{"vulnerability": "cve-2021-29922", "sightings": [{"uuid": "bd4943c9-7227-466e-85b6-456c91a041e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29922", "type": "seen", "source": "https://t.me/cibsecurity/26968", "content": "\u203c CVE-2021-29922 \u203c\n\nlibrary/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-07T20:34:34.000000Z"}, {"uuid": "ecf98031-8be9-45fc-98db-c94d929a7dda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29922", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4018", "content": "#exploit\n1. CVE-2021-29425:\nApache Commons IO <2.7 - \"Limited\" Path Traversal\nhttps://github.com/AlAIAL90/CVE-2021-29425\n\n2. CVE-2021-29922:\nRust standard library \"net\" - Improper Input Validation of octal literals in rust 1.52.0 std::net and below results in indeterminate SSRF/RFI\nhttps://sick.codes/sick-2021-015", "creation_timestamp": "2024-10-10T18:38:59.000000Z"}, {"uuid": "6fee57ae-fe6b-45a4-9ef5-d5c8b41c8629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29922", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1483", "content": "CVE-2021-29922 \u2013 rust standard library \u201cnet\u201d \u2013 Improper Input Validation of octal literals in rust 1.52.0 std::net and below results in indeterminate SSRF & RFI vulnerabilities https://sick.codes/sick-2021-015/", "creation_timestamp": "2026-08-03T07:02:13.809579Z"}, {"uuid": "a83df658-46e5-402c-86dc-ec417b4bda3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29922", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1483", "content": "CVE-2021-29922 \u2013 rust standard library \u201cnet\u201d \u2013 Improper Input Validation of octal literals in rust 1.52.0 std::net and below results in indeterminate SSRF & RFI vulnerabilities https://sick.codes/sick-2021-015/", "creation_timestamp": "2026-08-04T00:00:46.529581Z"}, {"uuid": "ef98fe92-a73c-490e-a460-d4909c262c4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29922", "type": "seen", "source": "https://t.me/reverseame/1483", "content": "CVE-2021-29922 \u2013 rust standard library \u201cnet\u201d \u2013 Improper Input Validation of octal literals in rust 1.52.0 std::net and below results in indeterminate SSRF & RFI vulnerabilities https://sick.codes/sick-2021-015/", "creation_timestamp": "2026-07-29T12:02:54.706734Z"}, {"uuid": "d9995bf1-ff85-4670-90cc-4efa3c29c256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29922", "type": "seen", "source": "https://t.me/reverseame/1483", "content": "CVE-2021-29922 \u2013 rust standard library \u201cnet\u201d \u2013 Improper Input Validation of octal literals in rust 1.52.0 std::net and below results in indeterminate SSRF & RFI vulnerabilities https://sick.codes/sick-2021-015/", "creation_timestamp": "2026-07-30T00:02:45.021222Z"}, {"uuid": "33df83e1-34d0-4afb-945d-add65565f6cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29922", "type": "seen", "source": "https://t.me/cissp/3997", "content": "A FREE comprehensive reverse engineering course covering x86, x64, 32-bit ARM & 64-bit ARM architectures\nhttps://github.com/mytechnotalent/Reverse-Engineering\u270c\ud83c\udffc\n\nThreat Research\nA New Attack Surface on MS Exchange\nPart 1 - ProxyLogon!\ud83e\udd13\nhttps://blog.orange.tw/2021/08/proxylogon-a-new-attack-surface-on-ms-exchange-part-1.html?m=1\nPart 2 - ProxyOracle!\nhttps://blog.orange.tw/2021/08/proxyoracle-a-new-attack-surface-on-ms-exchange-part-2.html?m=1\n\nexploit\nCVE-2021-29922:\nRust standard library \"net\" - Improper Input Validation of octal literals in rust 1.52.0 std::net and below results in indeterminate SSRF/RFI vulnerabilities (PoC)\nhttps://sick.codes/sick-2021-015\n\nRed Team Tactics\n1. Tool for patching authenticode signed PE files\n(exe, dll, sys ..etc)\nhttps://github.com/med0x2e/SigFlip\n2. A tool to play with Outlook\nhttps://github.com/eksperience/KnockOutlook\n3. Evading Detection: A Beginner's Guide to Obfuscation\nhttps://github.com/BC-SECURITY/Beginners-Guide-to-Obfuscation\n\nOffensive security\nEyeWitnessTheFitness\nhttps://github.com/knavesec/EyeWitnessTheFitness\n// FireProx AWS API / HTTP Proxy", "creation_timestamp": "2026-09-01T17:00:43.189364Z"}, {"uuid": "2a9cc018-bf15-4a69-9699-5ae0215e88c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29922", "type": "seen", "source": "https://t.me/cissp/3997", "content": "A FREE comprehensive reverse engineering course covering x86, x64, 32-bit ARM & 64-bit ARM architectures\nhttps://github.com/mytechnotalent/Reverse-Engineering\u270c\ud83c\udffc\n\nThreat Research\nA New Attack Surface on MS Exchange\nPart 1 - ProxyLogon!\ud83e\udd13\nhttps://blog.orange.tw/2021/08/proxylogon-a-new-attack-surface-on-ms-exchange-part-1.html?m=1\nPart 2 - ProxyOracle!\nhttps://blog.orange.tw/2021/08/proxyoracle-a-new-attack-surface-on-ms-exchange-part-2.html?m=1\n\nexploit\nCVE-2021-29922:\nRust standard library \"net\" - Improper Input Validation of octal literals in rust 1.52.0 std::net and below results in indeterminate SSRF/RFI vulnerabilities (PoC)\nhttps://sick.codes/sick-2021-015\n\nRed Team Tactics\n1. Tool for patching authenticode signed PE files\n(exe, dll, sys ..etc)\nhttps://github.com/med0x2e/SigFlip\n2. A tool to play with Outlook\nhttps://github.com/eksperience/KnockOutlook\n3. Evading Detection: A Beginner's Guide to Obfuscation\nhttps://github.com/BC-SECURITY/Beginners-Guide-to-Obfuscation\n\nOffensive security\nEyeWitnessTheFitness\nhttps://github.com/knavesec/EyeWitnessTheFitness\n// FireProx AWS API / HTTP Proxy", "creation_timestamp": "2026-09-02T01:04:30.491843Z"}, {"uuid": "c6d628c3-0fe7-49b6-9dce-d6cc787155c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29922", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3997", "content": "A FREE comprehensive reverse engineering course covering x86, x64, 32-bit ARM & 64-bit ARM architectures\nhttps://github.com/mytechnotalent/Reverse-Engineering\u270c\ud83c\udffc\n\nThreat Research\nA New Attack Surface on MS Exchange\nPart 1 - ProxyLogon!\ud83e\udd13\nhttps://blog.orange.tw/2021/08/proxylogon-a-new-attack-surface-on-ms-exchange-part-1.html?m=1\nPart 2 - ProxyOracle!\nhttps://blog.orange.tw/2021/08/proxyoracle-a-new-attack-surface-on-ms-exchange-part-2.html?m=1\n\nexploit\nCVE-2021-29922:\nRust standard library \"net\" - Improper Input Validation of octal literals in rust 1.52.0 std::net and below results in indeterminate SSRF/RFI vulnerabilities (PoC)\nhttps://sick.codes/sick-2021-015\n\nRed Team Tactics\n1. Tool for patching authenticode signed PE files\n(exe, dll, sys ..etc)\nhttps://github.com/med0x2e/SigFlip\n2. A tool to play with Outlook\nhttps://github.com/eksperience/KnockOutlook\n3. Evading Detection: A Beginner's Guide to Obfuscation\nhttps://github.com/BC-SECURITY/Beginners-Guide-to-Obfuscation\n\nOffensive security\nEyeWitnessTheFitness\nhttps://github.com/knavesec/EyeWitnessTheFitness\n// FireProx AWS API / HTTP Proxy", "creation_timestamp": "2026-09-10T23:00:05.158016Z"}, {"uuid": "fd7a1cbb-d1a0-49e9-8280-4632774c9edf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29922", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3997", "content": "A FREE comprehensive reverse engineering course covering x86, x64, 32-bit ARM & 64-bit ARM architectures\nhttps://github.com/mytechnotalent/Reverse-Engineering\u270c\ud83c\udffc\n\nThreat Research\nA New Attack Surface on MS Exchange\nPart 1 - ProxyLogon!\ud83e\udd13\nhttps://blog.orange.tw/2021/08/proxylogon-a-new-attack-surface-on-ms-exchange-part-1.html?m=1\nPart 2 - ProxyOracle!\nhttps://blog.orange.tw/2021/08/proxyoracle-a-new-attack-surface-on-ms-exchange-part-2.html?m=1\n\nexploit\nCVE-2021-29922:\nRust standard library \"net\" - Improper Input Validation of octal literals in rust 1.52.0 std::net and below results in indeterminate SSRF/RFI vulnerabilities (PoC)\nhttps://sick.codes/sick-2021-015\n\nRed Team Tactics\n1. Tool for patching authenticode signed PE files\n(exe, dll, sys ..etc)\nhttps://github.com/med0x2e/SigFlip\n2. A tool to play with Outlook\nhttps://github.com/eksperience/KnockOutlook\n3. Evading Detection: A Beginner's Guide to Obfuscation\nhttps://github.com/BC-SECURITY/Beginners-Guide-to-Obfuscation\n\nOffensive security\nEyeWitnessTheFitness\nhttps://github.com/knavesec/EyeWitnessTheFitness\n// FireProx AWS API / HTTP Proxy", "creation_timestamp": "2026-09-11T00:00:09.721702Z"}]}