{"metadata": {"vulnerability": "CVE-2021-1657", "count": 22, "kinds": {"milestone": 6, "sighting": 2, "kev": 0, "other": 14}}, "data": [{"timestamp": "2020-12-02T00:00:00Z", "date_only": false, "value": "2020-12-02T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-1657", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-01-12T08:00:00Z", "date_only": false, "value": "2021-01-12T08:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2021-1657", "field": "containers.cna.datePublic"}, {"timestamp": "2021-01-12T19:42:07Z", "date_only": false, "value": "2021-01-12T19:42:07.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-1657", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-01-12T20:15:00Z", "date_only": false, "value": "2021-01-12T20:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-HGJ8-GJ82-R3P2", "record": "GHSA-HGJ8-GJ82-R3P2", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-01-12T20:15:31.340Z", "date_only": false, "value": "2021-01-12T20:15:31.340", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-1657", "record": "FKIE_CVE-2021-1657", "field": "published"}, {"timestamp": "2021-01-12T20:15:31.340Z", "date_only": false, "value": "2021-01-12T20:15:31.340", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2021-1657", "record": "GSD-2021-1657", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2021-01-12T22:58:06Z", "date_only": false, "value": "2021-01-12T22:58:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/22014", "record": "CVE-2021-1657", "field": "creation_timestamp", "uuid": "6ec806fe-310a-4921-a0f6-427300d80de7", "content": "\u203c CVE-2021-1657 \u203c\n\nWindows Fax Compose Form Remote Code Execution Vulnerability\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/22014"}, {"timestamp": "2021-01-13T00:00:00Z", "date_only": false, "value": "2021-01-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-027", "record": "CERTFR-2021-AVI-027", "field": "last_revision_date"}, {"timestamp": "2021-01-13T00:00:00Z", "date_only": false, "value": "2021-01-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-027", "record": "CERTFR-2021-AVI-027", "field": "initial_release_date"}, {"timestamp": "2021-01-13T00:00:00Z", "date_only": false, "value": "2021-01-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-027", "record": "CERTFR-2021-AVI-027", "field": "revisions.0.revision_date"}, {"timestamp": "2022-05-24T17:38:44Z", "date_only": false, "value": "2022-05-24T17:38:44Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HGJ8-GJ82-R3P2", "record": "GHSA-HGJ8-GJ82-R3P2", "field": "published"}, {"timestamp": "2023-04-14T22:46:49Z", "date_only": false, "value": "2023-04-14T22:46:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/2882", "record": "CVE-2021-1657", "field": "creation_timestamp", "uuid": "2c75291d-a786-4bc4-8f33-cad9639fee11", "content": "Tools - Hackers Factory\n\n\u200b\u200bPatch Diffing In The Dark\n\nA series of blog posts leveraging CVE analysis and patch diffing to discover new vulnerabilities. As revealed in the blog posts, the following 4 CVEs came from the in-depth study of CVE-2021-1657.\n\n\u2022 Part 1 - Patch Diffing In The Dark\n\u2022 Part 2 - Down the Rabbit Hole\n\u2022 Part 3 - Down But Not Out\n\u2022 Part 4 - Do You Trust Me?\n\nhttps://github.com/VulnerabilityResearchCentre/patch-diffing-in-the-dark\n\n#cybersecurity #infosec #pentesting\n\n\u200b\u200bSolarWinds-CVE-2021-35250\n\nDuring penetration testing, I came across Serv-U. I started looking for known vulnerabilities, and I was interested in CVE-2020-27994. But it was closed by an update in version 15.2.2, and I was working with Serv-U version 15.3.0. \"I decided to dig deeper and modify the payload in various ways, as well as modify the HTTP request itself, after much agony I managed to reproduce the vulnerability of directory traversal\" :)\n\nhttps://github.com/rissor41/SolarWinds-CVE-2021-35250\n\n#infosec #pentesting #redteam\n\n\u200b\u200bQuadraInspect\n\nQuadraInspect is an Android framework that integrates AndroPass, APKUtil, and MobFS, providing a powerful tool for analyzing the security of Android applications.\n\nhttps://github.com/morpheuslord/QuadraInspect\n\n#cybersecurity #infosec #android\n\n\u200b\u200bSRUM-DUMP2\n\nA forensics tool to convert the data in the Windows srum (System Resource Usage Monitor) database to an xlsx spreadsheet.\n\nhttps://github.com/MarkBaggett/srum-dump\n\n#cybersecurity #infosec #forensic\n\n\u200b\u200bSecurity Research\n\nThis project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.\n\nhttps://github.com/google/security-research\n\n#cybersecurity #infosec\n\n\u200b\u200bThe Time Machine\n\nWeaponizing WaybackUrls for Recon, BugBounties, OSINT,8 Sensitive Endpoints and what not.\n\nhttps://github.com/anmolksachan/TheTimeMachine\n\nDetails:\nhttp://bit.ly/3MI9Llh\n\n#OSINT #infosec\n\n\u200b\u200bReconAIzer\n\nA Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomains and more!\n\nhttps://github.com/hisxo/ReconAIzer\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bThe Atypical OSINT Guide\n\nThe most unusual OSINT guide you've ever seen. The repository is intended for bored professionals only.\n\nhttps://github.com/OffcierCia/non-typical-OSINT-guide\n\n#OSINT #cybersecurity #infosec\n\n\u200b\u200bSharpHound4Cobalt\n\nC# Data Collector for BloodHound with CobaltStrike integration (BOF.NET)\n\nhttps://github.com/Hypnoze57/SharpHound4Cobalt/tree/fb8e9a726a47596b4a29518bda73ecbf8ca6e43b\n\n#infosec #pentesting #redteam\n\n\u200b\u200bAsnmap\n\nGo CLI and Library for quickly mapping organization network ranges using ASN information.\n\nhttps://github.com/projectdiscovery/asnmap\n\n#cybersecurity #infosec #pentesting\n\n\u200b\u200bCRLF\n\nBug scanner for WebPentesters and Bugbounty Hunters.\n\nhttps://github.com/karthi-the-hacker/crlfi\n\n#pentesting #infosec #bugbounty\n\n\u200b\u200bGTFOArgs\n\nA curated list of programs and their associated arguments that can be exploited to gain privileged access or execute arbitrary commands, using argument injection.\n\nhttps://github.com/GTFOArgs/GTFOArgs.github.io\n\nWeb:\nhttps://gtfoargs.github.io/\n\n#cybersecurity #Infosec #cybersec #dilagrafie #activism #cyber\n\nhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory", "url": "https://t.me/dilagrafie/2882"}, {"timestamp": "2023-12-13T01:23:23.249Z", "date_only": false, "value": "2023-12-13T01:23:23.249898Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-1657", "record": "GSD-2021-1657", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-29T23:15:15.420Z", "date_only": false, "value": "2023-12-29T23:15:15.420", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-1657", "record": "GSD-2021-1657", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-01-09T20:04:17.022Z", "date_only": false, "value": "2024-01-09T20:04:17.022465Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-1657", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-01-09T20:04:17.022Z", "date_only": false, "value": "2024-01-09T20:04:17.022465Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-1657", "record": "FKIE_CVE-2021-1657", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-08-03T16:18:11.024Z", "date_only": false, "value": "2024-08-03T16:18:11.024Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-1657", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-08T16:17:06.680Z", "date_only": false, "value": "2024-10-08T16:17:06.680Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2021-1657", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-08T18:32:57Z", "date_only": false, "value": "2024-10-08T18:32:57Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HGJ8-GJ82-R3P2", "record": "GHSA-HGJ8-GJ82-R3P2", "field": "modified"}, {"timestamp": "2024-11-19T15:11:24.545Z", "date_only": false, "value": "2024-11-19T15:11:24.545Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-1657", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-11-19T15:11:24.545Z", "date_only": false, "value": "2024-11-19T15:11:24.545Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-1657", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T03:32:15.600Z", "date_only": false, "value": "2026-06-17T03:32:15.600", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-1657", "record": "FKIE_CVE-2021-1657", "field": "lastModified"}]}