{"metadata": {"vulnerability": "cve-2021-1675", "count": 270, "kinds": {"milestone": 14, "sighting": 194, "kev": 11, "other": 51}}, "data": [{"timestamp": "2020-12-02T00:00:00Z", "date_only": false, "value": "2020-12-02T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2021-1675", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-04-13T00:00:00Z", "date_only": false, "value": "2021-04-13T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202106-0639", "record": "VAR-202106-0639", "field": "sources_release_date.data.4.date"}, {"timestamp": "2021-04-14T00:00:00Z", "date_only": false, "value": "2021-04-14T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202106-0639", "record": "VAR-202106-0639", "field": "sources_update_date.data.4.date"}, {"timestamp": "2021-06-08T00:00:00Z", "date_only": false, "value": "2021-06-08T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202106-0639", "record": "VAR-202106-0639", "field": "sources_release_date.data.2.date"}, {"timestamp": "2021-06-08T00:00:00Z", "date_only": true, "value": "2021-06-08", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-013", "record": "CERTFR-2021-ALE-013", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2021-06-08T07:00:00Z", "date_only": false, "value": "2021-06-08T07:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "cve-2021-1675", "field": "containers.cna.datePublic"}, {"timestamp": "2021-06-08T22:46:11Z", "date_only": false, "value": "2021-06-08T22:46:11.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-1675", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-06-08T23:15:00Z", "date_only": false, "value": "2021-06-08T23:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VWMM-QQ95-VQHF", "record": "GHSA-VWMM-QQ95-VQHF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-06-08T23:15:00Z", "date_only": false, "value": "2021-06-08T23:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-1675", "record": "GSD-2021-1675", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-06-08T23:15:08.267Z", "date_only": false, "value": "2021-06-08T23:15:08.267000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202106-0639", "record": "VAR-202106-0639", "field": "sources_release_date.data.6.date"}, {"timestamp": "2021-06-08T23:15:08.267Z", "date_only": false, "value": "2021-06-08T23:15:08.267", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-1675", "record": "FKIE_CVE-2021-1675", "field": "published"}, {"timestamp": "2021-06-09T00:00:00Z", "date_only": false, "value": "2021-06-09T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-448", "record": "CERTFR-2021-AVI-448", "field": "last_revision_date"}, {"timestamp": "2021-06-09T00:00:00Z", "date_only": false, "value": "2021-06-09T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-448", "record": "CERTFR-2021-AVI-448", "field": "initial_release_date"}, {"timestamp": "2021-06-09T00:00:00Z", "date_only": false, "value": "2021-06-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-448", "record": "CERTFR-2021-AVI-448", "field": "revisions.0.revision_date"}, {"timestamp": "2021-06-29T00:00:00Z", "date_only": false, "value": "2021-06-29T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-1675", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2021-06-29T00:00:00Z", "date_only": false, "value": "2021-06-29T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-1675", "record": "FKIE_CVE-2021-1675", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2021-06-29T16:49:28Z", "date_only": false, "value": "2021-06-29T16:49:28.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/1866", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "0d0bd7f8-456d-4a5b-a8d5-b02a3f94dc77", "content": "The Record \u043f\u0438\u0448\u0435\u0442, \u0447\u0442\u043e \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0442\u0440\u043e\u0435 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 Sangfor \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043d\u0430 GitHub \u043f\u043e\u043b\u043d\u043e\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 CVE-2021-1675 \u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 PoC. \u041e\u0448\u0438\u0431\u043a\u0443 \u043e\u043d\u0438 \u043d\u0430\u0437\u0432\u0430\u043b\u0438 PrintNightmare.\n\nCVE-2021-1675, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u0438\u044e\u043d\u044c\u0441\u043a\u043e\u043c \u043f\u0430\u0442\u0447\u0435 Windows, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0434\u044b\u0440\u043a\u0443 \u0432 \u0434\u0438\u0441\u043f\u0435\u0442\u0447\u0435\u0440\u0435 \u043e\u0447\u0435\u0440\u0435\u0434\u0438 \u043f\u0435\u0447\u0430\u0442\u0438 spoolsv.exe. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE) \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0437\u044f\u0442\u044c \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u043e\u0434 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c.\n\n\u0412\u0447\u0435\u0440\u0430 \u043a\u0438\u0442\u0430\u0439\u0446\u044b \u0438\u0437 QiAnXin \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0432 \u0441\u0432\u043e\u0435\u043c Twitter GIF \u0432 \u043f\u043b\u043e\u0445\u043e\u043c \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0438, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0431\u044b\u043b \u043f\u043e\u043a\u0430\u0437\u0430\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043e\u0448\u0438\u0431\u043a\u0438. \u0418\u0437-\u0437\u0430 \u044d\u0442\u043e\u0433\u043e \u043f\u0435\u0440\u0432\u0438\u0447\u043d\u044b\u0435 \u043a\u0438\u0442\u0430\u0439\u0446\u044b \u0438\u0437 Sangfor \u0440\u0435\u0448\u0438\u043b\u0438 \u0432\u044b\u043b\u043e\u0436\u0438\u0442\u044c \u0441\u0432\u043e\u0439 PoC, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u043f\u043e \u0438\u0445 \u0441\u043b\u043e\u0432\u0430\u043c \u043e\u043d\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0434\u043b\u044f \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u0432 \u0441\u043e\u0440\u0435\u0432\u043d\u043e\u0432\u0430\u043d\u0438\u0438 Tianfu Cup. \n\n\u0421\u043f\u0443\u0441\u0442\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0447\u0430\u0441\u043e\u0432 \u043e\u043d\u0438 \u043e\u0434\u0443\u043c\u0430\u043b\u0438\u0441\u044c \u0438 \u0443\u0434\u0430\u043b\u0438\u043b\u0438 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u044b \u0438\u0437 GitHub, \u043d\u043e \u0437\u0430 \u044d\u0442\u043e \u0432\u0440\u0435\u043c\u044f \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438 PoC \u0443\u0436\u0435 \u0443\u0441\u043f\u0435\u043b\u0438 \u0440\u0430\u0441\u0442\u0430\u0449\u0438\u0442\u044c. \u0412 \u0441\u0432\u044f\u0437\u0438 \u0441 \u044d\u0442\u0438\u043c \u043e\u0436\u0438\u0434\u0430\u0435\u043c \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 CVE-2021-1675 \u0432 \u043f\u0430\u0431\u043b\u0438\u043a\u0435 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f.\n\n\u0412\u044b\u0432\u043e\u0434, \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u043e\u0434\u0438\u043d - \u0435\u0441\u043b\u0438 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438 \u0441\u0432\u043e\u0438 Windows, \u0442\u043e \u0441\u0434\u0435\u043b\u0430\u0439\u0442\u0435 \u044d\u0442\u043e \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u0435\u0435. RCE - \u044d\u0442\u043e \u0432\u0430\u043c, \u0437\u043d\u0430\u0435\u0442\u0435 \u043b\u0438, \u043d\u0435 \u0432\u044b\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u0435 \u0441\u0431\u043e\u0440\u043d\u043e\u0439 \u0420\u043e\u0441\u0441\u0438\u0438 \u043f\u043e \u0444\u0443\u0442\u0431\u043e\u043b\u0443 \u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c, \u0430 \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u0431\u043e\u043b\u044c\u043d\u0435\u0435.", "url": "https://t.me/true_secator/1866"}, {"timestamp": "2021-06-29T17:45:58Z", "date_only": false, "value": "2021-06-29T17:45:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/antichat/9768", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "961cfe31-05ac-4219-ab08-5df5e356eab1", "content": "PrintNightmare (CVE-2021-1675): Remote code execution in Windows Spooler Service\n\nhttps://github.com/afwu/PrintNightmare\n\n#exploit #git", "url": "https://t.me/antichat/9768"}, {"timestamp": "2021-06-29T19:16:26Z", "date_only": false, "value": "2021-06-29T19:16:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/36051", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "41576334-6e8c-48c1-9290-f6ed1e95cb81", "content": "PoC exploit for CVE-2021-1675 RCE started circulating online\n\nhttps://ift.tt/3jn7PjL", "url": "https://t.me/ctinow/36051"}, {"timestamp": "2021-06-30T00:00:00Z", "date_only": false, "value": "2021-06-30T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202106-0639", "record": "VAR-202106-0639", "field": "sources_release_date.data.0.date"}, {"timestamp": "2021-06-30T00:00:00Z", "date_only": false, "value": "2021-06-30T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-013", "record": "CERTFR-2021-ALE-013", "field": "initial_release_date"}, {"timestamp": "2021-06-30T00:00:00Z", "date_only": false, "value": "2021-06-30T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-013", "record": "CERTFR-2021-ALE-013", "field": "revisions.0.revision_date"}, {"timestamp": "2021-06-30T10:31:32Z", "date_only": false, "value": "2021-06-30T10:31:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/9Ljs1ig5D-hALQ-rtNcTXj7o6l-CuPeYn7S0FtIGoF5htQ", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "9145f2b7-74dd-41c2-97dd-8491398c5b80"}, {"timestamp": "2021-06-30T13:36:01Z", "date_only": false, "value": "2021-06-30T13:36:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thehackernews/1327", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "f3a5595e-fea1-4638-9e99-776e8502e615", "content": "\ud83d\udd25 Researchers publish a proof-of-concept exploit for a critical vulnerability (CVE-2021-1675) affecting Microsoft Windows operating systems.\n\nDetails \u2014 https://thehackernews.com/2021/06/researchers-leak-poc-exploit-for.html", "url": "https://t.me/thehackernews/1327"}, {"timestamp": "2021-06-30T15:35:49Z", "date_only": false, "value": "2021-06-30T15:35:49.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cKure/6036", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "00c15991-a567-4d17-ba05-5e9a18ad35ef", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 PrintNightmare (CVE-2021-1675): Remote code execution in Windows Spooler Service\n\nhttps://github.com/afwu/PrintNightmare", "url": "https://t.me/cKure/6036"}, {"timestamp": "2021-06-30T15:43:02Z", "date_only": false, "value": "2021-06-30T15:43:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/true_secator/1871", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "33247d38-50da-4630-b424-143d92e7da9f", "content": "\u041e\u0439, \u0431\u043b\u044f....\n\n\u0422\u0443\u0442 \u043f\u0438\u0448\u0443\u0442, \u0447\u0442\u043e \u0438\u044e\u043d\u044c\u0441\u043a\u0438\u0439 \u043f\u0430\u0442\u0447 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 Microsoft \u043d\u0435 \u0437\u0430\u043a\u0440\u044b\u043b CVE-2021-1675 aka PrintNightmare, \u043f\u0440\u043e \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u0432\u0447\u0435\u0440\u0430 \u0438 \u043a \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0430 \u0434\u043d\u044f\u0445 \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f PoC.\n\n\u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e CVE-2021-1675 - \u044d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0434\u0438\u0441\u043f\u0435\u0442\u0447\u0435\u0440\u0435 \u043e\u0447\u0435\u0440\u0435\u0434\u0438 \u043f\u0435\u0447\u0430\u0442\u0438 spoolsv.exe (Print Spooler) \u0432 Windows. \u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e Print Spooler \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u043d\u0430 \u0432\u0441\u0435\u0445 \u043c\u0430\u0448\u0438\u043d\u0430\u0445.\n\n\u0418\u043c\u0435\u0435\u043c - \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438 \u043e\u043a\u0430\u0437\u0430\u0432\u0448\u0438\u0439\u0441\u044f \u0432 \u043f\u0430\u0431\u043b\u0438\u043a\u0435 PoC \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \u041a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0431\u044b, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0439\u0442\u0438 \u043d\u0435 \u0442\u0430\u043a?\n\n\u0410 \u0442\u0435\u043f\u0435\u0440\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e - \u0435\u0441\u043b\u0438 \u044d\u0442\u043e \u043f\u0440\u0430\u0432\u0434\u0430 (\u0430 \u043c\u044b \u0443\u0437\u043d\u0430\u0435\u043c \u043e\u0431 \u044d\u0442\u043e\u043c, \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c, \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0435 \u0447\u0430\u0441\u044b), \u0442\u043e \u044d\u0442\u043e \u043f\u0438\u0437\u0434\u0435\u0446\u043a\u0438\u0439 \u043f\u0438\u0437\u0434\u0435\u0446. \u0412\u044b \u0437\u043d\u0430\u0435\u0442\u0435, \u043c\u044b \u043d\u0435\u0447\u0430\u0441\u0442\u043e \u043c\u0430\u0442\u0435\u0440\u0438\u043c\u0441\u044f, \u043d\u043e \u044d\u0442\u043e \u0438\u043c\u0435\u043d\u043d\u043e \u0442\u043e\u0442 \u0441\u0430\u043c\u044b\u0439 \u0441\u043b\u0443\u0447\u0430\u0439. \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u0440\u0430\u0437 \u043c\u044b \u0442\u0430\u043a\u043e\u0435 \u0432 Stuxnet \u0432\u0438\u0434\u0430\u043b\u0438. \n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043f\u0440\u043e\u0444\u0438\u043b\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0442\u0440\u0443\u0431\u0438\u0442\u044c spoolsv.exe. \n\nP.S. \u041f\u043e\u043a\u0430 \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u043f\u043e\u0441\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0442\u0432\u0438\u0442\u043e\u0432 \u043f\u0440\u043e \u0442\u043e, \u0447\u0442\u043e \u043f\u0430\u0442\u0447 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 CVE-2021-1675 \u043f\u0440\u043e\u043f\u0430\u043b\u0438, \u0445\u043e\u0442\u044f \u0434\u0440\u0443\u0433\u0438\u0435 \u043e\u0441\u0442\u0430\u043b\u0438\u0441\u044c. \u042d\u0442\u043e \u043e\u0447\u0435\u043d\u044c \u0441\u0442\u0440\u0430\u043d\u043d\u043e.", "url": "https://t.me/true_secator/1871"}, {"timestamp": "2021-06-30T15:47:13Z", "date_only": false, "value": "2021-06-30T15:47:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dc7342/40941", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "29459e32-aaa8-45d3-a92b-6452937bc17b", "content": "https://github.com/cube0x0/CVE-2021-1675", "url": "https://t.me/dc7342/40941"}, {"timestamp": "2021-06-30T16:38:46Z", "date_only": false, "value": "2021-06-30T16:38:46.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/44549", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "43dfa437-1453-4faf-b8f1-41e7baba8db2", "content": "Windows Admins Scrambling to Contain 'PrintNightmare' Flaw Exposure\nhttp://feedproxy.google.com/~r/securityweek/~3/IsQMasJIps8/windows-admins-scrambling-contain-printnightmare-flaw-exposure\n\nWindows network administrators are scrambling to contain the fallout from the release of proof-of-concept code for a nasty Windows Print Spooler vulnerability (https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-1675) that exposes Windows servers to remote code execution attacks.\nread more (https://www.securityweek.com/windows-admins-scrambling-contain-printnightmare-flaw-exposure)", "url": "https://t.me/information_security_channel/44549"}, {"timestamp": "2021-06-30T21:00:11Z", "date_only": false, "value": "2021-06-30T21:00:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/1873", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "9f40c4f0-0ee2-4d39-a880-4a7e56471481", "content": "\u200b\u200b\u041d\u0443 \u0438 \u0432\u0434\u043e\u0433\u043e\u043d\u043a\u0443 \u043a \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u043c\u0443 \u043f\u043e\u0441\u0442\u0443 \u043f\u0440\u043e \u043d\u0435\u0437\u0430\u043a\u0440\u044b\u0442\u0443\u044e CVE-2021-1675", "url": "https://t.me/true_secator/1873"}, {"timestamp": "2021-07-01T00:00:00Z", "date_only": true, "value": "2021-07-01", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-014", "record": "CERTFR-2021-ALE-014", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2021-07-01T07:44:02Z", "date_only": false, "value": "2021-07-01T07:44:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/6050", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "2db5317c-da91-475b-bdb4-168afba0c2cd", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 CVE-2021-1675: Windows \ud83e\ude9f RCE (untested)\n\nhttps://xss.is/threads/53479/", "url": "https://t.me/cKure/6050"}, {"timestamp": "2021-07-01T09:58:27Z", "date_only": false, "value": "2021-07-01T09:58:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_19/2021", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "696cb27f-b655-4443-9369-4ad9debef67a", "url": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_19/2021"}, {"timestamp": "2021-07-01T10:59:57Z", "date_only": false, "value": "2021-07-01T10:59:57.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/1874", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "e609b0fe-78dd-47c5-bf83-79696f303b99", "content": "\u200b\u200b\u0418\u0441\u0442\u043e\u0440\u0438\u044f \u0441 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e PrintNightmare \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0432\u0441\u0435 \u0447\u0443\u0434\u0435\u0441\u0430\u0442\u0435\u0435 \u0438 \u0447\u0443\u0434\u0435\u0441\u0430\u0442\u0435\u0435, \u043a\u0430\u043a \u0441\u043a\u0430\u0437\u0430\u043b\u0430 \u0431\u044b \u043a\u044d\u0440\u0440\u043e\u043b\u043e\u0432\u0441\u043a\u0430\u044f \u0410\u043b\u0438\u0441\u0430.\n\n\u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 Sangfor, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u044b\u043b\u043e\u0436\u0438\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u0438 PoC \u043e\u0448\u0438\u0431\u043a\u0438, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u0438, \u0447\u0442\u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u0430\u044f \u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043c\u0435\u043d\u043d\u043e CVE-2021-1675 \u0438 \u0435\u0441\u0442\u044c. \u0410 CVE-2021-1675 \u0431\u044b\u043b\u0430 \u0443\u0436\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u0430 \u0438\u044e\u043d\u044c\u0441\u043a\u0438\u043c \u043f\u0430\u0442\u0447\u0435\u043c \u043e\u0442 Microsoft.\n\n\u041e\u0434\u043d\u0430\u043a\u043e, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043f\u043e\u044f\u0432\u0438\u0432\u0448\u0435\u0439\u0441\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u0430\u044f \u043a\u0438\u0442\u0430\u0439\u0446\u0430\u043c\u0438 \u0434\u044b\u0440\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e CVE-2021-1675 \u0432\u043e\u0432\u0441\u0435 \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f, \u044d\u0442\u043e \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u043e \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u0430\u044f 0-day. \u0415\u0441\u043b\u0438 \u044d\u0442\u043e \u0442\u0430\u043a, \u0442\u043e \u044d\u0442\u043e \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u0435\u0442 \u0432\u0447\u0435\u0440\u0430\u0448\u043d\u0438\u0439 \u043a\u0435\u0439\u0441, \u043a\u043e\u0433\u0434\u0430 \u043d\u0430 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0445 Windows \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f PrintNightmare \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u043b\u0430 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c.\n\n\u041a\u0441\u0442\u0430\u0442\u0438, \u0414\u0435\u043b\u043f\u0438 \u0443\u0436\u0435 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043e\u0448\u0438\u0431\u043a\u0438, \u0430 \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e - \u0434\u043e \u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 Mimikatz \u043e\u0441\u0442\u0430\u043b\u043e\u0441\u044c \u043d\u0435\u0434\u043e\u043b\u0433\u043e.\n\n\u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e PrintNightmare \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c RCE \u0441 \u043f\u043e\u0437\u0438\u0446\u0438\u0438 \u043b\u044e\u0431\u043e\u0433\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0422\u0430\u043a \u0447\u0442\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f, \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0442\u0430 \u0436\u0435, \u0447\u0442\u043e \u0438 \u0431\u044b\u043b\u0430 \u0432\u0447\u0435\u0440\u0430 - \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0442\u0440\u0443\u0431\u0438\u0442\u044c spoolsv.exe, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445 \u0434\u043e\u043c\u0435\u043d\u0430.", "url": "https://t.me/true_secator/1874"}, {"timestamp": "2021-07-01T11:03:01Z", "date_only": false, "value": "2021-07-01T11:03:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/3732", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "e9988cbd-0f3e-4cd4-b5cf-a42249d0a7dc", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (June 1-30)\nCVE-2021-1675 - Windows Print Spooler EoP\nhttps://t.me/cybersecuritytechnologies/3723\nCVE-2021-21985 - vSphere Client RCE\nhttps://t.me/cybersecuritytechnologies/3493\nCVE-2021-3560 - Privilege escalation with polkit\nhttps://t.me/cybersecuritytechnologies/3587\nCVE-2021-28476 - Hyper-V RCE in vmswitch.sys\nhttps://t.me/cybersecuritytechnologies/3514\nCVE-2020-3580 - XSS in Cisco ASA\nhttps://www.helpnetsecurity.com/2021/06/29/cve-2020-3580-exploit\nCVE-2021-31955/31956 - Windows NTFS EoP/Kernel Information Disclosure\nhttps://github.com/mavillon1/CVE-2021-31955-POC\nhttps://t.me/cybersecuritytechnologies/3705\nCVE-2021-33739 - MS DWM Core Library EoP\nhttps://t.me/cybersecuritytechnologies/3581\nCVE-2021-27850 - Apache Tapestry RCE\nhttps://t.me/cybersecuritytechnologies/3694\nCVE-2020-36289 - Atlassian Jira Unauth User Enum\nhttps://mobile.twitter.com/i/web/status/1402644004781633540", "url": "https://t.me/CyberSecurityTechnologies/3732"}, {"timestamp": "2021-07-01T11:07:55Z", "date_only": false, "value": "2021-07-01T11:07:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cKure/6053", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "fa712fb2-31c8-4f79-bc39-94c40443ffaf", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 EDR  Query to detect CVE-2021-1675\n\nhttps://mobile.twitter.com/_M_Shahnawaz/status/1410529617966997508", "url": "https://t.me/cKure/6053"}, {"timestamp": "2021-07-01T13:32:25Z", "date_only": false, "value": "2021-07-01T13:32:25.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/LearnExploit/2538", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "acae1110-2ff3-4429-9d6e-811996aad419", "content": "\u06a9\u0634\u0641 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062c\u062f\u06cc\u062f \u0648 \u062e\u0637\u0631\u0646\u0627\u06a9\u06cc \u0628\u0647 \u0646\u0627\u0645 PrintNightmare \u06a9\u0647 \u0628\u0647 \u0646\u0638\u0631 \u062f\u0631 \u062d\u0627\u0644 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06af\u0633\u062a\u0631\u062f\u0647 \u0646\u06cc\u0632 \u0645\u06cc \u0628\u0627\u0634\u062f . \n\n\u062a\u06cc\u0645 \u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u06cc\u06a9 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u0628\u0647 \u0646\u0627\u0645 PrintNightmare \u0631\u0627 \u0631\u0648\u06cc Windows \u06a9\u0634\u0641 \u06a9\u0631\u062f\u0647 \u0627\u0646\u062f \u06a9\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u06a9\u0646\u062a\u0631\u0644 \u062f\u0627\u0645\u06cc\u0646 \u0631\u0627 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0645\u06cc \u062f\u0647\u062f . \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0646\u0648\u0632 \u062a\u0648\u0633\u0637 \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a Patch \u0646\u0634\u062f\u0647 \u0627\u0645\u0627 \u0634\u0631\u06a9\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc \u0686\u06cc\u0646\u06cc QiAnXin \u06cc\u06a9 \u0641\u06cc\u0644\u0645 \u062f\u0645\u0648 \u0627\u0632 Exploit \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u0648 \u0647\u0645 \u0632\u0645\u0627\u0646 \u06af\u0632\u0627\u0631\u0634 \u0647\u0627\u06cc\u06cc \u0645\u0628\u0646\u06cc \u0628\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06af\u0631\u0648\u0647 \u0647\u0627\u06cc \u0647\u06a9\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0627\u0633\u062a . \n\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc ( CVE-2021-1675 ) \u0628\u0633\u06cc\u0627\u0631 \u0628\u062d\u0631\u0627\u0646\u06cc \u0628\u0648\u062f\u0647 \u0648 \u0644\u0627\u0632\u0645 \u0628\u0647 \u0627\u0642\u062f\u0627\u0645 \u0641\u0648\u0631\u06cc Admin \u0647\u0627\u06cc \u0634\u0628\u06a9\u0647 \u062f\u0627\u0631\u062f . \u0627\u0632 \u0622\u0646\u062c\u0627 \u06a9\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u0631\u062a\u0628\u0637 \u0628\u0627 Windows ( Print Spooler ) \u0645\u06cc \u0628\u0627\u0634\u062f \u0644\u0627\u0632\u0645 \u0627\u0633\u062a \u062a\u0627 \u0632\u0645\u0627\u0646 \u0627\u0631\u0627\u0626\u0647 Patch \u0627\u0632 \u0637\u0631\u0641 \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u0641\u0648\u0631\u0627 \u0633\u0631\u0648\u06cc\u0633 Spooler \u0628\u0647 \u0648\u06cc\u0698\u0647 \u0631\u0648\u06cc Domain Controller \u0647\u0627 \u0645\u062a\u0648\u0642\u0641 \u0648 Disable \u0634\u0648\u062f . \u0633\u0627\u06cc\u0631 \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u0631\u0648 \u0645\u06cc\u062a\u0648\u0646\u06cc\u062f \u062f\u0631 \u0627\u06cc\u0646 \u0644\u06cc\u0646\u06a9 \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u06cc\u062f . \n\n\u0645\u0648\u0633\u0633\u0647 \u0645\u0639\u062a\u0628\u0631 NIST \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0631\u0648 \u0628\u0627 \u062f\u0631\u062c\u0647 High \u062a\u0627\u06cc\u06cc\u062f \u06a9\u0631\u062f\u0647 . \n\u062c\u0647\u062a \u0627\u06cc\u0646\u06a9\u0647 \u0622\u06cc\u0627 \u0633\u0631\u0648\u06cc\u0633 \u0634\u0645\u0627 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u0647\u0633\u062a \u0648 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u0634\u062f\u0647 \u06cc\u0627 \u0646\u0647 \u0645\u06cc\u062a\u0648\u0646\u06cc\u062f \u0627\u0632 \u0627\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631 \u06a9\u0647 \u062f\u0631 \u062f\u0633\u062a\u0631\u0633 \u0647\u0633\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f : \n\nGithub \n\n\u0647\u0645\u0686\u0646\u06cc\u0646 \u0633\u0648\u0631\u0633 \u06a9\u062f \u0627\u06cc\u0646 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u0628\u0647 \u0635\u0648\u0631\u062a \u0639\u0645\u0648\u0645\u06cc \u067e\u062e\u0634 \u0634\u062f\u0647 \u0648 \u062f\u0631 \u062f\u0633\u062a\u0631\u0633 \u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u0647 :\n\nExploit \n\n#PrintNightmare #0day \n\niliyahr\n\u2014\u2014\u2014\u2014\u2014\u2014\n0Day.Today\n@LearnExploit\n@Tech_Army", "url": "https://t.me/LearnExploit/2538"}, {"timestamp": "2021-07-01T13:56:10Z", "date_only": false, "value": "2021-07-01T13:56:10.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/ZiRpVpQIVhTPFUKYCmmHC--OlCXSQCYSlhQFKiQtKk5hcQ", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "6f35caa2-c754-4eb4-b53e-164fa73b88d2"}, {"timestamp": "2021-07-01T14:06:17Z", "date_only": false, "value": "2021-07-01T14:06:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cKure/6056", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "267a84da-d9ff-4956-a05e-f75546a8894a", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 CVE-2021-1675 Windows RCE; what we know so far. \n\nhttps://www.reddit.com/r/msp/comments/ob6y02/critical_vulnerability_printnightmare_exposes/", "url": "https://t.me/cKure/6056"}, {"timestamp": "2021-07-01T14:12:11Z", "date_only": false, "value": "2021-07-01T14:12:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/6057", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "7bef11e5-f521-4ac1-9a6f-899ce6321261", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 CVE-2021-1675 Windows RCE; video PoC: https://youtu.be/qU3vQ-B-FPY", "url": "https://t.me/cKure/6057"}, {"timestamp": "2021-07-01T16:46:39Z", "date_only": false, "value": "2021-07-01T16:46:39.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/SecLabNews/10485", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "6c07bfde-957d-4b28-843c-6530b87a793d", "content": "\u0420\u044f\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u0430\u0442\u0447, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Microsoft \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2021-1675, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u0435\u043a\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u0438 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u041a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0435 \u043f\u0430\u0442\u0447, \u0432\u0441\u0435 \u0435\u0449\u0435 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 Microsoft, \u043f\u043e\u0445\u043e\u0436\u0435, \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u043b\u0430 \u0434\u0432\u0435 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u043e\u0434 \u043e\u0434\u043d\u0438\u043c \u0438 \u0442\u0435\u043c \u0436\u0435 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE.\n\n \n\nhttps://www.securitylab.ru/news/521822.php", "url": "https://t.me/SecLabNews/10485"}, {"timestamp": "2021-07-02T00:00:00Z", "date_only": false, "value": "2021-07-02T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-013", "record": "CERTFR-2021-ALE-013", "field": "last_revision_date"}, {"timestamp": "2021-07-02T00:00:00Z", "date_only": false, "value": "2021-07-02T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-014", "record": "CERTFR-2021-ALE-014", "field": "initial_release_date"}, {"timestamp": "2021-07-02T00:00:00Z", "date_only": false, "value": "2021-07-02T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-013", "record": "CERTFR-2021-ALE-013", "field": "revisions.2.revision_date"}, {"timestamp": "2021-07-02T00:00:00Z", "date_only": false, "value": "2021-07-02T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-014", "record": "CERTFR-2021-ALE-014", "field": "revisions.0.revision_date"}, {"timestamp": "2021-07-02T05:59:36Z", "date_only": false, "value": "2021-07-02T05:59:36.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/RalfHackerChannel/1068", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "d4b2c137-d8f4-497c-a522-af4b490d9f85", "content": "PrintNightmare (CVE-2021-1675): Remote code execution in Windows Spooler Service\n\nhttps://github.com/afwu/PrintNightmare\n\nhttps://github.com/cube0x0/CVE-2021-1675\n\nhttps://github.com/calebstewart/CVE-2021-1675\n\n#exploit #git", "url": "https://t.me/RalfHackerChannel/1068"}, {"timestamp": "2021-07-02T07:44:31Z", "date_only": false, "value": "2021-07-02T07:44:31.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/1333", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "6c0b45a6-85e2-41cb-8760-e8988e0798c1", "content": "\ud83d\udd25 WATCH OUT! Microsoft warns of critical PrintNightmare RCE vulnerability (CVE-2021-34527) being exploited in the wild.\n\nDetails: https://thehackernews.com/2021/07/microsoft-warns-of-critical.html\n\nIt is separate from the Windows Print Spooler issue (CVE-2021-1675) Microsoft patched recently.", "url": "https://t.me/thehackernews/1333"}, {"timestamp": "2021-07-02T10:23:45Z", "date_only": false, "value": "2021-07-02T10:23:45.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/1880", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "ad2a842d-ceb3-418d-908b-a8993737e277", "content": "\u200b\u200b\u0418\u0442\u0430\u043a, \u043b\u043e\u0433\u0438\u0447\u043d\u043e\u0435 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u0435 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e PrintNightmare \u0432 \u0434\u0438\u0441\u043f\u0435\u0442\u0447\u0435\u0440\u0435 \u043e\u0447\u0435\u0440\u0435\u0434\u0438 \u043f\u0435\u0447\u0430\u0442\u0438 Windows spoolsv.exe.\n\nMicrosoft \u0442\u0430\u043a\u0438 \u0432\u044b\u0434\u0430\u043b\u0438 \u043e\u0448\u0438\u0431\u043a\u0435 \u043d\u043e\u0432\u044b\u0439 CVE-2021-34527, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u044d\u0442\u043e \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u043e \u0441\u0432\u0435\u0436\u0430\u044f \u0434\u044b\u0440\u043a\u0430, \u043e\u0442\u043b\u0438\u0447\u043d\u0430\u044f \u043e\u0442 CVE-2021-1675, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0430 \u0437\u0430\u043a\u0440\u044b\u0442\u0430 \u0438\u044e\u043d\u044c\u0441\u043a\u0438\u043c \u043f\u0430\u0442\u0447\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u044c\u043d\u043e Microsoft \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0430 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 Windows, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0442\u043e, \u0447\u0442\u043e PrintNightmare \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 (\u0435\u0449\u0435 \u0431\u044b, PoC-\u0442\u043e \u0443\u0436\u0435 \u0434\u0430\u0432\u043d\u043e \u0432 \u043f\u0430\u0431\u043b\u0438\u043a\u0435).\n\n\u041e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 Microsoft \u043f\u043e \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0435\u0441\u0442\u044c \u043f\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043d\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0435.", "url": "https://t.me/true_secator/1880"}, {"timestamp": "2021-07-02T10:27:11Z", "date_only": false, "value": "2021-07-02T10:27:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cKure/6062", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "09550714-70cd-41fc-a782-d622174ed99d", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 CVE-2021-1675 Windows RCE.", "url": "https://t.me/cKure/6062"}, {"timestamp": "2021-07-02T12:15:03Z", "date_only": false, "value": "2021-07-02T12:15:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/SecLabNews/10487", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "2984438b-cd52-40b0-9fe9-b2c6554d2852", "content": "\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0430\u0448\u0443\u043c\u0435\u0432\u0448\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a PrintNightmare, \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u0434\u0438\u0441\u043f\u0435\u0442\u0447\u0435\u0440\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u0438 \u043f\u0435\u0447\u0430\u0442\u0438 Windows, \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2021-1675, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0442\u0435\u0445\u043d\u043e\u0433\u0438\u0433\u0430\u043d\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, \u2013 \u044d\u0442\u043e \u0434\u0432\u0435 \u0440\u0430\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 PrintNightmare \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n \n\nhttps://www.securitylab.ru/news/521857.php", "url": "https://t.me/SecLabNews/10487"}, {"timestamp": "2021-07-02T17:33:04Z", "date_only": false, "value": "2021-07-02T17:33:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ics_cert/452", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "bb7223c6-0c4b-4b8c-93ac-738c0ddd1f8d", "content": "\u0647\u0634\u062f\u0627\u0631\n\n\u0633\u0631\u0648\u06cc\u0633 Print.Spooler \u062f\u0631 \u0645\u0639\u0631\u0636 \u062a\u0647\u062f\u06cc\u062f\n\u0627\u062e\u06cc\u0631\u0627\u064b \u0628\u0631\u0627\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc CVE-2021-1675 \u06a9\u0647 \u062f\u0631 \u0645\u0648\u0631\u062f Print.Spooler \u0648\u06cc\u0646\u062f\u0648\u0632 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647 \u0628\u0648\u062f poc \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0628\u0627 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u062d\u0641\u0631\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u0645\u06a9\u0627\u0646 \u062d\u0645\u0644\u0627\u062a RCE \u0641\u0631\u0627\u0647\u0645 \u0627\u0633\u062a.\n\u2705\u062a\u0627 \u0632\u0645\u0627\u0646 \u0627\u0631\u0627\u0626\u0647 \u0648\u0635\u0644\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u062a\u0648\u0633\u0637 \u0645\u0627\u06a9\u0631\u0648\u0633\u0627\u0641\u062a\u060c \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc \u0634\u0648\u062f \u0627\u06cc\u0646 \u0633\u0631\u0648\u06cc\u0633 \u063a\u06cc\u0631 \u0641\u0639\u0627\u0644 \u06af\u0631\u062f\u062f.\n\n\ud83d\udc6e\u200d\u2640\ufe0f\ud83d\udc6e\u200d\u2640\ufe0f \u0628\u0627\u0632\u0646\u0634\u0631 \u0645\u0637\u0627\u0644\u0628 \u0627\u06cc\u0646 \u06a9\u0627\u0646\u0627\u0644 \u0635\u0631\u0641\u0627 \u0628\u0627 \u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u06a9\u0627\u0645\u0644 \u06a9\u0627\u0646\u0627\u0644 \u0645\u062c\u0627\u0632 \u0645\u06cc\u0628\u0627\u0634\u062f.\n\n\ud83c\udfed\u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\n\u0627\u062f\u0645\u06cc\u0646:\nhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u062a\u0648\u06cc\u06cc\u062a\u0631:\nhttps://twitter.com/icscerti", "url": "https://t.me/ics_cert/452"}, {"timestamp": "2021-07-02T17:41:34Z", "date_only": false, "value": "2021-07-02T17:41:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ics_cert/453", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "da7b9341-9fd3-4c57-b229-f6e17989875f", "content": "\u26d4\ufe0f \u0647\u0634\u062f\u0627\u0631: \u0627\u0646\u062a\u0634\u0627\u0631 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u0628\u0631\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc\nPrintNightmare (CVE-2021-1675): Remote code execution in Windows Spooler Service\n\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u0628\u0648\u062f\u0647 \u0648 \u062a\u0645\u0627\u0645\u06cc \u0633\u06cc\u0633\u062a\u0645\u200c\u0639\u0627\u0645\u0644\u200c\u0647\u0627\u06cc \u0648\u06cc\u0646\u062f\u0648\u0632\u06cc \u0631\u0627 \u062a\u062d\u062a \u062a\u0627\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0647 \u0648 \u0627\u0646\u062a\u0634\u0627\u0631 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u0622\u0646 \u0628\u0635\u0648\u0631\u062a \u0639\u0645\u0648\u0645\u06cc \u0648 \u06af\u0633\u062a\u0631\u062f\u0647 \u0628\u0633\u06cc\u0627\u0631 \u062d\u0633\u0627\u0633 \u0648 \u062e\u0637\u0631\u0646\u0627\u06a9 \u0627\u0633\u062a.\n\n\u0628\u0631\u0627\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u06cc\u0634\u062a\u0631 \u0628\u0647 \u0644\u06cc\u0646\u06a9\u200c\u0647\u0627\u06cc \u0632\u06cc\u0631 \u0645\u0631\u0627\u062c\u0639\u0647 \u06a9\u0646\u06cc\u062f:\n\n\ud83c\udf10 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1675\n\n\ud83c\udf10 https://github.com/afwu/PrintNightmare\n\n\ud83c\udf10 https://github.com/cube0x0/CVE-2021-1675\n\n\ud83d\udc6e\u200d\u2640\ufe0f\ud83d\udc6e\u200d\u2640\ufe0f \u0628\u0627\u0632\u0646\u0634\u0631 \u0645\u0637\u0627\u0644\u0628 \u0627\u06cc\u0646 \u06a9\u0627\u0646\u0627\u0644 \u0635\u0631\u0641\u0627 \u0628\u0627 \u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u06a9\u0627\u0645\u0644 \u06a9\u0627\u0646\u0627\u0644 \u0645\u062c\u0627\u0632 \u0645\u06cc\u0628\u0627\u0634\u062f.\n\n\ud83c\udfed\u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\n\u0627\u062f\u0645\u06cc\u0646:\nhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u062a\u0648\u06cc\u06cc\u062a\u0631:\nhttps://twitter.com/icscerti", "url": "https://t.me/ics_cert/453"}, {"timestamp": "2021-07-03T18:33:01Z", "date_only": false, "value": "2021-07-03T18:33:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/3750", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "7170eada-07bb-44a4-858c-b67dcccbf122", "content": "#Blue_Team_Techniques\n1. CVE-2021-1675/CVE-2021-34527 Detection Info\nhttps://github.com/LaresLLC/CVE-2021-1675\n]-> Restricting the ACLs:\nhttps://blog.truesec.com/2021/06/30/fix-for-printnightmare-cve-2021-1675-exploit-to-keep-your-print-servers-running-while-a-patch-is-not-available\n]-> Mitigation:\nhttps://doublepulsar.com/zero-day-for-every-supported-windows-os-version-in-the-wild-printnightmare-b3fdb82f840c\n\n2. Fail2exploit: a security audit of Fail2ban\nhttps://securitylab.github.com/research/Fail2exploit", "url": "https://t.me/CyberSecurityTechnologies/3750"}, {"timestamp": "2021-07-05T00:00:00Z", "date_only": false, "value": "2021-07-05T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202106-0639", "record": "VAR-202106-0639", "field": "sources_release_date.data.5.date"}, {"timestamp": "2021-07-05T08:20:00Z", "date_only": false, "value": "2021-07-05T08:20:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202106-0639", "record": "VAR-202106-0639", "field": "sources_update_date.data.5.date"}, {"timestamp": "2021-07-07T00:00:00Z", "date_only": false, "value": "2021-07-07T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202106-0639", "record": "VAR-202106-0639", "field": "sources_update_date.data.1.date"}, {"timestamp": "2021-07-07T00:00:00Z", "date_only": true, "value": "2021-07-07", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-48427", "record": "CNVD-2021-48427", "field": "openTime"}, {"timestamp": "2021-07-07T00:00:00Z", "date_only": false, "value": "2021-07-07T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-014", "record": "CERTFR-2021-ALE-014", "field": "revisions.1.revision_date"}, {"timestamp": "2021-07-07T00:00:00Z", "date_only": true, "value": "2021-07-07", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-48427", "record": "CNVD-2021-48427", "field": "submitTime"}, {"timestamp": "2021-07-08T00:00:00Z", "date_only": false, "value": "2021-07-08T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-014", "record": "CERTFR-2021-ALE-014", "field": "revisions.3.revision_date"}, {"timestamp": "2021-07-08T07:05:32Z", "date_only": false, "value": "2021-07-08T07:05:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/36538", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "e5ec05f7-c30d-43e6-a099-66f0871b52e1", "content": "Quick look at CVE-2021-1675 & CVE-2021-34527 (aka PrintNightmare)\n\nhttps://ift.tt/3qUGxTr", "url": "https://t.me/ctinow/36538"}, {"timestamp": "2021-07-08T07:05:33Z", "date_only": false, "value": "2021-07-08T07:05:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/36539", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "d49283ee-0a4c-42b7-87d6-cf1192583d4e", "content": "Quick look at CVE-2021-1675 & CVE-2021-34527 (aka PrintNightmare)\n\nhttps://ift.tt/3qUGxTr", "url": "https://t.me/ctinow/36539"}, {"timestamp": "2021-07-09T17:30:01Z", "date_only": false, "value": "2021-07-09T17:30:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/information_security_channel/44635", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "a3d9f1ec-55d3-4fe8-bcae-2b1f2011d78a", "content": "Did Microsoft Botch the PrintNightmare Patch?\nhttp://feedproxy.google.com/~r/securityweek/~3/PqEJjMi6APQ/did-microsoft-botch-printnightmare-patch\n\nJust days after shipping an emergency Windows update to cover a dangerous code execution flaw (CVE-2021-1675 (https://www.securityweek.com/windows-admins-scrambling-contain-printnightmare-flaw-exposure)) in the Print Spooler service, Microsoft is investigating a new set of claims that its so-called \u2018PrintNightmare\u2019 patch has not properly fixed the underlying vulnerability.\nread more (https://www.securityweek.com/did-microsoft-botch-printnightmare-patch)", "url": "https://t.me/information_security_channel/44635"}, {"timestamp": "2021-07-10T05:15:39Z", "date_only": false, "value": "2021-07-10T05:15:39.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/crackcodes/121", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "2d3203d9-f02f-4bfc-b187-e38e0ad5c1d3", "content": "https://github.com/cube0x0/CVE-2021-1675/blob/main/CVE-2021-1675.py\n\u261d\ufe0f\u261d\ufe0f\u261d\ufe0fRemotly hack any window", "url": "https://t.me/crackcodes/121"}, {"timestamp": "2021-07-12T00:00:00Z", "date_only": false, "value": "2021-07-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-014", "record": "CERTFR-2021-ALE-014", "field": "revisions.5.revision_date"}, {"timestamp": "2021-07-15T00:00:00Z", "date_only": true, "value": "2021-07-15", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-014", "record": "CERTFR-2021-ALE-014", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2021-07-16T00:00:00Z", "date_only": false, "value": "2021-07-16T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-014", "record": "CERTFR-2021-ALE-014", "field": "revisions.6.revision_date"}, {"timestamp": "2021-07-16T14:35:20Z", "date_only": false, "value": "2021-07-16T14:35:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Ou-Kzzl3nLkADt9_Yue4jZMgPKq1aQqAvVswhjnvvkETSg", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "c8008171-42f4-4463-8a48-971433cabd62"}, {"timestamp": "2021-07-28T08:32:17Z", "date_only": false, "value": "2021-07-28T08:32:17.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/GithubRedTeam/150", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "7664a0d3-6974-448a-aea8-8d4013ff0203", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aTo fight against Windows security breach PrintNightmare! (CVE-2021-34527, CVE-2021-1675)\nURL\uff1ahttps://github.com/Tomparte/PrintNightmare", "url": "https://t.me/GithubRedTeam/150"}, {"timestamp": "2021-08-02T10:24:14Z", "date_only": false, "value": "2021-08-02T10:24:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/250", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "b0930e6f-cef1-4095-a323-bd0cd72a1bc4", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aLocal exploit for CVE-2021-1675\nURL\uff1ahttps://github.com/tacbliw/PrintNightmare-LPE", "url": "https://t.me/GithubRedTeam/250"}, {"timestamp": "2021-08-03T00:00:00Z", "date_only": false, "value": "2021-08-03T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202106-0639", "record": "VAR-202106-0639", "field": "sources_update_date.data.0.date"}, {"timestamp": "2021-08-11T00:00:00Z", "date_only": true, "value": "2021-08-11", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-014", "record": "CERTFR-2021-ALE-014", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2021-08-11T00:00:00Z", "date_only": false, "value": "2021-08-11T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-014", "record": "CERTFR-2021-ALE-014", "field": "revisions.7.revision_date"}, {"timestamp": "2021-08-12T00:00:00Z", "date_only": false, "value": "2021-08-12T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-622", "record": "CERTFR-2021-AVI-622", "field": "last_revision_date"}, {"timestamp": "2021-08-12T00:00:00Z", "date_only": false, "value": "2021-08-12T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-622", "record": "CERTFR-2021-AVI-622", "field": "initial_release_date"}, {"timestamp": "2021-08-12T00:00:00Z", "date_only": false, "value": "2021-08-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-014", "record": "CERTFR-2021-ALE-014", "field": "revisions.8.revision_date"}, {"timestamp": "2021-08-12T00:00:00Z", "date_only": false, "value": "2021-08-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-622", "record": "CERTFR-2021-AVI-622", "field": "revisions.0.revision_date"}, {"timestamp": "2021-08-13T16:07:13Z", "date_only": false, "value": "2021-08-13T16:07:13.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/2001", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "327a70e8-f42d-4b2c-ae8c-cd6a9d8b7ddc", "content": "\u0412 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u043e\u043a\u0430 \u0432\u0435\u0441\u044c \u0438\u043d\u0444\u043e\u0441\u0435\u043a \u043f\u043e \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e \u0441 Microsoft \u0432\u044b\u043f\u0438\u043b\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u043d\u043e\u0432\u044b\u0435 \u0438 \u043d\u043e\u0432\u044b\u0435 \u0434\u044b\u0440\u044b PrintNightmare (\u0433\u0440\u0443\u043f\u043f\u0430 \u043e\u0448\u0438\u0431\u043e\u043a CVE-2021-1675 , CVE-2021-34527 \u0438 CVE-2021-36958), \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0435\u0440\u0435\u043d\u0438\u043c\u0430\u0435\u0442 \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u043e\u0439 \u043e\u043f\u044b\u0442 \u043a\u043e\u043b\u043b\u0435\u0433, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044f \u0432 \u0441\u0432\u043e\u0439 \u0430\u0440\u0441\u0435\u043d\u0430\u043b \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Windows.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u044d\u0442\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 (LPE) \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0434\u043e\u043c\u0435\u043d\u0430 Windows \u0447\u0435\u0440\u0435\u0437 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 (RCE) \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 SYSTEM.\n\n\u041d\u0430 \u0434\u043d\u044f\u0445 Crowdstrike \u0443\u043b\u0438\u0447\u0438\u043b\u0438 \u0432 \u044d\u0442\u043e\u043c \u0431\u0430\u043d\u0434\u0443 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Magniber, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0435\u043f\u0435\u0440\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b PrintNightmare \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0432 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a \u043d\u0430 \u044e\u0436\u043d\u043e\u043a\u043e\u0440\u0435\u0439\u0441\u043a\u0438\u0445 \u0436\u0435\u0440\u0442\u0432. \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e, \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0435 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435, Magniber \u0443\u0434\u0430\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0443\u0442\u0430\u043d\u043d\u044b\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a DLL, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u0432\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441, \u0430 \u0437\u0430\u0442\u0435\u043c \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0431\u0445\u043e\u0434\u0430 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\nMagniber \u0430\u043a\u0442\u0438\u0432\u043d\u0430 \u0441 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2017 \u0433\u043e\u0434\u0430, \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0430\u0441\u044c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0440\u0435\u043a\u043b\u0430\u043c\u044b \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0430 Magnitude Exploit Kit (EK) \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u0435\u0435\u043c\u043d\u0438\u043a\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f Cerber, \u0441\u0435\u0439\u0447\u0430\u0441 \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 Magnitude EK \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Internet Explorer \u0441 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u043e\u0439 CVE-2020-0968. \u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u0430 \u043d\u0430 \u042e\u0436\u043d\u0443\u044e \u041a\u043e\u0440\u0435\u044e, \u041a\u0438\u0442\u0430\u0439, \u0422\u0430\u0439\u0432\u0430\u043d\u044c, \u0413\u043e\u043d\u043a\u043e\u043d\u0433, \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440, \u041c\u0430\u043b\u0430\u0439\u0437\u0438\u044e \u0438 \u0434\u0440\u0443\u0433\u0438\u0435. \u0418 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 30 \u0434\u043d\u0435\u0439 \u0441\u0442\u0430\u043b\u0430 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0430\u043a\u0442\u0438\u0432\u043d\u0430, \u0442\u0435\u043f\u0435\u0440\u044c \u043f\u043e\u043d\u044f\u0442\u043d\u043e \u043f\u043e\u0447\u0435\u043c\u0443.\n\n\u041a \u0430\u0442\u0430\u043a\u0430\u043c PrintNightmare \u043f\u0440\u0438\u0441\u043e\u0441\u0435\u0434\u0438\u043b\u0438\u0441\u044c \u0438 ransomware Vice Society (\u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 HelloKitty), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0431\u043e\u043a\u043e\u0432\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u043f\u043e \u0441\u0435\u0442\u044f\u043c \u0441\u0432\u043e\u0438\u0445 \u0436\u0435\u0440\u0442\u0432. \u0410\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0431\u0430\u043d\u0434\u044b \u043f\u043e\u043f\u0430\u043b\u0430 \u043f\u043e\u0434 \u043f\u0440\u0438\u0446\u0435\u043b Cisco Talos, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0432\u0438\u0434\u0435\u043b\u0438, \u043a\u0430\u043a Vice Society \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u044e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u043e\u0432\u043a\u0438 (DLL) \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u043e\u0448\u0438\u0431\u043e\u043a CVE-2021-1675 \u0438 CVE-2021-34527.\n\n\u041a\u0430\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, Vice Society \u0448\u0438\u0444\u0440\u0443\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Windows \u0438 Linux \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e OpenSSL (AES256 + secp256k1 + ECDSA) \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u0438\u0445 \u0438\u043b\u0438 \u0441\u0440\u0435\u0434\u043d\u0438\u0445 \u0436\u0435\u0440\u0442\u0432, \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0443\u0435\u0442 \u0434\u0432\u043e\u0439\u043d\u043e\u0435 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0441\u043e\u0431\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0443\u0434\u0435\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f\u043c. TTP \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0445 \u043a\u043e\u043f\u0438\u0439 \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0436\u0435\u0440\u0442\u0432\u0430\u043c\u0438 \u0438 \u043e\u0431\u0445\u043e\u0434 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b Windows \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043a \u043d\u043e\u0432\u0438\u0447\u043a\u0430\u043c \u043b\u0435\u043d\u0442\u044b \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u0441\u043e\u0435\u0434\u0438\u043d\u0438\u043b\u0438\u0441\u044c \u0438 Conti, \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u0443\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Windows \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0438\u0437\u043b\u044e\u0431\u043b\u0435\u043d\u043d\u043e\u0439  PrintNightmare.\n\n\u0414\u0430 \u0438 \u0432\u043e\u043e\u0431\u0449\u0435 \u044d\u0442\u043e\u0442 \u0441\u043f\u0438\u0441\u043e\u043a \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u0442\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u043e, \u0440\u0430\u0432\u043d\u043e \u043a\u0430\u043a \u0438 \u0441\u043f\u0438\u0441\u043e\u043a \u0438\u0445 \u0436\u0435\u0440\u0442\u0432. \u0422\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u044f, \u043a\u0430\u043a \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f, \u043d\u0430 \u043b\u0438\u0446\u043e.", "url": "https://t.me/true_secator/2001"}, {"timestamp": "2021-08-20T11:43:19Z", "date_only": false, "value": "2021-08-20T11:43:19.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/GithubRedTeam/352", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "a549e12a-62ab-44e8-a894-d78fabaf0ed2", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aTo fight against Windows security breach PrintNightmare! (CVE-2021-34527, CVE-2021-1675)\nURL\uff1ahttps://github.com/Tomparte/PrintNightmare", "url": "https://t.me/GithubRedTeam/352"}, {"timestamp": "2021-08-20T13:37:04Z", "date_only": false, "value": "2021-08-20T13:37:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bhhub/516", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "0ddf252c-cc71-4228-baac-05eec5983592", "content": "#BugBountyTips of the Day\nCVE-2021-1675 - PrintNightmare LPE (PowerShell) - Usage: Import-Module .\\cve-2021-1675.ps1 Invoke-Nightmare -DriverName \"HP\" -NewUser \"0day\" -NewPassword \"LulSpool\"  - Repo:  https://t.co/hb8DhzS0jI - Creators: @calebjstewart @_johnhammond  - #CyberSecurity #CTF #bugbountytips  https://t.co/QVfNPMnRmS\n---\n(ReconSpider - Advanced Open Source Intelligence (OSINT) Framework For Scanning IP Addresses, Emails, Websites, Organizations) -  https://t.co/H45Xz60gep #infosec #netsec #pentest #cybersecurity #bugbounty  https://t.co/3fZtbimJjx\n---\n#BugBounty I just earned $3133.70 on @GoogleVRP; bug: P2 internal googlers development dashboard exposed + arbitrary file read as root, the interesting thing about this it's that  it was outside of Google internal network  #infosec  https://t.co/m2fx9ohV8l\n---\nI just published My Methodology In Recon And Find Bugs & My Methodology In Hunting Using Phone  https://t.co/Skzz8BsFBr   special thanks for @XHackerx007 @waseyuddin @Masonhck3571 @aditi_singghh  @snewbill @Bugcrowd @lot of friends here  #BugBounty #bugbountytip #bugbountytips\n---\nHey Hackers, do you know how to exploit ReDoS or RegExDos? It is serious and yet easily exploitable.  Download from here :  https://t.co/kcFSH2jSxp  #infosec #appsec #security #bugbountytips #bugbounty #Hackers #learn365 #zine #webappsec #cybersecurity  https://t.co/d9zwE8bAAI\n---\nYour Full Map To Github Recon And Leaks Exposure  https://t.co/voUww9AwKL  #bugbountytips\n---\nI'm happy to announce that I have passed 10,000 reputations on @Hacker0x01! #BugBounty  https://t.co/oQBDzDqVhH\n---\nExploiting Grafana!  A mindmap explaining some common bug in grafana and how to exploit it   Repository:  https://t.co/lIj6wucZh0 MindMap:  https://t.co/T2H1cz3bmX  You can use the @pdnuclei tool to check some vulnerabilities in grafana  #bugbountytips #bugbounty #grafana", "url": "https://t.me/bhhub/516"}, {"timestamp": "2021-09-02T11:05:07Z", "date_only": false, "value": "2021-09-02T11:05:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/4203", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "f9c95687-547e-4223-8d5d-1461d4953b83", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (Aug 1-31)\nCVE-2021-1675 - Print Spooler EoP\nhttps://t.me/cybersecuritytechnologies/3723\nCVE-2021-31956 - Win NTFS EoP\nhttps://t.me/cybersecuritytechnologies/4110\nCVE-2021-36958 - Print Spooler RCE\nhttps://mobile.twitter.com/gentilkiwi/status/1416429860566847490?s=20\nCVE-2021-39137 - A consensus-vuln in go-eth\nCVE-2021-22937 - Pulse ConnSecure RCE\nhttps://t.me/cybersecuritytechnologies/4044\nCVE-2021-34473 - Pre-auth Path Confusion\nhttps://www.zerodayinitiative.com/blog/2021/8/17/from-pwn2own-2021-a-new-attack-surface-on-microsoft-exchange-proxyshell\nCVE-2021-21225 - Vuln in V8's Array.prototype.concat\nhttps://t.me/cybersecuritytechnologies/4090\nCVE-2021-20090 - Path traversal in Buffalo routers\nhttps://t.me/cybersecuritytechnologies/3986\nCVE-2021-26084 - Confluence Server Webwork OGNL Inj\nhttps://t.me/cybersecuritytechnologies/4202\nCVE-2021-3711 - Vulns in OpenSSL\nhttps://nakedsecurity.sophos.com/2021/08/27/big-bad-decryption-bug-in-openssl-but-no-cause-for-alarm", "url": "https://t.me/CyberSecurityTechnologies/4203"}, {"timestamp": "2021-09-17T13:28:20Z", "date_only": false, "value": "2021-09-17T13:28:20.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/c6250a7a-63b1-4996-8734-3ab181e12e3e", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "1e4de4c0-d2b5-4985-94a2-1810d696c8f6"}, {"timestamp": "2021-09-21T04:42:21Z", "date_only": false, "value": "2021-09-21T04:42:21.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/pwnwiki_zhchannel/725", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "b1cd5669-b217-4774-8186-75edc0ee3682", "content": "CVE-2021-1675 Windows Print Spooler\u9060\u7a0b\u4ee3\u78bc\u57f7\u884c\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-1675_Windows_Print_Spooler%E9%81%A0%E7%A8%8B%E4%BB%A3%E7%A2%BC%E5%9F%B7%E8%A1%8C%E6%BC%8F%E6%B4%9E", "url": "https://t.me/pwnwiki_zhchannel/725"}, {"timestamp": "2021-10-17T13:34:40Z", "date_only": false, "value": "2021-10-17T13:34:40.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/GithubRedTeam/707", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "b5b74273-5e45-4a19-8097-2d948482e662", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aPython implementation for PrintNightmare (CVE-2021-1675 / CVE-2021-34527)\nURL\uff1ahttps://github.com/ly4k/PrintNightmare", "url": "https://t.me/GithubRedTeam/707"}, {"timestamp": "2021-10-17T15:37:17Z", "date_only": false, "value": "2021-10-17T15:37:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacker_trick/297", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "886d06d0-d52e-4990-b2fe-3630a9a8e725", "content": "#Python implementation for #PrintNightmare #CVE-2021-1675 / #CVE-2021-34527\n\nhttps://github.com/ly4k/PrintNightmare", "url": "https://t.me/hacker_trick/297"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2021-1675", "field": "timestamps.asserted_at", "uuid": "76cde436-e60d-47a1-9505-8584ce7d8143", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-1675", "field": "timestamps.asserted_at", "uuid": "913cc257-3445-428d-975a-6e1ba3ac848f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-1675", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2021-1675", "record": "GSD-2021-1675", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2021-1675", "field": "evidence.0.details.added_date", "uuid": "913cc257-3445-428d-975a-6e1ba3ac848f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2021-1675", "field": "evidence.0.details.date_added", "uuid": "76cde436-e60d-47a1-9505-8584ce7d8143", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2021-1675", "field": "timestamps.first_seen_at", "uuid": "76cde436-e60d-47a1-9505-8584ce7d8143", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2021-1675", "field": "timestamps.first_seen_at", "uuid": "913cc257-3445-428d-975a-6e1ba3ac848f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2021-1675", "field": "status.status_updated_at", "uuid": "76cde436-e60d-47a1-9505-8584ce7d8143", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2021-1675", "field": "status.status_updated_at", "uuid": "913cc257-3445-428d-975a-6e1ba3ac848f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-08T08:58:19Z", "date_only": false, "value": "2021-11-08T08:58:19.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "f3d98f14-223c-4e2d-8e38-ca1a40f8cc1a"}, {"timestamp": "2021-11-09T00:00:00Z", "date_only": false, "value": "2021-11-09T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-853", "record": "CERTFR-2021-AVI-853", "field": "last_revision_date"}, {"timestamp": "2021-11-09T00:00:00Z", "date_only": false, "value": "2021-11-09T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-853", "record": "CERTFR-2021-AVI-853", "field": "initial_release_date"}, {"timestamp": "2021-11-09T00:00:00Z", "date_only": false, "value": "2021-11-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-853", "record": "CERTFR-2021-AVI-853", "field": "revisions.0.revision_date"}, {"timestamp": "2021-11-17T00:00:00Z", "date_only": true, "value": "2021-11-17", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2021-1675", "field": "evidence.0.details.due_date", "uuid": "76cde436-e60d-47a1-9505-8584ce7d8143", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-17T00:00:00Z", "date_only": true, "value": "2021-11-17", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2021-1675", "record": "GSD-2021-1675", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2021-11-20T09:53:52Z", "date_only": false, "value": "2021-11-20T09:53:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "105b1dda-41a0-490f-9b3a-5ce9b0ed51a6"}, {"timestamp": "2021-12-05T14:51:36Z", "date_only": false, "value": "2021-12-05T14:51:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/908", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "137453c5-bce6-4570-a8d8-6eda0be216ee", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-1675 LPE PoC in Nim (PrintNightmare Local Privilege Escalation)\nURL\uff1ahttps://github.com/fumamatar/NimNightmare-", "url": "https://t.me/GithubRedTeam/908"}, {"timestamp": "2021-12-05T14:55:43Z", "date_only": false, "value": "2021-12-05T14:55:43.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/GithubRedTeam/909", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "87c853f1-676a-4df8-810d-8a90b1f9b7ff", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-1675 LPE PoC in Nim (PrintNightmare Local Privilege Escalation)\nURL\uff1ahttps://github.com/fumamatar/NimNightmare", "url": "https://t.me/GithubRedTeam/909"}, {"timestamp": "2021-12-05T16:33:42Z", "date_only": false, "value": "2021-12-05T16:33:42.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BlueRedTeam/1277", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "7657a766-8568-4d0e-aa98-7acaeaae539e", "content": "CVE-2021\nCVE-2021-1675 LPE PoC in Nim (PrintNightmare Local Privilege Escalation)\n\nhttps://github.com/fumamatar/NimNightmare\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/1277"}, {"timestamp": "2022-01-05T00:00:00Z", "date_only": false, "value": "2022-01-05T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-014", "record": "CERTFR-2021-ALE-014", "field": "last_revision_date"}, {"timestamp": "2022-01-05T00:00:00Z", "date_only": false, "value": "2022-01-05T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-014", "record": "CERTFR-2021-ALE-014", "field": "revisions.9.revision_date"}, {"timestamp": "2022-01-19T17:38:38Z", "date_only": false, "value": "2022-01-19T17:38:38.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/poxek/510", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "8f57ea55-06cb-430d-bb6b-84978d648bdf", "content": "PrintNightmare (CVE-2021-1675)\n\u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0430 \u043d\u0430 \u043c\u043d\u043e\u0433\u0438\u0445 \u043c\u0430\u0448\u0438\u043d\u0430\u0445 \u0432 \u0441\u0435\u0442\u0438 \u0441 AD-DC. \n\u0412\u0430\u043c \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043f\u044d\u0439\u043b\u043e\u0430\u0434 \u0438 \u0440\u0430\u0437\u0434\u0430\u0442\u044c \u0435\u0433\u043e \u0436\u0435\u0440\u0442\u0432\u0430\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f SMB-\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b. \u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0438, \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043a\u0440\u0438\u043f\u0442\nhttps://github.com/cube0x0/CVE-2021-1675\n\n@dnevnik_infosec", "url": "https://t.me/poxek/510"}, {"timestamp": "2022-02-28T16:00:54Z", "date_only": false, "value": "2022-02-28T16:00:54.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/12002", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "ae68812d-dcb0-4035-a185-3af520d8c05b", "content": "HTB Driver. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c PrintNightmare \u0438 \u0434\u0435\u043b\u0430\u0435\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 SCF #htb #driver #printnightmare #scf #\u043f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u0430\u043c\n\n\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u0441 \u0442\u043e\u0431\u043e\u0439 \u0440\u0430\u0437\u0431\u0435\u0440\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c PrintNightmare, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 Windows \u0447\u0435\u0440\u0435\u0437 \u0431\u0430\u0433 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0435\u0447\u0430\u0442\u0438 (CVE-2021-1675), \u0441\u0434\u0435\u043b\u0430\u0435\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b SCF, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u043c\u043e\u0436\u0435\u0442 \u043d\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c NTLM-\u0445\u0435\u0448 \u043f\u0430\u0440\u043e\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0438 \u043f\u0440\u043e\u0439\u0434\u0435\u043c \u043c\u0430\u0448\u0438\u043d\u0443 Driver \u0441 \u043f\u043b\u043e\u0449\u0430\u0434\u043a\u0438 Hack The Box.\n\nhttps://xakep.ru/2022/02/28/htb-driver/", "url": "https://t.me/xakep_ru/12002"}, {"timestamp": "2022-03-08T00:00:00Z", "date_only": false, "value": "2022-03-08T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-215", "record": "CERTFR-2022-AVI-215", "field": "last_revision_date"}, {"timestamp": "2022-03-08T00:00:00Z", "date_only": false, "value": "2022-03-08T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-215", "record": "CERTFR-2022-AVI-215", "field": "initial_release_date"}, {"timestamp": "2022-03-08T00:00:00Z", "date_only": false, "value": "2022-03-08T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-215", "record": "CERTFR-2022-AVI-215", "field": "revisions.0.revision_date"}, {"timestamp": "2022-05-20T09:00:08Z", "date_only": false, "value": "2022-05-20T09:00:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/YouPentest/4833", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "761f19b3-b745-4cd5-a64b-704bec507f5d", "content": "Understanding PrintNightmare Vulnerability | (CVE-2021-1675) and (CVE-2021-34527)\n\nhttps://www.youtube.com/watch?v=qRxzPOSlu3Y", "url": "https://t.me/YouPentest/4833"}, {"timestamp": "2022-05-24T19:04:50Z", "date_only": false, "value": "2022-05-24T19:04:50Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VWMM-QQ95-VQHF", "record": "GHSA-VWMM-QQ95-VQHF", "field": "published"}, {"timestamp": "2022-05-24T20:48:33Z", "date_only": false, "value": "2022-05-24T20:48:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/dcerpc/cve_2021_1675_printnightmare.rb", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "61a56a36-e100-4993-b231-239123c2735f", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/dcerpc/cve_2021_1675_printnightmare.rb"}, {"timestamp": "2022-05-26T00:00:00Z", "date_only": false, "value": "2022-05-26T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202106-0639", "record": "VAR-202106-0639", "field": "sources_update_date.data.3.date"}, {"timestamp": "2022-05-29T13:08:28Z", "date_only": false, "value": "2022-05-29T13:08:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/YouPentest/4935", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "db37c3d6-8694-456c-9a8f-21c40e4da1a3", "content": "Understanding PrintNightmare Vulnerability | (CVE-2021-1675) and (CVE-2021-34527) TryHackMe\n\nhttps://www.youtube.com/watch?v=qRxzPOSlu3Y", "url": "https://t.me/YouPentest/4935"}, {"timestamp": "2022-06-18T10:22:36Z", "date_only": false, "value": "2022-06-18T10:22:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/arm1tage/129", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "cbb3fbed-1e9f-4d95-95dd-55f58296200b", "content": "HackTheBox:\n\n\u2014Easy Machines\u2014\n\nDriver - WinRM (evil-winrm), printnightmare CVE-2021-1675 (https://habr.com/ru/sandbox/156538/)\nhttps://0xdf.gitlab.io/2022/02/26/htb-driver.html\n\nSecret - JWT, Git source (tig), crush-dumps\nhttps://0xdf.gitlab.io/2022/03/26/htb-secret.html\n\nBackDoor - Wordpress eBook Dir Trav (https://www.exploit-db.com/exploits/39575), gdb exploit (https://www.exploit-db.com/exploits/50539, https://www.rapid7.com/db/modules/exploit/multi/gdb/gdb_server_exec/) \nhttps://0xdf.gitlab.io/2022/04/23/htb-backdoor.html\n\nPrevise - Backup, Site Reverse Shell, low-encrypted passwords\nhttps://0xdf.gitlab.io/2022/01/08/htb-previse.html\n\nBountyHunter - XXE, (root) NOPASSWD python code\nhttps://0xdf.gitlab.io/2021/11/20/htb-bountyhunter.html\n\nHorizontal - Strapi CMS 3.0.0 CVE-2019-18818/CVE-2019-19609 (https://www.exploit-db.com/exploits/50239, https://github.com/diego-tella/CVE-2019-19609-EXPLOIT), Laravel v8 (https://www.exploit-db.com/exploits/49424)\nhttps://0xdf.gitlab.io/2022/02/05/htb-horizontall.html\n\nOptimum - Windows 2012 (https://www.rapid7.com/db/modules/exploit/windows/http/rejetto_hfs_exec/, https://www.rapid7.com/db/modules/exploit/windows/local/ms16_032_secondary_logon_handle_privesc/)\nhttps://0xdf.gitlab.io/2021/03/17/htb-optimum.html\n\nLame - FTP Anonymous, SAMBA exploit (https://github.com/amriunix/CVE-2007-2447)\nhttps://0xdf.gitlab.io/2020/04/07/htb-lame.html\n\nJerry - Tomcat Default Cred, shell via .WAR\nhttps://0xdf.gitlab.io/2018/11/17/htb-jerry.html\n\nBlue - Win7 eternalblue (https://www.rapid7.com/db/modules/exploit/windows/smb/ms17_010_eternalblue/)\nhttps://0xdf.gitlab.io/2021/05/11/htb-blue.html\n\nDevel - Microsoft IIS httpd 7.5 reverse shell via .ASPX, MS11-046 or ms10_015_kitrap0d (https://github.com/abatchy17/WindowsExploits/tree/master/MS11-046)\nhttps://0xdf.gitlab.io/2019/03/05/htb-devel.html\n\nNetmon - PRTG Network Monitor 18.1.37.13946, Backup credentials, CVE-2018-9276 (https://github.com/A1vinSmith/CVE-2018-9276) / (https://www.exploit-db.com/exploits/46527) + evil-winrm\nhttps://0xdf.gitlab.io/2019/06/29/htb-netmon.html\n\nExplore (Android) - 59777 port CVE-2019-6447 (https://www.exploit-db.com/exploits/50070), SSH Creds on Photo, adb shell\nhttps://0xdf.gitlab.io/2021/10/30/htb-explore.html\n\nAntique - Telnet password via snmpget (https://www.irongeek.com/i.php?page=security/networkprinterhacking#JetDirect%20password%20notes), CUPS 1.6.1 (https://github.com/jpillora/chisel) \nhttps://0xdf.gitlab.io/2022/05/03/htb-antique.html\n\nReturn - evil-winrm, Server Operators in net user svc-printer /domain, sc.exe\nhttps://0xdf.gitlab.io/2022/05/05/htb-return.html\n\nGrandpa - CVE-2017-7269 (https://www.rapid7.com/db/modules/exploit/windows/iis/iis_webdav_scstoragepathfromurl/), SEImpersonalPrivilege Churrasco (https://github.com/Re4son/Churrasco/)\nhttps://0xdf.gitlab.io/2020/05/28/htb-grandpa.html\n\nBeep - ShellShock or Elastix 2.2.0 - 'graph.php' Local File Inclusion, (root) NOPASSWD nmap\nhttps://0xdf.gitlab.io/2021/02/23/htb-beep.html\n\nPandora - snmpwalk creds, CVE-2021-32099, Site Reverse Shell\nhttps://0xdf.gitlab.io/2022/05/21/htb-pandora.html\n\nPaper - WPS 5.2.3 - Cve-2019-17671 (https://www.exploit-db.com/exploits/47690, https://0day.work/proof-of-concept-for-wordpress-5-2-3-viewing-unauthenticated-posts/), Chat Bot Dir Trav, CVE-2021-3560 (https://github.com/Almorabea/Polkit-exploit/blob/main/CVE-2021-3560.py)\nhttps://0xjin.medium.com/paper-hackthebox-write-up-2abca22d3b54\n\n\n#hackthebox #ctf", "url": "https://t.me/arm1tage/129"}, {"timestamp": "2022-08-19T09:32:59Z", "date_only": false, "value": "2022-08-19T09:32:59.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BlueRedTeam/1276", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "0afd1911-59e1-4e63-83fc-8f47a027b546", "content": "CVE-2021\n\nCVE-2021-1675 LPE PoC in Nim (PrintNightmare Local Privilege Escalation)\n\nhttps://github.com/fumamatar/NimNightmare-\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/1276"}, {"timestamp": "2023-01-29T20:34:55Z", "date_only": false, "value": "2023-01-29T20:34:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/beaverdreamer/80", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "fb6a5217-2b03-435d-a3b7-df574302a01d", "content": "#remidiation #detect\nhttps://github.com/LaresLLC/CVE-2021-1675", "url": "https://t.me/beaverdreamer/80"}, {"timestamp": "2023-07-17T07:50:29Z", "date_only": false, "value": "2023-07-17T07:50:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/YouPentest/2345", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "998c35f6-c5d5-4576-95e6-029e8565da83", "content": "VE-2021-34527 - PrintNightmare - Server 2016 PoC Demonstration\n\nhttps://www.youtube.com/watch?v=qU3vQ-B-FPY\n\nhttps://github.com/cube0x0/CVE-2021-1675/blob/main/CVE-2021-1675.py\n\n#PrintNightmar", "url": "https://t.me/YouPentest/2345"}, {"timestamp": "2023-08-01T23:15:00Z", "date_only": false, "value": "2023-08-01T23:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-1675", "record": "GSD-2021-1675", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-08-08T00:00:00Z", "date_only": false, "value": "2023-08-08T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202106-0639", "record": "VAR-202106-0639", "field": "sources_update_date.data.2.date"}, {"timestamp": "2023-12-05T01:07:55Z", "date_only": false, "value": "2023-12-05T01:07:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1351", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "f89a6554-7449-4179-a328-5ae85136ea80", "content": "#ExploitObserverAlert\n\nCVE-2021-1675\n\nDESCRIPTION: Exploit Observer has 257 entries related to CVE-2021-1675. Windows Print Spooler Remote Code Execution Vulnerability\n\nFIRST-EPSS: 0.962600000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/1351"}, {"timestamp": "2023-12-10T01:13:39Z", "date_only": false, "value": "2023-12-10T01:13:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1590", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "907b32aa-8de2-47bc-bfef-d8543f01839d", "content": "#ExploitObserverAlert\n\nCVE-2021-1675\n\nDESCRIPTION: Exploit Observer has 258 entries related to CVE-2021-1675. Windows Print Spooler Remote Code Execution Vulnerability\n\nFIRST-EPSS: 0.959820000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/1590"}, {"timestamp": "2023-12-13T01:23:23.174Z", "date_only": false, "value": "2023-12-13T01:23:23.174225Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-1675", "record": "GSD-2021-1675", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-18T03:22:33Z", "date_only": false, "value": "2024-01-18T03:22:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/4016", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "470e8569-efc4-4026-a24c-deca20b3a8c2", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (July 1-31)\nCVE-2021-1675 - Windows Print Spooler EoP\nhttps://t.me/cybersecuritytechnologies/3723\nCVE-2021-34527 - Windows Print Spooler RCE\nhttps://t.me/cybersecuritytechnologies/3750\nCVE-2021-36934 - Windows SeriousSAM EoP\nhttps://t.me/cybersecuritytechnologies/3891\nCVE-2021-33909 - Sequoia - A LPE Vulnerability in Linux\u2019s Filesystem Layer\nhttps://t.me/cybersecuritytechnologies/3884\nCVE-2021-22555 - Heap out-of-bounds write vuln in Linux Netfilter\nhttps://t.me/cybersecuritytechnologies/3841\nCVE-2021-30807 - OOBR in AppleCLCD/IOMobileFrameBuffer\nhttps://t.me/cybersecuritytechnologies/3930\nCVE-2020-27020 - Vulnerability in Kaspersky Password Manager\nhttps://donjon.ledger.com/kaspersky-password-manager\nCVE-2021-35211 - SolarWinds Serv-U Managed File Transfer Vuln\nhttps://t.me/CyberSecurityTechnologies/4714\nCVE-2021-34481 - Windows Print Spooler EoP\nhttps://mobile.twitter.com/gentilkiwi/status/1416429860566847490\nCVE-2021-3438 - Printer\u2019s Drivers Vulnerability\nhttps://t.me/cybersecuritytechnologies/3969", "url": "https://t.me/CyberSecurityTechnologies/4016"}, {"timestamp": "2024-02-15T13:46:58Z", "date_only": false, "value": "2024-02-15T13:46:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/3723", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "f7cf42a4-d360-4b8e-ab21-945550a7ed81", "content": "#exploit\nCVE-2021-35523:\nLPE in Securepoint SSL VPN Client 2.0.3\nhttps://bogner.sh/2021/06/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30\n\nCVE-2021-1675:\n\"PrintNightmare\" - RCE in Windows Spooler Service\nhttps://github.com/afwu/PrintNightmare\n]-> Impacket implementation:\nhttps://github.com/cube0x0/CVE-2021-1675", "url": "https://t.me/CyberSecurityTechnologies/3723"}, {"timestamp": "2024-05-29T14:55:40.040Z", "date_only": false, "value": "2024-05-29T14:55:40.040Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "cve-2021-1675", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-03T16:18:11.042Z", "date_only": false, "value": "2024-08-03T16:18:11.042Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2021-1675", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-09T01:33:49Z", "date_only": false, "value": "2024-11-09T01:33:49.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/club31337/485", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "24090742-4b10-47a5-901c-9472f0ae817d", "content": "PrintNightmare (CVE-2021-1675): Remote code execution in Windows Spooler Service.\n\n#RCE #Windows #CVE #privesc\n\nhttps://github.com/afwu/PrintNightmare", "url": "https://t.me/club31337/485"}, {"timestamp": "2024-11-09T01:33:49Z", "date_only": false, "value": "2024-11-09T01:33:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/club31337/484", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "1419791f-3f8b-43ee-972a-21fead778ce3", "content": "https://github.com/cube0x0/CVE-2021-1675", "url": "https://t.me/club31337/484"}, {"timestamp": "2024-12-21T20:40:30.958Z", "date_only": false, "value": "2024-12-21T20:40:30.958890Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/fidjolakoka.bsky.social/post/3ldtuiiqics2f", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "8e0b13ab-bc28-4aa3-9371-544c9a6130cc", "url": "https://bsky.app/profile/fidjolakoka.bsky.social/post/3ldtuiiqics2f"}, {"timestamp": "2024-12-24T20:22:37.956Z", "date_only": false, "value": "2024-12-24T20:22:37.956125Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2970982", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "d399b505-8129-43b1-a2e0-59776a4771b2", "url": "https://feedsin.space/feed/CISAKevBot/items/2970982"}, {"timestamp": "2025-02-06T03:13:44Z", "date_only": false, "value": "2025-02-06T03:13:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "13731da8-548d-40ba-812d-89802e832adb"}, {"timestamp": "2025-02-23T02:09:50Z", "date_only": false, "value": "2025-02-23T02:09:50.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "63b20744-096f-409b-a5c1-29fc93dfff3b"}, {"timestamp": "2025-02-23T04:10:33Z", "date_only": false, "value": "2025-02-23T04:10:33.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "35a6e529-a9bb-4930-8f17-71088afc59a4"}, {"timestamp": "2025-05-05T10:30:13Z", "date_only": false, "value": "2025-05-05T10:30:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/NinjaSec/290", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "876a0274-545f-42c9-ad6d-925e2a9b1834", "content": "1. https://github.com/Sachinart/CVE-2025-32432\nCheck for CVE-2025-32432 vulnerability\n#github #exploit\n\n\n2. https://github.com/helidem/CVE-2025-24054-PoC\nProof of Concept for NTLM Hash Leak via .library-ms CVE-2025-24054\n#github #poc\n\n\n3. https://github.com/ajdumanhug/CVE-2023-46818\nCVE-2023-46818 Python3 Exploit for ISPConfig <= 3.2.11 PHP Code Injection\n#github #exploit\n\n\n4. https://github.com/0x6rss/CVE-2025-24071_PoC\nNTLM hash leak via .library-ms inside ZIP/RAR (CVE-2025-24071)\n#github #poc\n\n\n5. https://github.com/trickest/cve/blob/main/2022/CVE-2022-42092.md\nCVE-2022-42092 \u2013 Backdrop CMS RCE PoC\n#github #exploit\n\n\n6. https://github.com/nomi-sec/PoC-in-GitHub\nAggregated CVE Exploits and PoCs from GitHub\n#github #tool\n\n\n7. https://github.com/SofianeHamlaoui/CVE-2022-0492-Checker\nLinux Container Escape CVE-2022-0492 vulnerability checker\n#github #exploit\n\n\n8. https://github.com/xigney/CVE-2025-24054_PoC\nAlternate NTLM Hash Leak via .library-ms CVE-2025-24054\n#github #poc\n\n\n9. https://github.com/bipbopbup/CVE-2023-46818-python-exploit\nPython PoC for CVE-2023-46818 in ISPConfig\n#github #exploit\n\n\n10. https://github.com/Marcejr117/CVE-2025-24071_PoC\nNTLM Hash Leak using .library-ms via ZIP trick (CVE-2025-24071)\n#github #poc\n\n\n11. https://github.com/Ostorlab/KEV\nKnown Exploited Vulnerabilities Detector\n#github #scanner\n\n\n12. https://github.com/edoardottt/missing-cve-nuclei-templates\nMissing CVE Detection via Nuclei Templates\n#github #scanner\n\n\n13. https://github.com/hyp3rlinx/Advisories\nZero-Day Security Advisories and Exploits by Hyp3rlinx\n#github #exploit\n\n\n14. https://github.com/Kubashok/apple-cve-repos\nApple CVE Database Links Repository\n#github #cve\n\n\n15. https://github.com/esnet/Seccubus_v2\nSeccubus Test Data for Vulnerability Scanners\n#github #tool\n\n\n16. https://github.com/skordemir/Xml2Ontology\nNessus XML Vulnerability Report Samples\n#github #data\n\n\n17. https://github.com/madirish/hector\nHector: Vulnerability Management Tool with Sample Nessus Reports\n#github #tool\n\n\n18. https://github.com/projectdiscovery/nuclei-templates/issues/8804\nNuclei Template request for ISPConfig CVE-2023-46818\n#github #scanner\n\n\n19. https://github.com/projectdiscovery/nuclei-templates/issues/12020\nNuclei Template PoC Request for CraftCMS CVE-2025-32432\n#github #scanner\n\n\n20. https://github.com/tanjiti/sec_profile\nSecurity Profile Aggregator \u2013 CVE, CISA, NVD, etc.\n#github #intel\n\n\n21. https://github.com/cube0x0/CVE-2021-1675\nPrintNightmare Exploit PoC (CVE-2021-1675 / CVE-2021-34527)\n#github #exploit\n\n22. https://github.com/Maldev-Academy/LsassHijackingViaReg\n\nInjecting DLL into LSASS at boot\n#github #tools\n\n\nOpen-source tools and proof-of-concept (PoC) repositories related to recent CVEs, exploits, and security research. These resources are valuable for educational purposes and can aid students in understanding real-world vulnerabilities and exploitation techniques.", "url": "https://t.me/NinjaSec/290"}, {"timestamp": "2025-07-25T03:00:05Z", "date_only": false, "value": "2025-07-25T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/RYetcLsOmihSjL6vrmK8b2EEcP3aYfaPpeqAArUjps5i1kk", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "d0ce83bc-1088-4e1a-ba08-f687f44fcb42"}, {"timestamp": "2025-08-05T21:00:04Z", "date_only": false, "value": "2025-08-05T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/JxyyR7DPCkvNqGXHwYf1FM_TYIK_7LUKbzPocNJOIh8q_94", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "76671d8b-bb5e-4163-96d7-76deb88a417a"}, {"timestamp": "2025-08-14T09:00:04Z", "date_only": false, "value": "2025-08-14T09:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/HXnB78LZ993EnbGXdL2hofKwYDoKHSeDPKMDrtCNi3QDgzw", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "b14621c3-7d04-4b9a-b9ff-8b63811c7b62"}, {"timestamp": "2025-08-24T15:00:06Z", "date_only": false, "value": "2025-08-24T15:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/maf2TFOSyoSTf8xOkgyu0UgeCyGF21FfgwtUN3M8h6X6o90", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "5447ce54-e306-4def-ab55-8ad053bd2dc7"}, {"timestamp": "2025-08-31T03:01:00Z", "date_only": false, "value": "2025-08-31T03:01:00.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "813565c8-cb59-4d42-988c-d9cf8e71686c"}, {"timestamp": "2025-10-22T00:32:13Z", "date_only": false, "value": "2025-10-22T00:32:13Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VWMM-QQ95-VQHF", "record": "GHSA-VWMM-QQ95-VQHF", "field": "modified"}, {"timestamp": "2025-10-30T19:56:19.493Z", "date_only": false, "value": "2025-10-30T19:56:19.493000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202106-0639", "record": "VAR-202106-0639", "field": "sources_update_date.data.6.date"}, {"timestamp": "2025-11-16T15:29:50Z", "date_only": false, "value": "2025-11-16T15:29:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Aggerio/9330fd5699568e142d5ba1c5f775d5ce", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "c159dbbb-b43a-40d5-9599-e0cb16c47bca", "url": "https://gist.github.com/Aggerio/9330fd5699568e142d5ba1c5f775d5ce"}, {"timestamp": "2025-11-18T14:33:52.465Z", "date_only": false, "value": "2025-11-18T14:33:52.465000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202106-0639", "record": "VAR-202106-0639", "field": "last_update_date"}, {"timestamp": "2025-11-19T15:00:09Z", "date_only": false, "value": "2025-11-19T15:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/PHoJQGmgGzsQrC8Gnxfc8pLZD55xgKQzGqHQgQ7hPSbJXl0", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "9b7ec4bc-0ceb-4111-851d-49336726b160"}, {"timestamp": "2025-12-05T12:35:58.929Z", "date_only": false, "value": "2025-12-05T12:35:58.929250Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-c39acbe0-91886c343547fcce", "record": "cve-2021-1675", "field": "creation_timestamp", "uuid": "b42e0f80-2611-4c01-b13d-4309847efc18", "url": "https://poliverso.org/objects/0477a01e-c39acbe0-91886c343547fcce"}, {"timestamp": "2026-01-30T19:19:22Z", "date_only": false, "value": "2026-01-30T19:19:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/aw-junaid/db57913171b70ac795cfa091a75e90ab", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "b3f41dfa-071b-48ae-9b2d-4014fcab3ca1", "url": "https://gist.github.com/aw-junaid/db57913171b70ac795cfa091a75e90ab"}, {"timestamp": "2026-02-02T12:28:56.749Z", "date_only": false, "value": "2026-02-02T12:28:56.749052Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ecf21bc7-f09d-47c1-9b45-ac691cbd5635", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "32d898e2-bd6f-40ec-8cec-d1bb6aff0837", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ecf21bc7-f09d-47c1-9b45-ac691cbd5635"}, {"timestamp": "2026-02-02T12:28:56.749Z", "date_only": false, "value": "2026-02-02T12:28:56.749052Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ecf21bc7-f09d-47c1-9b45-ac691cbd5635", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "e2bca35a-38db-4590-b6bd-cd16325d1c0d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ecf21bc7-f09d-47c1-9b45-ac691cbd5635"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2021-1675", "field": "timestamps.recorded_at", "uuid": "76cde436-e60d-47a1-9505-8584ce7d8143", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-03-17T15:00:56.361Z", "date_only": false, "value": "2026-03-17T15:00:56.361363Z", "kind": "sighting", "label": "Seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_19/2021", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "89899124-52fc-40df-a86b-c6a103bf8c63", "url": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_19/2021"}, {"timestamp": "2026-04-19T17:35:28Z", "date_only": false, "value": "2026-04-19T17:35:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/polirise-och5ty-long/0553d1b567d5e4e4c05bd4bd470b77bf", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "5143e694-c81f-4a5c-bfde-028472814883", "url": "https://gist.github.com/polirise-och5ty-long/0553d1b567d5e4e4c05bd4bd470b77bf"}, {"timestamp": "2026-04-19T17:37:51Z", "date_only": false, "value": "2026-04-19T17:37:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/polirise-och5ty-long/921c7aa9360839078ec5ad52cee75648", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "df672bcc-eeeb-4cab-872b-6ee51fff8fdd", "url": "https://gist.github.com/polirise-och5ty-long/921c7aa9360839078ec5ad52cee75648"}, {"timestamp": "2026-04-19T17:39:00Z", "date_only": false, "value": "2026-04-19T17:39:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/polirise-och5ty-long/26f16159ab0369f7b5368e757a208f61", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "9492eae4-8765-4fa9-8a09-05650b4865a3", "url": "https://gist.github.com/polirise-och5ty-long/26f16159ab0369f7b5368e757a208f61"}, {"timestamp": "2026-04-19T21:02:39Z", "date_only": false, "value": "2026-04-19T21:02:39.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ed3db5cb-9b15-4548-871d-ed4c22b479a6", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "1207e831-be22-43ed-8a2e-e2272983867a"}, {"timestamp": "2026-04-28T05:27:45Z", "date_only": false, "value": "2026-04-28T05:27:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/quocchau/c4a202ad3ca93e341584a773ac17398f", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "0a63f505-1c25-481e-bd33-3fe543538f17", "url": "https://gist.github.com/quocchau/c4a202ad3ca93e341584a773ac17398f"}, {"timestamp": "2026-05-31T23:19:52Z", "date_only": false, "value": "2026-05-31T23:19:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/sidsecurity/39dfb2f2fbe3bb3a32ae31fdb22febea", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "0e72704e-a40e-47e3-b43e-2c5cad19a34b", "url": "https://gist.github.com/sidsecurity/39dfb2f2fbe3bb3a32ae31fdb22febea"}, {"timestamp": "2026-06-19T12:48:00.531Z", "date_only": false, "value": "2026-06-19T12:48:00.531666Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/26b1b487-b250-4a87-9694-acd18c7c3f9c", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "5452ef86-2bba-4db0-9022-707ddabb7de4", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/26b1b487-b250-4a87-9694-acd18c7c3f9c"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2021-1675", "field": "timestamps.recorded_at", "uuid": "913cc257-3445-428d-975a-6e1ba3ac848f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:12.341Z", "date_only": false, "value": "2026-06-23T11:13:12.341663Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/913cc257-3445-428d-975a-6e1ba3ac848f", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "38960f84-c483-4fcf-ad34-98c9d44464de", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/913cc257-3445-428d-975a-6e1ba3ac848f"}, {"timestamp": "2026-06-23T14:04:33.952Z", "date_only": false, "value": "2026-06-23T14:04:33.952847Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4a243ab3-93f9-42ca-905e-f18d917df4b6", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "0621b74d-1fbd-4eec-af1c-f78a53289658", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4a243ab3-93f9-42ca-905e-f18d917df4b6"}, {"timestamp": "2026-07-01T20:11:33.684Z", "date_only": false, "value": "2026-07-01T20:11:33.684589Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/stillbigjosh/5a58fa426ea1b76221a6ce2ac9a909f6", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "b8467c61-7dd3-408e-93c4-f30c58d7d98e", "url": "https://gist.github.com/stillbigjosh/5a58fa426ea1b76221a6ce2ac9a909f6"}, {"timestamp": "2026-07-24T00:15:03.098Z", "date_only": false, "value": "2026-07-24T00:15:03.098029Z", "kind": "sighting", "label": "Seen", "source": "MISP/c6250a7a-63b1-4996-8734-3ab181e12e3e", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "efdb9d2a-5ef7-4229-89ef-f68167aaebcb"}, {"timestamp": "2026-07-25T03:00:03.597Z", "date_only": false, "value": "2026-07-25T03:00:03.597482Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bin_z0ne/399", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "5c5ddd98-4ad9-41fc-865c-de30befb0c69", "url": "https://t.me/bin_z0ne/399"}, {"timestamp": "2026-07-26T00:00:47.308Z", "date_only": false, "value": "2026-07-26T00:00:47.308827Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/bin_z0ne/399", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "01028495-8c2f-4e03-ae35-1ba6967247ee", "url": "https://t.me/bin_z0ne/399"}, {"timestamp": "2026-07-26T07:01:50.343Z", "date_only": false, "value": "2026-07-26T07:01:50.343339Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KaitNews/8916", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "52bbc78e-90b8-418b-9150-da9f841ef1c1", "url": "https://t.me/KaitNews/8916"}, {"timestamp": "2026-07-26T07:01:50.386Z", "date_only": false, "value": "2026-07-26T07:01:50.386288Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KaitNews/8918", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "7531315c-9033-4e26-87d3-03d1fe15c00f", "url": "https://t.me/KaitNews/8918"}, {"timestamp": "2026-07-27T00:01:33.714Z", "date_only": false, "value": "2026-07-27T00:01:33.714587Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KaitNews/8916", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "f0e2fce1-6694-4ed0-abe1-09efa90db12c", "url": "https://t.me/KaitNews/8916"}, {"timestamp": "2026-07-27T00:01:33.749Z", "date_only": false, "value": "2026-07-27T00:01:33.749328Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KaitNews/8918", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "1a685f15-fceb-4e4e-a3d4-b0e80a607909", "url": "https://t.me/KaitNews/8918"}, {"timestamp": "2026-07-29T01:00:04.619Z", "date_only": false, "value": "2026-07-29T01:00:04.619179Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KaitNews/8918", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "b20b3274-c260-4215-bf59-fafc47e84348", "url": "https://t.me/KaitNews/8918"}, {"timestamp": "2026-07-29T01:00:04.663Z", "date_only": false, "value": "2026-07-29T01:00:04.663419Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/KaitNews/8916", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "477b3d3d-badd-4bca-a22c-d2f2ce1fdf01", "url": "https://t.me/KaitNews/8916"}, {"timestamp": "2026-07-29T05:00:04.354Z", "date_only": false, "value": "2026-07-29T05:00:04.354718Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/onelab1337/63", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "bd3e7e99-70d8-4590-9d04-4633ad3bb282", "url": "https://t.me/onelab1337/63"}, {"timestamp": "2026-07-29T05:00:04.387Z", "date_only": false, "value": "2026-07-29T05:00:04.387277Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/onelab1337/82", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "a00c4633-af7d-46f2-8944-aea2bac219a5", "url": "https://t.me/onelab1337/82"}, {"timestamp": "2026-07-29T05:00:04.427Z", "date_only": false, "value": "2026-07-29T05:00:04.427064Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/onelab1337/103", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "858c9ad2-90f8-4801-90a1-0cb7122a344e", "url": "https://t.me/onelab1337/103"}, {"timestamp": "2026-07-29T05:00:04.465Z", "date_only": false, "value": "2026-07-29T05:00:04.465727Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/onelab1337/104", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "c1dcf362-0889-4d64-936e-fe9e50a454d6", "url": "https://t.me/onelab1337/104"}, {"timestamp": "2026-07-29T12:02:52.977Z", "date_only": false, "value": "2026-07-29T12:02:52.977965Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1665", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "651b39cd-04e5-480a-aa66-86680f6954c2", "url": "https://t.me/reverseame/1665"}, {"timestamp": "2026-07-29T12:02:55.320Z", "date_only": false, "value": "2026-07-29T12:02:55.320527Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1423", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "cb484de8-43cc-4774-9ca4-c2f433fd97e6", "url": "https://t.me/reverseame/1423"}, {"timestamp": "2026-07-29T12:02:57.017Z", "date_only": false, "value": "2026-07-29T12:02:57.017676Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1335", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "f807914e-23c1-417c-b779-952d2c1a7447", "url": "https://t.me/reverseame/1335"}, {"timestamp": "2026-07-29T12:02:57.088Z", "date_only": false, "value": "2026-07-29T12:02:57.088183Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1331", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "fd7a0a46-1432-4095-908e-f9534ad638de", "url": "https://t.me/reverseame/1331"}, {"timestamp": "2026-07-29T12:02:57.126Z", "date_only": false, "value": "2026-07-29T12:02:57.126426Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1333", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "2ef17673-9815-44fd-bba2-5c8c5b693590", "url": "https://t.me/reverseame/1333"}, {"timestamp": "2026-07-29T12:03:23.091Z", "date_only": false, "value": "2026-07-29T12:03:23.091882Z", "kind": "sighting", "label": "Seen", "source": "Telegram/qGR49SFbKpxKTLOb8OqaUjBwAY4BRKVDacnjZqS22k5R", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "3e657d1e-3177-42f7-8e21-7fd991797cd2"}, {"timestamp": "2026-07-30T00:02:43.392Z", "date_only": false, "value": "2026-07-30T00:02:43.392720Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1665", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "567491ee-e82d-4a69-86a5-97b21e50573f", "url": "https://t.me/reverseame/1665"}, {"timestamp": "2026-07-30T00:02:45.459Z", "date_only": false, "value": "2026-07-30T00:02:45.459203Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1423", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "6b6b2675-859f-4010-af6e-5e23a8ccc539", "url": "https://t.me/reverseame/1423"}, {"timestamp": "2026-07-30T00:02:46.419Z", "date_only": false, "value": "2026-07-30T00:02:46.419094Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1335", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "078e50d9-2237-47d7-9da4-256fcc77662a", "url": "https://t.me/reverseame/1335"}, {"timestamp": "2026-07-30T00:02:46.507Z", "date_only": false, "value": "2026-07-30T00:02:46.507979Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1331", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "dd70c576-598d-4719-ad6e-aa8435c4519b", "url": "https://t.me/reverseame/1331"}, {"timestamp": "2026-07-30T00:02:46.557Z", "date_only": false, "value": "2026-07-30T00:02:46.557228Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1333", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "c5c59a0e-415a-49d7-b89a-7d5afa9a0102", "url": "https://t.me/reverseame/1333"}, {"timestamp": "2026-07-30T00:03:08.673Z", "date_only": false, "value": "2026-07-30T00:03:08.673457Z", "kind": "sighting", "label": "Seen", "source": "Telegram/qGR49SFbKpxKTLOb8OqaUjBwAY4BRKVDacnjZqS22k5R", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "2cf2248a-3d55-4a18-b2c8-d6cdaf77c32f"}, {"timestamp": "2026-07-30T00:03:14.363Z", "date_only": false, "value": "2026-07-30T00:03:14.363284Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/onelab1337/104", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "bdde83fe-31fc-4a8f-9f2c-2be1c167dd6c", "url": "https://t.me/onelab1337/104"}, {"timestamp": "2026-07-30T00:03:14.529Z", "date_only": false, "value": "2026-07-30T00:03:14.529207Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/onelab1337/103", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "3cca46bb-a463-4a05-880b-dc93096673fb", "url": "https://t.me/onelab1337/103"}, {"timestamp": "2026-07-30T00:03:14.573Z", "date_only": false, "value": "2026-07-30T00:03:14.573133Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/onelab1337/82", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "7cf9758c-f471-4ffc-8e07-94256163286f", "url": "https://t.me/onelab1337/82"}, {"timestamp": "2026-07-30T00:03:14.623Z", "date_only": false, "value": "2026-07-30T00:03:14.623347Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/onelab1337/63", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "0bb8e77f-c9b0-422f-ab64-7c3651b0f461", "url": "https://t.me/onelab1337/63"}, {"timestamp": "2026-07-30T00:03:20.150Z", "date_only": false, "value": "2026-07-30T00:03:20.150153Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KaitNews/8918", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "88296919-2be6-418d-a437-a91e363e3b3d", "url": "https://t.me/KaitNews/8918"}, {"timestamp": "2026-07-30T00:03:20.206Z", "date_only": false, "value": "2026-07-30T00:03:20.206475Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/KaitNews/8916", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "4b74e3dd-aa92-4dc6-a7c2-f94c67be21a6", "url": "https://t.me/KaitNews/8916"}, {"timestamp": "2026-08-03T05:00:03.530Z", "date_only": false, "value": "2026-08-03T05:00:03.530648Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/reverseame/1665", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "adb194cf-7c6e-4e9e-9ca5-1cbe3f970f77", "url": "https://t.me/reverseame/1665"}, {"timestamp": "2026-08-03T08:00:04.377Z", "date_only": false, "value": "2026-08-03T08:00:04.377908Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1423", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "8ba0ceb5-cf48-43b1-897b-06d057e50bc5", "url": "https://t.me/reverseame/1423"}, {"timestamp": "2026-08-03T09:02:14.609Z", "date_only": false, "value": "2026-08-03T09:02:14.609087Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1331", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "03c4109c-1947-42c9-8669-2d232e3a90b3", "url": "https://t.me/reverseame/1331"}, {"timestamp": "2026-08-03T09:04:24.792Z", "date_only": false, "value": "2026-08-03T09:04:24.792868Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1335", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "86b2edef-0979-4710-b958-c10501f3d354", "url": "https://t.me/reverseame/1335"}, {"timestamp": "2026-08-03T09:04:24.898Z", "date_only": false, "value": "2026-08-03T09:04:24.898506Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1333", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "521426a7-a870-4ded-a12b-31f288735559", "url": "https://t.me/reverseame/1333"}, {"timestamp": "2026-08-04T00:00:43.709Z", "date_only": false, "value": "2026-08-04T00:00:43.709715Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1335", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "cf010056-1db1-420f-b668-f71477ee2778", "url": "https://t.me/reverseame/1335"}, {"timestamp": "2026-08-04T00:00:43.815Z", "date_only": false, "value": "2026-08-04T00:00:43.815737Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1333", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "55436bfb-d967-4df2-8b10-62d55cade9c6", "url": "https://t.me/reverseame/1333"}, {"timestamp": "2026-08-04T00:00:46.033Z", "date_only": false, "value": "2026-08-04T00:00:46.033230Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1423", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "a286273a-fdea-4758-b838-c545aa207041", "url": "https://t.me/reverseame/1423"}, {"timestamp": "2026-08-04T00:00:48.677Z", "date_only": false, "value": "2026-08-04T00:00:48.677824Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/reverseame/1665", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "8b961dd2-9bfd-4979-975b-faca2a03ad09", "url": "https://t.me/reverseame/1665"}, {"timestamp": "2026-08-04T01:00:21.815Z", "date_only": false, "value": "2026-08-04T01:00:21.815558Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1331", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "5acedcca-1bf2-4bd4-a85a-d2367e909f7b", "url": "https://t.me/reverseame/1331"}, {"timestamp": "2026-08-04T06:00:05.131Z", "date_only": false, "value": "2026-08-04T06:00:05.131728Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/qGR49SFbKpxKTLOb8OqaUjBwAY4BRKVDacnjZqS22k5R", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "b129f232-eed0-4072-913c-a7cb5107058f"}, {"timestamp": "2026-08-05T00:00:53.652Z", "date_only": false, "value": "2026-08-05T00:00:53.652449Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/qGR49SFbKpxKTLOb8OqaUjBwAY4BRKVDacnjZqS22k5R", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "7cf8da4a-dd24-4c1e-ab14-e36d0a9d4207"}, {"timestamp": "2026-08-09T05:02:33.413Z", "date_only": false, "value": "2026-08-09T05:02:33.413113Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/onelab1337/991", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "90e4a2e2-aff2-42dd-ba8a-0df78cf0cb64", "url": "https://t.me/onelab1337/991"}, {"timestamp": "2026-08-09T05:02:33.634Z", "date_only": false, "value": "2026-08-09T05:02:33.634979Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/onelab1337/725", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "9515985d-dbfd-4ec4-8c5b-41c21baf8ce4", "url": "https://t.me/onelab1337/725"}, {"timestamp": "2026-08-10T00:00:10.220Z", "date_only": false, "value": "2026-08-10T00:00:10.220901Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/onelab1337/725", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "99da1032-e645-4274-b15e-9487a6712ffb", "url": "https://t.me/onelab1337/725"}, {"timestamp": "2026-08-10T00:00:10.376Z", "date_only": false, "value": "2026-08-10T00:00:10.376765Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/onelab1337/991", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "92c9075c-63ce-4888-ab73-1a7e5dd7c712", "url": "https://t.me/onelab1337/991"}, {"timestamp": "2026-08-12T03:55:44.254Z", "date_only": false, "value": "2026-08-12T03:55:44.254Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2021-1675", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-12T03:55:44.254Z", "date_only": false, "value": "2026-08-12T03:55:44.254Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-1675", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-12T05:17:31.927Z", "date_only": false, "value": "2026-08-12T05:17:31.927", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-1675", "record": "FKIE_CVE-2021-1675", "field": "lastModified"}, {"timestamp": "2026-08-12T17:00:04.773Z", "date_only": false, "value": "2026-08-12T17:00:04.773850Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/bmbtMV3kDPfh5WrAdXEmt6HVLjLyiZ70G2Nfd-UcUIdAsgs", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "df4e5481-972f-44e6-884e-4575819573b7"}, {"timestamp": "2026-08-12T22:09:11.604Z", "date_only": false, "value": "2026-08-12T22:09:11.604430Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3msw5f6ahd32y", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "b0c4e96e-7c3a-49a5-a3b2-e47fcc9b25b1", "url": "https://bsky.app/profile/vulnsea.com/post/3msw5f6ahd32y"}, {"timestamp": "2026-08-14T16:00:03.824Z", "date_only": false, "value": "2026-08-14T16:00:03.824269Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/1291", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "7c1871ca-d4e3-404b-ba7f-0cea4d8647a3", "url": "https://t.me/purp_sec/1291"}, {"timestamp": "2026-08-15T08:00:11.613Z", "date_only": false, "value": "2026-08-15T08:00:11.613487Z", "kind": "sighting", "label": "Seen", "source": "Telegram/jy_CyhxbtEWlhnajCmyTd-hTeqgI9UJS5l_RVbH-38GWgO8", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "c27a5a53-ca8e-4068-b3b3-3c4e71611fa7"}, {"timestamp": "2026-08-15T08:00:11.749Z", "date_only": false, "value": "2026-08-15T08:00:11.749735Z", "kind": "sighting", "label": "Seen", "source": "Telegram/GLnJGRJ1b6yw9YuvIrVSy8JBX42WVxn_PDAHVocDHgMRjZ8", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "ad17c0fc-f761-4173-ac79-8908cfa686b2"}, {"timestamp": "2026-08-15T08:00:11.805Z", "date_only": false, "value": "2026-08-15T08:00:11.805370Z", "kind": "sighting", "label": "Seen", "source": "Telegram/iAyG5_PF2op1hGJM5t0HpqX0KHJkZE5fTgcY0V0bLgDupCk", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "bb8d987b-b48a-46dc-9408-9a87cd310b22"}, {"timestamp": "2026-08-16T00:00:11.364Z", "date_only": false, "value": "2026-08-16T00:00:11.364127Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/iAyG5_PF2op1hGJM5t0HpqX0KHJkZE5fTgcY0V0bLgDupCk", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "0634df50-4486-49b4-80f2-98dda480d047"}, {"timestamp": "2026-08-16T00:00:11.414Z", "date_only": false, "value": "2026-08-16T00:00:11.414001Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/GLnJGRJ1b6yw9YuvIrVSy8JBX42WVxn_PDAHVocDHgMRjZ8", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "be088907-4809-4ca7-be6f-4dc2ac2644b1"}, {"timestamp": "2026-08-16T00:00:11.566Z", "date_only": false, "value": "2026-08-16T00:00:11.566452Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/jy_CyhxbtEWlhnajCmyTd-hTeqgI9UJS5l_RVbH-38GWgO8", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "97093c59-cd4d-4622-85ad-b9b309bc4d12"}, {"timestamp": "2026-08-19T21:00:04.331Z", "date_only": false, "value": "2026-08-19T21:00:04.331852Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/NinjaSecurity/90", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "a2bd27f3-ebcc-432d-9c90-d344b343c50d", "url": "https://t.me/NinjaSecurity/90"}, {"timestamp": "2026-08-20T00:00:06.617Z", "date_only": false, "value": "2026-08-20T00:00:06.617722Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/NinjaSecurity/90", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "325089e0-ded3-4fac-b47a-2e85b87e120f", "url": "https://t.me/NinjaSecurity/90"}, {"timestamp": "2026-08-25T16:15:28.604Z", "date_only": false, "value": "2026-08-25T16:15:28.604229Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/bbrk364/668a69812b0cfe4bac2f698ddef34079", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "73e290a8-a6cb-461d-bf83-4802c82fb992", "url": "https://gist.github.com/bbrk364/668a69812b0cfe4bac2f698ddef34079"}, {"timestamp": "2026-09-01T17:00:32.642Z", "date_only": false, "value": "2026-09-01T17:00:32.642878Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/5363", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "8afc2b12-dcdc-4163-a564-f40d9bf61433", "url": "https://t.me/cissp/5363"}, {"timestamp": "2026-09-01T17:00:32.910Z", "date_only": false, "value": "2026-09-01T17:00:32.910206Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/5362", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "07f6ffba-1042-4c63-9408-0b1cc759b273", "url": "https://t.me/cissp/5362"}, {"timestamp": "2026-09-01T17:00:41.680Z", "date_only": false, "value": "2026-09-01T17:00:41.680486Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/4242", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "40da0940-368e-41d3-be36-59b85032e444", "url": "https://t.me/cissp/4242"}, {"timestamp": "2026-09-01T17:00:46.341Z", "date_only": false, "value": "2026-09-01T17:00:46.341807Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/3702", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "89813aa9-112b-49e0-b174-ce1ebe09c7bd", "url": "https://t.me/cissp/3702"}, {"timestamp": "2026-09-01T17:00:46.522Z", "date_only": false, "value": "2026-09-01T17:00:46.522239Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/3623", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "01da56cd-7ead-4082-91ef-85eb62b84a0a", "url": "https://t.me/cissp/3623"}, {"timestamp": "2026-09-01T17:00:46.957Z", "date_only": false, "value": "2026-09-01T17:00:46.957634Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/3613", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "17b2b33f-9a8c-4ad9-abe8-f3f4ff7f49b0", "url": "https://t.me/cissp/3613"}, {"timestamp": "2026-09-01T20:01:53.647Z", "date_only": false, "value": "2026-09-01T20:01:53.647963Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/43511", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "89060f6b-bf95-4a92-a6b5-b6e8f1d18d17", "url": "https://t.me/hacking_Attack/43511"}, {"timestamp": "2026-09-01T20:01:53.843Z", "date_only": false, "value": "2026-09-01T20:01:53.843802Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/43510", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "9a8b847a-fb5f-4518-baa4-95739a9c9b57", "url": "https://t.me/hacking_Attack/43510"}, {"timestamp": "2026-09-01T20:01:53.937Z", "date_only": false, "value": "2026-09-01T20:01:53.937616Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/43508", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "a3f4a00d-e6d6-4e2a-8a79-16a7d5b78a7e", "url": "https://t.me/hacking_Attack/43508"}, {"timestamp": "2026-09-01T20:01:54.211Z", "date_only": false, "value": "2026-09-01T20:01:54.211921Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/43503", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "ab4438eb-e2df-4b77-bf10-712a3eaa0843", "url": "https://t.me/hacking_Attack/43503"}, {"timestamp": "2026-09-01T20:02:09.006Z", "date_only": false, "value": "2026-09-01T20:02:09.006226Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/32354", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "8b7a719d-c0d8-4d63-9a36-29fc942d9a99", "url": "https://t.me/hacking_Attack/32354"}, {"timestamp": "2026-09-01T20:02:14.251Z", "date_only": false, "value": "2026-09-01T20:02:14.251950Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/27439", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "56eaf59c-6faa-4608-b5fa-ed35c496f8b1", "url": "https://t.me/hacking_Attack/27439"}, {"timestamp": "2026-09-01T20:02:18.122Z", "date_only": false, "value": "2026-09-01T20:02:18.122165Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/26606", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "caf74fbc-e42f-4397-9a8d-0f93efc8ad23", "url": "https://t.me/hacking_Attack/26606"}, {"timestamp": "2026-09-01T20:02:18.208Z", "date_only": false, "value": "2026-09-01T20:02:18.208774Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/26613", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "3d92788f-91d0-44a4-a7db-70cdc1f12763", "url": "https://t.me/hacking_Attack/26613"}, {"timestamp": "2026-09-01T20:02:18.443Z", "date_only": false, "value": "2026-09-01T20:02:18.443783Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/26604", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "afe3bd76-956d-4a23-9809-00413b21e077", "url": "https://t.me/hacking_Attack/26604"}, {"timestamp": "2026-09-01T20:02:28.745Z", "date_only": false, "value": "2026-09-01T20:02:28.745832Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/19795", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "52902c97-2cfe-4cf2-9a1c-898a6000a597", "url": "https://t.me/hacking_Attack/19795"}, {"timestamp": "2026-09-01T20:02:33.004Z", "date_only": false, "value": "2026-09-01T20:02:33.004726Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/17020", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "a3d3cfad-84a1-4bac-8435-433367f61265", "url": "https://t.me/hacking_Attack/17020"}, {"timestamp": "2026-09-01T20:02:33.236Z", "date_only": false, "value": "2026-09-01T20:02:33.236559Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/16793", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "87effacf-0614-4642-b702-2e9f974871e0", "url": "https://t.me/hacking_Attack/16793"}, {"timestamp": "2026-09-01T20:02:34.007Z", "date_only": false, "value": "2026-09-01T20:02:34.007234Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/15523", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "5d519056-351c-4ad8-864e-c799fb65b991", "url": "https://t.me/hacking_Attack/15523"}, {"timestamp": "2026-09-01T20:02:34.220Z", "date_only": false, "value": "2026-09-01T20:02:34.220409Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/15522", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "f1b4da8f-a51d-48f1-a3e9-82f3f9de335e", "url": "https://t.me/hacking_Attack/15522"}, {"timestamp": "2026-09-01T20:02:34.549Z", "date_only": false, "value": "2026-09-01T20:02:34.549024Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/14933", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "98991434-6763-4724-b053-b0eb1fcd1b8b", "url": "https://t.me/hacking_Attack/14933"}, {"timestamp": "2026-09-02T16:00:04.092Z", "date_only": false, "value": "2026-09-02T16:00:04.092405Z", "kind": "sighting", "label": "Seen", "source": "Telegram/GvfR5TiIz5AGTLxNK0NHF1rEL-rqaKshudCOKUMqTVI5bvk", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "c42041f6-d20a-4620-bbfa-86dc5a377a74"}, {"timestamp": "2026-09-03T00:00:42.536Z", "date_only": false, "value": "2026-09-03T00:00:42.536842Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/GvfR5TiIz5AGTLxNK0NHF1rEL-rqaKshudCOKUMqTVI5bvk", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "86809ae2-ccec-4366-b6cb-9c41fbb3bdd3"}, {"timestamp": "2026-09-06T07:00:04.811Z", "date_only": false, "value": "2026-09-06T07:00:04.811522Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/43503", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "5cff690f-2900-408c-bac5-48b3d1abc1d3", "url": "https://t.me/hacking_Attack/43503"}, {"timestamp": "2026-09-06T07:00:05.021Z", "date_only": false, "value": "2026-09-06T07:00:05.021887Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/43508", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "897ff04b-0f15-4f09-9df0-5635de52598f", "url": "https://t.me/hacking_Attack/43508"}, {"timestamp": "2026-09-06T07:00:05.105Z", "date_only": false, "value": "2026-09-06T07:00:05.105370Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/43510", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "8a97602f-a1f0-4d0e-adf4-fdc2107d32e4", "url": "https://t.me/hacking_Attack/43510"}, {"timestamp": "2026-09-06T07:00:05.247Z", "date_only": false, "value": "2026-09-06T07:00:05.247936Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/43511", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "5e32cb3a-c600-417c-9cf6-2a0e8a90089f", "url": "https://t.me/hacking_Attack/43511"}, {"timestamp": "2026-09-07T04:00:04.139Z", "date_only": false, "value": "2026-09-07T04:00:04.139680Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/32354", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "a4b70da0-3cbe-46fb-b152-577428c35ced", "url": "https://t.me/hacking_Attack/32354"}, {"timestamp": "2026-09-07T11:00:03.802Z", "date_only": false, "value": "2026-09-07T11:00:03.802089Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/26613", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "1e479439-a78d-4bc6-ae42-12d264bc62a7", "url": "https://t.me/hacking_Attack/26613"}, {"timestamp": "2026-09-07T11:00:03.885Z", "date_only": false, "value": "2026-09-07T11:00:03.885177Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/26606", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "541512a4-b742-498e-bd20-bcc0d5e714e3", "url": "https://t.me/hacking_Attack/26606"}, {"timestamp": "2026-09-07T12:00:05.027Z", "date_only": false, "value": "2026-09-07T12:00:05.027061Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/26604", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "0c3cd5e8-1d8e-4d3a-9eae-aecf21a02ba6", "url": "https://t.me/hacking_Attack/26604"}, {"timestamp": "2026-09-07T20:00:05.089Z", "date_only": false, "value": "2026-09-07T20:00:05.089637Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/19795", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "c033c0a8-263e-4fae-b2e1-bcc9b59d0209", "url": "https://t.me/hacking_Attack/19795"}, {"timestamp": "2026-09-08T00:00:07.613Z", "date_only": false, "value": "2026-09-08T00:00:07.613435Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/15523", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "e459014e-7dd4-4779-a6e3-e4b1f65cf726", "url": "https://t.me/hacking_Attack/15523"}, {"timestamp": "2026-09-08T00:00:08.357Z", "date_only": false, "value": "2026-09-08T00:00:08.357006Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/16793", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "0a7ad403-4698-4c60-bb9d-483033722adb", "url": "https://t.me/hacking_Attack/16793"}, {"timestamp": "2026-09-08T01:00:04.326Z", "date_only": false, "value": "2026-09-08T01:00:04.326934Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/15522", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "dd3ab101-5bbe-4b72-92dd-724f0ef61b79", "url": "https://t.me/hacking_Attack/15522"}, {"timestamp": "2026-09-08T02:00:06.323Z", "date_only": false, "value": "2026-09-08T02:00:06.323056Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/14933", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "d2dacd22-b051-47ca-8c84-f2c37fdd600d", "url": "https://t.me/hacking_Attack/14933"}, {"timestamp": "2026-09-09T04:00:31.750Z", "date_only": false, "value": "2026-09-09T04:00:31.750424Z", "kind": "sighting", "label": "Seen", "source": "Telegram/r4oF1dd8S2eZHbzR9DOUSLFo4p2J6Y0ZlXzV9dEOlSgZGtc", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "e9deffec-12f4-452e-b76a-67270c666b9a"}, {"timestamp": "2026-09-10T00:00:52.560Z", "date_only": false, "value": "2026-09-10T00:00:52.560421Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/r4oF1dd8S2eZHbzR9DOUSLFo4p2J6Y0ZlXzV9dEOlSgZGtc", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "f6dd239d-5f0b-4142-90af-b83bb786e46f"}, {"timestamp": "2026-09-10T09:00:06.593Z", "date_only": false, "value": "2026-09-10T09:00:06.593309Z", "kind": "sighting", "label": "Seen", "source": "Telegram/DP4_saqRW7Y5CPsSDH3mPEsBZ3Fmutc3RzGzO69r_PFbXOY", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "c7e3b463-f109-4a74-92e1-0a51b9fe9402"}, {"timestamp": "2026-09-10T11:00:03.634Z", "date_only": false, "value": "2026-09-10T11:00:03.634351Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cissp/5363", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "ee785f04-e85c-4814-b80d-0029c2fc21fd", "url": "https://t.me/cissp/5363"}, {"timestamp": "2026-09-11T00:00:45.211Z", "date_only": false, "value": "2026-09-11T00:00:45.211103Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/DP4_saqRW7Y5CPsSDH3mPEsBZ3Fmutc3RzGzO69r_PFbXOY", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "c9c67de8-a6c0-49cd-90a1-3bc3ecea25a1"}, {"timestamp": "2026-09-11T01:00:04.123Z", "date_only": false, "value": "2026-09-11T01:00:04.123763Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cissp/3702", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "5d3c9667-e1e0-4952-9ff7-2a8e8787b73c", "url": "https://t.me/cissp/3702"}, {"timestamp": "2026-09-11T03:00:05.254Z", "date_only": false, "value": "2026-09-11T03:00:05.254267Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/3613", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "9a028b45-4f44-47ab-893c-23826e2a4bef", "url": "https://t.me/cissp/3613"}, {"timestamp": "2026-10-19T00:53:13Z", "date_only": false, "value": "2026-10-19T00:53:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Fr6ey/cfac5874b484ff1ee0764da5edff8d53", "record": "CVE-2021-1675", "field": "creation_timestamp", "uuid": "184146b9-aa87-425d-9d82-b4388fc3860a", "url": "https://gist.github.com/Fr6ey/cfac5874b484ff1ee0764da5edff8d53"}]}