{"vulnerability": "CVE-2021-27651", "sightings": [{"uuid": "1816b89a-f948-4ead-8004-3722c3e7d1f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27651", "type": "published-proof-of-concept", "source": "https://t.me/cKure/5401", "content": "\u25a0\u25a1\u25a1\u25a1\u25a1 pega infinity bypass | CVE-2021-27651 PoC\n\nhttps://t.me/cKure/7364", "creation_timestamp": "2021-05-17T17:34:30.000000Z"}, {"uuid": "819c8dee-2b1e-46c7-82aa-d8c5e9ed16ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27651", "type": "published-proof-of-concept", "source": "https://t.me/YouPentest/1647", "content": "@YouDeleted\npega infinity bypass | CVE-2021-27651 PoC", "creation_timestamp": "2021-05-18T10:31:48.000000Z"}, {"uuid": "3b929bd4-1a37-47f0-8838-c96f4354a2c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27651", "type": "seen", "source": "https://t.me/pwnwiki_zhchannel/483", "content": "CVE-2021-27651 PEGA pega infinity \u6388\u6b0a\u8a8d\u8b49\u7e5e\u904eRCE\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-27651_PEGA_pega_infinity_%E6%8E%88%E6%AC%8A%E8%AA%8D%E8%AD%89%E7%B9%9E%E9%81%8ERCE%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-05-22T02:16:27.000000Z"}, {"uuid": "0c0d7e93-03f0-4b1a-a5d9-6a86324a554f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27651", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3384", "content": "#exploit\nCVE-2021-27651:\nPega Infinity Password Reset (PoC)\nhttps://github.com/Vulnmachines/CVE-2021-27651", "creation_timestamp": "2021-05-17T11:36:19.000000Z"}, {"uuid": "ba3eb469-7e8b-427a-bde6-ddfd992d0052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27651", "type": "published-proof-of-concept", "source": "Telegram/vleuiZTd4rXInhZFtS0CbsXmAcYJ3IqEExr6ZV3lhDrWA1M", "content": "", "creation_timestamp": "2026-08-12T17:00:04.323310Z"}, {"uuid": "181d7f4e-4a82-4e27-ad91-fc24549f848b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27651", "type": "published-proof-of-concept", "source": "Telegram/vleuiZTd4rXInhZFtS0CbsXmAcYJ3IqEExr6ZV3lhDrWA1M", "content": "", "creation_timestamp": "2026-08-13T00:00:07.603433Z"}, {"uuid": "13464f98-8f56-47c6-b7e3-e2d813c939f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27651", "type": "seen", "source": "https://t.me/cissp/3201", "content": "Malware analysis\n1. Newly observed PHP-based skimmer shows ongoing Magecart Group 12 activity\nhttps://blog.malwarebytes.com/cybercrime/2021/05/newly-observed-php-based-skimmer-shows-ongoing-magecart-group-12-activity\n2. Malicious Rust Macro for VSCode\nhttps://github.com/lucky/bad_actor_poc\n\nexploit\nCVE-2021-27651:\nPega Infinity Password Reset (PoC)\nhttps://github.com/Vulnmachines/CVE-2021-27651\n\nThreat Research\n1. Pentesting ISP 101. How I hacked & fixed My ISP\nhttps://infosecwriteups.com/pentesting-isp-101-how-i-hacked-fixed-my-isp-643e9201f7e9\n2. Auth Bypass in https-nearbydevices-pa-googleapis-com\nhttps://feed.bugs.xdavidhu.me/bugs/0004\n\nRed Team Tactics\n1. A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors\nhttps://github.com/optiv/Dent#techniques\n2. Remote Potato - From Domain User to Enterprise Admin\nhttps://pentestlab.blog/2021/05/04/remote-potato-from-domain-user-to-enterprise-admin/amp/?__twitter_impression=true\n\nWindows/x64 - Inject All Processes with Meterpreter Reverse Shell\nhttps://github.com/boku7/winx64-InjectAllProcessesMeterpreter-Shellcode\n\nHTTP Protocol Stack RCE Vulnerability\n(PoC for CVE-2021-31166)\nhttps://github.com/0vercl0k/CVE-2021-31166\n\nHYNTROSPECT Fuzzer\nhttps://github.com/googleprojectzero/Hyntrospect", "creation_timestamp": "2026-09-01T17:00:50.335218Z"}, {"uuid": "8038f95e-c9fd-4de9-91be-2d79c8d9414e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27651", "type": "seen", "source": "https://t.me/cissp/3201", "content": "Malware analysis\n1. Newly observed PHP-based skimmer shows ongoing Magecart Group 12 activity\nhttps://blog.malwarebytes.com/cybercrime/2021/05/newly-observed-php-based-skimmer-shows-ongoing-magecart-group-12-activity\n2. Malicious Rust Macro for VSCode\nhttps://github.com/lucky/bad_actor_poc\n\nexploit\nCVE-2021-27651:\nPega Infinity Password Reset (PoC)\nhttps://github.com/Vulnmachines/CVE-2021-27651\n\nThreat Research\n1. Pentesting ISP 101. How I hacked & fixed My ISP\nhttps://infosecwriteups.com/pentesting-isp-101-how-i-hacked-fixed-my-isp-643e9201f7e9\n2. Auth Bypass in https-nearbydevices-pa-googleapis-com\nhttps://feed.bugs.xdavidhu.me/bugs/0004\n\nRed Team Tactics\n1. A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors\nhttps://github.com/optiv/Dent#techniques\n2. Remote Potato - From Domain User to Enterprise Admin\nhttps://pentestlab.blog/2021/05/04/remote-potato-from-domain-user-to-enterprise-admin/amp/?__twitter_impression=true\n\nWindows/x64 - Inject All Processes with Meterpreter Reverse Shell\nhttps://github.com/boku7/winx64-InjectAllProcessesMeterpreter-Shellcode\n\nHTTP Protocol Stack RCE Vulnerability\n(PoC for CVE-2021-31166)\nhttps://github.com/0vercl0k/CVE-2021-31166\n\nHYNTROSPECT Fuzzer\nhttps://github.com/googleprojectzero/Hyntrospect", "creation_timestamp": "2026-09-02T01:04:39.124371Z"}]}