{"vulnerability": "CVE-2021-27478", "sightings": [{"uuid": "21fd54dd-3c5b-4b79-b766-282c1a9d261b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27478", "type": "seen", "source": "https://t.me/cibsecurity/42568", "content": "\u203c CVE-2021-27478 \u203c\n\nA specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may cause a denial-of-service condition.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-13T00:42:33.000000Z"}, {"uuid": "1ba5f0bb-07c4-47fd-bd88-be0a3e5b7905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27478", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/3154", "content": "#Threat_Research\n1. Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310)\nhttps://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898\n2. Bugs in a Popular Third-Party Ethernet/IP Protocol Stack (CVE-2021-27478, CVE-2021-27482, CVE-2021-27498, CVE-2021-27500)\nhttps://www.claroty.com/2021/04/15/blog-research-fuzzing-and-pring\n3. New Vulnerability Affecting Container Engines CRI-O/Podman (CVE-2021-20291)\nhttps://unit42.paloaltonetworks.com/cve-2021-20291", "creation_timestamp": "2021-04-18T14:31:16.000000Z"}, {"uuid": "029641f4-2b68-4400-a040-a4b37a037e1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27478", "type": "seen", "source": "https://t.me/cissp/2986", "content": "exploit\nCVE-2021-29349:\nCSRF to remove all messages in Mahara 20.10 (PoC)\nhttps://github.com/Vulnmachines/CVE-2021-29349\n\nOffensive security:\nAirstrike Attack - FDE bypass and EoP on domain joined Windows workstations (CVE-2021-28316)\nhttps://shenaniganslabs.io/2021/04/13/Airstrike.html\n\nMalware analysis:\n1. HackBoss: A cryptocurrency-stealing malware distributed through Telegram\nhttps://decoded.avast.io/romanalinkeova/hackboss-a-cryptocurrency-stealing-malware-distributed-through-telegram\n2. Carbine Loader Cryptojacking Campaign\nhttps://www.lacework.com/carbine-loader-cryptojacking-campaign\n\nRed Team Tactics\n1. Buffer overflow fuzzer and exploit script\nhttps://github.com/A1-exe/bufferoverflow\n2. PCI Express DIY hacking toolkit for Xilinx SP605\nhttps://github.com/Cr4sh/s6_pcie_microblaze\n\n\nThreat Research:\n1. Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310)\nhttps://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898\n2. Bugs in a Popular Third-Party Ethernet/IP Protocol Stack (CVE-2021-27478, CVE-2021-27482, CVE-2021-27498, CVE-2021-27500)\nhttps://www.claroty.com/2021/04/15/blog-research-fuzzing-and-pring\n3. New Vulnerability Affecting Container Engines CRI-O/Podman (CVE-2021-20291)\nhttps://unit42.paloaltonetworks.com/cve-2021-20291", "creation_timestamp": "2026-09-01T17:00:53.747696Z"}, {"uuid": "35849e69-6b41-4c07-a850-75a6a167461f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27478", "type": "seen", "source": "https://t.me/cissp/2986", "content": "exploit\nCVE-2021-29349:\nCSRF to remove all messages in Mahara 20.10 (PoC)\nhttps://github.com/Vulnmachines/CVE-2021-29349\n\nOffensive security:\nAirstrike Attack - FDE bypass and EoP on domain joined Windows workstations (CVE-2021-28316)\nhttps://shenaniganslabs.io/2021/04/13/Airstrike.html\n\nMalware analysis:\n1. HackBoss: A cryptocurrency-stealing malware distributed through Telegram\nhttps://decoded.avast.io/romanalinkeova/hackboss-a-cryptocurrency-stealing-malware-distributed-through-telegram\n2. Carbine Loader Cryptojacking Campaign\nhttps://www.lacework.com/carbine-loader-cryptojacking-campaign\n\nRed Team Tactics\n1. Buffer overflow fuzzer and exploit script\nhttps://github.com/A1-exe/bufferoverflow\n2. PCI Express DIY hacking toolkit for Xilinx SP605\nhttps://github.com/Cr4sh/s6_pcie_microblaze\n\n\nThreat Research:\n1. Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310)\nhttps://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898\n2. Bugs in a Popular Third-Party Ethernet/IP Protocol Stack (CVE-2021-27478, CVE-2021-27482, CVE-2021-27498, CVE-2021-27500)\nhttps://www.claroty.com/2021/04/15/blog-research-fuzzing-and-pring\n3. New Vulnerability Affecting Container Engines CRI-O/Podman (CVE-2021-20291)\nhttps://unit42.paloaltonetworks.com/cve-2021-20291", "creation_timestamp": "2026-09-02T01:04:44.206449Z"}, {"uuid": "fd902ac6-f9a1-4277-bc7d-dc82ad15a068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27478", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2986", "content": "exploit\nCVE-2021-29349:\nCSRF to remove all messages in Mahara 20.10 (PoC)\nhttps://github.com/Vulnmachines/CVE-2021-29349\n\nOffensive security:\nAirstrike Attack - FDE bypass and EoP on domain joined Windows workstations (CVE-2021-28316)\nhttps://shenaniganslabs.io/2021/04/13/Airstrike.html\n\nMalware analysis:\n1. HackBoss: A cryptocurrency-stealing malware distributed through Telegram\nhttps://decoded.avast.io/romanalinkeova/hackboss-a-cryptocurrency-stealing-malware-distributed-through-telegram\n2. Carbine Loader Cryptojacking Campaign\nhttps://www.lacework.com/carbine-loader-cryptojacking-campaign\n\nRed Team Tactics\n1. Buffer overflow fuzzer and exploit script\nhttps://github.com/A1-exe/bufferoverflow\n2. PCI Express DIY hacking toolkit for Xilinx SP605\nhttps://github.com/Cr4sh/s6_pcie_microblaze\n\n\nThreat Research:\n1. Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310)\nhttps://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898\n2. Bugs in a Popular Third-Party Ethernet/IP Protocol Stack (CVE-2021-27478, CVE-2021-27482, CVE-2021-27498, CVE-2021-27500)\nhttps://www.claroty.com/2021/04/15/blog-research-fuzzing-and-pring\n3. New Vulnerability Affecting Container Engines CRI-O/Podman (CVE-2021-20291)\nhttps://unit42.paloaltonetworks.com/cve-2021-20291", "creation_timestamp": "2026-09-11T09:00:04.685864Z"}, {"uuid": "dab87712-068a-4605-96f0-f325f1971674", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27478", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2986", "content": "exploit\nCVE-2021-29349:\nCSRF to remove all messages in Mahara 20.10 (PoC)\nhttps://github.com/Vulnmachines/CVE-2021-29349\n\nOffensive security:\nAirstrike Attack - FDE bypass and EoP on domain joined Windows workstations (CVE-2021-28316)\nhttps://shenaniganslabs.io/2021/04/13/Airstrike.html\n\nMalware analysis:\n1. HackBoss: A cryptocurrency-stealing malware distributed through Telegram\nhttps://decoded.avast.io/romanalinkeova/hackboss-a-cryptocurrency-stealing-malware-distributed-through-telegram\n2. Carbine Loader Cryptojacking Campaign\nhttps://www.lacework.com/carbine-loader-cryptojacking-campaign\n\nRed Team Tactics\n1. Buffer overflow fuzzer and exploit script\nhttps://github.com/A1-exe/bufferoverflow\n2. PCI Express DIY hacking toolkit for Xilinx SP605\nhttps://github.com/Cr4sh/s6_pcie_microblaze\n\n\nThreat Research:\n1. Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310)\nhttps://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898\n2. Bugs in a Popular Third-Party Ethernet/IP Protocol Stack (CVE-2021-27478, CVE-2021-27482, CVE-2021-27498, CVE-2021-27500)\nhttps://www.claroty.com/2021/04/15/blog-research-fuzzing-and-pring\n3. New Vulnerability Affecting Container Engines CRI-O/Podman (CVE-2021-20291)\nhttps://unit42.paloaltonetworks.com/cve-2021-20291", "creation_timestamp": "2026-09-12T00:00:44.556089Z"}]}