{"metadata": {"vulnerability": "CVE-2021-39246", "count": 20, "kinds": {"milestone": 4, "sighting": 7, "kev": 0, "other": 9}}, "data": [{"timestamp": "2021-08-17T00:00:00Z", "date_only": false, "value": "2021-08-17T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-39246", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-09-24T18:08:05Z", "date_only": false, "value": "2021-09-24T18:08:05.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-39246", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-09-24T19:15:00Z", "date_only": false, "value": "2021-09-24T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MQMF-5457-4F39", "record": "GHSA-MQMF-5457-4F39", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-09-24T19:15:00Z", "date_only": false, "value": "2021-09-24T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-39246", "record": "GSD-2021-39246", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-09-24T19:15:07.147Z", "date_only": false, "value": "2021-09-24T19:15:07.147", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-39246", "record": "FKIE_CVE-2021-39246", "field": "published"}, {"timestamp": "2021-09-24T22:31:02Z", "date_only": false, "value": "2021-09-24T22:31:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/29402", "record": "CVE-2021-39246", "field": "creation_timestamp", "uuid": "8ad9770b-a9fa-4c6e-9b11-c2064b0fe09b", "content": "\u203c CVE-2021-39246 \u203c\n\nTor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack that can compromise the privacy of visits to v2 onion addresses. If --log or --verbose is used, exact timestamps of these onion-service visits are logged locally, and an attacker might be able to compare them to timestamp data collected by the destination server (or collected by a rogue site within the Tor network).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/29402"}, {"timestamp": "2021-09-26T06:30:57Z", "date_only": false, "value": "2021-09-26T06:30:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/7313", "record": "CVE-2021-39246", "field": "creation_timestamp", "uuid": "982b572f-9b53-4ab5-ae73-82b38bc4d97b", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 CVE-2021-39246 \u2013 Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack excessive verbose logging \u2013 Windows, macOS, Linux\n\nhttps://sick.codes/sick-2021-111/", "url": "https://t.me/cKure/7313"}, {"timestamp": "2021-09-27T13:09:13Z", "date_only": false, "value": "2021-09-27T13:09:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/4386", "record": "CVE-2021-39246", "field": "creation_timestamp", "uuid": "0a0ac6c9-e1df-485d-99cd-b86b2b2e940c", "content": "#exploit\n1. CVE-2021-39246:\nTor Browser through 10.5.6, 11.x through 11.0a4 allows a correlation attack excessive verbose logging - Windows, macOS, Linux\nhttps://sick.codes/sick-2021-111\n2. CVE-2020-10086:\nGitLab 10.4 - 12.8.1 - Directory Traversal\nhttps://github.com/Mochican/CVE-2021-10086", "url": "https://t.me/CyberSecurityTechnologies/4386"}, {"timestamp": "2021-09-30T01:23:33Z", "date_only": false, "value": "2021-09-30T01:23:33.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2021-39246", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-10-01T13:00:00Z", "date_only": false, "value": "2021-10-01T13:00Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-39246", "record": "GSD-2021-39246", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-24T19:15:41Z", "date_only": false, "value": "2022-05-24T19:15:41Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MQMF-5457-4F39", "record": "GHSA-MQMF-5457-4F39", "field": "published"}, {"timestamp": "2022-05-24T19:15:41Z", "date_only": false, "value": "2022-05-24T19:15:41Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MQMF-5457-4F39", "record": "GHSA-MQMF-5457-4F39", "field": "modified"}, {"timestamp": "2023-12-13T01:23:15.250Z", "date_only": false, "value": "2023-12-13T01:23:15.250201Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-39246", "record": "GSD-2021-39246", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T02:06:42.498Z", "date_only": false, "value": "2024-08-04T02:06:42.498Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-39246", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T02:06:42.498Z", "date_only": false, "value": "2024-08-04T02:06:42.498Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-39246", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T04:03:23.677Z", "date_only": false, "value": "2026-06-17T04:03:23.677", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-39246", "record": "FKIE_CVE-2021-39246", "field": "lastModified"}, {"timestamp": "2026-07-29T12:02:53.462Z", "date_only": false, "value": "2026-07-29T12:02:53.462251Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1648", "record": "CVE-2021-39246", "field": "creation_timestamp", "uuid": "7ad32715-330d-4a4c-8f5c-7ead91e9b836", "content": "CVE-2021-39246 \u2013 Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack excessive verbose logging \u2013 Windows, macOS, Linux https://sick.codes/sick-2021-111/", "url": "https://t.me/reverseame/1648"}, {"timestamp": "2026-08-03T07:13:06.422Z", "date_only": false, "value": "2026-08-03T07:13:06.422888Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1648", "record": "CVE-2021-39246", "field": "creation_timestamp", "uuid": "51b954a3-72ed-4a13-98b2-70d5ae4a145b", "content": "CVE-2021-39246 \u2013 Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack excessive verbose logging \u2013 Windows, macOS, Linux https://sick.codes/sick-2021-111/", "url": "https://t.me/reverseame/1648"}, {"timestamp": "2026-09-01T17:00:39.384Z", "date_only": false, "value": "2026-09-01T17:00:39.384206Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/4477", "record": "CVE-2021-39246", "field": "creation_timestamp", "uuid": "21e036e3-1535-439c-b3d6-6f92e6ad0be2", "content": "Blue Team Techniques\nDongTai - interactive application security testing (IAST) product that supports the detection of OWASP WEB TOP-10 vulnerabilities, multi-request related vulnerabilities (including logic vulnerabilities, unauthorized access vulnerabilities, etc.), third-party component vulnerabilities\nhttps://github.com/HXSecurity/DongTai\n\nexploit\n1. CVE-2021-39246:\nTor Browser through 10.5.6, 11.x through 11.0a4 allows a correlation attack excessive verbose logging - Windows, macOS, Linux\nhttps://sick.codes/sick-2021-111\n2. CVE-2020-10086:\nGitLab 10.4 - 12.8.1 - Directory Traversal\nhttps://github.com/Mochican/CVE-2021-10086\n\nOffensive security\n1. NTLM Relaying via Cobalt Strike\nhttps://rastamouse.me/ntlm-relaying-via-cobalt-strike\n2. EXOCET - AV-evading, undetectable, payload delivery tool\nhttps://github.com/tanc7/EXOCET-AV-Evasion\n\nThreat Research\nAutodiscover Attacks\nhttps://www.guardicore.com/labs/autodiscovering-the-great-leak\n]-> https://autodiscover-vulnerable-tlds.com\n\nMalware analysis\n1. Examining the Cring Ransomware Techniques\nhttps://www.trendmicro.com/en_us/research/21/i/examining-the-cring-ransomware-techniques.html\n2. Strings Analysis:\nVBA & Excel4 Maldoc\nhttps://isc.sans.edu/diary/27872\n\n\n\u200e\u200b", "url": "https://t.me/cissp/4477"}, {"timestamp": "2026-09-10T19:00:05.935Z", "date_only": false, "value": "2026-09-10T19:00:05.935207Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/4477", "record": "CVE-2021-39246", "field": "creation_timestamp", "uuid": "45d333c9-43b9-4019-9fbf-3f4be2118acb", "content": "Blue Team Techniques\nDongTai - interactive application security testing (IAST) product that supports the detection of OWASP WEB TOP-10 vulnerabilities, multi-request related vulnerabilities (including logic vulnerabilities, unauthorized access vulnerabilities, etc.), third-party component vulnerabilities\nhttps://github.com/HXSecurity/DongTai\n\nexploit\n1. CVE-2021-39246:\nTor Browser through 10.5.6, 11.x through 11.0a4 allows a correlation attack excessive verbose logging - Windows, macOS, Linux\nhttps://sick.codes/sick-2021-111\n2. CVE-2020-10086:\nGitLab 10.4 - 12.8.1 - Directory Traversal\nhttps://github.com/Mochican/CVE-2021-10086\n\nOffensive security\n1. NTLM Relaying via Cobalt Strike\nhttps://rastamouse.me/ntlm-relaying-via-cobalt-strike\n2. EXOCET - AV-evading, undetectable, payload delivery tool\nhttps://github.com/tanc7/EXOCET-AV-Evasion\n\nThreat Research\nAutodiscover Attacks\nhttps://www.guardicore.com/labs/autodiscovering-the-great-leak\n]-> https://autodiscover-vulnerable-tlds.com\n\nMalware analysis\n1. Examining the Cring Ransomware Techniques\nhttps://www.trendmicro.com/en_us/research/21/i/examining-the-cring-ransomware-techniques.html\n2. Strings Analysis:\nVBA & Excel4 Maldoc\nhttps://isc.sans.edu/diary/27872\n\n\n\u200e\u200b", "url": "https://t.me/cissp/4477"}]}