{"metadata": {"vulnerability": "CVE-2021-40964", "count": 22, "kinds": {"milestone": 4, "sighting": 7, "kev": 0, "other": 11}}, "data": [{"timestamp": "2021-09-13T00:00:00Z", "date_only": false, "value": "2021-09-13T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-40964", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-09-15T17:12:28Z", "date_only": false, "value": "2021-09-15T17:12:28.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-40964", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-09-15T18:15:00Z", "date_only": false, "value": "2021-09-15T18:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FW9Q-RWPP-XCW5", "record": "GHSA-FW9Q-RWPP-XCW5", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2021-09-15T18:15:00Z", "date_only": false, "value": "2021-09-15T18:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-40964", "record": "GSD-2021-40964", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2021-09-15T18:15:09.413Z", "date_only": false, "value": "2021-09-15T18:15:09.413", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-40964", "record": "FKIE_CVE-2021-40964", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2021-09-15T22:22:19Z", "date_only": false, "value": "2021-09-15T22:22:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/28945", "record": "CVE-2021-40964", "field": "creation_timestamp", "uuid": "95251ea9-79cb-47fd-97a6-edb0f4288878", "content": "\u203c CVE-2021-40964 \u203c\n\nA Path Traversal vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to upload a file (with Admin credentials or with the CSRF vulnerability) with the \"fullpath\" parameter containing path traversal strings (../ and ..\\) in order to escape the server's intended working directory and write malicious files onto any directory on the computer.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/28945"}, {"timestamp": "2021-09-17T00:00:00Z", "date_only": true, "value": "2021-09-17", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-80270", "record": "CNVD-2021-80270", "field": "submitTime", "linked_record": true}, {"timestamp": "2021-10-26T00:00:00Z", "date_only": true, "value": "2021-10-26", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-80270", "record": "CNVD-2021-80270", "field": "openTime", "linked_record": true}, {"timestamp": "2022-03-16T18:06:21Z", "date_only": false, "value": "2022-03-16T18:06:21.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2021-40964", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-05-19T21:22:00Z", "date_only": false, "value": "2022-05-19T21:22Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-40964", "record": "GSD-2021-40964", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2022-05-24T19:14:36Z", "date_only": false, "value": "2022-05-24T19:14:36Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FW9Q-RWPP-XCW5", "record": "GHSA-FW9Q-RWPP-XCW5", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-05-24T19:14:36Z", "date_only": false, "value": "2022-05-24T19:14:36Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FW9Q-RWPP-XCW5", "record": "GHSA-FW9Q-RWPP-XCW5", "field": "modified", "linked_record": true}, {"timestamp": "2023-12-13T01:23:25.200Z", "date_only": false, "value": "2023-12-13T01:23:25.200182Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-40964", "record": "GSD-2021-40964", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-08-04T02:59:30.328Z", "date_only": false, "value": "2024-08-04T02:59:30.328Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-40964", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T02:59:30.328Z", "date_only": false, "value": "2024-08-04T02:59:30.328Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-40964", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-20T05:32:52Z", "date_only": false, "value": "2025-06-20T05:32:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/41172", "record": "CVE-2021-40964", "field": "creation_timestamp", "uuid": "8f95bede-9baa-4e26-bca8-99e02007ae3c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aTiny File Manager <= 2.4.6 - Remote Code Execution (RCE)\nURL\uff1ahttps://github.com/Z3R0-0x30/CVE-2021-40964\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/41172", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-06-20T09:00:05Z", "date_only": false, "value": "2025-06-20T09:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/04rNRtq-YvJirw2f6vBBsQj5DBNsU4NC5BG-M6leizMM-7Q", "record": "CVE-2021-40964", "field": "creation_timestamp", "uuid": "17369cc3-6458-4c94-bd9a-7c4c80268307", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-06-20T15:00:06Z", "date_only": false, "value": "2025-06-20T15:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/WbkInEHYY3kOnUccLnofEqQY0zB0xloygQFKulDWXCJgOM4", "record": "CVE-2021-40964", "field": "creation_timestamp", "uuid": "3d70be3c-e49a-44f0-b267-843d72026229", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-08-03T21:02:29.722Z", "date_only": false, "value": "2025-08-03T21:02:29.722077Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvjlb7n55e2g", "record": "CVE-2021-40964", "field": "creation_timestamp", "uuid": "df2fdf6f-5b27-4d98-bf95-5c442d597bca", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvjlb7n55e2g"}, {"timestamp": "2026-06-17T04:07:40.813Z", "date_only": false, "value": "2026-06-17T04:07:40.813", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-40964", "record": "FKIE_CVE-2021-40964", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-09-01T20:01:50.733Z", "date_only": false, "value": "2026-09-01T20:01:50.733062Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/46568", "record": "CVE-2021-40964", "field": "creation_timestamp", "uuid": "52ac6c22-81de-4121-a452-029ef0dcfd88", "url": "https://t.me/hacking_Attack/46568"}, {"timestamp": "2026-09-06T05:00:07.866Z", "date_only": false, "value": "2026-09-06T05:00:07.866446Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/46568", "record": "CVE-2021-40964", "field": "creation_timestamp", "uuid": "99c95785-4750-4371-b866-c157e09e9944", "url": "https://t.me/hacking_Attack/46568", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-09T17:18:45.134Z", "anchors": {"origin": {"timestamp": "2021-09-15T17:12:28Z", "date_only": false, "value": "2021-09-15T17:12:28.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-40964", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2021-09-15T17:12:28Z", "date_only": false, "value": "2021-09-15T17:12:28.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-40964", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-06-20T05:32:52Z", "date_only": false, "value": "2025-06-20T05:32:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/41172", "record": "CVE-2021-40964", "field": "creation_timestamp", "uuid": "8f95bede-9baa-4e26-bca8-99e02007ae3c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aTiny File Manager <= 2.4.6 - Remote Code Execution (RCE)\nURL\uff1ahttps://github.com/Z3R0-0x30/CVE-2021-40964\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/41172", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 118671624.0, "hours": 32964.34, "days": 1373.5141666666666, "min_seconds": 118671624.0, "max_seconds": 118671624.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-09-15T17:12:28Z", "date_only": false, "value": "2021-09-15T17:12:28.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-40964", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-06-20T05:32:52Z", "date_only": false, "value": "2025-06-20T05:32:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/41172", "record": "CVE-2021-40964", "field": "creation_timestamp", "uuid": "8f95bede-9baa-4e26-bca8-99e02007ae3c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aTiny File Manager <= 2.4.6 - Remote Code Execution (RCE)\nURL\uff1ahttps://github.com/Z3R0-0x30/CVE-2021-40964\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/41172", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 162518777.13495, "hours": 45144.10475970834, "days": 1881.0043649878473, "min_seconds": 162518777.13495, "max_seconds": 162518777.13495, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-09-15T17:12:28Z", "date_only": false, "value": "2021-09-15T17:12:28.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-40964", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-09T17:18:45.134Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 43847153.13495, "hours": 12179.764759708332, "days": 507.4901983211805, "min_seconds": 43847153.13495, "max_seconds": 43847153.13495, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-06-20T05:32:52Z", "date_only": false, "value": "2025-06-20T05:32:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/41172", "record": "CVE-2021-40964", "field": "creation_timestamp", "uuid": "8f95bede-9baa-4e26-bca8-99e02007ae3c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aTiny File Manager <= 2.4.6 - Remote Code Execution (RCE)\nURL\uff1ahttps://github.com/Z3R0-0x30/CVE-2021-40964\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/41172", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-09T17:18:45.134Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}