{"vulnerability": "cve-2021-27927", "sightings": [{"uuid": "148117d7-4c32-49cd-8dbd-6528b73a2471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27927", "type": "seen", "source": "https://t.me/cibsecurity/24412", "content": "\u203c CVE-2021-27927 \u203c\n\nIn Zabbix before 4.0.28rc1, 5.x before 5.0.8rc1, 5.1.x and 5.2.x before 5.2.4rc1, and 5.3.x and 5.4.x before 5.4.0alpha1, the CControllerAuthenticationUpdate controller lacks a CSRF protection mechanism. The code inside this controller calls diableSIDValidation inside the init() method.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-03T20:45:52.000000Z"}, {"uuid": "4e3aeaea-cd8f-4fe2-bee0-4ac462245d94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27927", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2883", "content": "#Threat_Research\n1. Reproducing the MS Exchange Proxylogon Exploit Chain\nhttps://www.praetorian.com/blog/reproducing-proxylogon-exploit\n2. On Exploiting CVE-2021-1648 (Splwow64 LPE)\nhttp://dronesec.pw/blog/2021/03/10/on-exploiting-cve-2021-1648\n3. CSRF to RCE Chain in Zabbix (PoC for CVE-2021-27927)\nhttps://www.horizon3.ai/disclosures/zabbix-csrf-to-rce", "creation_timestamp": "2021-03-11T11:01:04.000000Z"}, {"uuid": "1451e2a3-74ec-4718-98ff-f9cc9e45f926", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27927", "type": "seen", "source": "https://t.me/cissp/2493", "content": "Offensive security\nWindows & Active Directory Exploitation Cheat Sheet\nand Command Reference\nhttps://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference\n\nCVE-2021-24091:\nOut-of-bounds write in WindowsCodecsRaw!COlympusE300LoadRaw (1-day PoC)\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2137\n\nCVE-2021-21300:\nGit vulnerability (PoC)\nhttps://www.openwall.com/lists/oss-security/2021/03/09/3\n\nThreat Research\n1. Reproducing the MS Exchange Proxylogon Exploit Chain\nhttps://www.praetorian.com/blog/reproducing-proxylogon-exploit\n\n2. On Exploiting CVE-2021-1648 (Splwow64 LPE)\nhttp://dronesec.pw/blog/2021/03/10/on-exploiting-cve-2021-1648\n\n3. CSRF to RCE Chain in Zabbix (PoC for CVE-2021-27927)\nhttps://www.horizon3.ai/disclosures/zabbix-csrf-to-rce\n\n4.One day short of a full chain:\nPart 1 - Android Kernel arbitrary code execution\".\nhttps://securitylab.github.com/research/one_day_short_of_a_fullchain_android\n]-> Exploit for Qualcomm (CVE-2020-11239):\nhttps://github.com/github/securitylab/tree/main/SecurityExploits/Android/Qualcomm/CVE-2020-11239\n]-> Use-after-free in Qualcomm kgsl driver:\nhttps://securitylab.github.com/advisories/GHSL-2020-375-kgsl", "creation_timestamp": "2026-09-01T17:01:00.466577Z"}, {"uuid": "955616cd-77d3-471e-859b-1939d9d8632e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-27927", "type": "seen", "source": "https://t.me/cissp/2493", "content": "Offensive security\nWindows & Active Directory Exploitation Cheat Sheet\nand Command Reference\nhttps://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference\n\nCVE-2021-24091:\nOut-of-bounds write in WindowsCodecsRaw!COlympusE300LoadRaw (1-day PoC)\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2137\n\nCVE-2021-21300:\nGit vulnerability (PoC)\nhttps://www.openwall.com/lists/oss-security/2021/03/09/3\n\nThreat Research\n1. Reproducing the MS Exchange Proxylogon Exploit Chain\nhttps://www.praetorian.com/blog/reproducing-proxylogon-exploit\n\n2. On Exploiting CVE-2021-1648 (Splwow64 LPE)\nhttp://dronesec.pw/blog/2021/03/10/on-exploiting-cve-2021-1648\n\n3. CSRF to RCE Chain in Zabbix (PoC for CVE-2021-27927)\nhttps://www.horizon3.ai/disclosures/zabbix-csrf-to-rce\n\n4.One day short of a full chain:\nPart 1 - Android Kernel arbitrary code execution\".\nhttps://securitylab.github.com/research/one_day_short_of_a_fullchain_android\n]-> Exploit for Qualcomm (CVE-2020-11239):\nhttps://github.com/github/securitylab/tree/main/SecurityExploits/Android/Qualcomm/CVE-2020-11239\n]-> Use-after-free in Qualcomm kgsl driver:\nhttps://securitylab.github.com/advisories/GHSL-2020-375-kgsl", "creation_timestamp": "2026-09-02T01:04:51.233544Z"}]}