{"metadata": {"vulnerability": "cve-2024-21644", "count": 39, "kinds": {"milestone": 6, "sighting": 21, "kev": 0, "other": 12}}, "data": [{"timestamp": "2023-12-29T03:00:44.958Z", "date_only": false, "value": "2023-12-29T03:00:44.958Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-21644", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-29T06:02:04.996Z", "date_only": false, "value": "2023-12-29T06:02:04.996671Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-21644", "record": "GSD-2024-21644", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-06T00:59:22Z", "date_only": false, "value": "2024-01-06T00:59:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/pyload/pyload/security/advisories/GHSA-mqpq-2p68-46fv", "record": "CVE-2024-21644", "field": "creation_timestamp", "uuid": "472dd60e-fbda-44d2-9367-10c33a7cbdc5", "url": "https://github.com/pyload/pyload/security/advisories/GHSA-mqpq-2p68-46fv"}, {"timestamp": "2024-01-08T13:20:55.182Z", "date_only": false, "value": "2024-01-08T13:20:55.182Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-21644", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-01-08T13:20:55.182Z", "date_only": false, "value": "2024-01-08T13:20:55.182Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2024-21644", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-01-08T14:15:47Z", "date_only": false, "value": "2024-01-08T14:15:47Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MQPQ-2P68-46FV", "record": "GHSA-MQPQ-2P68-46FV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-01-08T14:15:47.217Z", "date_only": false, "value": "2024-01-08T14:15:47.217", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-21644", "record": "FKIE_CVE-2024-21644", "field": "published"}, {"timestamp": "2024-01-08T14:15:47.217Z", "date_only": false, "value": "2024-01-08T14:15:47.217", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2024-21644", "record": "GSD-2024-21644", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2024-01-08T15:26:33Z", "date_only": false, "value": "2024-01-08T15:26:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/164401", "record": "CVE-2024-21644", "field": "creation_timestamp", "uuid": "dbf713e2-13d6-4ec5-9c79-917c950f5623", "content": "https://ift.tt/nswZxci\nCVE-2024-21644", "url": "https://t.me/ctinow/164401"}, {"timestamp": "2024-01-08T15:40:39Z", "date_only": false, "value": "2024-01-08T15:40:39Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MQPQ-2P68-46FV", "record": "GHSA-MQPQ-2P68-46FV", "field": "published"}, {"timestamp": "2024-01-08T15:40:39Z", "date_only": false, "value": "2024-01-08T15:40:39Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MQPQ-2P68-46FV", "record": "GHSA-MQPQ-2P68-46FV", "field": "modified"}, {"timestamp": "2024-01-09T19:55:57.324Z", "date_only": false, "value": "2024-01-09T19:55:57.324511Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-21644", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-01-09T19:55:57.324Z", "date_only": false, "value": "2024-01-09T19:55:57.324511Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-21644", "record": "FKIE_CVE-2024-21644", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-01-11T17:33:09.870Z", "date_only": false, "value": "2024-01-11T17:33:09.870", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-21644", "record": "GSD-2024-21644", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-01-25T11:36:52Z", "date_only": false, "value": "2024-01-25T11:36:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/173387", "record": "CVE-2024-21644", "field": "creation_timestamp", "uuid": "32ee7425-1fbc-4e7f-8550-241495ed64e4", "content": "https://ift.tt/RNeJ8hS\nCVE-2024-21644 | pyload up to 0.5.0b3.dev76 Flask Config access control", "url": "https://t.me/ctinow/173387"}, {"timestamp": "2024-02-23T22:03:27Z", "date_only": false, "value": "2024-02-23T22:03:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1380", "record": "CVE-2024-21644", "field": "creation_timestamp", "uuid": "9f810f59-2007-4f19-b559-ea0c9d66f448", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "url": "https://t.me/codeb0ss/1380"}, {"timestamp": "2024-02-26T20:19:03Z", "date_only": false, "value": "2024-02-26T20:19:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/v3n0mhack/313", "record": "CVE-2024-21644", "field": "creation_timestamp", "uuid": "9ce9f721-32f8-433b-ab05-e3c7b121dcfe", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]", "url": "https://t.me/v3n0mhack/313"}, {"timestamp": "2024-03-18T19:56:23Z", "date_only": false, "value": "2024-03-18T19:56:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/h0rn3t_sp1d3rs/494", "record": "CVE-2024-21644", "field": "creation_timestamp", "uuid": "9758b381-18a8-45ac-aa65-9fca1a84f80d", "content": "\u2668\ufe0f YOU NEED ? \n\n\u2705 Advanced software to exploit cve-2024 vulnerabilities.\n\n\u27a1\ufe0f CVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE] \n\n\u27a1\ufe0f CVE-2024-1210 -\u00a0 Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE] \n\n\u27a1\ufe0f CVE-2024-21644 - pyLoad - Flask Config < Access Control [AC] \n\n\u27a1\ufe0f CVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW] \n \n\ud83d\uded2 Dm @h0rn3t_sp1d3r \u2708\ufe0f", "url": "https://t.me/h0rn3t_sp1d3rs/494"}, {"timestamp": "2024-03-19T16:05:55Z", "date_only": false, "value": "2024-03-19T16:05:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1397", "record": "CVE-2024-21644", "field": "creation_timestamp", "uuid": "4c4cada3-595b-4808-878a-8b47893ec0aa", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "url": "https://t.me/codeb0ss/1397"}, {"timestamp": "2024-03-22T20:01:24Z", "date_only": false, "value": "2024-03-22T20:01:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/v3n0mhack/324", "record": "CVE-2024-21644", "field": "creation_timestamp", "uuid": "0eaa0cbe-c8ff-4a63-ac83-429f32a7db4a", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]", "url": "https://t.me/v3n0mhack/324"}, {"timestamp": "2024-04-03T19:16:45Z", "date_only": false, "value": "2024-04-03T19:16:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1404", "record": "CVE-2024-21644", "field": "creation_timestamp", "uuid": "c19de2e0-c5d4-48e0-ac6f-d327dc1a058e", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "url": "https://t.me/codeb0ss/1404"}, {"timestamp": "2024-04-27T16:50:04Z", "date_only": false, "value": "2024-04-27T16:50:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1425", "record": "CVE-2024-21644", "field": "creation_timestamp", "uuid": "034e716c-61e7-4313-a9a3-848552208fd2", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "url": "https://t.me/codeb0ss/1425"}, {"timestamp": "2024-05-14T19:38:14Z", "date_only": false, "value": "2024-05-14T19:38:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1412", "record": "CVE-2024-21644", "field": "creation_timestamp", "uuid": "88c8bfc4-cb03-48b4-a1d8-4aef3c5aca35", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "url": "https://t.me/codeb0ss/1412"}, {"timestamp": "2024-06-14T13:46:34Z", "date_only": false, "value": "2024-06-14T13:46:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bexsop/370", "record": "CVE-2024-21644", "field": "creation_timestamp", "uuid": "b56d3f34-a39e-4f3e-92f0-9f2778656b79", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "url": "https://t.me/bexsop/370"}, {"timestamp": "2024-06-16T15:10:15Z", "date_only": false, "value": "2024-06-16T15:10:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LeakingCode/12981", "record": "CVE-2024-21644", "field": "creation_timestamp", "uuid": "2d746760-4e60-4dbf-ad42-aca6f6097e6a", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "url": "https://t.me/LeakingCode/12981"}, {"timestamp": "2024-07-24T12:45:42Z", "date_only": false, "value": "2024-07-24T12:45:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/tengkorakcybercrewz/16004", "record": "CVE-2024-21644", "field": "creation_timestamp", "uuid": "ace12fd3-1a6b-4fc7-938d-46dc5d8ed594", "content": "CVE-2024-21644\u3030\ufe0f\npyLoad Flask Config - Access Control\u261d\ufe0f\nExample: target.com/render/info.html\ud83d\udcaf", "url": "https://t.me/tengkorakcybercrewz/16004"}, {"timestamp": "2024-07-24T12:45:42Z", "date_only": false, "value": "2024-07-24T12:45:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/tengkorakcybercrewz/3096", "record": "CVE-2024-21644", "field": "creation_timestamp", "uuid": "66454446-563f-4f35-841b-7d957f6ae0a4", "content": "CVE-2024-21644\u3030\ufe0f\npyLoad Flask Config - Access Control\u261d\ufe0f\nExample: target.com/render/info.html\ud83d\udcaf", "url": "https://t.me/tengkorakcybercrewz/3096"}, {"timestamp": "2024-08-01T22:27:36.016Z", "date_only": false, "value": "2024-08-01T22:27:36.016Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-21644", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-17T21:29:50Z", "date_only": false, "value": "2024-09-17T21:29:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1457", "record": "CVE-2024-21644", "field": "creation_timestamp", "uuid": "508d6f7d-b9cd-4fe1-8364-33e420492e9a", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "url": "https://t.me/codeb0ss/1457"}, {"timestamp": "2024-09-17T21:29:51Z", "date_only": false, "value": "2024-09-17T21:29:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1444", "record": "CVE-2024-21644", "field": "creation_timestamp", "uuid": "a2888248-a7b4-42bd-ad93-e8f6c675c922", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "url": "https://t.me/codeb0ss/1444"}, {"timestamp": "2024-11-20T11:01:27Z", "date_only": false, "value": "2024-11-20T11:01:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1625", "record": "CVE-2024-21644", "field": "creation_timestamp", "uuid": "b023b167-7ff5-47f8-ae93-cf8c53b28cd4", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "url": "https://t.me/codeb0ss/1625"}, {"timestamp": "2024-11-20T22:32:26Z", "date_only": false, "value": "2024-11-20T22:32:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DEVIL_La_RSx/370", "record": "CVE-2024-21644", "field": "creation_timestamp", "uuid": "13beed28-f12e-4243-8529-a57017eb2eb6", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "url": "https://t.me/DEVIL_La_RSx/370"}, {"timestamp": "2025-03-05T14:04:07Z", "date_only": false, "value": "2025-03-05T14:04:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/AGENTZSECURITY/1122", "record": "CVE-2024-21644", "field": "creation_timestamp", "uuid": "f0b98e07-8e79-4dd3-82e9-ef810e26d352", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "url": "https://t.me/AGENTZSECURITY/1122"}, {"timestamp": "2025-03-05T22:29:05Z", "date_only": false, "value": "2025-03-05T22:29:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/eU5TW0NrIabaH627FpFKhEBuxk5i4RkIq4T6rxIMq7cGCQ", "record": "CVE-2024-21644", "field": "creation_timestamp", "uuid": "76e09f90-8cd5-4dc1-bf1c-a0d6cf7b901a"}, {"timestamp": "2025-06-17T20:39:15.676Z", "date_only": false, "value": "2025-06-17T20:39:15.676Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-21644", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-06-17T20:39:15.676Z", "date_only": false, "value": "2025-06-17T20:39:15.676Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-21644", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T07:09:54.933Z", "date_only": false, "value": "2026-06-17T07:09:54.933", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-21644", "record": "FKIE_CVE-2024-21644", "field": "lastModified"}, {"timestamp": "2026-07-07T11:45:29.730Z", "date_only": false, "value": "2026-07-07T11:45:29.730451Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-1820", "record": "PYSEC-2026-1820", "field": "published"}, {"timestamp": "2026-07-07T17:25:11.058Z", "date_only": false, "value": "2026-07-07T17:25:11.058528Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-1820", "record": "PYSEC-2026-1820", "field": "modified"}]}