconfigurations and vulnerabilities\nhttps://github.com/stark0de/nginxpwner\n2. A tool to discover Nginx alias traversal misconfiguration\nhttps://github.com/shibli2700/Kyubi", "creation_timestamp": "2026-09-11T07:00:04.403196Z"}, {"uuid": "e427dda8-1229-4e85-9089-9ad4e035a518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27552", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3107", "content": "Malware analysis:\n1. New Variant of Buer Loader Written in Rust\nhttps://www.proofpoint.com/us/blog/threat-insight/new-variant-buer-loader-written-rust\n2. Trickbot Brief: Creds and Beacons\nhttps://thedfirreport.com/2021/05/02/trickbot-brief-creds-and-beacons\n\nexploit\nCVE-2021-27552:\nSQL injection vulnerability in /Final/edit_user.php via the id parameter\nhttps://github.com/sapkota2k20/CVE-2021-27552\n+\nCVE-2021-27553:\nIncorrect access control vulnerability that may lead to LPE through /Final/normal/dashboard.php\nhttps://github.com/sapkota2k20/CVE-2021-27553\n\nRed Team Tactics:\n1. Bypass firewall for traffic forwarding using webshell\ud83d\ude42\nhttps://github.com/FunnyWolf/pystinger\n2. Direct Memory Access (DMA) Attack Software\nhttps://github.com/ufrisk/pcileech\n\nBlue Team Techniques:\nNginx Security Tools:\u270c\ud83c\udffc\n1. A tool to look for common Nginx misconfigurations and vulnerabilities\nhttps://github.com/stark0de/nginxpwner\n2. A tool to discover Nginx alias traversal misconfiguration\nhttps://github.com/shibli2700/Kyubi", "creation_timestamp": "2026-09-12T00:00:48.640212Z"}]}