{"metadata": {"vulnerability": "cve-2019-6447", "count": 41, "kinds": {"milestone": 4, "sighting": 19, "kev": 0, "other": 18}}, "data": [{"timestamp": "2019-01-16T00:00:00Z", "date_only": false, "value": "2019-01-16T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201901-0308", "record": "VAR-201901-0308", "field": "sources_release_date.data.0.date"}, {"timestamp": "2019-01-16T00:00:00Z", "date_only": false, "value": "2019-01-16T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "cve-2019-6447", "field": "containers.cna.datePublic"}, {"timestamp": "2019-01-16T00:00:00Z", "date_only": false, "value": "2019-01-16T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2019-6447", "field": "cveMetadata.dateReserved"}, {"timestamp": "2019-01-16T14:00:00Z", "date_only": false, "value": "2019-01-16T14:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2019-6447", "field": "cveMetadata.datePublished"}, {"timestamp": "2019-01-16T14:29:00Z", "date_only": false, "value": "2019-01-16T14:29:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2PQF-JWPX-HMHW", "record": "GHSA-2PQF-JWPX-HMHW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2019-01-16T14:29:00Z", "date_only": false, "value": "2019-01-16T14:29Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2019-6447", "record": "GSD-2019-6447", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2019-01-16T14:29:00.327Z", "date_only": false, "value": "2019-01-16T14:29:00.327000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201901-0308", "record": "VAR-201901-0308", "field": "sources_release_date.data.3.date"}, {"timestamp": "2019-01-16T14:29:00.327Z", "date_only": false, "value": "2019-01-16T14:29:00.327", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-6447", "record": "FKIE_CVE-2019-6447", "field": "published"}, {"timestamp": "2019-01-16T16:18:53Z", "date_only": false, "value": "2019-01-16T16:18:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/white_hat2/56", "record": "CVE-2019-6447", "field": "creation_timestamp", "uuid": "c0ce1ce6-0efa-4808-962b-6e668353f7f9", "content": "\u062b\u063a\u0631\u0629 \u0641\u064a \u062a\u0637\u0628\u064a\u0642 ES file Explorer \u062a\u0633\u0645\u062d \u0644\u0644\u0645\u062e\u062a\u0631\u0642 \u0627\u0644\u0645\u062a\u0635\u0644 \u0628\u0646\u0641\u0633 \u0645\u0639\u0643 \u0627\u0644\u0634\u0628\u0643\u0629 \u0628\u0627\u0644\u0648\u0635\u0648\u0644 \u0627\u0644\u0649 \u0645\u0644\u0641\u0627\u062a\u0643 \n\u0645\u0639 \u0639\u062f\u062f \u062a\u062d\u0645\u064a\u0644\u0627\u062a \u062a\u062a\u062c\u0627\u0648\u0632 \u0627\u0644100 \u0645\u0644\u064a\u0648\u0646 \u062a\u062d\u0645\u064a\u0644 \u0641\u064a \u0645\u062a\u062c\u0631 \u0628\u0644\u0627\u064a \u0644\u062a\u0637\u0628\u064a\u0642 ES File Explorer\n\u0627\u062d\u062f \u0627\u0634\u0647\u0631 \u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0627\u062f\u0627\u0631\u0629 \u0627\u0644\u0645\u0644\u0641\u0627\u062a \u0644\u0644\u0627\u0646\u062f\u0631\u0648\u064a\u062f \n\u0648\u0627\u0644\u0645\u0641\u0627\u062c\u0623\u0629 \u0647\u064a \u0627\u0646\u0643 \u0627\u0630\u0627 \u0634\u063a\u0644\u062a \u0627\u0644\u062a\u0637\u0628\u064a\u0642 \u0644\u0645\u0631\u0629 \u0648\u0627\u062d\u062f\u0629 \u0639\u0644\u0649 \u0627\u0644\u0627\u0642\u0644 \n\u0627\u064a \u0634\u062e\u0635 \u0645\u062a\u0635\u0644 \u0645\u0639\u0643 \u0628\u0646\u0641\u0633 \u0627\u0644\u0634\u0628\u0643\u0629 \u064a\u0645\u0643\u0646\u0647 \u0627\u0646 \u064a\u0623\u062e\u0630 \u0645\u0644\u0641\u0627\u062a \u0645\u0646 \u062c\u0647\u0627\u0632\u0643 \u062f\u0648\u0646 \u0639\u0644\u0645\u0643\nWith more than 100,000,000 downloads ES File Explorer is one of the most famous #Android file manager.\nThe surprise is: if you opened the app at least once, anyone connected to the same local network can remotely get a file from your phone  \n\n\n\u0631\u0627\u0628\u0637 \u0627\u0644\u0641\u064a\u062f\u064a\u0648\nvideo link\nwww.youtube.com/embed/z6hfgnPNBRE\n\n\n\u0633\u0643\u0631\u0628\u062a \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0628\u0627\u0644\u0648\u0635\u0641\nthe script link is in the description\n\nNow, you can call this vulnerability CVE-2019-6447 \n\u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0635\u0628\u062d\u062a \u062a\u062d\u062a \u0645\u0633\u0645\u0649 CVE-2019-6447\n\n===================\nProMast3r035\n----------------------------------------\n@PM035 | Virtual]\u2022[Wolrd]\u2022[Kings\n________________________\n@white_hat2 | white hat\n====================", "url": "https://t.me/white_hat2/56"}, {"timestamp": "2019-01-17T00:00:00Z", "date_only": false, "value": "2019-01-17T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201901-0308", "record": "VAR-201901-0308", "field": "sources_release_date.data.2.date"}, {"timestamp": "2019-01-21T18:38:24Z", "date_only": false, "value": "2019-01-21T18:38:24.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5c46110e-2440-446b-b832-1f920a021402", "record": "CVE-2019-6447", "field": "creation_timestamp", "uuid": "a308d4e5-b734-4e0c-a616-ca73ff519bbb"}, {"timestamp": "2019-03-25T00:00:00Z", "date_only": false, "value": "2019-03-25T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201901-0308", "record": "VAR-201901-0308", "field": "sources_update_date.data.1.date"}, {"timestamp": "2019-03-29T20:54:37Z", "date_only": false, "value": "2019-03-29T20:54:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/es_file_explorer_open_port.rb", "record": "CVE-2019-6447", "field": "creation_timestamp", "uuid": "46513e43-cacc-4284-bbd0-536a482ba528", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/es_file_explorer_open_port.rb"}, {"timestamp": "2021-06-29T18:06:10Z", "date_only": false, "value": "2021-06-29T18:06:10.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2019-6447", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-06-30T00:00:00Z", "date_only": false, "value": "2021-06-30T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201901-0308", "record": "VAR-201901-0308", "field": "sources_update_date.data.2.date"}, {"timestamp": "2021-09-21T04:42:21Z", "date_only": false, "value": "2021-09-21T04:42:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pwnwiki_zhchannel/724", "record": "CVE-2019-6447", "field": "creation_timestamp", "uuid": "81e83a91-add6-46d6-a0ba-f00951396325", "content": "CVE-2019-6447 ES File Explorer 4.1.9.7.4 \u4efb\u610f\u6587\u4ef6\u5beb\u5165\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2019-6447_ES_File_Explorer_4.1.9.7.4_%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E5%AF%AB%E5%85%A5%E6%BC%8F%E6%B4%9E", "url": "https://t.me/pwnwiki_zhchannel/724"}, {"timestamp": "2022-05-13T01:08:59Z", "date_only": false, "value": "2022-05-13T01:08:59Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2PQF-JWPX-HMHW", "record": "GHSA-2PQF-JWPX-HMHW", "field": "published"}, {"timestamp": "2022-05-13T01:08:59Z", "date_only": false, "value": "2022-05-13T01:08:59Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2PQF-JWPX-HMHW", "record": "GHSA-2PQF-JWPX-HMHW", "field": "modified"}, {"timestamp": "2022-06-18T10:22:36Z", "date_only": false, "value": "2022-06-18T10:22:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/arm1tage/129", "record": "CVE-2019-6447", "field": "creation_timestamp", "uuid": "4cd0e019-50ed-47e4-a7d6-90c3d12da401", "content": "HackTheBox:\n\n\u2014Easy Machines\u2014\n\nDriver - WinRM (evil-winrm), printnightmare CVE-2021-1675 (https://habr.com/ru/sandbox/156538/)\nhttps://0xdf.gitlab.io/2022/02/26/htb-driver.html\n\nSecret - JWT, Git source (tig), crush-dumps\nhttps://0xdf.gitlab.io/2022/03/26/htb-secret.html\n\nBackDoor - Wordpress eBook Dir Trav (https://www.exploit-db.com/exploits/39575), gdb exploit (https://www.exploit-db.com/exploits/50539, https://www.rapid7.com/db/modules/exploit/multi/gdb/gdb_server_exec/) \nhttps://0xdf.gitlab.io/2022/04/23/htb-backdoor.html\n\nPrevise - Backup, Site Reverse Shell, low-encrypted passwords\nhttps://0xdf.gitlab.io/2022/01/08/htb-previse.html\n\nBountyHunter - XXE, (root) NOPASSWD python code\nhttps://0xdf.gitlab.io/2021/11/20/htb-bountyhunter.html\n\nHorizontal - Strapi CMS 3.0.0 CVE-2019-18818/CVE-2019-19609 (https://www.exploit-db.com/exploits/50239, https://github.com/diego-tella/CVE-2019-19609-EXPLOIT), Laravel v8 (https://www.exploit-db.com/exploits/49424)\nhttps://0xdf.gitlab.io/2022/02/05/htb-horizontall.html\n\nOptimum - Windows 2012 (https://www.rapid7.com/db/modules/exploit/windows/http/rejetto_hfs_exec/, https://www.rapid7.com/db/modules/exploit/windows/local/ms16_032_secondary_logon_handle_privesc/)\nhttps://0xdf.gitlab.io/2021/03/17/htb-optimum.html\n\nLame - FTP Anonymous, SAMBA exploit (https://github.com/amriunix/CVE-2007-2447)\nhttps://0xdf.gitlab.io/2020/04/07/htb-lame.html\n\nJerry - Tomcat Default Cred, shell via .WAR\nhttps://0xdf.gitlab.io/2018/11/17/htb-jerry.html\n\nBlue - Win7 eternalblue (https://www.rapid7.com/db/modules/exploit/windows/smb/ms17_010_eternalblue/)\nhttps://0xdf.gitlab.io/2021/05/11/htb-blue.html\n\nDevel - Microsoft IIS httpd 7.5 reverse shell via .ASPX, MS11-046 or ms10_015_kitrap0d (https://github.com/abatchy17/WindowsExploits/tree/master/MS11-046)\nhttps://0xdf.gitlab.io/2019/03/05/htb-devel.html\n\nNetmon - PRTG Network Monitor 18.1.37.13946, Backup credentials, CVE-2018-9276 (https://github.com/A1vinSmith/CVE-2018-9276) / (https://www.exploit-db.com/exploits/46527) + evil-winrm\nhttps://0xdf.gitlab.io/2019/06/29/htb-netmon.html\n\nExplore (Android) - 59777 port CVE-2019-6447 (https://www.exploit-db.com/exploits/50070), SSH Creds on Photo, adb shell\nhttps://0xdf.gitlab.io/2021/10/30/htb-explore.html\n\nAntique - Telnet password via snmpget (https://www.irongeek.com/i.php?page=security/networkprinterhacking#JetDirect%20password%20notes), CUPS 1.6.1 (https://github.com/jpillora/chisel) \nhttps://0xdf.gitlab.io/2022/05/03/htb-antique.html\n\nReturn - evil-winrm, Server Operators in net user svc-printer /domain, sc.exe\nhttps://0xdf.gitlab.io/2022/05/05/htb-return.html\n\nGrandpa - CVE-2017-7269 (https://www.rapid7.com/db/modules/exploit/windows/iis/iis_webdav_scstoragepathfromurl/), SEImpersonalPrivilege Churrasco (https://github.com/Re4son/Churrasco/)\nhttps://0xdf.gitlab.io/2020/05/28/htb-grandpa.html\n\nBeep - ShellShock or Elastix 2.2.0 - 'graph.php' Local File Inclusion, (root) NOPASSWD nmap\nhttps://0xdf.gitlab.io/2021/02/23/htb-beep.html\n\nPandora - snmpwalk creds, CVE-2021-32099, Site Reverse Shell\nhttps://0xdf.gitlab.io/2022/05/21/htb-pandora.html\n\nPaper - WPS 5.2.3 - Cve-2019-17671 (https://www.exploit-db.com/exploits/47690, https://0day.work/proof-of-concept-for-wordpress-5-2-3-viewing-unauthenticated-posts/), Chat Bot Dir Trav, CVE-2021-3560 (https://github.com/Almorabea/Polkit-exploit/blob/main/CVE-2021-3560.py)\nhttps://0xjin.medium.com/paper-hackthebox-write-up-2abca22d3b54\n\n\n#hackthebox #ctf", "url": "https://t.me/arm1tage/129"}, {"timestamp": "2023-02-01T00:00:00Z", "date_only": false, "value": "2023-02-01T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201901-0308", "record": "VAR-201901-0308", "field": "sources_update_date.data.0.date"}, {"timestamp": "2023-02-01T17:44:00Z", "date_only": false, "value": "2023-02-01T17:44Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2019-6447", "record": "GSD-2019-6447", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-09-06T02:40:41Z", "date_only": false, "value": "2023-09-06T02:40:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/396", "record": "CVE-2019-6447", "field": "creation_timestamp", "uuid": "d243f621-2a40-49e2-a212-9222acb57a80", "content": "#Whitepaper\nCVE-2019-6447:\nAndroid Vulnerability in ES File Explorer\n(ES File Explorer Open Port Vulnerability)\n\n]-> PoC: https://github.com/fs0c131y/ESFileExplorerOpenPortVuln", "url": "https://t.me/CyberSecurityTechnologies/396"}, {"timestamp": "2023-12-13T01:23:49.749Z", "date_only": false, "value": "2023-12-13T01:23:49.749232Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2019-6447", "record": "GSD-2019-6447", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T20:23:20.917Z", "date_only": false, "value": "2024-08-04T20:23:20.917Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2019-6447", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T20:23:20.917Z", "date_only": false, "value": "2024-08-04T20:23:20.917Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2019-6447", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-10T11:12:45Z", "date_only": false, "value": "2024-10-10T11:12:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/156", "record": "CVE-2019-6447", "field": "creation_timestamp", "uuid": "ff1cc565-95fa-4fc0-91f6-8d046ef33332", "content": "#exploit\n1. CVE-2019-6447:\nES File Explorer Open Port Vulnerability\nhttps://github.com/fs0c131y/ESFileExplorerOpenPortVuln\n\n2. CVE-2018-0708:\nCommand injection in networking of QNAP Q'center Virtual Appliance <=1.7.1063 could allow authenticated users to run arbitrary commands\nhttps://github.com/ntkernel0/CVE-2019-0708\n\n3. CVE-2019-0604:\nMicrosoft SharePoint RCE Vulnerability\nhttps://www.zerodayinitiative.com/blog/2019/3/13/cve-2019-0604-details-of-a-microsoft-sharepoint-rce-vulnerability", "url": "https://t.me/CyberSecurityTechnologies/156"}, {"timestamp": "2024-11-21T04:46:28.287Z", "date_only": false, "value": "2024-11-21T04:46:28.287000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201901-0308", "record": "VAR-201901-0308", "field": "sources_update_date.data.3.date"}, {"timestamp": "2025-01-30T21:10:50.661Z", "date_only": false, "value": "2025-01-30T21:10:50.661000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-201901-0308", "record": "VAR-201901-0308", "field": "last_update_date"}, {"timestamp": "2025-02-06T03:13:44Z", "date_only": false, "value": "2025-02-06T03:13:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2019-6447", "field": "creation_timestamp", "uuid": "6ba03c83-fe77-49ef-9ec0-dbb0f2428f79"}, {"timestamp": "2025-02-23T04:10:17Z", "date_only": false, "value": "2025-02-23T04:10:17.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2019-6447", "field": "creation_timestamp", "uuid": "fa9a779a-8704-41d2-9008-86019e2e58de"}, {"timestamp": "2026-06-17T02:39:04.003Z", "date_only": false, "value": "2026-06-17T02:39:04.003", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-6447", "record": "FKIE_CVE-2019-6447", "field": "lastModified"}, {"timestamp": "2026-07-16T19:00:06.452Z", "date_only": false, "value": "2026-07-16T19:00:06.452410Z", "kind": "sighting", "label": "Seen", "source": "Telegram/6kr7hIoL88BrLchA92ncvvrRqf7Y35-wLyAsUuKqT9ornHo", "record": "CVE-2019-6447", "field": "creation_timestamp", "uuid": "623b9059-b3b7-4b60-97b4-69497b913978"}, {"timestamp": "2026-07-17T00:00:25.242Z", "date_only": false, "value": "2026-07-17T00:00:25.242389Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/6kr7hIoL88BrLchA92ncvvrRqf7Y35-wLyAsUuKqT9ornHo", "record": "CVE-2019-6447", "field": "creation_timestamp", "uuid": "09bfc026-81e8-440a-9f3d-a8c5ffbc2699"}, {"timestamp": "2026-08-27T12:00:06.841Z", "date_only": false, "value": "2026-08-27T12:00:06.841517Z", "kind": "sighting", "label": "Seen", "source": "Telegram/mXwJqGjsLNp0LFwWbXU4h3vA714Oj6yIG5AFZePUNxHCgwE", "record": "CVE-2019-6447", "field": "creation_timestamp", "uuid": "dfd0a668-2c13-408f-8c4a-32787f661cec"}, {"timestamp": "2026-08-27T12:00:14.362Z", "date_only": false, "value": "2026-08-27T12:00:14.362651Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ikZnoSctjKS01YLMJM9Qen4V1zyVECG1kRn9n_uoSWF20Fw", "record": "CVE-2019-6447", "field": "creation_timestamp", "uuid": "88a80e43-c7bc-447d-8d2a-0b7883a1a4f1"}, {"timestamp": "2026-08-29T00:00:12.179Z", "date_only": false, "value": "2026-08-29T00:00:12.179132Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ikZnoSctjKS01YLMJM9Qen4V1zyVECG1kRn9n_uoSWF20Fw", "record": "CVE-2019-6447", "field": "creation_timestamp", "uuid": "a421dc82-fd27-4196-a4e8-ba6c626490c7"}, {"timestamp": "2026-08-29T00:00:29.269Z", "date_only": false, "value": "2026-08-29T00:00:29.269928Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/mXwJqGjsLNp0LFwWbXU4h3vA714Oj6yIG5AFZePUNxHCgwE", "record": "CVE-2019-6447", "field": "creation_timestamp", "uuid": "7f995e8e-6e9a-484d-b81e-01d1a428e968"}, {"timestamp": "2026-09-01T20:02:34.444Z", "date_only": false, "value": "2026-09-01T20:02:34.444725Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/14737", "record": "CVE-2019-6447", "field": "creation_timestamp", "uuid": "0e3f9081-d7c8-4e48-807a-e7297d0d4e18", "url": "https://t.me/hacking_Attack/14737"}, {"timestamp": "2026-09-02T01:00:05.675Z", "date_only": false, "value": "2026-09-02T01:00:05.675126Z", "kind": "sighting", "label": "Seen", "source": "Telegram/cM227DVyGia-IhCb_dhSNoT4_7lvy6Nz1M7UPQD20JWnO-w", "record": "CVE-2019-6447", "field": "creation_timestamp", "uuid": "c8c1ae33-9d34-4d1a-9f8e-f11a0ef7ef83"}, {"timestamp": "2026-09-03T00:00:59.209Z", "date_only": false, "value": "2026-09-03T00:00:59.209725Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/cM227DVyGia-IhCb_dhSNoT4_7lvy6Nz1M7UPQD20JWnO-w", "record": "CVE-2019-6447", "field": "creation_timestamp", "uuid": "49f708f8-ceb2-46bc-bb24-dcc9486dc70e"}, {"timestamp": "2026-09-08T01:00:04.092Z", "date_only": false, "value": "2026-09-08T01:00:04.092659Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/14737", "record": "CVE-2019-6447", "field": "creation_timestamp", "uuid": "fa0b018d-0d62-4a49-957d-3a7a9fbaf3a9", "url": "https://t.me/hacking_Attack/14737"}]}