{"metadata": {"vulnerability": "CVE-2021-27927", "count": 37, "kinds": {"milestone": 8, "sighting": 4, "kev": 0, "other": 25}}, "data": [{"timestamp": "2021-03-03T00:00:00Z", "date_only": false, "value": "2021-03-03T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-27927", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-03-03T00:00:00Z", "date_only": false, "value": "2021-03-03T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-27927", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-03-03T17:15:00Z", "date_only": false, "value": "2021-03-03T17:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3MH6-R7M6-R42X", "record": "GHSA-3MH6-R7M6-R42X", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-03-03T17:15:00Z", "date_only": false, "value": "2021-03-03T17:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-27927", "record": "UBUNTU-CVE-2021-27927", "field": "published"}, {"timestamp": "2021-03-03T17:15:00Z", "date_only": false, "value": "2021-03-03T17:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-27927", "record": "GSD-2021-27927", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-03-03T17:15:12.753Z", "date_only": false, "value": "2021-03-03T17:15:12.753", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-27927", "record": "FKIE_CVE-2021-27927", "field": "published"}, {"timestamp": "2021-03-03T20:45:52Z", "date_only": false, "value": "2021-03-03T20:45:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/24412", "record": "CVE-2021-27927", "field": "creation_timestamp", "uuid": "148117d7-4c32-49cd-8dbd-6528b73a2471", "content": "\u203c CVE-2021-27927 \u203c\n\nIn Zabbix before 4.0.28rc1, 5.x before 5.0.8rc1, 5.1.x and 5.2.x before 5.2.4rc1, and 5.3.x and 5.4.x before 5.4.0alpha1, the CControllerAuthenticationUpdate controller lacks a CSRF protection mechanism. The code inside this controller calls diableSIDValidation inside the init() method.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/24412"}, {"timestamp": "2021-03-11T11:01:04Z", "date_only": false, "value": "2021-03-11T11:01:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/2883", "record": "CVE-2021-27927", "field": "creation_timestamp", "uuid": "4e3aeaea-cd8f-4fe2-bee0-4ac462245d94", "content": "#Threat_Research\n1. Reproducing the MS Exchange Proxylogon Exploit Chain\nhttps://www.praetorian.com/blog/reproducing-proxylogon-exploit\n2. On Exploiting CVE-2021-1648 (Splwow64 LPE)\nhttp://dronesec.pw/blog/2021/03/10/on-exploiting-cve-2021-1648\n3. CSRF to RCE Chain in Zabbix (PoC for CVE-2021-27927)\nhttps://www.horizon3.ai/disclosures/zabbix-csrf-to-rce", "url": "https://t.me/CyberSecurityTechnologies/2883"}, {"timestamp": "2021-03-30T15:59:13Z", "date_only": false, "value": "2021-03-30T15:59:13Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:0990-1", "record": "SUSE-SU-2021:0990-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-03-30T15:59:13Z", "date_only": false, "value": "2021-03-30T15:59:13Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2021:0990-1", "record": "SUSE-SU-2021:0990-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-03-30T15:59:13Z", "date_only": false, "value": "2021-03-30T15:59:13Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2021:0990-1", "record": "SUSE-SU-2021:0990-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-03-30T15:59:13Z", "date_only": false, "value": "2021-03-30T15:59:13Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2021:0990-1", "record": "SUSE-SU-2021:0990-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-02-16T09:04:51Z", "date_only": false, "value": "2022-02-16T09:04:51Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:0036-1", "record": "OPENSUSE-SU-2022:0036-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-02-16T09:04:51Z", "date_only": false, "value": "2022-02-16T09:04:51Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:0036-1", "record": "OPENSUSE-SU-2022:0036-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-02-16T09:04:51Z", "date_only": false, "value": "2022-02-16T09:04:51Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:0036-1", "record": "OPENSUSE-SU-2022:0036-1", "field": "document.tracking.generator.date"}, {"timestamp": "2022-02-16T09:04:51Z", "date_only": false, "value": "2022-02-16T09:04:51Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:0036-1", "record": "OPENSUSE-SU-2022:0036-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-05-24T17:43:36Z", "date_only": false, "value": "2022-05-24T17:43:36Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3MH6-R7M6-R42X", "record": "GHSA-3MH6-R7M6-R42X", "field": "published"}, {"timestamp": "2022-05-24T17:43:36Z", "date_only": false, "value": "2022-05-24T17:43:36Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3MH6-R7M6-R42X", "record": "GHSA-3MH6-R7M6-R42X", "field": "modified"}, {"timestamp": "2023-04-12T00:00:00Z", "date_only": false, "value": "2023-04-12T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2021-27927", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-04-12T16:15:00Z", "date_only": false, "value": "2023-04-12T16:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-27927", "record": "GSD-2021-27927", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:23:35.705Z", "date_only": false, "value": "2023-12-13T01:23:35.705517Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-27927", "record": "GSD-2021-27927", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11539-1", "record": "OPENSUSE-SU-2024:11539-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11539-1", "record": "OPENSUSE-SU-2024:11539-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11539-1", "record": "OPENSUSE-SU-2024:11539-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11539-1", "record": "OPENSUSE-SU-2024:11539-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-08-03T21:33:16.680Z", "date_only": false, "value": "2024-08-03T21:33:16.680Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-27927", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T21:33:16.680Z", "date_only": false, "value": "2024-08-03T21:33:16.680Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-27927", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-09-08T16:47:02Z", "date_only": false, "value": "2025-09-08T16:47:02Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-27927", "record": "UBUNTU-CVE-2021-27927", "field": "modified"}, {"timestamp": "2026-06-17T03:45:37.820Z", "date_only": false, "value": "2026-06-17T03:45:37.820", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-27927", "record": "FKIE_CVE-2021-27927", "field": "lastModified"}, {"timestamp": "2026-09-01T17:01:00.466Z", "date_only": false, "value": "2026-09-01T17:01:00.466577Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/2493", "record": "CVE-2021-27927", "field": "creation_timestamp", "uuid": "1451e2a3-74ec-4718-98ff-f9cc9e45f926", "content": "Offensive security\nWindows & Active Directory Exploitation Cheat Sheet\nand Command Reference\nhttps://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference\n\nCVE-2021-24091:\nOut-of-bounds write in WindowsCodecsRaw!COlympusE300LoadRaw (1-day PoC)\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2137\n\nCVE-2021-21300:\nGit vulnerability (PoC)\nhttps://www.openwall.com/lists/oss-security/2021/03/09/3\n\nThreat Research\n1. Reproducing the MS Exchange Proxylogon Exploit Chain\nhttps://www.praetorian.com/blog/reproducing-proxylogon-exploit\n\n2. On Exploiting CVE-2021-1648 (Splwow64 LPE)\nhttp://dronesec.pw/blog/2021/03/10/on-exploiting-cve-2021-1648\n\n3. CSRF to RCE Chain in Zabbix (PoC for CVE-2021-27927)\nhttps://www.horizon3.ai/disclosures/zabbix-csrf-to-rce\n\n4.One day short of a full chain:\nPart 1 - Android Kernel arbitrary code execution\".\nhttps://securitylab.github.com/research/one_day_short_of_a_fullchain_android\n]-> Exploit for Qualcomm (CVE-2020-11239):\nhttps://github.com/github/securitylab/tree/main/SecurityExploits/Android/Qualcomm/CVE-2020-11239\n]-> Use-after-free in Qualcomm kgsl driver:\nhttps://securitylab.github.com/advisories/GHSL-2020-375-kgsl", "url": "https://t.me/cissp/2493"}, {"timestamp": "2026-09-11T17:00:03.278Z", "date_only": false, "value": "2026-09-11T17:00:03.278343Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/2493", "record": "CVE-2021-27927", "field": "creation_timestamp", "uuid": "8b2c531c-1f18-49cd-98b6-ff2ac3dc3cf0", "content": "Offensive security\nWindows & Active Directory Exploitation Cheat Sheet\nand Command Reference\nhttps://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference\n\nCVE-2021-24091:\nOut-of-bounds write in WindowsCodecsRaw!COlympusE300LoadRaw (1-day PoC)\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2137\n\nCVE-2021-21300:\nGit vulnerability (PoC)\nhttps://www.openwall.com/lists/oss-security/2021/03/09/3\n\nThreat Research\n1. Reproducing the MS Exchange Proxylogon Exploit Chain\nhttps://www.praetorian.com/blog/reproducing-proxylogon-exploit\n\n2. On Exploiting CVE-2021-1648 (Splwow64 LPE)\nhttp://dronesec.pw/blog/2021/03/10/on-exploiting-cve-2021-1648\n\n3. CSRF to RCE Chain in Zabbix (PoC for CVE-2021-27927)\nhttps://www.horizon3.ai/disclosures/zabbix-csrf-to-rce\n\n4.One day short of a full chain:\nPart 1 - Android Kernel arbitrary code execution\".\nhttps://securitylab.github.com/research/one_day_short_of_a_fullchain_android\n]-> Exploit for Qualcomm (CVE-2020-11239):\nhttps://github.com/github/securitylab/tree/main/SecurityExploits/Android/Qualcomm/CVE-2020-11239\n]-> Use-after-free in Qualcomm kgsl driver:\nhttps://securitylab.github.com/advisories/GHSL-2020-375-kgsl", "url": "https://t.me/cissp/2493"}, {"timestamp": "2026-09-20T13:52:03Z", "date_only": false, "value": "2026-09-20T13:52:03Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:0990-1", "record": "SUSE-SU-2021:0990-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T13:52:03Z", "date_only": false, "value": "2026-09-20T13:52:03Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2021:0990-1", "record": "SUSE-SU-2021:0990-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T19:37:41Z", "date_only": false, "value": "2026-09-20T19:37:41Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:0036-1", "record": "OPENSUSE-SU-2022:0036-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:37:41Z", "date_only": false, "value": "2026-09-20T19:37:41Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:0036-1", "record": "OPENSUSE-SU-2022:0036-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T20:20:48Z", "date_only": false, "value": "2026-09-20T20:20:48Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11539-1", "record": "OPENSUSE-SU-2024:11539-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:20:48Z", "date_only": false, "value": "2026-09-20T20:20:48Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11539-1", "record": "OPENSUSE-SU-2024:11539-1", "field": "document.tracking.current_release_date"}]}