{"vulnerability": "cve-2021-2254", "sightings": [{"uuid": "7747f46c-ff41-4ff8-9def-09fca44ea9e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22545", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4079", "content": "#exploit\n1.  CVE-2021-31184:\nInformation disclosure in Microsoft Windows\nInfrared Data Association (IrDA)\nhttps://github.com/waleedassar/CVE-2021-31184\n2.  CVE-2021-22545:\nA CVE from BinDiff & IDA Pro\nhttps://jhftss.github.io/CVE-2021-22545", "creation_timestamp": "2021-08-16T11:57:28.000000Z"}, {"uuid": "997740c9-3607-494e-bc86-163fc7672aa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-2254", "type": "seen", "source": "https://t.me/cissp/4032", "content": "exploit\n1.  CVE-2021-31184:\nInformation disclosure in Microsoft Windows\nInfrared Data Association (IrDA)\nhttps://github.com/waleedassar/CVE-2021-31184\n2.  CVE-2021-22545:\nA CVE from BinDiff & IDA Pro\nhttps://jhftss.github.io/CVE-2021-2254\n\nMalware analysis\n1. Trickbot Leads Up to Fake 1Password Installation\nhttps://thedfirreport.com/2021/08/16/trickbot-leads-up-to-fake-1password-installation\n2. Danabot Distributed Through Malspam\nhttps://isc.sans.edu/forums/diary/Example+of+Danabot+distributed+through+malspam/27744\n\nRed Team Tactics\n1. Learn the access control model of Windows security from mimikatz\ud83d\udc4d\ud83c\udffd\nhttps://paper.seebug.org/1672\n2. ProxyShell POC Exploit : Exchange Server RCE\ud83d\ude2c\n(ACL Bypass+EoP+Arbitrary File Write)\nhttps://github.com/ktecv2000/ProxyShell\n\nOffensive security\n1. Active Directory Exploitation Cheat Sheet\ud83d\ude2c\nhttps://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet#active-directory-exploitation-cheat-sheet\n2. Cobalt Strike User-Defined Reflective Loader written in Assembly/C for advanced evasion capabilities\nhttps://github.com/boku7/CobaltStrikeReflectiveLoader", "creation_timestamp": "2026-09-01T17:00:42.726272Z"}, {"uuid": "d9fe483c-bc0a-43e6-b755-bed947cbb434", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22545", "type": "seen", "source": "https://t.me/cissp/4032", "content": "exploit\n1.  CVE-2021-31184:\nInformation disclosure in Microsoft Windows\nInfrared Data Association (IrDA)\nhttps://github.com/waleedassar/CVE-2021-31184\n2.  CVE-2021-22545:\nA CVE from BinDiff & IDA Pro\nhttps://jhftss.github.io/CVE-2021-2254\n\nMalware analysis\n1. Trickbot Leads Up to Fake 1Password Installation\nhttps://thedfirreport.com/2021/08/16/trickbot-leads-up-to-fake-1password-installation\n2. Danabot Distributed Through Malspam\nhttps://isc.sans.edu/forums/diary/Example+of+Danabot+distributed+through+malspam/27744\n\nRed Team Tactics\n1. Learn the access control model of Windows security from mimikatz\ud83d\udc4d\ud83c\udffd\nhttps://paper.seebug.org/1672\n2. ProxyShell POC Exploit : Exchange Server RCE\ud83d\ude2c\n(ACL Bypass+EoP+Arbitrary File Write)\nhttps://github.com/ktecv2000/ProxyShell\n\nOffensive security\n1. Active Directory Exploitation Cheat Sheet\ud83d\ude2c\nhttps://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet#active-directory-exploitation-cheat-sheet\n2. Cobalt Strike User-Defined Reflective Loader written in Assembly/C for advanced evasion capabilities\nhttps://github.com/boku7/CobaltStrikeReflectiveLoader", "creation_timestamp": "2026-09-01T17:00:42.579784Z"}, {"uuid": "09c21aa3-236c-4899-9234-7f0ec591ff87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-2254", "type": "seen", "source": "https://t.me/cissp/4032", "content": "exploit\n1.  CVE-2021-31184:\nInformation disclosure in Microsoft Windows\nInfrared Data Association (IrDA)\nhttps://github.com/waleedassar/CVE-2021-31184\n2.  CVE-2021-22545:\nA CVE from BinDiff & IDA Pro\nhttps://jhftss.github.io/CVE-2021-2254\n\nMalware analysis\n1. Trickbot Leads Up to Fake 1Password Installation\nhttps://thedfirreport.com/2021/08/16/trickbot-leads-up-to-fake-1password-installation\n2. Danabot Distributed Through Malspam\nhttps://isc.sans.edu/forums/diary/Example+of+Danabot+distributed+through+malspam/27744\n\nRed Team Tactics\n1. Learn the access control model of Windows security from mimikatz\ud83d\udc4d\ud83c\udffd\nhttps://paper.seebug.org/1672\n2. ProxyShell POC Exploit : Exchange Server RCE\ud83d\ude2c\n(ACL Bypass+EoP+Arbitrary File Write)\nhttps://github.com/ktecv2000/ProxyShell\n\nOffensive security\n1. Active Directory Exploitation Cheat Sheet\ud83d\ude2c\nhttps://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet#active-directory-exploitation-cheat-sheet\n2. Cobalt Strike User-Defined Reflective Loader written in Assembly/C for advanced evasion capabilities\nhttps://github.com/boku7/CobaltStrikeReflectiveLoader", "creation_timestamp": "2026-09-02T01:04:29.790885Z"}, {"uuid": "4f7e2b10-cd0a-4d9b-b384-a8fb1b515313", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22545", "type": "seen", "source": "https://t.me/cissp/4032", "content": "exploit\n1.  CVE-2021-31184:\nInformation disclosure in Microsoft Windows\nInfrared Data Association (IrDA)\nhttps://github.com/waleedassar/CVE-2021-31184\n2.  CVE-2021-22545:\nA CVE from BinDiff & IDA Pro\nhttps://jhftss.github.io/CVE-2021-2254\n\nMalware analysis\n1. Trickbot Leads Up to Fake 1Password Installation\nhttps://thedfirreport.com/2021/08/16/trickbot-leads-up-to-fake-1password-installation\n2. Danabot Distributed Through Malspam\nhttps://isc.sans.edu/forums/diary/Example+of+Danabot+distributed+through+malspam/27744\n\nRed Team Tactics\n1. Learn the access control model of Windows security from mimikatz\ud83d\udc4d\ud83c\udffd\nhttps://paper.seebug.org/1672\n2. ProxyShell POC Exploit : Exchange Server RCE\ud83d\ude2c\n(ACL Bypass+EoP+Arbitrary File Write)\nhttps://github.com/ktecv2000/ProxyShell\n\nOffensive security\n1. Active Directory Exploitation Cheat Sheet\ud83d\ude2c\nhttps://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet#active-directory-exploitation-cheat-sheet\n2. Cobalt Strike User-Defined Reflective Loader written in Assembly/C for advanced evasion capabilities\nhttps://github.com/boku7/CobaltStrikeReflectiveLoader", "creation_timestamp": "2026-09-02T01:04:29.413645Z"}]}