{"vulnerability": "CVE-2021-1588", "sightings": [{"uuid": "2bb9a7fa-b7d6-4028-9c14-9f64a8d05045", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1588", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/510", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aPoC for exploiting CVE-2021-32955 : Delta Electronics DIAEnergie Version 1.7.5 and prior allows unrestricted file uploads, which may allow an attacker to remotely execute code.\nURL\uff1ahttps://github.com/AlAIAL90/CVE-2021-1588", "creation_timestamp": "2021-09-03T23:02:05.000000Z"}, {"uuid": "ff506da5-ffa0-4c75-958b-b0746c4150f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1588", "type": "seen", "source": "https://t.me/pwnwiki_zhchannel/844", "content": "CVE-2021-1588 Cisco NX-OS OAM \u5167\u5b58\u640d\u58de\u6f0f\u6d1e", "creation_timestamp": "2021-09-21T04:41:52.000000Z"}, {"uuid": "43b1962d-61d7-4601-8f73-64eb1d652164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1588", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4232", "content": "#exploit\nCVE-2021-1588:\nA vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software\nhttps://github.com/AlAIAL90/CVE-2021-1588\n]-&gt; A vulnerability in the implementation of the system login block-for command for Cisco NX-OS Software\nhttps://github.com/AlAIAL90/CVE-2021-1590\n]-&gt; A vulnerability in the EtherChannel port subscription logic of Cisco Nexus 9500 Series Switches\u00a0\nhttps://github.com/AlAIAL90/CVE-2021-1591", "creation_timestamp": "2021-09-05T20:30:34.000000Z"}, {"uuid": "bec223ec-da46-4109-bc0c-fe6355773e7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1588", "type": "seen", "source": "https://t.me/cissp/4289", "content": "Cloud Security\n1. AWS privilege escalation:\nexploring odd features of the Trust Policy\nhttps://medium.com/inside-the-tech-by-softserve/aws-privilege-escalation-exploring-odd-features-of-the-trust-policy-7a970a32861\n2. Kubernetes Penetration Testing tool\ud83d\udc4d\ud83c\udffd\nhttps://github.com/inguardians/peirates\n\nexploit\nCVE-2021-1588:\nA vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software\nhttps://github.com/AlAIAL90/CVE-2021-1588\n]-&gt; A vulnerability in the implementation of the system login block-for command for Cisco NX-OS Software\nhttps://github.com/AlAIAL90/CVE-2021-1590\n]-&gt; A vulnerability in the EtherChannel port subscription logic of Cisco Nexus 9500 Series Switches\u00a0\nhttps://github.com/AlAIAL90/CVE-2021-1591\n\nA practical experiment on supply-chain security using reproducible builds\ud83e\udd78\nhttps://github.com/kpcyrd/i-probably-didnt-backdoor-this\n\nThreat Research\n1. Tale of $126k worth of bugs that lead to Facebook Account Takeovers\ud83d\ude00\nhttps://ysamm.com/?p=708\n2. A deep-dive into the SolarWinds Serv-U SSH vulnerability\ud83d\ude01\nhttps://www.microsoft.com/security/blog/2021/09/02/a-deep-dive-into-the-solarwinds-serv-u-ssh-vulnerability", "creation_timestamp": "2026-09-01T17:00:41.110789Z"}, {"uuid": "daf4a952-7296-42c0-9484-63577bc7143b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1588", "type": "seen", "source": "https://t.me/cissp/4289", "content": "Cloud Security\n1. AWS privilege escalation:\nexploring odd features of the Trust Policy\nhttps://medium.com/inside-the-tech-by-softserve/aws-privilege-escalation-exploring-odd-features-of-the-trust-policy-7a970a32861\n2. Kubernetes Penetration Testing tool\ud83d\udc4d\ud83c\udffd\nhttps://github.com/inguardians/peirates\n\nexploit\nCVE-2021-1588:\nA vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software\nhttps://github.com/AlAIAL90/CVE-2021-1588\n]-&gt; A vulnerability in the implementation of the system login block-for command for Cisco NX-OS Software\nhttps://github.com/AlAIAL90/CVE-2021-1590\n]-&gt; A vulnerability in the EtherChannel port subscription logic of Cisco Nexus 9500 Series Switches\u00a0\nhttps://github.com/AlAIAL90/CVE-2021-1591\n\nA practical experiment on supply-chain security using reproducible builds\ud83e\udd78\nhttps://github.com/kpcyrd/i-probably-didnt-backdoor-this\n\nThreat Research\n1. Tale of $126k worth of bugs that lead to Facebook Account Takeovers\ud83d\ude00\nhttps://ysamm.com/?p=708\n2. A deep-dive into the SolarWinds Serv-U SSH vulnerability\ud83d\ude01\nhttps://www.microsoft.com/security/blog/2021/09/02/a-deep-dive-into-the-solarwinds-serv-u-ssh-vulnerability", "creation_timestamp": "2026-09-02T01:04:26.809445Z"}, {"uuid": "11c69592-f81f-4f09-812d-6a89b0d7753b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1588", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4289", "content": "Cloud Security\n1. AWS privilege escalation:\nexploring odd features of the Trust Policy\nhttps://medium.com/inside-the-tech-by-softserve/aws-privilege-escalation-exploring-odd-features-of-the-trust-policy-7a970a32861\n2. Kubernetes Penetration Testing tool\ud83d\udc4d\ud83c\udffd\nhttps://github.com/inguardians/peirates\n\nexploit\nCVE-2021-1588:\nA vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software\nhttps://github.com/AlAIAL90/CVE-2021-1588\n]-&gt; A vulnerability in the implementation of the system login block-for command for Cisco NX-OS Software\nhttps://github.com/AlAIAL90/CVE-2021-1590\n]-&gt; A vulnerability in the EtherChannel port subscription logic of Cisco Nexus 9500 Series Switches\u00a0\nhttps://github.com/AlAIAL90/CVE-2021-1591\n\nA practical experiment on supply-chain security using reproducible builds\ud83e\udd78\nhttps://github.com/kpcyrd/i-probably-didnt-backdoor-this\n\nThreat Research\n1. Tale of $126k worth of bugs that lead to Facebook Account Takeovers\ud83d\ude00\nhttps://ysamm.com/?p=708\n2. A deep-dive into the SolarWinds Serv-U SSH vulnerability\ud83d\ude01\nhttps://www.microsoft.com/security/blog/2021/09/02/a-deep-dive-into-the-solarwinds-serv-u-ssh-vulnerability", "creation_timestamp": "2026-09-10T20:00:10.683023Z"}, {"uuid": "60911b64-8b82-4539-b80d-d7f7d8bb358e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1588", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4289", "content": "Cloud Security\n1. AWS privilege escalation:\nexploring odd features of the Trust Policy\nhttps://medium.com/inside-the-tech-by-softserve/aws-privilege-escalation-exploring-odd-features-of-the-trust-policy-7a970a32861\n2. Kubernetes Penetration Testing tool\ud83d\udc4d\ud83c\udffd\nhttps://github.com/inguardians/peirates\n\nexploit\nCVE-2021-1588:\nA vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software\nhttps://github.com/AlAIAL90/CVE-2021-1588\n]-&gt; A vulnerability in the implementation of the system login block-for command for Cisco NX-OS Software\nhttps://github.com/AlAIAL90/CVE-2021-1590\n]-&gt; A vulnerability in the EtherChannel port subscription logic of Cisco Nexus 9500 Series Switches\u00a0\nhttps://github.com/AlAIAL90/CVE-2021-1591\n\nA practical experiment on supply-chain security using reproducible builds\ud83e\udd78\nhttps://github.com/kpcyrd/i-probably-didnt-backdoor-this\n\nThreat Research\n1. Tale of $126k worth of bugs that lead to Facebook Account Takeovers\ud83d\ude00\nhttps://ysamm.com/?p=708\n2. A deep-dive into the SolarWinds Serv-U SSH vulnerability\ud83d\ude01\nhttps://www.microsoft.com/security/blog/2021/09/02/a-deep-dive-into-the-solarwinds-serv-u-ssh-vulnerability", "creation_timestamp": "2026-09-11T00:00:28.730521Z"}]}