{"metadata": {"vulnerability": "CVE-2019-12840", "count": 27, "kinds": {"milestone": 4, "sighting": 12, "kev": 0, "other": 11}}, "data": [{"timestamp": "2019-06-11T00:00:00Z", "date_only": false, "value": "2019-06-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://www.exploit-db.com/exploits/46984", "record": "CVE-2019-12840", "field": "creation_timestamp", "uuid": "03f345dd-c077-494b-8ad2-1df2471c6fa1", "url": "https://www.exploit-db.com/exploits/46984"}, {"timestamp": "2019-06-15T00:00:00Z", "date_only": false, "value": "2019-06-15T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2019-12840", "field": "cveMetadata.dateReserved"}, {"timestamp": "2019-06-15T19:52:10Z", "date_only": false, "value": "2019-06-15T19:52:10.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-12840", "field": "cveMetadata.datePublished"}, {"timestamp": "2019-06-15T20:29:00Z", "date_only": false, "value": "2019-06-15T20:29:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GCQ8-GGWJ-2XVV", "record": "GHSA-GCQ8-GGWJ-2XVV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2019-06-15T20:29:00Z", "date_only": false, "value": "2019-06-15T20:29Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2019-12840", "record": "GSD-2019-12840", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2019-06-15T20:29:00.287Z", "date_only": false, "value": "2019-06-15T20:29:00.287", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-12840", "record": "FKIE_CVE-2019-12840", "field": "published"}, {"timestamp": "2019-06-17T00:00:00Z", "date_only": true, "value": "2019-06-17", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2019-19305", "record": "CNVD-2019-19305", "field": "submitTime"}, {"timestamp": "2019-06-19T13:57:30Z", "date_only": false, "value": "2019-06-19T13:57:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/webmin_packageup_rce.rb", "record": "CVE-2019-12840", "field": "creation_timestamp", "uuid": "6f08536f-fc4c-42a1-9eba-6f2c30d49dbc", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/webmin_packageup_rce.rb"}, {"timestamp": "2019-06-20T20:06:05Z", "date_only": false, "value": "2019-06-20T20:06:05.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2019-12840", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2019-06-26T00:00:00Z", "date_only": true, "value": "2019-06-26", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2019-19305", "record": "CNVD-2019-19305", "field": "openTime"}, {"timestamp": "2020-08-24T17:37:00Z", "date_only": false, "value": "2020-08-24T17:37Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2019-12840", "record": "GSD-2019-12840", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2020-12-21T22:52:17Z", "date_only": false, "value": "2020-12-21T22:52:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/21140", "record": "CVE-2019-12840", "field": "creation_timestamp", "uuid": "03a32148-6b58-42b3-a06f-e12bada9af3c", "content": "\u203c CVE-2020-35606 \u203c\n\nArbitrary command execution can occur in Webmin through 1.962. Any user authorized for the Package Updates module can execute arbitrary commands with root privileges via vectors involving %0A and %0C. NOTE: this issue exists because of an incomplete fix for CVE-2019-12840.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/21140"}, {"timestamp": "2020-12-31T18:30:13Z", "date_only": false, "value": "2020-12-31T18:30:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/2350", "record": "CVE-2019-12840", "field": "creation_timestamp", "uuid": "e5ef0355-07ca-4d4a-9d71-db01912c4ee7", "content": "#Threat_Research\n1. CVE-2020-35606 - Arbitrary Command Execution Vulnerability in Webmin\n// This vulnerability is bypassing the measure taken for CVE-2019-12840 and converting it into a new vector\nhttps://www.pentest.com.tr/exploits/Webmin-1962-PU-Escape-Bypass-Remote-Command-Execution.html\n2. SUNBURST, TEARDROP and the NetSec New Normal\nhttps://research.checkpoint.com/2020/sunburst-teardrop-and-the-netsec-new-normal\n3. CyRC analysis: Authentication bypass vulnerability in Java Bouncy Castle (PoC for CVE-2020-28052)\nhttps://www.synopsys.com/blogs/software-security/cve-2020-28052-bouncy-castle", "url": "https://t.me/CyberSecurityTechnologies/2350"}, {"timestamp": "2022-05-24T16:48:06Z", "date_only": false, "value": "2022-05-24T16:48:06Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GCQ8-GGWJ-2XVV", "record": "GHSA-GCQ8-GGWJ-2XVV", "field": "published"}, {"timestamp": "2022-05-24T16:48:06Z", "date_only": false, "value": "2022-05-24T16:48:06Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GCQ8-GGWJ-2XVV", "record": "GHSA-GCQ8-GGWJ-2XVV", "field": "modified"}, {"timestamp": "2023-12-13T01:23:43.822Z", "date_only": false, "value": "2023-12-13T01:23:43.822346Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2019-12840", "record": "GSD-2019-12840", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-25T23:08:46Z", "date_only": false, "value": "2024-01-25T23:08:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/6500", "record": "CVE-2019-12840", "field": "creation_timestamp", "uuid": "bbdb1502-4972-44a2-9167-b1e335c899e3", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aEsto es una prueba de concepto propia i basica de la vulneravilidad CVE-2019-12840 la qual te da un RCE en root\nURL\uff1ahttps://github.com/Pol-Ruiz/PoC-CVE-2019-12840\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/6500"}, {"timestamp": "2024-08-04T23:32:55.415Z", "date_only": false, "value": "2024-08-04T23:32:55.415Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2019-12840", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T23:32:55.415Z", "date_only": false, "value": "2024-08-04T23:32:55.415Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2019-12840", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-14T06:07:39Z", "date_only": false, "value": "2024-11-14T06:07:39.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/9e8f4e39-3831-432a-b196-8fed951d7f0c", "record": "CVE-2019-12840", "field": "creation_timestamp", "uuid": "2406fb9f-611c-4889-9af7-8cfbce1eab46"}, {"timestamp": "2025-02-06T03:13:44Z", "date_only": false, "value": "2025-02-06T03:13:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2019-12840", "field": "creation_timestamp", "uuid": "0510e216-650a-424f-bd74-2285b9d77b69"}, {"timestamp": "2025-02-23T04:10:12Z", "date_only": false, "value": "2025-02-23T04:10:12.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2019-12840", "field": "creation_timestamp", "uuid": "e18be482-4575-480a-b536-a53ae0069e13"}, {"timestamp": "2026-06-17T02:15:35.847Z", "date_only": false, "value": "2026-06-17T02:15:35.847", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-12840", "record": "FKIE_CVE-2019-12840", "field": "lastModified"}, {"timestamp": "2026-09-01T17:01:07.775Z", "date_only": false, "value": "2026-09-01T17:01:07.775032Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/2061", "record": "CVE-2019-12840", "field": "creation_timestamp", "uuid": "b7c55b7c-a5cc-4e92-aac5-aa2adeb23ef8", "url": "https://t.me/cissp/2061"}, {"timestamp": "2026-09-05T07:00:03.281Z", "date_only": false, "value": "2026-09-05T07:00:03.281364Z", "kind": "sighting", "label": "Seen", "source": "Telegram/2eYI3kydhy2vINEp3t56cRydhJ76_zk_ie_6JAnVgb8wzKU", "record": "CVE-2019-12840", "field": "creation_timestamp", "uuid": "9d11fe73-3771-4876-bc8e-085576e9ef51"}, {"timestamp": "2026-09-06T00:00:53.971Z", "date_only": false, "value": "2026-09-06T00:00:53.971887Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/2eYI3kydhy2vINEp3t56cRydhJ76_zk_ie_6JAnVgb8wzKU", "record": "CVE-2019-12840", "field": "creation_timestamp", "uuid": "fd9be21a-454d-453f-badb-3ab4998ffc5c"}, {"timestamp": "2026-09-11T21:00:04.628Z", "date_only": false, "value": "2026-09-11T21:00:04.628054Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/2061", "record": "CVE-2019-12840", "field": "creation_timestamp", "uuid": "c691a0e6-524e-46a5-87ca-53bce5d00272", "url": "https://t.me/cissp/2061"}]}