{"uuid": "5f745b3e-970f-4f1b-aa5a-25f8ef4a1e0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-31166", "type": "published-proof-of-concept", "source": "https://t.me/alexmakus/4090", "content": "\u0418 \u0434\u0430\u0432\u043d\u0435\u043d\u044c\u043a\u043e \u0443 \u043d\u0430\u0441 \u043d\u0435 \u0431\u044b\u043b\u043e \u0445\u043e\u0440\u043e\u0448\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Window. \u0412 \u0434\u0430\u043d\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 HTTP Protocol Stack Windows IIS \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 Windows 10 \u0438 Windows Server. Microsoft \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0430\u043f\u0434\u0435\u0439\u0442 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043c\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u0430\u043f\u0434\u0435\u0439\u0442\u0430. \n\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31166\n\n\u0410 \u0442\u0443\u0442 \u0438 PoC \u0443\u0436\u0435 \u043f\u043e\u0434\u0432\u0435\u0437\u043b\u0438\n\nhttps://www.bleepingcomputer.com/news/security/exploit-released-for-wormable-windows-http-vulnerability/\n\n\u0422\u0432\u0438\u0442 \u0441 \u0430\u043d\u043e\u043d\u0441\u043e\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \nhttps://twitter.com/jimdinmn/status/1395071966487269376?s=21", "creation_timestamp": "2021-05-24T05:27:06.000000Z"}