{"vulnerability": "CVE-2021-27553", "sightings": [{"uuid": "01271929-39d7-433d-b943-74f337b244bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27553", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3282", "content": "#exploit\n1. CVE-2021-27552:\nSQL injection vulnerability in /Final/edit_user.php via the id parameter\nhttps://github.com/sapkota2k20/CVE-2021-27552\n\n2. CVE-2021-27553:\nIncorrect access control vulnerability that may lead to LPE through /Final/normal/dashboard.php\nhttps://github.com/sapkota2k20/CVE-2021-27553", "creation_timestamp": "2021-12-07T03:34:58.000000Z"}, {"uuid": "1dbe8922-0501-4e2d-9688-c647850b29f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27553", "type": "seen", "source": "https://t.me/cissp/3107", "content": "Malware analysis:\n1. New Variant of Buer Loader Written in Rust\nhttps://www.proofpoint.com/us/blog/threat-insight/new-variant-buer-loader-written-rust\n2. Trickbot Brief: Creds and Beacons\nhttps://thedfirreport.com/2021/05/02/trickbot-brief-creds-and-beacons\n\nexploit\nCVE-2021-27552:\nSQL injection vulnerability in /Final/edit_user.php via the id parameter\nhttps://github.com/sapkota2k20/CVE-2021-27552\n+\nCVE-2021-27553:\nIncorrect access control vulnerability that may lead to LPE through /Final/normal/dashboard.php\nhttps://github.com/sapkota2k20/CVE-2021-27553\n\nRed Team Tactics:\n1. Bypass firewall for traffic forwarding using webshell\ud83d\ude42\nhttps://github.com/FunnyWolf/pystinger\n2. Direct Memory Access (DMA) Attack Software\nhttps://github.com/ufrisk/pcileech\n\nBlue Team Techniques:\nNginx Security Tools:\u270c\ud83c\udffc\n1. A tool to look for common Nginx misconfigurations and vulnerabilities\nhttps://github.com/stark0de/nginxpwner\n2. A tool to discover Nginx alias traversal misconfiguration\nhttps://github.com/shibli2700/Kyubi", "creation_timestamp": "2026-09-01T17:00:51.206922Z"}, {"uuid": "7bfebb75-e1b3-467e-83c9-d91baeca986c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27553", "type": "seen", "source": "https://t.me/cissp/3107", "content": "Malware analysis:\n1. New Variant of Buer Loader Written in Rust\nhttps://www.proofpoint.com/us/blog/threat-insight/new-variant-buer-loader-written-rust\n2. Trickbot Brief: Creds and Beacons\nhttps://thedfirreport.com/2021/05/02/trickbot-brief-creds-and-beacons\n\nexploit\nCVE-2021-27552:\nSQL injection vulnerability in /Final/edit_user.php via the id parameter\nhttps://github.com/sapkota2k20/CVE-2021-27552\n+\nCVE-2021-27553:\nIncorrect access control vulnerability that may lead to LPE through /Final/normal/dashboard.php\nhttps://github.com/sapkota2k20/CVE-2021-27553\n\nRed Team Tactics:\n1. Bypass firewall for traffic forwarding using webshell\ud83d\ude42\nhttps://github.com/FunnyWolf/pystinger\n2. Direct Memory Access (DMA) Attack Software\nhttps://github.com/ufrisk/pcileech\n\nBlue Team Techniques:\nNginx Security Tools:\u270c\ud83c\udffc\n1. A tool to look for common Nginx misconfigurations and vulnerabilities\nhttps://github.com/stark0de/nginxpwner\n2. A tool to discover Nginx alias traversal misconfiguration\nhttps://github.com/shibli2700/Kyubi", "creation_timestamp": "2026-09-02T01:04:40.476154Z"}, {"uuid": "6a027a3c-94ef-4cfe-8216-dbe752dd573e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27553", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3107", "content": "Malware analysis:\n1. New Variant of Buer Loader Written in Rust\nhttps://www.proofpoint.com/us/blog/threat-insight/new-variant-buer-loader-written-rust\n2. Trickbot Brief: Creds and Beacons\nhttps://thedfirreport.com/2021/05/02/trickbot-brief-creds-and-beacons\n\nexploit\nCVE-2021-27552:\nSQL injection vulnerability in /Final/edit_user.php via the id parameter\nhttps://github.com/sapkota2k20/CVE-2021-27552\n+\nCVE-2021-27553:\nIncorrect access control vulnerability that may lead to LPE through /Final/normal/dashboard.php\nhttps://github.com/sapkota2k20/CVE-2021-27553\n\nRed Team Tactics:\n1. Bypass firewall for traffic forwarding using webshell\ud83d\ude42\nhttps://github.com/FunnyWolf/pystinger\n2. Direct Memory Access (DMA) Attack Software\nhttps://github.com/ufrisk/pcileech\n\nBlue Team Techniques:\nNginx Security Tools:\u270c\ud83c\udffc\n1. A tool to look for common Nginx misconfigurations and vulnerabilities\nhttps://github.com/stark0de/nginxpwner\n2. A tool to discover Nginx alias traversal misconfiguration\nhttps://github.com/shibli2700/Kyubi", "creation_timestamp": "2026-09-11T07:00:04.364316Z"}, {"uuid": "64ba58f3-98ac-4f3f-a650-4a3cbfafa23e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27553", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3107", "content": "Malware analysis:\n1. New Variant of Buer Loader Written in Rust\nhttps://www.proofpoint.com/us/blog/threat-insight/new-variant-buer-loader-written-rust\n2. Trickbot Brief: Creds and Beacons\nhttps://thedfirreport.com/2021/05/02/trickbot-brief-creds-and-beacons\n\nexploit\nCVE-2021-27552:\nSQL injection vulnerability in /Final/edit_user.php via the id parameter\nhttps://github.com/sapkota2k20/CVE-2021-27552\n+\nCVE-2021-27553:\nIncorrect access control vulnerability that may lead to LPE through /Final/normal/dashboard.php\nhttps://github.com/sapkota2k20/CVE-2021-27553\n\nRed Team Tactics:\n1. Bypass firewall for traffic forwarding using webshell\ud83d\ude42\nhttps://github.com/FunnyWolf/pystinger\n2. Direct Memory Access (DMA) Attack Software\nhttps://github.com/ufrisk/pcileech\n\nBlue Team Techniques:\nNginx Security Tools:\u270c\ud83c\udffc\n1. A tool to look for common Nginx misconfigurations and vulnerabilities\nhttps://github.com/stark0de/nginxpwner\n2. A tool to discover Nginx alias traversal misconfiguration\nhttps://github.com/shibli2700/Kyubi", "creation_timestamp": "2026-09-12T00:00:48.586803Z"}]}