{"metadata": {"vulnerability": "CVE-2024-21515", "count": 22, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 12}}, "data": [{"timestamp": "2023-12-22T12:33:20.120Z", "date_only": false, "value": "2023-12-22T12:33:20.120Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-21515", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-23T06:02:09.449Z", "date_only": false, "value": "2023-12-23T06:02:09.449724Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-21515", "record": "GSD-2024-21515", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-06-22T05:00:01.411Z", "date_only": false, "value": "2024-06-22T05:00:01.411Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-21515", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-06-22T05:15:10Z", "date_only": false, "value": "2024-06-22T05:15:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QX44-885H-7P56", "record": "GHSA-QX44-885H-7P56", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-06-22T05:15:10.730Z", "date_only": false, "value": "2024-06-22T05:15:10.730", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-21515", "record": "FKIE_CVE-2024-21515", "field": "published"}, {"timestamp": "2024-06-22T06:30:36Z", "date_only": false, "value": "2024-06-22T06:30:36Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QX44-885H-7P56", "record": "GHSA-QX44-885H-7P56", "field": "published"}, {"timestamp": "2024-06-24T00:00:00Z", "date_only": true, "value": "2024-06-24", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2024-30071", "record": "CNVD-2024-30071", "field": "submitTime"}, {"timestamp": "2024-06-24T20:34:37Z", "date_only": false, "value": "2024-06-24T20:34:37Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QX44-885H-7P56", "record": "GHSA-QX44-885H-7P56", "field": "modified"}, {"timestamp": "2024-06-25T19:08:02.907Z", "date_only": false, "value": "2024-06-25T19:08:02.907854Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-21515", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-06-25T19:08:02.907Z", "date_only": false, "value": "2024-06-25T19:08:02.907854Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-21515", "record": "FKIE_CVE-2024-21515", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-06-27T00:00:00Z", "date_only": true, "value": "2024-06-27", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2024-30071", "record": "CNVD-2024-30071", "field": "openTime"}, {"timestamp": "2024-07-30T15:34:27.784Z", "date_only": false, "value": "2024-07-30T15:34:27.784Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-21515", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-01T22:20:40.877Z", "date_only": false, "value": "2024-08-01T22:20:40.877Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-21515", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-14T16:27:07.135Z", "date_only": false, "value": "2025-01-14T16:27:07.135Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-21515", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-01-14T16:27:07.135Z", "date_only": false, "value": "2025-01-14T16:27:07.135Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / snyk", "record": "CVE-2024-21515", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-18T19:33:22Z", "date_only": false, "value": "2025-04-18T19:33:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/NinjaSec/201", "record": "CVE-2024-21515", "field": "creation_timestamp", "uuid": "ff31dfd4-9ec4-4a35-ac46-fa23c44510c9", "content": "\ud83d\udd27 CVE Exploitation Tools (2024\u20132025)\n\n1. CVE-2024-25600 \u2013 WordPress Bricks Builder RCE\n\n2. CVE-2024-24919 \u2013 Check Point Security Gateway RCE\n\n3. CVE-2024-29025 \u2013 Netty HttpPostRequestDecoder DoS\n\n4. CVE-2024-21525 \u2013 node-twain Buffer Overflow\n\n5. CVE-2024-3094 \u2013 XZ Backdoor Detector\n\n6. CVE-2024-21515 \u2013 OpenCart Reflected XSS\n\n7. CVE-2024-21552 \u2013 SuperAGI Arbitrary Code Execution\n\n8. CVE-2024-56249 \u2013 WordPress WPMasterToolKit Arbitrary File Upload\n\n9. CVE-2024-24919 \u2013 Check Point VPN Exploit\n\n10. CVE-2024-24919 \u2013 Python Exploit Script\n\nPython script to exploit CVE-2024-24919 vulnerability.\n\nGitHub: LucasKatashi/CVE-2024-24919\n\n11. CVE-2024-24919 \u2013 Exploit PoC\n\nProof-of-Concept for exploiting CVE-2024-24919.\n\nGitHub: seed1337/CVE-2024-24919-POC\n\n12. CVE-2024-24919 \u2013 Check Point Remote Access VPN Exploit\n\nScripts to exploit CVE-2024-24919 in Check Point VPNs.\n\nGitHub: Praison001/CVE-2024-24919-Check-Point-Remote-Access-VPN\n\n13. CVE-2024-25600 \u2013 Alternate Exploit Script\n\nAnother implementation to exploit Bricks Builder RCE.\n\nGitHub: meli0dasH4ck3r/cve-2024-25600\n\n14. CVE-2024-25600 \u2013 Exploit Script\n\nPython script to exploit Bricks Builder RCE vulnerability.\n\nGitHub: K3ysTr0K3R/CVE-2024-25600-EXPLOIT \n\n\n\ud83d\udd27 CVE Exploitation Tools & Frameworks\n\n1. trickest/cve\n\n\ud83d\udd17 https://github.com/trickest/cve\n\n2. PayloadsAllTheThings \u2013 CVE Exploits\n\n\ud83d\udd17 https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/CVE%20Exploits/README.md\n\n3. qazbnm456/awesome-cve-poc\n\n\ud83d\udd17 https://github.com/qazbnm456/awesome-cve-poc\n\n4. intel/cve-bin-tool\n\n\ud83d\udd17 https://github.com/intel/cve-bin-tool\n\n5. cve-search/cve-search\nN\n\n\ud83d\udd17 https://github.com/cve-search/cve-search\n\n6. vertoforce/CVE-Enrichment\n\n\ud83d\udd17 https://github.com/vertoforce/CVE-Enrichment\n\n7. TURROKS/CVE_Prioritizer\n\n\ud83d\udd17 https://github.com/TURROKS/CVE_Prioritizer\n\n8. clearlinux/cve-check-tool\n\n\ud83d\udd17 https://github.com/clearlinux/cve-check-tool\n\n9. cddmp/cvecheck\n\n\ud83d\udd17 https://github.com/cddmp/cvecheck\n\n10. center-for-threat-informed-defense/attack_to_cve\n\nMaps MITRE ATT&CK techniques to CVEs to characterize vulnerability impacts.\n\n\ud83d\udd17 https://github.com/center-for-threat-informed-defense/attack_to_cve\n\n\n\ud83e\uddea Specific CVE Exploit Tools\n\n11. CVE-2024-25600 Exploit Tool\n\nDesigned to exploit a vulnerability in the Bricks Builder plugin for WordPress.\n\n\ud83d\udd17 https://github.com/Chocapikk/CVE-2024-25600\n\n12. RevoltSecurities/CVE-2024-24919\n\nTool to detect and exploit CVE-2024-24919 vulnerability.\n\n\ud83d\udd17 https://github.com/RevoltSecurities/CVE-2024-24919\n\n13. ROCA Detection Tool\n\nDetects RSA keys vulnerable to the ROCA vulnerability (CVE-2017-15361).\n\n\ud83d\udd17 https://github.com/crocs-muni/roca\n\n\ud83d\udee0\ufe0f Additional Tools & Resources\n\n14. Goby\n\nA network security assessment tool that can scan for vulnerabilities and map attack surfaces.\n\n\ud83d\udd17 https://github.com/gobysec/Goby\n\n15. awesome-pentestu\n\nA curated list of penetration testing resources, including tools for CVE exploitation.\n\n\ud83d\udd17 https://github.com/enaqx/awesome-pentest\n\n16. awesome-bugbounty-tools\n\nA collection of tools useful for bug bounty hunting, some of which relate to CVE exploitation.\n\n\ud83d\udd17 https://github.com/vavkamil/awesome-bugbounty-tools\n\n17. cyberguideme/Tools\n\nA repository of various cybersecurity tools, including those for exploiting known vulnerabilities.\n\n\ud83d\udd17 https://github.com/cyberguideme/Tools\n\n\n#GrayHats", "url": "https://t.me/NinjaSec/201"}, {"timestamp": "2025-04-18T21:33:21Z", "date_only": false, "value": "2025-04-18T21:33:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/NinjaSec/28351", "record": "CVE-2024-21515", "field": "creation_timestamp", "uuid": "58f2fbc4-ee43-46a3-9941-6621de8d26fa", "content": "\ud83d\udd27 CVE Exploitation Tools (2024\u20132025)\n\n1. CVE-2024-25600 \u2013 WordPress Bricks Builder RCE\n\n2. CVE-2024-24919 \u2013 Check Point Security Gateway RCE\n\n3. CVE-2024-29025 \u2013 Netty HttpPostRequestDecoder DoS\n\n4. CVE-2024-21525 \u2013 node-twain Buffer Overflow\n\n5. CVE-2024-3094 \u2013 XZ Backdoor Detector\n\n6. CVE-2024-21515 \u2013 OpenCart Reflected XSS\n\n7. CVE-2024-21552 \u2013 SuperAGI Arbitrary Code Execution\n\n8. CVE-2024-56249 \u2013 WordPress WPMasterToolKit Arbitrary File Upload\n\n9. CVE-2024-24919 \u2013 Check Point VPN Exploit\n\n10. CVE-2024-24919 \u2013 Python Exploit Script\n\nPython script to exploit CVE-2024-24919 vulnerability.\n\nGitHub: LucasKatashi/CVE-2024-24919\n\n11. CVE-2024-24919 \u2013 Exploit PoC\n\nProof-of-Concept for exploiting CVE-2024-24919.\n\nGitHub: seed1337/CVE-2024-24919-POC\n\n12. CVE-2024-24919 \u2013 Check Point Remote Access VPN Exploit\n\nScripts to exploit CVE-2024-24919 in Check Point VPNs.\n\nGitHub: Praison001/CVE-2024-24919-Check-Point-Remote-Access-VPN\n\n13. CVE-2024-25600 \u2013 Alternate Exploit Script\n\nAnother implementation to exploit Bricks Builder RCE.\n\nGitHub: meli0dasH4ck3r/cve-2024-25600\n\n14. CVE-2024-25600 \u2013 Exploit Script\n\nPython script to exploit Bricks Builder RCE vulnerability.\n\nGitHub: K3ysTr0K3R/CVE-2024-25600-EXPLOIT \n\n\n\ud83d\udd27 CVE Exploitation Tools & Frameworks\n\n1. trickest/cve\n\n\ud83d\udd17 https://github.com/trickest/cve\n\n2. PayloadsAllTheThings \u2013 CVE Exploits\n\n\ud83d\udd17 https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/CVE%20Exploits/README.md\n\n3. qazbnm456/awesome-cve-poc\n\n\ud83d\udd17 https://github.com/qazbnm456/awesome-cve-poc\n\n4. intel/cve-bin-tool\n\n\ud83d\udd17 https://github.com/intel/cve-bin-tool\n\n5. cve-search/cve-search\nN\n\n\ud83d\udd17 https://github.com/cve-search/cve-search\n\n6. vertoforce/CVE-Enrichment\n\n\ud83d\udd17 https://github.com/vertoforce/CVE-Enrichment\n\n7. TURROKS/CVE_Prioritizer\n\n\ud83d\udd17 https://github.com/TURROKS/CVE_Prioritizer\n\n8. clearlinux/cve-check-tool\n\n\ud83d\udd17 https://github.com/clearlinux/cve-check-tool\n\n9. cddmp/cvecheck\n\n\ud83d\udd17 https://github.com/cddmp/cvecheck\n\n10. center-for-threat-informed-defense/attack_to_cve\n\nMaps MITRE ATT&CK techniques to CVEs to characterize vulnerability impacts.\n\n\ud83d\udd17 https://github.com/center-for-threat-informed-defense/attack_to_cve\n\n\n\ud83e\uddea Specific CVE Exploit Tools\n\n11. CVE-2024-25600 Exploit Tool\n\nDesigned to exploit a vulnerability in the Bricks Builder plugin for WordPress.\n\n\ud83d\udd17 https://github.com/Chocapikk/CVE-2024-25600\n\n12. RevoltSecurities/CVE-2024-24919\n\nTool to detect and exploit CVE-2024-24919 vulnerability.\n\n\ud83d\udd17 https://github.com/RevoltSecurities/CVE-2024-24919\n\n13. ROCA Detection Tool\n\nDetects RSA keys vulnerable to the ROCA vulnerability (CVE-2017-15361).\n\n\ud83d\udd17 https://github.com/crocs-muni/roca\n\n\ud83d\udee0\ufe0f Additional Tools & Resources\n\n14. Goby\n\nA network security assessment tool that can scan for vulnerabilities and map attack surfaces.\n\n\ud83d\udd17 https://github.com/gobysec/Goby\n\n15. awesome-pentestu\n\nA curated list of penetration testing resources, including tools for CVE exploitation.\n\n\ud83d\udd17 https://github.com/enaqx/awesome-pentest\n\n16. awesome-bugbounty-tools\n\nA collection of tools useful for bug bounty hunting, some of which relate to CVE exploitation.\n\n\ud83d\udd17 https://github.com/vavkamil/awesome-bugbounty-tools\n\n17. cyberguideme/Tools\n\nA repository of various cybersecurity tools, including those for exploiting known vulnerabilities.\n\n\ud83d\udd17 https://github.com/cyberguideme/Tools\n\n\n#GrayHats", "url": "https://t.me/NinjaSec/28351"}, {"timestamp": "2026-06-17T07:09:39.350Z", "date_only": false, "value": "2026-06-17T07:09:39.350", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-21515", "record": "FKIE_CVE-2024-21515", "field": "lastModified"}, {"timestamp": "2026-08-19T21:00:03.788Z", "date_only": false, "value": "2026-08-19T21:00:03.788862Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/NinjaSecurity/136", "record": "CVE-2024-21515", "field": "creation_timestamp", "uuid": "e9e6dfa4-1d0c-45a1-94c4-d23e2985cc9e", "url": "https://t.me/NinjaSecurity/136"}, {"timestamp": "2026-08-19T21:00:04.988Z", "date_only": false, "value": "2026-08-19T21:00:04.988356Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/NinjaSecurity/28", "record": "CVE-2024-21515", "field": "creation_timestamp", "uuid": "2ce7dc10-346f-4df7-ad3a-7ba95b1171ad", "url": "https://t.me/NinjaSecurity/28"}, {"timestamp": "2026-08-20T00:00:06.236Z", "date_only": false, "value": "2026-08-20T00:00:06.236904Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/NinjaSecurity/28", "record": "CVE-2024-21515", "field": "creation_timestamp", "uuid": "0b13f383-61be-45ba-bf8b-bbb8fe9da4b9", "url": "https://t.me/NinjaSecurity/28"}, {"timestamp": "2026-08-20T00:00:08.809Z", "date_only": false, "value": "2026-08-20T00:00:08.809912Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/NinjaSecurity/136", "record": "CVE-2024-21515", "field": "creation_timestamp", "uuid": "dbe547b9-61a1-4613-aefb-e7aa891a63b7", "url": "https://t.me/NinjaSecurity/136"}]}