{"metadata": {"vulnerability": "CVE-2021-38647", "count": 143, "kinds": {"milestone": 10, "sighting": 90, "kev": 17, "other": 26}}, "data": [{"timestamp": "2021-08-13T00:00:00Z", "date_only": false, "value": "2021-08-13T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-38647", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-09-14T14:00:00Z", "date_only": false, "value": "2021-09-14T14:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2021-38647", "field": "containers.cna.datePublic"}, {"timestamp": "2021-09-15T05:46:05Z", "date_only": false, "value": "2021-09-15T05:46:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/7088", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "0f46038a-2321-4cad-94bd-2337d02ace79", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 Reproduction of CVE-2021-38647 (unauthed root RCE in the OMI agent) using the details in the technical blog post.\n\nuid=0(root) gid=0(root) groups=0(root)
\n\nhttps://www.wiz.io/blog/secret-agent-exposes-azure-customers-to-unauthorized-code-execution", "url": "https://t.me/cKure/7088"}, {"timestamp": "2021-09-15T11:24:07Z", "date_only": false, "value": "2021-09-15T11:24:07.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-38647", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-09-15T12:15:00Z", "date_only": false, "value": "2021-09-15T12:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RP2G-5HW2-Q565", "record": "GHSA-RP2G-5HW2-Q565", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-09-15T12:15:15.090Z", "date_only": false, "value": "2021-09-15T12:15:15.090", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-38647", "record": "FKIE_CVE-2021-38647", "field": "published"}, {"timestamp": "2021-09-15T12:15:15.090Z", "date_only": false, "value": "2021-09-15T12:15:15.090", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2021-38647", "record": "GSD-2021-38647", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2021-09-15T16:22:15Z", "date_only": false, "value": "2021-09-15T16:22:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/28876", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "b0b3563b-7a9f-4dec-ac67-36cf3bc6262c", "content": "\u203c CVE-2021-38647 \u203c\n\nOpen Management Infrastructure Remote Code Execution Vulnerability\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/28876"}, {"timestamp": "2021-09-15T21:47:42Z", "date_only": false, "value": "2021-09-15T21:47:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/537", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "9871dfd3-64d5-41e8-ad4d-75191cabd119", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-38647 POC for RCE\nURL\uff1ahttps://github.com/midoxnet/CVE-2021-38647", "url": "https://t.me/GithubRedTeam/537"}, {"timestamp": "2021-09-16T00:00:00Z", "date_only": false, "value": "2021-09-16T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-711", "record": "CERTFR-2021-AVI-711", "field": "last_revision_date"}, {"timestamp": "2021-09-16T00:00:00Z", "date_only": true, "value": "2021-09-16", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-020", "record": "CERTFR-2021-ALE-020", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2021-09-16T00:00:00Z", "date_only": false, "value": "2021-09-16T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-711", "record": "CERTFR-2021-AVI-711", "field": "initial_release_date"}, {"timestamp": "2021-09-16T00:00:00Z", "date_only": false, "value": "2021-09-16T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-711", "record": "CERTFR-2021-AVI-711", "field": "revisions.0.revision_date"}, {"timestamp": "2021-09-16T05:00:00Z", "date_only": false, "value": "2021-09-16T05:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://msrc.microsoft.com/blog/2021/09/additional-guidance-regarding-omi-vulnerabilities-within-azure-vm-management-extensions/", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "9e352b0a-a2dc-4b83-ab61-86b5533d79df", "url": "https://msrc.microsoft.com/blog/2021/09/additional-guidance-regarding-omi-vulnerabilities-within-azure-vm-management-extensions/"}, {"timestamp": "2021-09-16T10:42:12Z", "date_only": false, "value": "2021-09-16T10:42:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/542", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "55c033e6-e8a7-48e2-a240-ffc89a59f8d0", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aProof on Concept Exploit for CVE-2021-38647 (OMIGOD)\nURL\uff1ahttps://github.com/horizon3ai/CVE-2021-38647", "url": "https://t.me/GithubRedTeam/542"}, {"timestamp": "2021-09-16T14:53:43Z", "date_only": false, "value": "2021-09-16T14:53:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/543", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "abd27187-4384-45e6-a5f6-c1696695fa70", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aA PoC exploit for CVE-2021-38647 RCE in OMI\nURL\uff1ahttps://github.com/Immersive-Labs-Sec/cve-2021-38647", "url": "https://t.me/GithubRedTeam/543"}, {"timestamp": "2021-09-17T00:00:00Z", "date_only": false, "value": "2021-09-17T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-020", "record": "CERTFR-2021-ALE-020", "field": "initial_release_date"}, {"timestamp": "2021-09-17T00:00:00Z", "date_only": false, "value": "2021-09-17T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-020", "record": "CERTFR-2021-ALE-020", "field": "revisions.0.revision_date"}, {"timestamp": "2021-09-17T11:05:04Z", "date_only": false, "value": "2021-09-17T11:05:04.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberSecurityTechnologies/4315", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "d88b950e-f797-430f-9391-dc69bf3536b1", "content": "#exploit\n#Cloud_Security\nOMIGOD - RCE Vulnerability in Multiple Azure Linux Deployments\nhttps://www.horizon3.ai/news/blog/omigod\n]-> PoC Exploit for CVE-2021-38647 (OMIGOD):\nhttps://github.com/horizon3ai/CVE-2021-38647", "url": "https://t.me/CyberSecurityTechnologies/4315"}, {"timestamp": "2021-09-17T13:41:39Z", "date_only": false, "value": "2021-09-17T13:41:39.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/adf17496-6707-44ba-8601-10ab486eb92f", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "ecbbfae8-b93a-452a-890d-904f34cba506"}, {"timestamp": "2021-09-18T23:06:09Z", "date_only": false, "value": "2021-09-18T23:06:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacker_trick/186", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "6169d74f-db48-4345-97d2-d89086e4b267", "content": "Latest Vulnerabilities and Exploits\n\nCVE-2021-3449 OpenSSL denial-of-service exploit\nhttps://github.com/terorie/cve-2021-3449\n\nProxyToken\nhttps://github.com/bhdresh/CVE-2021-33766-ProxyToken\n\nCVES Xstream-1.4.17\nhttps://github.com/zwjjustdoit/Xstream-1.4.17\n\nCVE-2021-36934/HiveNightmare/SeriousSAM\nhttps://github.com/cube0x0/CVE-2021-36934\n\nHow to exploit a vulnerable windows driver Exploit for AsrDrv104 sys\nhttps://github.com/stong/CVE-2020-15368\n\nCVE-2021-32537: an out-of-bounds memory access that leads to pool corruption in the Windows kernel\nhttps://github.com/0vercl0k/CVE-2021-32537\n\nCVE-2021-28476 a guest-to-host \"Hyper-V Remote Code Execution Vulnerability\" in vmswitch sys\nhttps://github.com/0vercl0k/CVE-2021-28476\n\nCVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit\nhttps://github.com/klezVirus/CVE-2021-40444\n\nExploit Accsess network clients by sending packets in wirless TP-LINK and preparing for a mitm attack\nhttps://github.com/lhashashinl/CVE-2021-37152\n\nProof on Concept Exploit for CVE-2021-38647 (OMIGOD)\nhttps://github.com/horizon3ai/CVE-2021-38647\n\nProof of Concept Exploit for vCenter CVE-2021-21972\nhttps://github.com/horizon3ai/CVE-2021-21972\n\nProof-of-Concept (PoC) script to exploit Pulse Secure CVE-2021-22893\nhttps://github.com/ZephrFish/CVE-2021-22893\n\nCVE-2021-33766 (ProxyToken)\nhttps://github.com/demossl/CVE-2021-33766-ProxyToken\n\nCVE-2021-2456\nhttps://github.com/peterjson31337/CVE-2021-2456\n\nCVE-2021-38647 POC for RCE\nhttps://github.com/midoxnet/CVE-2021-38647\n\nCVE-2021-26084 (PoC) | Confluence Server Webwork OGNL injection\nhttps://github.com/alt3kx/CVE-2021-26084_PoC\nhttps://github.com/r0ckysec/CVE-2021-26084_Confluence\nhttps://github.com/march0s1as/CVE-2021-26084\n\n\nCVE-2021-21551 Dell Driver EoP\nhttps://github.com/ihack4falafel/Dell-Driver-EoP-CVE-2021-21551\n\nA basic PoC leak for CVE-2021-28663 (Internal of the Android kernel backdoor vulnerability)\nhttps://github.com/lntrx/CVE-2021-28663\n\nCVE-2021-40353 openSIS 8.0 SQL Injection\nhttps://github.com/5qu1n7/CVE-2021-40353\n\nCVE-2021-28476 Ubuntu 20.04\nhttps://github.com/sh4m2hwz/CVE-2021-28476-tools-env\n\nmy exp for chrome V8 CVE-2021-30551\nhttps://github.com/xmzyshypnc/CVE-2021-30551\n\nPOC of CVE-2021-2394\nhttps://github.com/lz2y/CVE-2021-2394\n\nWordPress Backup Guard Authenticated Remote Code Execution Exploit\nhttps://github.com/0dayNinja/CVE-2021-24155.rb\n\nExploit code for CVE-2021-33909,Just a dump of removed\nhttps://github.com/bbinfosec43/CVE-2021-33909", "url": "https://t.me/hacker_trick/186"}, {"timestamp": "2021-09-19T19:08:56Z", "date_only": false, "value": "2021-09-19T19:08:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/561", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "8f7c3f66-6367-4dd9-9a32-0ccc4b772300", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aOMIGod / CVE-2021-38647 POC and Demo environment\nURL\uff1ahttps://github.com/SimenBai/CVE-2021-38647-POC-and-Demo-environment", "url": "https://t.me/GithubRedTeam/561"}, {"timestamp": "2021-09-21T14:32:18Z", "date_only": false, "value": "2021-09-21T14:32:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/569", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "05ad6b93-6695-4579-ab06-475dbcca8c2a", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-38647 AKA \\\"OMIGOD\\\" vulnerability in Windows OMI \nURL\uff1ahttps://github.com/corelight/CVE-2021-38647", "url": "https://t.me/GithubRedTeam/569"}, {"timestamp": "2021-09-21T15:57:38Z", "date_only": false, "value": "2021-09-21T15:57:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/570", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "97f186b4-ddfa-41e4-8c5d-99075236ae0f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-38647 - POC to exploit unauthenticated RCE #OMIGOD\nURL\uff1ahttps://github.com/AlteredSecurity/CVE-2021-38647", "url": "https://t.me/GithubRedTeam/570"}, {"timestamp": "2021-09-22T00:00:00Z", "date_only": false, "value": "2021-09-22T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-723", "record": "CERTFR-2021-AVI-723", "field": "last_revision_date"}, {"timestamp": "2021-09-22T00:00:00Z", "date_only": false, "value": "2021-09-22T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-723", "record": "CERTFR-2021-AVI-723", "field": "initial_release_date"}, {"timestamp": "2021-09-22T00:00:00Z", "date_only": false, "value": "2021-09-22T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-020", "record": "CERTFR-2021-ALE-020", "field": "revisions.1.revision_date"}, {"timestamp": "2021-09-22T00:00:00Z", "date_only": false, "value": "2021-09-22T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-723", "record": "CERTFR-2021-AVI-723", "field": "revisions.0.revision_date"}, {"timestamp": "2021-09-22T11:35:56Z", "date_only": false, "value": "2021-09-22T11:35:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/576", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "b0a1d70f-765b-4cbe-846d-1ac47252eae8", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aOMIGOD! OM I GOOD? A free scanner to detect VMs vulnerable to one of the \\\"OMIGOD\\\" vulnerabilities discovered by Wiz's threat research team, specifically CVE-2021-38647.\nURL\uff1ahttps://github.com/marcosimioni/omigood", "url": "https://t.me/GithubRedTeam/576"}, {"timestamp": "2021-09-22T14:27:08Z", "date_only": false, "value": "2021-09-22T14:27:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacker_trick/204", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "0d00bca5-f75a-4992-a505-82785f323203", "content": "#CVE-2021-38647 - POC to exploit unauthenticated RCE #OMIGOD \n\nhttps://github.com/AlteredSecurity/CVE-2021-38647", "url": "https://t.me/hacker_trick/204"}, {"timestamp": "2021-09-22T15:25:32Z", "date_only": false, "value": "2021-09-22T15:25:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/579", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "cae9bfbe-2e95-4918-bc26-f0e0d7dbe25e", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1ahttps://github.com/corelight/CVE-2021-38647 without the bloat\nURL\uff1ahttps://github.com/abousteif/cve-2021-38647", "url": "https://t.me/GithubRedTeam/579"}, {"timestamp": "2021-09-22T15:53:32Z", "date_only": false, "value": "2021-09-22T15:53:32.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/39000112-e2b5-4051-9f87-35bec53b4ff5", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "8fb7de5f-9b04-44d8-8d58-e1625214c79e"}, {"timestamp": "2021-09-23T21:01:24Z", "date_only": false, "value": "2021-09-23T21:01:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Mktlp6ZEg5sETEEiDRh5v1gkdpJ8gkWjSlWm8uPe_p1yvg", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "a95bcca8-6988-443a-9a02-65f3fc9dd710"}, {"timestamp": "2021-09-24T10:59:39Z", "date_only": false, "value": "2021-09-24T10:59:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/587", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "76558536-81a1-46e4-b54d-19b26f7c635d", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-38647 is an unauthenticated RCE vulnerability effecting the OMI agent as root.\nURL\uff1ahttps://github.com/Vulnmachines/OMIGOD_cve-2021-38647", "url": "https://t.me/GithubRedTeam/587"}, {"timestamp": "2021-09-25T02:14:31Z", "date_only": false, "value": "2021-09-25T02:14:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyber0iq/18", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "c7153eec-fd89-4e76-b0cd-72ba5d62bad1", "content": "Latest Vulnerabilities and Exploits\n\nCVE-2021-3449 OpenSSL denial-of-service exploit\nhttps://github.com/terorie/cve-2021-3449\n\nProxyToken\nhttps://github.com/bhdresh/CVE-2021-33766-ProxyToken\n\nCVES Xstream-1.4.17\nhttps://github.com/zwjjustdoit/Xstream-1.4.17\n\nCVE-2021-36934/HiveNightmare/SeriousSAM\nhttps://github.com/cube0x0/CVE-2021-36934\n\nHow to exploit a vulnerable windows driver Exploit for AsrDrv104 sys\nhttps://github.com/stong/CVE-2020-15368\n\nCVE-2021-32537: an out-of-bounds memory access that leads to pool corruption in the Windows kernel\nhttps://github.com/0vercl0k/CVE-2021-32537\n\nCVE-2021-28476 a guest-to-host \"Hyper-V Remote Code Execution Vulnerability\" in vmswitch sys\nhttps://github.com/0vercl0k/CVE-2021-28476\n\nCVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit\nhttps://github.com/klezVirus/CVE-2021-40444\n\nExploit Accsess network clients by sending packets in wirless TP-LINK and preparing for a mitm attack\nhttps://github.com/lhashashinl/CVE-2021-37152\n\nProof on Concept Exploit for CVE-2021-38647 (OMIGOD)\nhttps://github.com/horizon3ai/CVE-2021-38647\n\nProof of Concept Exploit for vCenter CVE-2021-21972\nhttps://github.com/horizon3ai/CVE-2021-21972\n\nProof-of-Concept (PoC) script to exploit Pulse Secure CVE-2021-22893\nhttps://github.com/ZephrFish/CVE-2021-22893\n\nCVE-2021-33766 (ProxyToken)\nhttps://github.com/demossl/CVE-2021-33766-ProxyToken\n\nCVE-2021-2456\nhttps://github.com/peterjson31337/CVE-2021-2456\n\nCVE-2021-38647 POC for RCE\nhttps://github.com/midoxnet/CVE-2021-38647\n\nCVE-2021-26084 (PoC) | Confluence Server Webwork OGNL injection\nhttps://github.com/alt3kx/CVE-2021-26084_PoC\nhttps://github.com/r0ckysec/CVE-2021-26084_Confluence\nhttps://github.com/march0s1as/CVE-2021-26084\n\n\nCVE-2021-21551 Dell Driver EoP\nhttps://github.com/ihack4falafel/Dell-Driver-EoP-CVE-2021-21551\n\nA basic PoC leak for CVE-2021-28663 (Internal of the Android kernel backdoor vulnerability)\nhttps://github.com/lntrx/CVE-2021-28663\n\nCVE-2021-40353 openSIS 8.0 SQL Injection\nhttps://github.com/5qu1n7/CVE-2021-40353\n\nCVE-2021-28476 Ubuntu 20.04\nhttps://github.com/sh4m2hwz/CVE-2021-28476-tools-env\n\nmy exp for chrome V8 CVE-2021-30551\nhttps://github.com/xmzyshypnc/CVE-2021-30551\n\nPOC of CVE-2021-2394\nhttps://github.com/lz2y/CVE-2021-2394\n\nWordPress Backup Guard Authenticated Remote Code Execution Exploit\nhttps://github.com/0dayNinja/CVE-2021-24155.rb\n\nExploit code for CVE-2021-33909,Just a dump of removed\nhttps://github.com/bbinfosec43/CVE-2021-33909", "url": "https://t.me/cyber0iq/18"}, {"timestamp": "2021-09-25T02:15:23Z", "date_only": false, "value": "2021-09-25T02:15:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyber0iq/19", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "ce63d25f-238d-4fbb-b459-7c2f81ead35c", "content": "Latest Vulnerabilities and Exploits\n\nCVE-2021-3449 OpenSSL denial-of-service exploit\nhttps://github.com/terorie/cve-2021-3449\n\nProxyToken\nhttps://github.com/bhdresh/CVE-2021-33766-ProxyToken\n\nCVES Xstream-1.4.17\nhttps://github.com/zwjjustdoit/Xstream-1.4.17\n\nCVE-2021-36934/HiveNightmare/SeriousSAM\nhttps://github.com/cube0x0/CVE-2021-36934\n\nHow to exploit a vulnerable windows driver Exploit for AsrDrv104 sys\nhttps://github.com/stong/CVE-2020-15368\n\nCVE-2021-32537: an out-of-bounds memory access that leads to pool corruption in the Windows kernel\nhttps://github.com/0vercl0k/CVE-2021-32537\n\nCVE-2021-28476 a guest-to-host \"Hyper-V Remote Code Execution Vulnerability\" in vmswitch sys\nhttps://github.com/0vercl0k/CVE-2021-28476\n\nCVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit\nhttps://github.com/klezVirus/CVE-2021-40444\n\nExploit Accsess network clients by sending packets in wirless TP-LINK and preparing for a mitm attack\nhttps://github.com/lhashashinl/CVE-2021-37152\n\nProof on Concept Exploit for CVE-2021-38647 (OMIGOD)\nhttps://github.com/horizon3ai/CVE-2021-38647\n\nProof of Concept Exploit for vCenter CVE-2021-21972\nhttps://github.com/horizon3ai/CVE-2021-21972\n\nProof-of-Concept (PoC) script to exploit Pulse Secure CVE-2021-22893\nhttps://github.com/ZephrFish/CVE-2021-22893\n\nCVE-2021-33766 (ProxyToken)\nhttps://github.com/demossl/CVE-2021-33766-ProxyToken\n\nCVE-2021-2456\nhttps://github.com/peterjson31337/CVE-2021-2456\n\nCVE-2021-38647 POC for RCE\nhttps://github.com/midoxnet/CVE-2021-38647\n\nCVE-2021-26084 (PoC) | Confluence Server Webwork OGNL injection\nhttps://github.com/alt3kx/CVE-2021-26084_PoC\nhttps://github.com/r0ckysec/CVE-2021-26084_Confluence\nhttps://github.com/march0s1as/CVE-2021-26084\n\n\nCVE-2021-21551 Dell Driver EoP\nhttps://github.com/ihack4falafel/Dell-Driver-EoP-CVE-2021-21551\n\nA basic PoC leak for CVE-2021-28663 (Internal of the Android kernel backdoor vulnerability)\nhttps://github.com/lntrx/CVE-2021-28663\n\nCVE-2021-40353 openSIS 8.0 SQL Injection\nhttps://github.com/5qu1n7/CVE-2021-40353\n\nCVE-2021-28476 Ubuntu 20.04\nhttps://github.com/sh4m2hwz/CVE-2021-28476-tools-env\n\nmy exp for chrome V8 CVE-2021-30551\nhttps://github.com/xmzyshypnc/CVE-2021-30551\n\nPOC of CVE-2021-2394\nhttps://github.com/lz2y/CVE-2021-2394\n\nWordPress Backup Guard Authenticated Remote Code Execution Exploit\nhttps://github.com/0dayNinja/CVE-2021-24155.rb\n\nExploit code for CVE-2021-33909,Just a dump of removed\nhttps://github.com/bbinfosec43/CVE-2021-33909", "url": "https://t.me/cyber0iq/19"}, {"timestamp": "2021-09-27T11:37:23Z", "date_only": false, "value": "2021-09-27T11:37:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/608", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "0f4f9514-3135-422f-9f1a-4bcefb8d374c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aA Vagrant VM test lab to learn about CVE-2021-38647 in the Open Management Infrastructure agent (aka \\\"omigod\\\").\nURL\uff1ahttps://github.com/craig-m-unsw/omigod-lab", "url": "https://t.me/GithubRedTeam/608"}, {"timestamp": "2021-09-27T16:57:28Z", "date_only": false, "value": "2021-09-27T16:57:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/609", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "9a30d6ed-87c3-4791-956d-7084091fe3a3", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aA Vagrant VM test lab to learn about CVE-2021-38647 in the Open Management Infrastructure agent (aka \\\"omigod\\\").\nURL\uff1ahttps://github.com/itsjeffersonli/CVE-2021-24741", "url": "https://t.me/GithubRedTeam/609"}, {"timestamp": "2021-10-01T00:00:00Z", "date_only": false, "value": "2021-10-01T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-745", "record": "CERTFR-2021-AVI-745", "field": "last_revision_date"}, {"timestamp": "2021-10-01T00:00:00Z", "date_only": false, "value": "2021-10-01T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-745", "record": "CERTFR-2021-AVI-745", "field": "initial_release_date"}, {"timestamp": "2021-10-01T00:00:00Z", "date_only": false, "value": "2021-10-01T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-745", "record": "CERTFR-2021-AVI-745", "field": "revisions.0.revision_date"}, {"timestamp": "2021-10-01T11:01:01Z", "date_only": false, "value": "2021-10-01T11:01:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/4416", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "12401a8a-a78e-4135-9cff-e39356eb2b3c", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (Sep 1-30)\nCVE-2021-40444 - Microsoft MSHTML RCE\nhttps://t.me/cybersecuritytechnologies/4276\nCVE-2021-26084 - Confluence Server Webwork OGNL Inj\nhttps://t.me/cybersecuritytechnologies/4202\nCVE-2021-22005 - vCenter Server contains - arbitrary file upload\nhttps://t.me/cybersecuritytechnologies/4401\nCVE-2021-30860 - Zero-Click iPhone Exploit\nhttps://t.me/cybersecuritytechnologies/4318\nCVE-2021-38647 - OMIGOD RCE Vuln in Multiple Azure Linux Deployments\nhttps://t.me/cybersecuritytechnologies/4315\nCVE-2021-30632 - Out of bounds write in V8\nhttps://t.me/cybersecuritytechnologies/4342\nCVE-2021-33035 - Code Execution in Apache OpenOffice\nhttps://t.me/cybersecuritytechnologies/4329\nCVE-2021-38112 - AWS WorkSpaces Desktop Client RCE\nhttps://t.me/cybersecuritytechnologies/4358\nCVE-2021-30740 / CVE-2021-30768 - A malicious application may be able to execute arbitrary code with kernel privileges\nhttps://mobile.twitter.com/infinityABCDE/status/1437596340222038017", "url": "https://t.me/CyberSecurityTechnologies/4416"}, {"timestamp": "2021-10-03T19:55:25Z", "date_only": false, "value": "2021-10-03T19:55:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/7428", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "438fd3ff-ccd5-4448-84ad-e0705f5b38c4", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 Experts warn that CVE-2021-38647 OMIGOD flaws affect IBM QRadar Azure and can be exploited by remote attackers to execute arbitrary code.\n\nhttps://hackademicus.nl/cve-2021-38647-omigod-flaw-impacts-ibm-qradar-azure/", "url": "https://t.me/cKure/7428"}, {"timestamp": "2021-10-25T22:32:43Z", "date_only": false, "value": "2021-10-25T22:32:43.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/63ddead6-4b82-414c-ad8e-c516b950b446", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "ad82c408-bd5f-4bf7-a94c-f6b93c37bc71"}, {"timestamp": "2021-10-28T01:18:51Z", "date_only": false, "value": "2021-10-28T01:18:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/cve_2021_38647_omigod.rb", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "7af81651-6ee5-4f3c-b551-1864cb12b99c", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/cve_2021_38647_omigod.rb"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2021-38647", "field": "timestamps.asserted_at", "uuid": "dbe2be82-b835-4b60-a84f-16a0c05d0955", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-38647", "field": "timestamps.asserted_at", "uuid": "32f69748-0d25-4fa5-8ad6-b12f4366c72f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-38647", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2021-38647", "record": "GSD-2021-38647", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2021-38647", "field": "evidence.0.details.added_date", "uuid": "32f69748-0d25-4fa5-8ad6-b12f4366c72f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2021-38647", "field": "evidence.0.details.date_added", "uuid": "dbe2be82-b835-4b60-a84f-16a0c05d0955", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2021-38647", "field": "timestamps.first_seen_at", "uuid": "dbe2be82-b835-4b60-a84f-16a0c05d0955", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2021-38647", "field": "timestamps.first_seen_at", "uuid": "32f69748-0d25-4fa5-8ad6-b12f4366c72f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2021-38647", "field": "status.status_updated_at", "uuid": "dbe2be82-b835-4b60-a84f-16a0c05d0955", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2021-38647", "field": "status.status_updated_at", "uuid": "32f69748-0d25-4fa5-8ad6-b12f4366c72f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-38647", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2021-11-08T08:58:18Z", "date_only": false, "value": "2021-11-08T08:58:18.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "d1f1cae7-d134-461e-be65-c6d08d145002"}, {"timestamp": "2021-11-17T00:00:00Z", "date_only": true, "value": "2021-11-17", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2021-38647", "field": "evidence.0.details.due_date", "uuid": "dbe2be82-b835-4b60-a84f-16a0c05d0955", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-17T00:00:00Z", "date_only": true, "value": "2021-11-17", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2021-38647", "record": "GSD-2021-38647", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2021-11-20T09:53:52Z", "date_only": false, "value": "2021-11-20T09:53:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "29ccad2e-3937-4f75-abd1-33d95e45213b"}, {"timestamp": "2022-01-05T00:00:00Z", "date_only": false, "value": "2022-01-05T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-020", "record": "CERTFR-2021-ALE-020", "field": "last_revision_date"}, {"timestamp": "2022-01-05T00:00:00Z", "date_only": false, "value": "2022-01-05T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-020", "record": "CERTFR-2021-ALE-020", "field": "revisions.2.revision_date"}, {"timestamp": "2022-05-24T19:14:43Z", "date_only": false, "value": "2022-05-24T19:14:43Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RP2G-5HW2-Q565", "record": "GHSA-RP2G-5HW2-Q565", "field": "published"}, {"timestamp": "2022-07-11T09:36:50Z", "date_only": false, "value": "2022-07-11T09:36:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/XzdQswcVkc5anRIIilZev5rhw86-ytMb-ixyyjWWaaWCfg", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "79714a05-70dc-4f6c-ad94-b7c5710302b4"}, {"timestamp": "2022-07-11T10:39:45Z", "date_only": false, "value": "2022-07-11T10:39:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/826", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "ff88f019-18a4-456c-bfeb-a572385b87c3", "content": "Today's Updates\n\n\ud83d\udc49\ud83c\udffbAzure Omigod Unauth Rce | CVE-2021-38647 | Omigod Exploit\n\ud83d\udc49\ud83c\udffbDeepFaceLive \u2013 Real-time face swap for PC streaming or video calls\n\ud83d\udc49\ud83c\udffbWAF from the scratch\n\ud83d\udc49\ud83c\udffbPractical Approach on Securing Web Sessions\n\ud83d\udc49\ud83c\udffbChisel-Strike - A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.\n\ud83d\udc49\ud83c\udffbOWASP Mobile Security Testing Guide (MSTG)\n\ud83d\udc49\ud83c\udffbGrawler\n\ud83d\udc49\ud83c\udffbCVE-2022-29554 - Mishandling of Input to API in PrintixService.exe\n\ud83d\udc49\ud83c\udffbKIZAGAN - A python backdoor(Remote Access Trojan) and it can take camera pictures,screenshots,getting microphone sounds\u2026 etc.\n\ud83d\udc49\ud83c\udffbHunter Biden\u2019s iPhone & is Releasing 450GB MORE Private Data Including Passwords Leak\n\ud83d\udc49\ud83c\udffbShanghai Gov National Police\n\ud83d\udc49\ud83c\udffbDoenerium - Fully undetected #stealer (0/67)\n\ud83d\udc49\ud83c\udffbFree Hosting for 60 Day\n\ud83d\udc49\ud83c\udffbANKA MARINE ELECTRONICs Turkey VSAT Maritime Satellite Leak\n\ud83d\udc49\ud83c\udffbTripleCross - Linux eBPF rootkit\n\nAll Updates on \ud83d\udc49\ud83c\udffb https://bit.ly/3yRyah3", "url": "https://t.me/crackcodes/826"}, {"timestamp": "2023-10-14T14:57:02Z", "date_only": false, "value": "2023-10-14T14:57:02+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2021-38647", "field": "timestamps.asserted_at", "uuid": "e373da88-0959-426a-8926-8be53c4cba9c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-14T14:57:02Z", "date_only": false, "value": "2023-10-14T14:57:02+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2021-38647", "field": "timestamps.first_seen_at", "uuid": "e373da88-0959-426a-8926-8be53c4cba9c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-13T01:23:17.399Z", "date_only": false, "value": "2023-12-13T01:23:17.399891Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-38647", "record": "GSD-2021-38647", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-28T20:16:02.883Z", "date_only": false, "value": "2023-12-28T20:16:02.883", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-38647", "record": "GSD-2021-38647", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-08-04T01:51:18.937Z", "date_only": false, "value": "2024-08-04T01:51:18.937Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-38647", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-31T00:00:00Z", "date_only": false, "value": "2024-10-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-31)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "6d0b4442-dc7c-4745-86a7-6e0e7c117b44"}, {"timestamp": "2024-12-24T20:23:31.207Z", "date_only": false, "value": "2024-12-24T20:23:31.207090Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971047", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "6cbed927-9ecb-4724-b0c0-50a4f0accbef", "url": "https://feedsin.space/feed/CISAKevBot/items/2971047"}, {"timestamp": "2025-01-26T00:00:00Z", "date_only": false, "value": "2025-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-26)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "16ccd34a-48fb-45f5-b03e-427080ea75ab"}, {"timestamp": "2025-01-26T00:00:00Z", "date_only": false, "value": "2025-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "e00c00de-7273-4bc3-a162-3251f872250c"}, {"timestamp": "2025-02-04T14:45:47.017Z", "date_only": false, "value": "2025-02-04T14:45:47.017000Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-38647", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-04T14:45:47.017Z", "date_only": false, "value": "2025-02-04T14:45:47.017000Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-38647", "record": "FKIE_CVE-2021-38647", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "35ad4c06-759f-4069-8f53-73b0cd907c32"}, {"timestamp": "2025-02-08T00:00:00Z", "date_only": false, "value": "2025-02-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-08)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "f1c6daba-7183-47bd-9e81-bc2fc53118e0"}, {"timestamp": "2025-02-23T02:09:57Z", "date_only": false, "value": "2025-02-23T02:09:57.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "954bb630-5130-4d64-a8f5-caa739b7e4b4"}, {"timestamp": "2025-02-23T04:10:39Z", "date_only": false, "value": "2025-02-23T04:10:39.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "b0839572-16f7-4077-8eac-2e74c43ccd65"}, {"timestamp": "2025-02-26T00:00:00Z", "date_only": false, "value": "2025-02-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-26)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "8522c5b3-fb18-42c8-bd7c-6509b90faa8a"}, {"timestamp": "2025-03-02T00:00:00Z", "date_only": false, "value": "2025-03-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-02)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "b730b646-0234-4815-99bc-f9036b036e11"}, {"timestamp": "2025-04-28T00:00:00Z", "date_only": false, "value": "2025-04-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-28)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "197783ee-4d11-43db-ac29-d5b19b946d78"}, {"timestamp": "2025-05-07T00:00:00Z", "date_only": false, "value": "2025-05-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-07)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "c8297be5-baf2-4e56-8a9f-660a89d6013d"}, {"timestamp": "2025-06-11T00:00:00Z", "date_only": false, "value": "2025-06-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-11)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "b34b1926-78c8-47d7-a87d-7bcdbd32ac9e"}, {"timestamp": "2025-06-12T00:00:00Z", "date_only": false, "value": "2025-06-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-12)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "f8eabd7b-22e7-49c7-82d4-40652e0d8401"}, {"timestamp": "2025-08-03T00:00:00Z", "date_only": false, "value": "2025-08-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-03)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "af6690f4-d729-444b-899f-3002fe652b62"}, {"timestamp": "2025-08-14T00:00:00Z", "date_only": false, "value": "2025-08-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-14)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "12f55cb8-1969-4d69-9fd4-bbe31ff1e681"}, {"timestamp": "2025-08-16T00:00:00Z", "date_only": false, "value": "2025-08-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-16)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "56b84ec5-d323-4bc6-8373-35f455baa0cb"}, {"timestamp": "2025-08-31T03:00:59Z", "date_only": false, "value": "2025-08-31T03:00:59.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "67709a5d-6740-4008-b249-6efff6a5f3ff"}, {"timestamp": "2025-08-31T03:12:44Z", "date_only": false, "value": "2025-08-31T03:12:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "21d48620-56d4-493b-969f-52fa80d9a295"}, {"timestamp": "2025-09-26T00:00:00Z", "date_only": false, "value": "2025-09-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-26)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "36e58c52-8070-4327-998f-1d666be3edb8"}, {"timestamp": "2025-10-12T00:00:00Z", "date_only": false, "value": "2025-10-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-12)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "519bd4f6-84bc-49eb-bc47-2274734ca2de"}, {"timestamp": "2025-10-15T00:00:00Z", "date_only": false, "value": "2025-10-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-15)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "a6e11bb5-0bb4-4898-8ee9-5651b5122e96"}, {"timestamp": "2025-10-21T23:25:33.144Z", "date_only": false, "value": "2025-10-21T23:25:33.144Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-38647", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-25T00:00:00Z", "date_only": false, "value": "2025-10-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-25)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "ecbab2ec-a97f-4cb0-b4a7-8a852a9ba1ef"}, {"timestamp": "2025-11-08T00:00:00Z", "date_only": false, "value": "2025-11-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-08)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "a11036e6-26f0-4aff-8a2d-271e06c03707"}, {"timestamp": "2025-11-20T00:00:00Z", "date_only": false, "value": "2025-11-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-20)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "09e7d282-39f5-4baf-aa7a-50516fbc525a"}, {"timestamp": "2025-11-27T00:00:00Z", "date_only": false, "value": "2025-11-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-27)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "568866ac-1136-49da-a537-4b0333969fc5"}, {"timestamp": "2025-12-09T00:00:00Z", "date_only": false, "value": "2025-12-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-09)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "adacbb11-5afa-4622-875c-27cccd41c612"}, {"timestamp": "2025-12-14T00:00:00Z", "date_only": false, "value": "2025-12-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-14)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "aa14a6df-4edc-419a-88a3-40becea5aacc"}, {"timestamp": "2025-12-15T00:00:00Z", "date_only": false, "value": "2025-12-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-15)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "c441f86e-45ea-486e-be26-9a157e49fee1"}, {"timestamp": "2026-01-12T00:00:00Z", "date_only": false, "value": "2026-01-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-12)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "d8540723-ecb2-426c-aaa8-56b1812967c4"}, {"timestamp": "2026-01-14T00:00:00Z", "date_only": false, "value": "2026-01-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-14)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "d8640d1a-0182-4e72-a3f8-9d14f7b087b1"}, {"timestamp": "2026-01-19T00:00:00Z", "date_only": false, "value": "2026-01-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-19)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "e7e97375-c1c6-454b-a6b7-413c86274672"}, {"timestamp": "2026-01-27T00:00:00Z", "date_only": false, "value": "2026-01-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-27)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "94a7228e-569a-4882-888a-84916396fe98"}, {"timestamp": "2026-02-02T12:28:48.489Z", "date_only": false, "value": "2026-02-02T12:28:48.489939Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6924827c-800f-405c-9c5b-4b98a828336d", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "e1c27880-2634-4649-bfc8-b84b2f81acd1", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6924827c-800f-405c-9c5b-4b98a828336d"}, {"timestamp": "2026-02-02T12:28:48.489Z", "date_only": false, "value": "2026-02-02T12:28:48.489939Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6924827c-800f-405c-9c5b-4b98a828336d", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "ac1cb24d-ed97-42c9-86e3-2fa9d52b40a4", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6924827c-800f-405c-9c5b-4b98a828336d"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2021-38647", "field": "timestamps.recorded_at", "uuid": "dbe2be82-b835-4b60-a84f-16a0c05d0955", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-08T00:00:00Z", "date_only": false, "value": "2026-02-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-08)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "af9c7c35-63de-4a97-83a2-72bd3e1564f4"}, {"timestamp": "2026-02-26T00:00:00Z", "date_only": false, "value": "2026-02-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-26)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "f3e5bc02-5caf-446b-93b4-61772383dde6"}, {"timestamp": "2026-02-28T00:00:00Z", "date_only": false, "value": "2026-02-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-28)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "c344c20c-111c-4a93-afae-96b08e4c72e7"}, {"timestamp": "2026-03-22T00:00:00Z", "date_only": false, "value": "2026-03-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-22)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "f24e8aaf-cb25-4c35-b3e6-c300fbd899b6"}, {"timestamp": "2026-04-19T00:00:00Z", "date_only": false, "value": "2026-04-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-19)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "6b79e7c1-aaaf-4322-8c2b-3f047183c92f"}, {"timestamp": "2026-06-19T12:47:48.436Z", "date_only": false, "value": "2026-06-19T12:47:48.436972Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ee8b0f78-3a5f-47cd-9bea-168c42252d56", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "85e646ff-4257-4e75-b817-dae5542c057e", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ee8b0f78-3a5f-47cd-9bea-168c42252d56"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2021-38647", "field": "timestamps.recorded_at", "uuid": "32f69748-0d25-4fa5-8ad6-b12f4366c72f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:16.149Z", "date_only": false, "value": "2026-06-23T11:13:16.149574Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/32f69748-0d25-4fa5-8ad6-b12f4366c72f", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "e7942c09-2380-4511-b514-7d74a20ca13c", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/32f69748-0d25-4fa5-8ad6-b12f4366c72f"}, {"timestamp": "2026-06-23T14:04:40.408Z", "date_only": false, "value": "2026-06-23T14:04:40.408872Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0e27cdfa-3108-43b8-aa82-18dd7b8da778", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "60fece81-0c3a-4777-b08f-b2cb60b77ced", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0e27cdfa-3108-43b8-aa82-18dd7b8da778"}, {"timestamp": "2026-06-30T09:23:22.113Z", "date_only": false, "value": "2026-06-30T09:23:22.113356Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9ac95d30-8475-4275-bfb1-25efbe583c21", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "7a58702d-a6ef-4735-8dd2-61cb7b574550", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9ac95d30-8475-4275-bfb1-25efbe583c21"}, {"timestamp": "2026-07-01T05:54:08.926Z", "date_only": false, "value": "2026-07-01T05:54:08.926334Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/e373da88-0959-426a-8926-8be53c4cba9c", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "a3e96dd1-f999-4c68-b867-0d921b197d09", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/e373da88-0959-426a-8926-8be53c4cba9c"}, {"timestamp": "2026-07-09T06:15:02.953Z", "date_only": false, "value": "2026-07-09T06:15:02.953412Z", "kind": "sighting", "label": "Seen", "source": "MISP/adf17496-6707-44ba-8601-10ab486eb92f", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "a6479564-6143-4da7-90d0-7030d1519004"}, {"timestamp": "2026-07-10T00:15:04.254Z", "date_only": false, "value": "2026-07-10T00:15:04.254789Z", "kind": "sighting", "label": "Seen", "source": "MISP/adf17496-6707-44ba-8601-10ab486eb92f", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "19ae19e3-4f68-4f38-91a4-b31a0784f894"}, {"timestamp": "2026-07-22T00:15:02.792Z", "date_only": false, "value": "2026-07-22T00:15:02.792492Z", "kind": "sighting", "label": "Seen", "source": "MISP/adf17496-6707-44ba-8601-10ab486eb92f", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "9c29fd92-7870-4beb-8ba7-a1e6a8ebc336"}, {"timestamp": "2026-07-23T00:15:02.503Z", "date_only": false, "value": "2026-07-23T00:15:02.503255Z", "kind": "sighting", "label": "Seen", "source": "MISP/adf17496-6707-44ba-8601-10ab486eb92f", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "3e3ff994-cdd4-4a31-b6b6-44b24c48928f"}, {"timestamp": "2026-07-23T10:15:11.056Z", "date_only": false, "value": "2026-07-23T10:15:11.056300Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-22)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "6038a380-f89f-4a01-ac32-121a8f072b54"}, {"timestamp": "2026-07-24T00:15:02.517Z", "date_only": false, "value": "2026-07-24T00:15:02.517997Z", "kind": "sighting", "label": "Seen", "source": "MISP/adf17496-6707-44ba-8601-10ab486eb92f", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "ab62ba83-40bc-4eb3-833e-01c2b0073f82"}, {"timestamp": "2026-07-28T10:00:06.450Z", "date_only": false, "value": "2026-07-28T10:00:06.450491Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-27)", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "ff0e78f5-9349-4c45-8f7a-fec66f785435"}, {"timestamp": "2026-08-10T15:10:54.154Z", "date_only": false, "value": "2026-08-10T15:10:54.154Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-38647", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-10T15:10:54.154Z", "date_only": false, "value": "2026-08-10T15:10:54.154Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2021-38647", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-10T18:31:10Z", "date_only": false, "value": "2026-08-10T18:31:10Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RP2G-5HW2-Q565", "record": "GHSA-RP2G-5HW2-Q565", "field": "modified"}, {"timestamp": "2026-08-10T20:18:56.117Z", "date_only": false, "value": "2026-08-10T20:18:56.117", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-38647", "record": "FKIE_CVE-2021-38647", "field": "lastModified"}, {"timestamp": "2026-08-11T18:07:12.472Z", "date_only": false, "value": "2026-08-11T18:07:12.472354Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mst7fk6dmh2t", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "b7b77e42-de64-49c1-beb1-957697baac10", "url": "https://bsky.app/profile/vulnsea.com/post/3mst7fk6dmh2t"}, {"timestamp": "2026-09-01T20:02:22.070Z", "date_only": false, "value": "2026-09-01T20:02:22.070108Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/24258", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "c4a96bcf-1773-48ab-b61d-ab46e372066a", "url": "https://t.me/hacking_Attack/24258"}, {"timestamp": "2026-09-01T20:02:22.170Z", "date_only": false, "value": "2026-09-01T20:02:22.170902Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/24262", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "b46830a4-a4a4-48d4-9972-02036d90dbbe", "url": "https://t.me/hacking_Attack/24262"}, {"timestamp": "2026-09-01T20:02:22.936Z", "date_only": false, "value": "2026-09-01T20:02:22.936614Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/23975", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "7a66ca88-f688-48de-9ad5-2c3f5bca7121", "url": "https://t.me/hacking_Attack/23975"}, {"timestamp": "2026-09-02T01:00:06.396Z", "date_only": false, "value": "2026-09-02T01:00:06.396597Z", "kind": "sighting", "label": "Seen", "source": "Telegram/cM227DVyGia-IhCb_dhSNoT4_7lvy6Nz1M7UPQD20JWnO-w", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "6c80deca-3770-41ae-b7e3-7b515ba662e8"}, {"timestamp": "2026-09-03T00:00:59.001Z", "date_only": false, "value": "2026-09-03T00:00:59.001123Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/cM227DVyGia-IhCb_dhSNoT4_7lvy6Nz1M7UPQD20JWnO-w", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "bc78b814-9cdf-43de-bca1-2a4cf2fb6b2d"}, {"timestamp": "2026-09-14T03:00:07.153Z", "date_only": false, "value": "2026-09-14T03:00:07.153154Z", "kind": "sighting", "label": "Seen", "source": "Telegram/CIwg3dUruFUkA2IiAP63EE_3LOdvwiOYKhxCOUQk67UuENI", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "5d8d90f3-3ad3-4a0c-b44f-aee5aba74d56"}, {"timestamp": "2026-09-15T00:00:29.458Z", "date_only": false, "value": "2026-09-15T00:00:29.458561Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/CIwg3dUruFUkA2IiAP63EE_3LOdvwiOYKhxCOUQk67UuENI", "record": "CVE-2021-38647", "field": "creation_timestamp", "uuid": "ed690e93-0b1e-48ca-a735-14c8d13ce582"}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2021-38647", "field": "timestamps.last_seen_at", "uuid": "e373da88-0959-426a-8926-8be53c4cba9c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": true, "value": "2026-10-20", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2021-38647", "field": "evidence.0.details.observation_date", "uuid": "e373da88-0959-426a-8926-8be53c4cba9c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2021-38647", "field": "status.status_updated_at", "uuid": "e373da88-0959-426a-8926-8be53c4cba9c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-22T01:00:02Z", "date_only": false, "value": "2026-10-22T01:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2021-38647", "field": "timestamps.recorded_at", "uuid": "e373da88-0959-426a-8926-8be53c4cba9c", "status": {"status_reason": "confirmed", "exploited": true}}]}