{"metadata": {"vulnerability": "CVE-2021-31166", "count": 129, "kinds": {"milestone": 7, "sighting": 74, "kev": 11, "other": 37}}, "data": [{"timestamp": "2021-04-13T00:00:00Z", "date_only": false, "value": "2021-04-13T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202105-1269", "record": "VAR-202105-1269", "field": "sources_release_date.data.2.date"}, {"timestamp": "2021-04-14T00:00:00Z", "date_only": false, "value": "2021-04-14T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202105-1269", "record": "VAR-202105-1269", "field": "sources_update_date.data.2.date"}, {"timestamp": "2021-04-14T00:00:00Z", "date_only": false, "value": "2021-04-14T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-31166", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-05-11T00:00:00Z", "date_only": false, "value": "2021-05-11T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202105-1269", "record": "VAR-202105-1269", "field": "sources_release_date.data.0.date"}, {"timestamp": "2021-05-11T07:00:00Z", "date_only": false, "value": "2021-05-11T07:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2021-31166", "field": "containers.cna.datePublic"}, {"timestamp": "2021-05-11T19:11:19Z", "date_only": false, "value": "2021-05-11T19:11:19.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-31166", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-05-11T19:15:00Z", "date_only": false, "value": "2021-05-11T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3MJ9-C62W-JW5W", "record": "GHSA-3MJ9-C62W-JW5W", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-05-11T19:15:00Z", "date_only": false, "value": "2021-05-11T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-31166", "record": "GSD-2021-31166", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-05-11T19:15:09.300Z", "date_only": false, "value": "2021-05-11T19:15:09.300000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202105-1269", "record": "VAR-202105-1269", "field": "sources_release_date.data.4.date"}, {"timestamp": "2021-05-11T19:15:09.300Z", "date_only": false, "value": "2021-05-11T19:15:09.300", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-31166", "record": "FKIE_CVE-2021-31166", "field": "published"}, {"timestamp": "2021-05-12T00:00:00Z", "date_only": false, "value": "2021-05-12T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-367", "record": "CERTFR-2021-AVI-367", "field": "last_revision_date"}, {"timestamp": "2021-05-12T00:00:00Z", "date_only": false, "value": "2021-05-12T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-009", "record": "CERTFR-2021-ALE-009", "field": "initial_release_date"}, {"timestamp": "2021-05-12T00:00:00Z", "date_only": false, "value": "2021-05-12T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-367", "record": "CERTFR-2021-AVI-367", "field": "initial_release_date"}, {"timestamp": "2021-05-12T00:00:00Z", "date_only": false, "value": "2021-05-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-009", "record": "CERTFR-2021-ALE-009", "field": "revisions.0.revision_date"}, {"timestamp": "2021-05-12T00:00:00Z", "date_only": false, "value": "2021-05-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-367", "record": "CERTFR-2021-AVI-367", "field": "revisions.0.revision_date"}, {"timestamp": "2021-05-12T13:59:45Z", "date_only": false, "value": "2021-05-12T13:59:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/1212", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "f7e39159-4b5c-4a5f-bfe3-c438e4cfb74d", "content": "Patch Tuesday (May 2021)\n\nMicrosoft has released the latest Windows updates to patch a dozen newly discovered vulnerabilities, one of the most critical of which is a wormable RCE (CVE-2021-31166) in the HTTP protocol stack.\nRead details - https://thehackernews.com/2021/05/latest-microsoft-windows-updates-patch.html", "url": "https://t.me/thehackernews/1212"}, {"timestamp": "2021-05-14T00:00:00Z", "date_only": true, "value": "2021-05-14", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-35510", "record": "CNVD-2021-35510", "field": "submitTime"}, {"timestamp": "2021-05-15T14:00:18Z", "date_only": false, "value": "2021-05-15T14:00:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/HackerOne/3005", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "e2c36236-4afd-4542-b59f-6ab80d6b1939", "content": "HTTP Protocol Stack Remote Code Execution Vulnerability\n\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-CVE-2021-31166", "url": "https://t.me/HackerOne/3005"}, {"timestamp": "2021-05-17T06:35:10Z", "date_only": false, "value": "2021-05-17T06:35:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/5378", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "4dbf338c-e3b1-4cd0-af2f-ec63ab7fb29d", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 CVE-2021-31166: HTTP Protocol Stack Remote Code Execution Vulnerability\n\nhttps://github.com/0vercl0k/CVE-2021-31166", "url": "https://t.me/cKure/5378"}, {"timestamp": "2021-05-17T12:23:36Z", "date_only": false, "value": "2021-05-17T12:23:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerOne/3007", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "64981576-8ffd-462b-a2ba-e92e95eb81a7", "content": "CVE-2021-31166: HTTP Protocol Stack Remote Code Execution Vulnerability\n\nhttps://github.com/0vercl0k/CVE-2021-31166", "url": "https://t.me/HackerOne/3007"}, {"timestamp": "2021-05-17T15:24:28Z", "date_only": false, "value": "2021-05-17T15:24:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/true_secator/1720", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "11b79b91-4778-409b-a4ea-8258a3334ff5", "content": "\u200b\u200b\u041d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043c\u0435\u0441\u044f\u0447\u043d\u044b\u0439 \u0430\u043f\u0434\u0435\u0439\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u043c, \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u0437\u0430\u043a\u0440\u044b\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2021-31166, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043e\u0446\u0435\u043d\u0438\u043b\u0438 \u0432 9,8 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 CVSS.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u0441\u0442\u0435\u043a\u0435 HTTP Microsoft IIS \u0438 \u043f\u0440\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438 \u0438, \u043a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435, \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0432 \u044f\u0434\u0440\u0435 \u041e\u0421.\n\nMicrosoft \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0447\u0435\u0440\u0432\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c\u0441\u044f \u043f\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c IIS.\n\n\u0410 \u0432\u0447\u0435\u0440\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0410\u043b\u0435\u043a\u0441 \u0421\u0443\u0448\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b Proof of Concept \u0434\u043b\u044f CVE-2021-31166, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u0434\u043e \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0432 \u0440\u0443\u043a\u0430\u0445 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u043e\u0441\u0442\u0430\u043b\u043e\u0441\u044c \u0432\u0441\u0435\u0433\u043e \u043d\u0438\u0447\u0435\u0433\u043e.\n\n\u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u0435\u0441\u043b\u0438 \u0443 \u0432\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0435 Microsoft IIS - \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435\u0441\u044c, \u043d\u0435\u0447\u0435\u0433\u043e \u0447\u0435\u0440\u0432\u0435\u0439 \u043f\u043b\u043e\u0434\u0438\u0442\u044c.", "url": "https://t.me/true_secator/1720"}, {"timestamp": "2021-05-17T15:52:15Z", "date_only": false, "value": "2021-05-17T15:52:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ctinow/33607", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "67073d73-f8e0-4190-922e-69063c8a14f7", "content": "Expert released PoC exploit code for Windows CVE-2021-31166 bug\n\nhttps://ift.tt/3eQN6lt", "url": "https://t.me/ctinow/33607"}, {"timestamp": "2021-05-18T01:34:59Z", "date_only": false, "value": "2021-05-18T01:34:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pwnwiki_zhchannel/451", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "a5e73cdd-91fd-45eb-8534-57abaff1b382", "content": "CVE-2021-31166 HTTP\u5354\u8b70\u68e7\u9060\u7a0b\u4ee3\u78bc\u57f7\u884c\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-31166_HTTP%E5%8D%94%E8%AD%B0%E6%A3%A7%E9%81%A0%E7%A8%8B%E4%BB%A3%E7%A2%BC%E5%9F%B7%E8%A1%8C%E6%BC%8F%E6%B4%9E", "url": "https://t.me/pwnwiki_zhchannel/451"}, {"timestamp": "2021-05-18T10:30:13Z", "date_only": false, "value": "2021-05-18T10:30:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/xakep_ru/10768", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "079b6412-7f5f-44f9-961f-d11ae013e51a", "content": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Windows IIS\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Windows IIS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u043b\u0430\u0434\u0430\u0435\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u043e\u043c \u0447\u0435\u0440\u0432\u044f, \u0438 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435.\n\nhttps://xakep.ru/2021/05/18/cve-2021-31166/", "url": "https://t.me/xakep_ru/10768"}, {"timestamp": "2021-05-19T00:00:00Z", "date_only": true, "value": "2021-05-19", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-35510", "record": "CNVD-2021-35510", "field": "openTime"}, {"timestamp": "2021-05-19T06:03:13Z", "date_only": false, "value": "2021-05-19T06:03:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/haccking/99319", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "0f580e0d-c30a-4aef-ad5d-9281792c285c", "content": "#\u041d\u043e\u0432\u043e\u0441\u0442\u0438\n\n1. Qnap \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Roon Server\nhttps://xakep.ru/2021/05/18/roon-server-0day/\n\n2. \u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Windows IIS\nhttps://xakep.ru/2021/05/18/cve-2021-31166/\n\n3. CISA \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u0434\u043b\u044f \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u0445 \u043e\u0442 \u0430\u0442\u0430\u043a \u043d\u0430 SolarWinds \u0438 Active Directory/M365\nhttps://www.securitylab.ru/news/520299.php\n\n4. \u00ab\u0412\u0430\u043a\u0446\u0438\u043d\u043e\u0439\u00bb \u043f\u0440\u043e\u0442\u0438\u0432 \u0440\u0443\u0441\u0441\u043a\u0438\u0445 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u043c\u043e\u0436\u0435\u0442 \u0441\u0442\u0430\u0442\u044c \u0440\u0443\u0441\u0441\u043a\u0430\u044f \u0440\u0430\u0441\u043a\u043b\u0430\u0434\u043a\u0430 \u043a\u043b\u0430\u0432\u0438\u0430\u0442\u0443\u0440\u044b\nhttps://www.securitylab.ru/news/520295.php", "url": "https://t.me/haccking/99319"}, {"timestamp": "2021-05-20T04:33:15Z", "date_only": false, "value": "2021-05-20T04:33:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/wD2220v0o3d-1bukkXF_tqfTdXEUiA9USIqpuUXZ1dpsFQ", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "97bf4bbe-719d-4068-b61f-f0b9a1bffacf"}, {"timestamp": "2021-05-21T00:00:00Z", "date_only": false, "value": "2021-05-21T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-009", "record": "CERTFR-2021-ALE-009", "field": "revisions.1.revision_date"}, {"timestamp": "2021-05-23T15:32:55Z", "date_only": false, "value": "2021-05-23T15:32:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/33975", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "825285cc-775c-40bf-8d85-cf9e55ce6208", "content": "CVE-2021-31166 Windows HTTP flaw also impacts WinRM servers\n\nhttps://ift.tt/3hNtG2Q", "url": "https://t.me/ctinow/33975"}, {"timestamp": "2021-05-23T15:44:04Z", "date_only": false, "value": "2021-05-23T15:44:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/5565", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "43ab1746-0085-4058-b281-3eff61283766", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 CVE-2021-31166 Windows HTTP flaw also impacts WinRM servers.\n\nhttps://hackademicus.nl/cve-2021-31166-windows-http-flaw-also-impacts-winrm-servers/", "url": "https://t.me/cKure/5565"}, {"timestamp": "2021-05-24T05:27:06Z", "date_only": false, "value": "2021-05-24T05:27:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/alexmakus/4090", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "5f745b3e-970f-4f1b-aa5a-25f8ef4a1e0b", "content": "\u0418 \u0434\u0430\u0432\u043d\u0435\u043d\u044c\u043a\u043e \u0443 \u043d\u0430\u0441 \u043d\u0435 \u0431\u044b\u043b\u043e \u0445\u043e\u0440\u043e\u0448\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Window. \u0412 \u0434\u0430\u043d\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 HTTP Protocol Stack Windows IIS \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 Windows 10 \u0438 Windows Server. Microsoft \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0430\u043f\u0434\u0435\u0439\u0442 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043c\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u0430\u043f\u0434\u0435\u0439\u0442\u0430. \n\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31166\n\n\u0410 \u0442\u0443\u0442 \u0438 PoC \u0443\u0436\u0435 \u043f\u043e\u0434\u0432\u0435\u0437\u043b\u0438\n\nhttps://www.bleepingcomputer.com/news/security/exploit-released-for-wormable-windows-http-vulnerability/\n\n\u0422\u0432\u0438\u0442 \u0441 \u0430\u043d\u043e\u043d\u0441\u043e\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \nhttps://twitter.com/jimdinmn/status/1395071966487269376?s=21", "url": "https://t.me/alexmakus/4090"}, {"timestamp": "2021-05-24T12:35:10Z", "date_only": false, "value": "2021-05-24T12:35:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/xakep_ru/10795", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "9d0c0bc6-2c3f-45ce-9230-14ae398ae888", "content": "\u0411\u0430\u0433 \u0441 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u043e\u043c \u0447\u0435\u0440\u0432\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 WinRM\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0442\u0435\u043a\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 HTTP \u0432 Internet Information Services (IIS), \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f Windows 10 \u0438 Server, \u0441 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0441\u043b\u0443\u0436\u0431\u043e\u0439 WinRM (Windows Remote Management).\n\nhttps://xakep.ru/2021/05/24/cve-2021-31166-winrm/", "url": "https://t.me/xakep_ru/10795"}, {"timestamp": "2021-05-26T00:00:00Z", "date_only": false, "value": "2021-05-26T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202105-1269", "record": "VAR-202105-1269", "field": "sources_release_date.data.1.date"}, {"timestamp": "2021-05-26T07:24:00Z", "date_only": false, "value": "2021-05-26T07:24:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202105-1269", "record": "VAR-202105-1269", "field": "sources_update_date.data.1.date"}, {"timestamp": "2021-05-27T00:00:00Z", "date_only": false, "value": "2021-05-27T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202105-1269", "record": "VAR-202105-1269", "field": "sources_update_date.data.3.date"}, {"timestamp": "2021-06-10T00:00:00Z", "date_only": false, "value": "2021-06-10T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-009", "record": "CERTFR-2021-ALE-009", "field": "last_revision_date"}, {"timestamp": "2021-06-10T00:00:00Z", "date_only": false, "value": "2021-06-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-009", "record": "CERTFR-2021-ALE-009", "field": "revisions.2.revision_date"}, {"timestamp": "2021-06-12T21:45:55Z", "date_only": false, "value": "2021-06-12T21:45:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/3388", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "0fb3af44-138d-49ca-b69c-39e2daed795a", "content": "HTTP Protocol Stack RCE Vulnerability (PoC for CVE-2021-31166)\nhttps://github.com/0vercl0k/CVE-2021-31166", "url": "https://t.me/CyberSecurityTechnologies/3388"}, {"timestamp": "2021-06-15T11:15:30Z", "date_only": false, "value": "2021-06-15T11:15:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/HackerOne/3043", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "f093b758-5f5b-4231-9e00-865bfa5e1933", "content": "CVE-2021-31166: A Wormable Code Execution Bug in HTTP.sys\n https://www.zerodayinitiative.com/blog/2021/5/17/cve-2021-31166-a-wormable-code-execution-bug-in-httpsys", "url": "https://t.me/HackerOne/3043"}, {"timestamp": "2021-08-12T00:00:00Z", "date_only": false, "value": "2021-08-12T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-622", "record": "CERTFR-2021-AVI-622", "field": "last_revision_date"}, {"timestamp": "2021-08-12T00:00:00Z", "date_only": false, "value": "2021-08-12T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-622", "record": "CERTFR-2021-AVI-622", "field": "initial_release_date"}, {"timestamp": "2021-08-12T00:00:00Z", "date_only": false, "value": "2021-08-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-622", "record": "CERTFR-2021-AVI-622", "field": "revisions.0.revision_date"}, {"timestamp": "2021-09-27T00:05:24Z", "date_only": false, "value": "2021-09-27T00:05:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Linux_Arabss/51", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "d33bf17f-320f-4ff4-af28-dfb488eb79ae", "content": "CVE-2021-31166: HTTP Protocol Stack Remote Code Execution Vulnerability\n\nhttps://github.com/0vercl0k/CVE-2021-31166", "url": "https://t.me/Linux_Arabss/51"}, {"timestamp": "2021-09-27T05:59:45Z", "date_only": false, "value": "2021-09-27T05:59:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/605", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "c0284aa0-ca2d-4f06-9a6a-d82e92d83cfc", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aWindows HTTP\u534f\u8bae\u6808\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e CVE-2021-31166\nURL\uff1ahttps://github.com/antx-code/CVE-2021-31166", "url": "https://t.me/GithubRedTeam/605"}, {"timestamp": "2021-10-01T18:29:21Z", "date_only": false, "value": "2021-10-01T18:29:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacker_trick/218", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "388e25cb-dbce-465a-9f70-e095c25acff8", "content": "Simple Serv-U CVE-2021-35211 #poc\nhttps://github.com/NattiSamson/Serv-U-CVE-2021-35211\n\nCVE-2021-40346 integer overflow enables http smuggling\nhttps://github.com/donky16/CVE-2021-40346-POC\n\nPOC for CVE-2021-31166: Windows HTTP\nhttps://github.com/antx-code/CVE-2021-31166\n\nOffensive RPC #poc\nhttps://github.com/sensepost/offensive-rpc\n\nSimple Serv-U CVE-2021-35211 #poc\nhttps://github.com/5gstudent/CVE-2021-22005-\n\nios-nehelper-wifi-info-0day #exploit\nhttps://github.com/illusionofchaos/ios-nehelper-wifi-info-0day\nhttps://github.com/illusionofchaos/ios-nehelper-enum-apps-0day\n\n#poc for CVE-2021-3129 (Laravel)\nhttps://github.com/knqyf263/CVE-2021-3129", "url": "https://t.me/hacker_trick/218"}, {"timestamp": "2021-10-20T07:52:13Z", "date_only": false, "value": "2021-10-20T07:52:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/719", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "61db731e-1157-4947-ad8a-e8f77b46ae22", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aJust a simple CVE-2021-31166 exploit tool\nURL\uff1ahttps://github.com/ConMiko/CVE-2021-31166-exploit", "url": "https://t.me/GithubRedTeam/719"}, {"timestamp": "2021-10-25T22:32:43Z", "date_only": false, "value": "2021-10-25T22:32:43.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/63ddead6-4b82-414c-ad8e-c516b950b446", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "d37cbcf8-1b37-4970-aa0d-7d6497de8676"}, {"timestamp": "2022-02-27T08:54:01Z", "date_only": false, "value": "2022-02-27T08:54:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/BlueRedTeam/1759", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "b6eff8b2-3949-424b-997c-6827cd5f11a0", "content": "#Blue_Team\n1. Hermetic Wiper Malware Detection Rules\nhttps://github.com/stripesoc/detections/tree/main/hermeticwiper\n2. CVE-2021-31166 Detection Rules\nhttps://github.com/mvlnetdev/CVE-2021-31166-detection-rules\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/1759"}, {"timestamp": "2022-02-27T13:45:01Z", "date_only": false, "value": "2022-02-27T13:45:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/5500", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "24e37117-6e53-4935-b293-cb0bbbe05a29", "content": "#Blue_Team_Techniques\n1. Hermetic Wiper Malware Detection Rules\nhttps://github.com/stripesoc/detections/tree/main/hermeticwiper\n2. CVE-2021-31166 Detection Rules\nhttps://github.com/mvlnetdev/CVE-2021-31166-detection-rules", "url": "https://t.me/CyberSecurityTechnologies/5500"}, {"timestamp": "2022-03-07T19:50:10Z", "date_only": false, "value": "2022-03-07T19:50:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1608", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "e9b8ff76-b5d3-48ed-90c9-55c7ca31d02b", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-21907: exploitation with Powershell, Python, Ruby, NMAP and Metasploit.\nURL\uff1ahttps://github.com/mauricelambert/CVE-2021-31166", "url": "https://t.me/GithubRedTeam/1608"}, {"timestamp": "2022-03-16T22:48:55Z", "date_only": false, "value": "2022-03-16T22:48:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/windows/http/http_sys_accept_encoding_dos_cve_2021_31166.rb", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "c88ac1fb-6c4b-4a70-9a17-8054e6f5d8c9", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/windows/http/http_sys_accept_encoding_dos_cve_2021_31166.rb"}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": false, "value": "2022-04-06T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2021-31166", "field": "timestamps.asserted_at", "uuid": "b7976d39-f3ec-47b3-902c-9a68dba22b27", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": false, "value": "2022-04-06T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-31166", "field": "timestamps.asserted_at", "uuid": "1db585a2-2f69-4a3c-9c3a-80269e4fe9e7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": true, "value": "2022-04-06", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-31166", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": true, "value": "2022-04-06", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2021-31166", "record": "GSD-2021-31166", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": false, "value": "2022-04-06T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2021-31166", "field": "evidence.0.details.added_date", "uuid": "1db585a2-2f69-4a3c-9c3a-80269e4fe9e7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": true, "value": "2022-04-06", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2021-31166", "field": "evidence.0.details.date_added", "uuid": "b7976d39-f3ec-47b3-902c-9a68dba22b27", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": false, "value": "2022-04-06T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2021-31166", "field": "timestamps.first_seen_at", "uuid": "b7976d39-f3ec-47b3-902c-9a68dba22b27", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": false, "value": "2022-04-06T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2021-31166", "field": "timestamps.first_seen_at", "uuid": "1db585a2-2f69-4a3c-9c3a-80269e4fe9e7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": false, "value": "2022-04-06T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2021-31166", "field": "status.status_updated_at", "uuid": "b7976d39-f3ec-47b3-902c-9a68dba22b27", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": false, "value": "2022-04-06T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2021-31166", "field": "status.status_updated_at", "uuid": "1db585a2-2f69-4a3c-9c3a-80269e4fe9e7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-06T00:00:00Z", "date_only": false, "value": "2022-04-06T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-31166", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-04-27T00:00:00Z", "date_only": true, "value": "2022-04-27", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2021-31166", "field": "evidence.0.details.due_date", "uuid": "b7976d39-f3ec-47b3-902c-9a68dba22b27", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-27T00:00:00Z", "date_only": true, "value": "2022-04-27", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2021-31166", "record": "GSD-2021-31166", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2022-04-28T17:01:45Z", "date_only": false, "value": "2022-04-28T17:01:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poxek/1425", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "b8c4e81a-ce7f-48a0-870f-35bb3344e1e6", "content": "CVE-2022-21907\n\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:\nPOC \u0434\u043b\u044f CVE-2022-21907: \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u0441\u0442\u0435\u043a\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 HTTP.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435:\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u0441\u0442\u0435\u043a\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 HTTP.\n- \u0410\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0430 CVE-2021-31166.\n- \u042d\u0442\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0441 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u0432 CVE-2021-31166, \u0438 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442.\n\n\u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442: \n- Windows\n\u2014 10 \u0432\u0435\u0440\u0441\u0438\u044f 1809 \u0434\u043b\u044f 32-\u0440\u0430\u0437\u0440\u044f\u0434\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\n\u2014 10 \u0412\u0435\u0440\u0441\u0438\u044f 1809 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 x64\n\u2014 10 \u0412\u0435\u0440\u0441\u0438\u044f 1809 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 ARM64\n\u2014 10 \u0412\u0435\u0440\u0441\u0438\u044f 21H1 \u0434\u043b\u044f 32-\u0440\u0430\u0437\u0440\u044f\u0434\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\n\u2014 10 \u0412\u0435\u0440\u0441\u0438\u044f 21H1 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 x64\n\u2014 10 \u0412\u0435\u0440\u0441\u0438\u044f 21H1 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 ARM64\n\u2014 10 \u0412\u0435\u0440\u0441\u0438\u044f 20H2 \u0434\u043b\u044f 32-\u0431\u0438\u0442\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\n\u2014 10 \u0412\u0435\u0440\u0441\u0438\u044f 20H2 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 x64\n\u2014 10 \u0412\u0435\u0440\u0441\u0438\u044f 20H2 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 ARM64\n\u2014 10 \u0412\u0435\u0440\u0441\u0438\u044f 21H2 \u0434\u043b\u044f 32-\u0431\u0438\u0442\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\n\u2014 10 \u0412\u0435\u0440\u0441\u0438\u044f 21H2 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 x64\n\u2014 10 \u0412\u0435\u0440\u0441\u0438\u044f 21H2 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 ARM64\n\u2014 11 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 x64\n\u2014 11 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 ARM64\n- Windows Server\n\u2014 2019\n\u2014 2019 (\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u044f\u0434\u0440\u0430)\n\u2014 2022\n\u2014 2022 (\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u044f\u0434\u0440\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430)\n\u2014 \u0432\u0435\u0440\u0441\u0438\u044f 20H2 (\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u044f\u0434\u0440\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430)\n\nhttps://github.com/michelep/CVE-2022-21907-Vulnerability-PoC\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "url": "https://t.me/poxek/1425"}, {"timestamp": "2022-05-24T19:02:03Z", "date_only": false, "value": "2022-05-24T19:02:03Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3MJ9-C62W-JW5W", "record": "GHSA-3MJ9-C62W-JW5W", "field": "published"}, {"timestamp": "2022-06-07T11:35:37Z", "date_only": false, "value": "2022-06-07T11:35:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/haccking/6301", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "d893a9a1-1cd9-44f3-a5ae-9f59af832ce1", "content": "#\u041d\u043e\u0432\u043e\u0441\u0442\u0438\n\n1. Qnap \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Roon Server\nhttps://xakep.ru/2021/05/18/roon-server-0day/\n\n2. \u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Windows IIS\nhttps://xakep.ru/2021/05/18/cve-2021-31166/\n\n3. CISA \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u0434\u043b\u044f \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u0445 \u043e\u0442 \u0430\u0442\u0430\u043a \u043d\u0430 SolarWinds \u0438 Active Directory/M365\nhttps://www.securitylab.ru/news/520299.php\n\n4. \u00ab\u0412\u0430\u043a\u0446\u0438\u043d\u043e\u0439\u00bb \u043f\u0440\u043e\u0442\u0438\u0432 \u0440\u0443\u0441\u0441\u043a\u0438\u0445 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u043c\u043e\u0436\u0435\u0442 \u0441\u0442\u0430\u0442\u044c \u0440\u0443\u0441\u0441\u043a\u0430\u044f \u0440\u0430\u0441\u043a\u043b\u0430\u0434\u043a\u0430 \u043a\u043b\u0430\u0432\u0438\u0430\u0442\u0443\u0440\u044b\nhttps://www.securitylab.ru/news/520295.php", "url": "https://t.me/haccking/6301"}, {"timestamp": "2022-12-01T11:20:30Z", "date_only": false, "value": "2022-12-01T11:20:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3502", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "ce29d71a-ad49-4fe1-81bf-3f8fcf19d363", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aPoC for CVE-2021-31166 and CVE-2022-21907\nURL\uff1ahttps://github.com/0xmaximus/Home-Demolisher\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/3502"}, {"timestamp": "2022-12-10T17:07:01Z", "date_only": false, "value": "2022-12-10T17:07:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/2516", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "ca84ff4e-9d53-4b43-adc9-3402cd296a18", "content": "#CVE-2022\nPoC for CVE-2021-31166 and CVE-2022-21907\n\nhttps://github.com/0xmaximus/Home-Demolisher\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2516"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "58c5d68c-3de2-4b66-917f-b680059cb277"}, {"timestamp": "2023-08-02T00:00:00Z", "date_only": false, "value": "2023-08-02T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202105-1269", "record": "VAR-202105-1269", "field": "sources_update_date.data.0.date"}, {"timestamp": "2023-08-02T00:15:00Z", "date_only": false, "value": "2023-08-02T00:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-31166", "record": "GSD-2021-31166", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-11-17T05:44:16Z", "date_only": false, "value": "2023-11-17T05:44:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/214", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "b49b0065-52cc-4e76-8b48-b284f8ef40af", "content": "#ExploitObserverAlert\n\nCVE-2021-31166\n\nDESCRIPTION: Exploit Observer has 49 entries related to CVE-2021-31166. HTTP Protocol Stack Remote Code Execution Vulnerability\n\nFIRST-EPSS: 0.972300000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/214"}, {"timestamp": "2023-12-04T05:04:36Z", "date_only": false, "value": "2023-12-04T05:04:36.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1119", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "16b19ec6-ac94-455e-a31b-bc8ccbc4b65f", "content": "#ExploitObserverAlert\n\nCVE-2021-31166\n\nDESCRIPTION: Exploit Observer has 51 entries related to CVE-2021-31166. HTTP Protocol Stack Remote Code Execution Vulnerability\n\nFIRST-EPSS: 0.972590000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1119"}, {"timestamp": "2023-12-13T01:23:13.556Z", "date_only": false, "value": "2023-12-13T01:23:13.556374Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-31166", "record": "GSD-2021-31166", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-28T23:56:49.266Z", "date_only": false, "value": "2023-12-28T23:56:49.266Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2021-31166", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-07-07T08:52:09Z", "date_only": false, "value": "2024-07-07T08:52:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/mFYo1C3k7q9W0yt710Al7YJNUPL9ENyuwuWwvi5xbyICpHw", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "7c295d3f-edbf-49e0-b704-024d63f1662c"}, {"timestamp": "2024-07-09T18:28:03.397Z", "date_only": false, "value": "2024-07-09T18:28:03.397000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202105-1269", "record": "VAR-202105-1269", "field": "sources_update_date.data.4.date"}, {"timestamp": "2024-07-10T19:48:14.806Z", "date_only": false, "value": "2024-07-10T19:48:14.806000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202105-1269", "record": "VAR-202105-1269", "field": "last_update_date"}, {"timestamp": "2024-08-03T22:55:52.129Z", "date_only": false, "value": "2024-08-03T22:55:52.129Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-31166", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-28T16:48:46Z", "date_only": false, "value": "2024-09-28T16:48:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/3506", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "fcc441a4-d598-443b-b1c4-2536672d9187", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (may 1-31)\nCVE-2021-31166 - HTTP Stack RCE\nhttps://t.me/cybersecuritytechnologies/3388\nCVE-2021-21551 -Dell BIOS Driver PE\nhttps://t.me/cybersecuritytechnologies/3293\nCVE-2021-30747 -Covert channel in Apple M1\nhttps://t.me/cybersecuritytechnologies/3472\nCVE-2021-22204 -DjVu vuln\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\nCVE-2021-28482 -MS Exchange RCE\nhttps://t.me/cybersecuritytechnologies/3286\nCVE-2021-21974 -VMware\u00a0ESXi heap-overflow\nhttps://t.me/cybersecuritytechnologies/3460\nCVE-2021-29447 -WordPress XXE\nhttps://t.me/cybersecuritytechnologies/3142\nCVE-2021-21985 - vSphere Client RCE\nhttps://t.me/cybersecuritytechnologies/3493\nCVE-2021-32471 -ACE in TuringMachine\nhttps://t.me/cybersecuritytechnologies/3364\nCVE-2021-3490 -Linux Kernel eBPF\nhttps://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git/commit/?id=049c4e13714ecbca567b4d5f6d563f05d431c80e", "url": "https://t.me/CyberSecurityTechnologies/3506"}, {"timestamp": "2024-11-02T22:51:59Z", "date_only": false, "value": "2024-11-02T22:51:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Linux_Arabs/44", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "9f3e1d09-5eaf-487c-a267-199603815529", "content": "CVE-2021-31166: HTTP Protocol Stack Remote Code Execution Vulnerability\n\nhttps://github.com/0vercl0k/CVE-2021-31166", "url": "https://t.me/Linux_Arabs/44"}, {"timestamp": "2024-12-24T20:30:13.750Z", "date_only": false, "value": "2024-12-24T20:30:13.750193Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971499", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "717b4412-35e9-48e3-99c0-efb4e113218c", "url": "https://feedsin.space/feed/CISAKevBot/items/2971499"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "01771d1c-b698-4b0c-b812-6f71342f4321"}, {"timestamp": "2025-02-07T14:36:57.411Z", "date_only": false, "value": "2025-02-07T14:36:57.411562Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-31166", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-07T14:36:57.411Z", "date_only": false, "value": "2025-02-07T14:36:57.411562Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-31166", "record": "FKIE_CVE-2021-31166", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-23T02:10:30Z", "date_only": false, "value": "2025-02-23T02:10:30.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "d176f244-dad0-4c9c-817a-46547d135445"}, {"timestamp": "2025-02-23T04:10:37Z", "date_only": false, "value": "2025-02-23T04:10:37.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "2d3bb72b-d731-4ee7-b62c-e0a19e28f4c7"}, {"timestamp": "2025-08-31T03:13:16Z", "date_only": false, "value": "2025-08-31T03:13:16.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "e91a7e6c-0c0b-4fa4-99b6-5314b0d9b256"}, {"timestamp": "2025-10-21T23:25:45.988Z", "date_only": false, "value": "2025-10-21T23:25:45.988Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-31166", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:25:45.988Z", "date_only": false, "value": "2025-10-21T23:25:45.988Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-31166", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:13Z", "date_only": false, "value": "2025-10-22T00:32:13Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3MJ9-C62W-JW5W", "record": "GHSA-3MJ9-C62W-JW5W", "field": "modified"}, {"timestamp": "2026-02-02T12:27:53.454Z", "date_only": false, "value": "2026-02-02T12:27:53.454245Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cc656da8-bb7b-4267-8519-01fa39a58e99", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "d6f8367c-a2a5-4fcd-adc8-16c99c78b82a", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cc656da8-bb7b-4267-8519-01fa39a58e99"}, {"timestamp": "2026-02-02T12:27:53.454Z", "date_only": false, "value": "2026-02-02T12:27:53.454245Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cc656da8-bb7b-4267-8519-01fa39a58e99", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "084f6d8a-0473-4c3e-b645-15d3e2c40fcb", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cc656da8-bb7b-4267-8519-01fa39a58e99"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2021-31166", "field": "timestamps.recorded_at", "uuid": "b7976d39-f3ec-47b3-902c-9a68dba22b27", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T03:51:21.910Z", "date_only": false, "value": "2026-06-17T03:51:21.910", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-31166", "record": "FKIE_CVE-2021-31166", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:19.680Z", "date_only": false, "value": "2026-06-19T12:47:19.680471Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8de1af71-a8f4-44c9-b019-d727b1ec3a03", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "23a6c5de-17eb-46ef-8f76-692a1c9f386b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8de1af71-a8f4-44c9-b019-d727b1ec3a03"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2021-31166", "field": "timestamps.recorded_at", "uuid": "1db585a2-2f69-4a3c-9c3a-80269e4fe9e7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:47.382Z", "date_only": false, "value": "2026-06-23T11:13:47.382320Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/1db585a2-2f69-4a3c-9c3a-80269e4fe9e7", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "ec82204c-5f4c-4c1f-9287-3fbc4cca23b9", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/1db585a2-2f69-4a3c-9c3a-80269e4fe9e7"}, {"timestamp": "2026-06-23T14:05:17.476Z", "date_only": false, "value": "2026-06-23T14:05:17.476393Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c1c8f8ef-2bd0-487e-afaf-eb3a159bcc53", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "e66b0d70-f953-4594-83ff-069d64c36b77", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c1c8f8ef-2bd0-487e-afaf-eb3a159bcc53"}, {"timestamp": "2026-07-17T12:00:05.761Z", "date_only": false, "value": "2026-07-17T12:00:05.761431Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/shmelovod/92", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "39dfc48d-00ba-4def-b637-e7cdedcdae46", "url": "https://t.me/shmelovod/92"}, {"timestamp": "2026-07-18T00:00:32.138Z", "date_only": false, "value": "2026-07-18T00:00:32.138815Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/shmelovod/92", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "6ddf30a4-0b8f-4b85-9044-b1d071efe46d", "url": "https://t.me/shmelovod/92"}, {"timestamp": "2026-07-29T12:02:57.172Z", "date_only": false, "value": "2026-07-29T12:02:57.172160Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1290", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "1034e333-4775-4456-a2c3-40d9bdd639a3", "url": "https://t.me/reverseame/1290"}, {"timestamp": "2026-07-29T12:02:57.854Z", "date_only": false, "value": "2026-07-29T12:02:57.854705Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1208", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "9c2e5eb1-25f7-4407-a946-2fef8acef661", "url": "https://t.me/reverseame/1208"}, {"timestamp": "2026-07-30T00:02:46.608Z", "date_only": false, "value": "2026-07-30T00:02:46.608170Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1290", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "9f382a00-cf75-49c4-aef8-ced153a19bdd", "url": "https://t.me/reverseame/1290"}, {"timestamp": "2026-07-30T00:02:47.587Z", "date_only": false, "value": "2026-07-30T00:02:47.587126Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1208", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "071177bf-3c71-4740-8a22-466fd20ab8f3", "url": "https://t.me/reverseame/1208"}, {"timestamp": "2026-08-03T09:02:14.523Z", "date_only": false, "value": "2026-08-03T09:02:14.523477Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1290", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "153d3c57-f0e9-4a2a-b04b-d3044621d71e", "url": "https://t.me/reverseame/1290"}, {"timestamp": "2026-08-03T10:10:20.640Z", "date_only": false, "value": "2026-08-03T10:10:20.640076Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1208", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "30f900b9-2c30-47fb-a4c9-c3a66b37b535", "url": "https://t.me/reverseame/1208"}, {"timestamp": "2026-08-04T00:00:42.779Z", "date_only": false, "value": "2026-08-04T00:00:42.779663Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1208", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "0ae88af4-9234-4c25-b29d-1a22cbc90f91", "url": "https://t.me/reverseame/1208"}, {"timestamp": "2026-08-04T00:00:43.583Z", "date_only": false, "value": "2026-08-04T00:00:43.583405Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1290", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "de82549f-feb7-46ab-9542-b31a49d197c6", "url": "https://t.me/reverseame/1290"}, {"timestamp": "2026-08-16T19:00:06.408Z", "date_only": false, "value": "2026-08-16T19:00:06.408392Z", "kind": "sighting", "label": "Seen", "source": "Telegram/SUR3ptYxT9eUOv99X5kdleCOKfF4oT98lcIErh5LuBwpouA", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "2ca14ad2-3522-4e5e-9103-bca4468041f7"}, {"timestamp": "2026-08-17T00:00:09.009Z", "date_only": false, "value": "2026-08-17T00:00:09.009616Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/SUR3ptYxT9eUOv99X5kdleCOKfF4oT98lcIErh5LuBwpouA", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "377b379e-4cd8-4fcc-aa5b-5fc69fe7eb28"}, {"timestamp": "2026-08-27T12:00:07.559Z", "date_only": false, "value": "2026-08-27T12:00:07.559687Z", "kind": "sighting", "label": "Seen", "source": "Telegram/2Gt6hllKg5INBk3NmQpKCh-efxsx8DUsAJjTr0s-70w3NYk", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "22287642-9694-40c2-8e95-45f2a16e80b1"}, {"timestamp": "2026-08-29T00:00:28.537Z", "date_only": false, "value": "2026-08-29T00:00:28.537066Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/2Gt6hllKg5INBk3NmQpKCh-efxsx8DUsAJjTr0s-70w3NYk", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "a2ece2d0-2e1d-4368-a12a-50322f9ce095"}, {"timestamp": "2026-09-01T17:00:50.378Z", "date_only": false, "value": "2026-09-01T17:00:50.378156Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/3201", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "082fe55a-3be4-4a9d-888c-e2446a088f94", "url": "https://t.me/cissp/3201"}, {"timestamp": "2026-09-01T17:00:50.592Z", "date_only": false, "value": "2026-09-01T17:00:50.592449Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/3172", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "833dd64e-fc90-422f-8bc2-3316d7d2a3b0", "url": "https://t.me/cissp/3172"}, {"timestamp": "2026-09-01T20:02:21.915Z", "date_only": false, "value": "2026-09-01T20:02:21.915711Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/24365", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "f2c1c00d-d8b4-4d26-bd61-ce37a3f4971b", "url": "https://t.me/hacking_Attack/24365"}, {"timestamp": "2026-09-01T20:02:41.475Z", "date_only": false, "value": "2026-09-01T20:02:41.475243Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/9637", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "dcbdaca1-a2b2-48c1-8965-a8aed1d8983e", "url": "https://t.me/hacking_Attack/9637"}, {"timestamp": "2026-09-01T20:02:41.668Z", "date_only": false, "value": "2026-09-01T20:02:41.668682Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/9288", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "aaea8771-e9ee-4224-a000-0453a9ec76f2", "url": "https://t.me/hacking_Attack/9288"}, {"timestamp": "2026-09-01T20:02:41.957Z", "date_only": false, "value": "2026-09-01T20:02:41.957684Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/8312", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "cb9214ae-a61b-4450-803c-1c971b7a2230", "url": "https://t.me/hacking_Attack/8312"}, {"timestamp": "2026-09-01T20:02:43.843Z", "date_only": false, "value": "2026-09-01T20:02:43.843538Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/8310", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "d779ff38-f317-498d-b907-84cb6d212ecd", "url": "https://t.me/hacking_Attack/8310"}, {"timestamp": "2026-09-01T20:02:51.055Z", "date_only": false, "value": "2026-09-01T20:02:51.055038Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/vulns/383", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "e56a53e3-530a-4f9d-9c2e-aa2f509569c2", "url": "https://t.me/vulns/383"}, {"timestamp": "2026-09-07T14:00:04.764Z", "date_only": false, "value": "2026-09-07T14:00:04.764193Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/24365", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "2e304e0e-44cb-434c-bee6-c9d1e34169d4", "url": "https://t.me/hacking_Attack/24365"}, {"timestamp": "2026-09-08T06:00:04.663Z", "date_only": false, "value": "2026-09-08T06:00:04.663442Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/9288", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "50b781df-67b5-44d7-bd33-390575a449fb", "url": "https://t.me/hacking_Attack/9288"}, {"timestamp": "2026-09-08T06:00:04.847Z", "date_only": false, "value": "2026-09-08T06:00:04.847308Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/9637", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "d748a247-ce32-4672-84e8-1155de198345", "url": "https://t.me/hacking_Attack/9637"}, {"timestamp": "2026-09-08T19:00:06.025Z", "date_only": false, "value": "2026-09-08T19:00:06.025728Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/vulns/383", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "51dc22ad-aa83-4d7e-b180-2639a8d4a4ed", "url": "https://t.me/vulns/383"}, {"timestamp": "2026-09-11T06:00:05.253Z", "date_only": false, "value": "2026-09-11T06:00:05.253695Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/3201", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "8a3341ad-52b8-45df-9a65-5c996170e1b5", "url": "https://t.me/cissp/3201"}, {"timestamp": "2026-09-14T03:00:09.004Z", "date_only": false, "value": "2026-09-14T03:00:09.004311Z", "kind": "sighting", "label": "Seen", "source": "Telegram/-crZ7c2mXyDAnAi6cUoO6ZGLIobDD_pIiFk-5o6QD17WEzY", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "63a52aec-907c-4fb7-921b-f7d56a50813b"}, {"timestamp": "2026-09-15T00:00:25.284Z", "date_only": false, "value": "2026-09-15T00:00:25.284584Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/-crZ7c2mXyDAnAi6cUoO6ZGLIobDD_pIiFk-5o6QD17WEzY", "record": "CVE-2021-31166", "field": "creation_timestamp", "uuid": "ec929aa4-f452-454c-8764-8252a0539ab3"}]}