{"metadata": {"vulnerability": "CVE-2021-24155", "count": 25, "kinds": {"milestone": 4, "sighting": 12, "kev": 0, "other": 9}}, "data": [{"timestamp": "2021-01-14T00:00:00Z", "date_only": false, "value": "2021-01-14T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-24155", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-04-05T18:27:42Z", "date_only": false, "value": "2021-04-05T18:27:42.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-24155", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-04-05T19:15:00Z", "date_only": false, "value": "2021-04-05T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-H635-5M37-X3P5", "record": "GHSA-H635-5M37-X3P5", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2021-04-05T19:15:00Z", "date_only": false, "value": "2021-04-05T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-24155", "record": "GSD-2021-24155", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2021-04-05T19:15:14.700Z", "date_only": false, "value": "2021-04-05T19:15:14.700", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-24155", "record": "FKIE_CVE-2021-24155", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2021-07-10T16:29:07Z", "date_only": false, "value": "2021-07-10T16:29:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/eMoVbCeI-n-jaFKeB-W9ZjnKBEe6KGFrv-r960DcFriPRg", "record": "CVE-2021-24155", "field": "creation_timestamp", "uuid": "21e850fb-ca40-49a4-adc6-82485a23a5c2", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-07-20T21:02:32Z", "date_only": false, "value": "2021-07-20T21:02:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_plugin_backup_guard_rce.rb", "record": "CVE-2021-24155", "field": "creation_timestamp", "uuid": "cda8b61d-ed0a-4dde-8673-1041f14df59c", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_plugin_backup_guard_rce.rb"}, {"timestamp": "2021-07-21T17:06:14Z", "date_only": false, "value": "2021-07-21T17:06:14.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "CVE-2021-24155", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-07-30T11:38:22Z", "date_only": false, "value": "2021-07-30T11:38:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/210", "record": "CVE-2021-24155", "field": "creation_timestamp", "uuid": "6d6e90bd-445a-46de-a25f-3674d7b0a3a5", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aWordPress Backup Guard Authenticated Remote Code Execution Exploit\nURL\uff1ahttps://github.com/0Day-dev/CVE-2021-24155.rb", "url": "https://t.me/GithubRedTeam/210", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-08-01T14:31:01Z", "date_only": false, "value": "2021-08-01T14:31:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/3967", "record": "CVE-2021-24155", "field": "creation_timestamp", "uuid": "78e3d539-e554-49b6-a15f-1176931b90a3", "content": "#exploit\nCVE-2021-24155:\nWordPress Backup Guard Authenticated RCE Exploit\nhttps://github.com/0dayNinja/CVE-2021-24155.rb", "url": "https://t.me/CyberSecurityTechnologies/3967", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-09-18T23:06:09Z", "date_only": false, "value": "2021-09-18T23:06:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacker_trick/186", "record": "CVE-2021-24155", "field": "creation_timestamp", "uuid": "4e94c0da-748c-4971-af0b-af43422fe039", "content": "Latest Vulnerabilities and Exploits\n\nCVE-2021-3449 OpenSSL denial-of-service exploit\nhttps://github.com/terorie/cve-2021-3449\n\nProxyToken\nhttps://github.com/bhdresh/CVE-2021-33766-ProxyToken\n\nCVES Xstream-1.4.17\nhttps://github.com/zwjjustdoit/Xstream-1.4.17\n\nCVE-2021-36934/HiveNightmare/SeriousSAM\nhttps://github.com/cube0x0/CVE-2021-36934\n\nHow to exploit a vulnerable windows driver Exploit for AsrDrv104 sys\nhttps://github.com/stong/CVE-2020-15368\n\nCVE-2021-32537: an out-of-bounds memory access that leads to pool corruption in the Windows kernel\nhttps://github.com/0vercl0k/CVE-2021-32537\n\nCVE-2021-28476 a guest-to-host \"Hyper-V Remote Code Execution Vulnerability\" in vmswitch sys\nhttps://github.com/0vercl0k/CVE-2021-28476\n\nCVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit\nhttps://github.com/klezVirus/CVE-2021-40444\n\nExploit Accsess network clients by sending packets in wirless TP-LINK and preparing for a mitm attack\nhttps://github.com/lhashashinl/CVE-2021-37152\n\nProof on Concept Exploit for CVE-2021-38647 (OMIGOD)\nhttps://github.com/horizon3ai/CVE-2021-38647\n\nProof of Concept Exploit for vCenter CVE-2021-21972\nhttps://github.com/horizon3ai/CVE-2021-21972\n\nProof-of-Concept (PoC) script to exploit Pulse Secure CVE-2021-22893\nhttps://github.com/ZephrFish/CVE-2021-22893\n\nCVE-2021-33766 (ProxyToken)\nhttps://github.com/demossl/CVE-2021-33766-ProxyToken\n\nCVE-2021-2456\nhttps://github.com/peterjson31337/CVE-2021-2456\n\nCVE-2021-38647 POC for RCE\nhttps://github.com/midoxnet/CVE-2021-38647\n\nCVE-2021-26084 (PoC) | Confluence Server Webwork OGNL injection\nhttps://github.com/alt3kx/CVE-2021-26084_PoC\nhttps://github.com/r0ckysec/CVE-2021-26084_Confluence\nhttps://github.com/march0s1as/CVE-2021-26084\n\n\nCVE-2021-21551 Dell Driver EoP\nhttps://github.com/ihack4falafel/Dell-Driver-EoP-CVE-2021-21551\n\nA basic PoC leak for CVE-2021-28663 (Internal of the Android kernel backdoor vulnerability)\nhttps://github.com/lntrx/CVE-2021-28663\n\nCVE-2021-40353 openSIS 8.0 SQL Injection\nhttps://github.com/5qu1n7/CVE-2021-40353\n\nCVE-2021-28476 Ubuntu 20.04\nhttps://github.com/sh4m2hwz/CVE-2021-28476-tools-env\n\nmy exp for chrome V8 CVE-2021-30551\nhttps://github.com/xmzyshypnc/CVE-2021-30551\n\nPOC of CVE-2021-2394\nhttps://github.com/lz2y/CVE-2021-2394\n\nWordPress Backup Guard Authenticated Remote Code Execution Exploit\nhttps://github.com/0dayNinja/CVE-2021-24155.rb\n\nExploit code for CVE-2021-33909,Just a dump of removed\nhttps://github.com/bbinfosec43/CVE-2021-33909", "url": "https://t.me/hacker_trick/186", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-09-25T02:15:23Z", "date_only": false, "value": "2021-09-25T02:15:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyber0iq/19", "record": "CVE-2021-24155", "field": "creation_timestamp", "uuid": "c9637933-ddeb-4df5-bc93-869cfb97de2f", "content": "Latest Vulnerabilities and Exploits\n\nCVE-2021-3449 OpenSSL denial-of-service exploit\nhttps://github.com/terorie/cve-2021-3449\n\nProxyToken\nhttps://github.com/bhdresh/CVE-2021-33766-ProxyToken\n\nCVES Xstream-1.4.17\nhttps://github.com/zwjjustdoit/Xstream-1.4.17\n\nCVE-2021-36934/HiveNightmare/SeriousSAM\nhttps://github.com/cube0x0/CVE-2021-36934\n\nHow to exploit a vulnerable windows driver Exploit for AsrDrv104 sys\nhttps://github.com/stong/CVE-2020-15368\n\nCVE-2021-32537: an out-of-bounds memory access that leads to pool corruption in the Windows kernel\nhttps://github.com/0vercl0k/CVE-2021-32537\n\nCVE-2021-28476 a guest-to-host \"Hyper-V Remote Code Execution Vulnerability\" in vmswitch sys\nhttps://github.com/0vercl0k/CVE-2021-28476\n\nCVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit\nhttps://github.com/klezVirus/CVE-2021-40444\n\nExploit Accsess network clients by sending packets in wirless TP-LINK and preparing for a mitm attack\nhttps://github.com/lhashashinl/CVE-2021-37152\n\nProof on Concept Exploit for CVE-2021-38647 (OMIGOD)\nhttps://github.com/horizon3ai/CVE-2021-38647\n\nProof of Concept Exploit for vCenter CVE-2021-21972\nhttps://github.com/horizon3ai/CVE-2021-21972\n\nProof-of-Concept (PoC) script to exploit Pulse Secure CVE-2021-22893\nhttps://github.com/ZephrFish/CVE-2021-22893\n\nCVE-2021-33766 (ProxyToken)\nhttps://github.com/demossl/CVE-2021-33766-ProxyToken\n\nCVE-2021-2456\nhttps://github.com/peterjson31337/CVE-2021-2456\n\nCVE-2021-38647 POC for RCE\nhttps://github.com/midoxnet/CVE-2021-38647\n\nCVE-2021-26084 (PoC) | Confluence Server Webwork OGNL injection\nhttps://github.com/alt3kx/CVE-2021-26084_PoC\nhttps://github.com/r0ckysec/CVE-2021-26084_Confluence\nhttps://github.com/march0s1as/CVE-2021-26084\n\n\nCVE-2021-21551 Dell Driver EoP\nhttps://github.com/ihack4falafel/Dell-Driver-EoP-CVE-2021-21551\n\nA basic PoC leak for CVE-2021-28663 (Internal of the Android kernel backdoor vulnerability)\nhttps://github.com/lntrx/CVE-2021-28663\n\nCVE-2021-40353 openSIS 8.0 SQL Injection\nhttps://github.com/5qu1n7/CVE-2021-40353\n\nCVE-2021-28476 Ubuntu 20.04\nhttps://github.com/sh4m2hwz/CVE-2021-28476-tools-env\n\nmy exp for chrome V8 CVE-2021-30551\nhttps://github.com/xmzyshypnc/CVE-2021-30551\n\nPOC of CVE-2021-2394\nhttps://github.com/lz2y/CVE-2021-2394\n\nWordPress Backup Guard Authenticated Remote Code Execution Exploit\nhttps://github.com/0dayNinja/CVE-2021-24155.rb\n\nExploit code for CVE-2021-33909,Just a dump of removed\nhttps://github.com/bbinfosec43/CVE-2021-33909", "url": "https://t.me/cyber0iq/19", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-12-03T18:31:00Z", "date_only": false, "value": "2021-12-03T18:31Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-24155", "record": "GSD-2021-24155", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2022-05-24T22:28:41Z", "date_only": false, "value": "2022-05-24T22:28:41Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-H635-5M37-X3P5", "record": "GHSA-H635-5M37-X3P5", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-05-24T22:28:41Z", "date_only": false, "value": "2022-05-24T22:28:41Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-H635-5M37-X3P5", "record": "GHSA-H635-5M37-X3P5", "field": "modified", "linked_record": true}, {"timestamp": "2022-08-06T05:25:43Z", "date_only": false, "value": "2022-08-06T05:25:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/iSJ7-GJvpeCmZTZPcxnJiXJW96S2UloBvqL6F7vHjb8i_Q", "record": "CVE-2021-24155", "field": "creation_timestamp", "uuid": "a23de5df-b026-462c-8c37-f8d9dfc0dd53", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-12-13T01:23:37.443Z", "date_only": false, "value": "2023-12-13T01:23:37.443998Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-24155", "record": "GSD-2021-24155", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-08-03T19:21:18.269Z", "date_only": false, "value": "2024-08-03T19:21:18.269Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-24155", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T19:21:18.269Z", "date_only": false, "value": "2024-08-03T19:21:18.269Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-24155", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-14T06:09:52Z", "date_only": false, "value": "2024-11-14T06:09:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/8f9fc7df-6300-4659-8c37-be28e3cf9e52", "record": "CVE-2021-24155", "field": "creation_timestamp", "uuid": "1e411a12-6864-47b7-8594-dc1910bfebd7"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-24155", "field": "creation_timestamp", "uuid": "d29112c4-dd74-4a5f-b7fb-6f596f53ac69"}, {"timestamp": "2025-02-23T04:10:35Z", "date_only": false, "value": "2025-02-23T04:10:35.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-24155", "field": "creation_timestamp", "uuid": "b82b06c9-3e70-4672-bced-71d754fe62e5"}, {"timestamp": "2026-06-17T03:39:29.257Z", "date_only": false, "value": "2026-06-17T03:39:29.257", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-24155", "record": "FKIE_CVE-2021-24155", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-09-01T17:00:44.194Z", "date_only": false, "value": "2026-09-01T17:00:44.194429Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/3933", "record": "CVE-2021-24155", "field": "creation_timestamp", "uuid": "c97f23f7-1c07-453d-a773-12517b587ee6", "url": "https://t.me/cissp/3933"}, {"timestamp": "2026-09-10T23:00:04.654Z", "date_only": false, "value": "2026-09-10T23:00:04.654160Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/3933", "record": "CVE-2021-24155", "field": "creation_timestamp", "uuid": "6b447712-9dc5-47aa-b476-b66c55508208", "url": "https://t.me/cissp/3933", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-11T12:16:45.607Z", "anchors": {"origin": {"timestamp": "2021-04-05T18:27:42Z", "date_only": false, "value": "2021-04-05T18:27:42.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-24155", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2021-04-05T18:27:42Z", "date_only": false, "value": "2021-04-05T18:27:42.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-24155", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2021-07-10T16:29:07Z", "date_only": false, "value": "2021-07-10T16:29:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/eMoVbCeI-n-jaFKeB-W9ZjnKBEe6KGFrv-r960DcFriPRg", "record": "CVE-2021-24155", "field": "creation_timestamp", "uuid": "21e850fb-ca40-49a4-adc6-82485a23a5c2", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 8287285.0, "hours": 2302.023611111111, "days": 95.91765046296297, "min_seconds": 8287285.0, "max_seconds": 8287285.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-04-05T18:27:42Z", "date_only": false, "value": "2021-04-05T18:27:42.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-24155", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2021-07-10T16:29:07Z", "date_only": false, "value": "2021-07-10T16:29:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/eMoVbCeI-n-jaFKeB-W9ZjnKBEe6KGFrv-r960DcFriPRg", "record": "CVE-2021-24155", "field": "creation_timestamp", "uuid": "21e850fb-ca40-49a4-adc6-82485a23a5c2", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 176752143.607505, "hours": 49097.817668751384, "days": 2045.7424028646412, "min_seconds": 176752143.607505, "max_seconds": 176752143.607505, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-04-05T18:27:42Z", "date_only": false, "value": "2021-04-05T18:27:42.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-24155", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-11T12:16:45.607Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 168464858.607505, "hours": 46795.794057640276, "days": 1949.824752401678, "min_seconds": 168464858.607505, "max_seconds": 168464858.607505, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-07-10T16:29:07Z", "date_only": false, "value": "2021-07-10T16:29:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/eMoVbCeI-n-jaFKeB-W9ZjnKBEe6KGFrv-r960DcFriPRg", "record": "CVE-2021-24155", "field": "creation_timestamp", "uuid": "21e850fb-ca40-49a4-adc6-82485a23a5c2", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-11T12:16:45.607Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}