{"vulnerability": "CVE-2021-21893", "sightings": [{"uuid": "cffcc92e-1c5e-49ce-8c4a-aa217d3bfa34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21893", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3935", "content": "#Threat_Research\n1. UaF vulnerabilities in Foxit PDF Reader (CVE-2021-21831, CVE-2021-21870, CVE-2021-21893)\nhttps://blog.talosintelligence.com/2021/07/vulnerability-spotlight-use-after-free.html\n2. Sunhillo SureLine Unauthenticated OS Command Injection (PoC for CVE-2021-36380)\nhttps://research.nccgroup.com/2021/07/26/technical-advisory-sunhillo-sureline-unauthenticated-os-command-injection-cve-2021-36380", "creation_timestamp": "2024-02-03T18:24:47.000000Z"}, {"uuid": "5d8ee067-616c-476c-9a58-832abae3c281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21893", "type": "seen", "source": "https://t.me/cissp/3912", "content": "Red Team Tactics\nHow to Phish for User Passwords with PowerShell\ud83d\ude03\nhttps://www.blackhillsinfosec.com/how-to-phish-for-user-passwords-with-powershell\n\nThreat Research\n1. Use-after-free vulnerabilities in Foxit PDF Reader (CVE-2021-21831, CVE-2021-21870, CVE-2021-21893)\nhttps://blog.talosintelligence.com/2021/07/vulnerability-spotlight-use-after-free.html?m=1\n2. Sunhillo SureLine Unauthenticated OS Command Injection (PoC for CVE-2021-36380)\nhttps://research.nccgroup.com/2021/07/26/technical-advisory-sunhillo-sureline-unauthenticated-os-command-injection-cve-2021-36380\n\nexploit\nCVE-2021-22146:\nElasticsearch ECE 7.13.x - The manipulation with an unknown input leads to a privilege escalation vulnerability (PoC)\ud83e\udd28\nhttps://github.com/magichk/cve-2021-22146\n\nCloud Security\nBlue Team Techniques\nThe Istio Service Mesh - Security Best Practices\nhttps://istio.io/latest/docs/ops/best-practices/security", "creation_timestamp": "2026-09-01T17:00:45.087947Z"}, {"uuid": "9eae0760-f165-4384-8166-3ca1268e75a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21893", "type": "seen", "source": "https://t.me/cissp/3912", "content": "Red Team Tactics\nHow to Phish for User Passwords with PowerShell\ud83d\ude03\nhttps://www.blackhillsinfosec.com/how-to-phish-for-user-passwords-with-powershell\n\nThreat Research\n1. Use-after-free vulnerabilities in Foxit PDF Reader (CVE-2021-21831, CVE-2021-21870, CVE-2021-21893)\nhttps://blog.talosintelligence.com/2021/07/vulnerability-spotlight-use-after-free.html?m=1\n2. Sunhillo SureLine Unauthenticated OS Command Injection (PoC for CVE-2021-36380)\nhttps://research.nccgroup.com/2021/07/26/technical-advisory-sunhillo-sureline-unauthenticated-os-command-injection-cve-2021-36380\n\nexploit\nCVE-2021-22146:\nElasticsearch ECE 7.13.x - The manipulation with an unknown input leads to a privilege escalation vulnerability (PoC)\ud83e\udd28\nhttps://github.com/magichk/cve-2021-22146\n\nCloud Security\nBlue Team Techniques\nThe Istio Service Mesh - Security Best Practices\nhttps://istio.io/latest/docs/ops/best-practices/security", "creation_timestamp": "2026-09-02T01:04:31.774171Z"}, {"uuid": "a8208c31-776a-4eb7-9ad8-04bd5ba7398a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21893", "type": "seen", "source": "https://t.me/cissp/3912", "content": "Red Team Tactics\nHow to Phish for User Passwords with PowerShell\ud83d\ude03\nhttps://www.blackhillsinfosec.com/how-to-phish-for-user-passwords-with-powershell\n\nThreat Research\n1. Use-after-free vulnerabilities in Foxit PDF Reader (CVE-2021-21831, CVE-2021-21870, CVE-2021-21893)\nhttps://blog.talosintelligence.com/2021/07/vulnerability-spotlight-use-after-free.html?m=1\n2. Sunhillo SureLine Unauthenticated OS Command Injection (PoC for CVE-2021-36380)\nhttps://research.nccgroup.com/2021/07/26/technical-advisory-sunhillo-sureline-unauthenticated-os-command-injection-cve-2021-36380\n\nexploit\nCVE-2021-22146:\nElasticsearch ECE 7.13.x - The manipulation with an unknown input leads to a privilege escalation vulnerability (PoC)\ud83e\udd28\nhttps://github.com/magichk/cve-2021-22146\n\nCloud Security\nBlue Team Techniques\nThe Istio Service Mesh - Security Best Practices\nhttps://istio.io/latest/docs/ops/best-practices/security", "creation_timestamp": "2026-09-11T00:00:08.734418Z"}]}