{"metadata": {"vulnerability": "CVE-2021-31728", "count": 17, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 9}}, "data": [{"timestamp": "2021-04-23T00:00:00Z", "date_only": false, "value": "2021-04-23T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-31728", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-05-17T12:06:57Z", "date_only": false, "value": "2021-05-17T12:06:57.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-31728", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-05-17T12:06:57Z", "date_only": false, "value": "2021-05-17T12:06:57.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2021-31728", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-05-17T13:15:00Z", "date_only": false, "value": "2021-05-17T13:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-HGC8-6W6R-M2W8", "record": "GHSA-HGC8-6W6R-M2W8", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-05-17T13:15:00Z", "date_only": false, "value": "2021-05-17T13:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-31728", "record": "GSD-2021-31728", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-05-17T13:15:07.803Z", "date_only": false, "value": "2021-05-17T13:15:07.803", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-31728", "record": "FKIE_CVE-2021-31728", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-05-26T18:42:00Z", "date_only": false, "value": "2021-05-26T18:42Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-31728", "record": "GSD-2021-31728", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-24T19:02:38Z", "date_only": false, "value": "2022-05-24T19:02:38Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HGC8-6W6R-M2W8", "record": "GHSA-HGC8-6W6R-M2W8", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-07-13T00:01:24Z", "date_only": false, "value": "2022-07-13T00:01:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HGC8-6W6R-M2W8", "record": "GHSA-HGC8-6W6R-M2W8", "field": "modified"}, {"timestamp": "2023-12-13T01:23:13.174Z", "date_only": false, "value": "2023-12-13T01:23:13.174488Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-31728", "record": "GSD-2021-31728", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-02-17T14:55:47Z", "date_only": false, "value": "2024-02-17T14:55:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/3325", "record": "CVE-2021-31728", "field": "creation_timestamp", "uuid": "ac135e92-7746-4237-a6dc-325574596d98", "content": "#exploit\nCVE-2021-31727, CVE-2021-31728:\nVulnerability in zam64.sys, zam32.sys allowing ring 0 code execution\nhttps://github.com/irql0/CVE-2021-31728", "url": "https://t.me/CyberSecurityTechnologies/3325", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-03T23:03:33.789Z", "date_only": false, "value": "2024-08-03T23:03:33.789Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-31728", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T23:03:33.789Z", "date_only": false, "value": "2024-08-03T23:03:33.789Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-31728", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T03:52:11.043Z", "date_only": false, "value": "2026-06-17T03:52:11.043", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-31728", "record": "FKIE_CVE-2021-31728", "field": "lastModified"}, {"timestamp": "2026-09-01T17:00:50.682Z", "date_only": false, "value": "2026-09-01T17:00:50.682017Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/3150", "record": "CVE-2021-31728", "field": "creation_timestamp", "uuid": "912f43f4-ca9b-404c-9c39-be569bf96b7f", "content": "exploit\nCVE-2021-31727, CVE-2021-31728:\nVulnerability in zam64.sys, zam32.sys allowing ring 0 code execution\nhttps://github.com/irql0/CVE-2021-31728\n\nBlue Team Techniques\nIncident Response Playbooks\n1. Phishing investigation\ud83d\udc4d\ud83c\udffd\nhttps://docs.microsoft.com/ru-ru/security/compass/incident-response-playbook-phishing\n2. Password spray investigation\ud83d\udc4d\ud83c\udffd\nhttps://docs.microsoft.com/ru-ru/security/compass/incident-response-playbook-password-spray\n3. App consent grant investigation\nhttps://docs.microsoft.com/ru-ru/security/compass/incident-response-playbook-app-consent\n\nThreat Research\nSix CVEs, 0click RCEs on computers running the latest version of RemoteMouse application and server (0-day)\nhttps://axelp.io/MouseTrap\n]-> PoCs:\nhttps://github.com/CuckooEXE/MouseTrap\n\nRed Team Tactics\n1. Super fast login WordPress Brute Force\ud83d\ude01\nhttps://github.com/22XploiterCrew-Team/WordPress-Brute-Force\n2. Pwninit - automate starting binary exploit challenges\nhttps://github.com/io12/pwninit\n3. Bypassing EDR real-time injection detection logic\nhttps://blog.redbluepurple.io/offensive-research/bypassing-injection-detection\n\nWLAN Security\nCVE-2021-32030:\nASUS GT-AC2900 Dual Band WiFi Router - Authentication Bypass (PoC)\nhttps://www.atredis.com/blog/2021/4/30/asus-authentication-bypass", "url": "https://t.me/cissp/3150"}, {"timestamp": "2026-10-23T03:00:11Z", "date_only": false, "value": "2026-10-23T03:00:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/q-megZov9SeqFNZWrwJzZD5kb8NuC33s4xI72kio24d4xDE", "record": "CVE-2021-31728", "field": "creation_timestamp", "uuid": "b8daf5f9-472a-4b3a-a474-ef36e639a1bc", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-23T03:00:11Z", "date_only": false, "value": "2026-10-23T03:00:11.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/q-megZov9SeqFNZWrwJzZD5kb8NuC33s4xI72kio24d4xDE", "record": "CVE-2021-31728", "field": "creation_timestamp", "uuid": "00d363cb-de47-4f37-815b-15b7436068c2"}], "metrics": {"as_of": "2026-10-29T17:28:17.406Z", "anchors": {"origin": {"timestamp": "2021-05-17T12:06:57Z", "date_only": false, "value": "2021-05-17T12:06:57.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-31728", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2021-05-17T12:06:57Z", "date_only": false, "value": "2021-05-17T12:06:57.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-31728", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2024-02-17T14:55:47Z", "date_only": false, "value": "2024-02-17T14:55:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/3325", "record": "CVE-2021-31728", "field": "creation_timestamp", "uuid": "ac135e92-7746-4237-a6dc-325574596d98", "content": "#exploit\nCVE-2021-31727, CVE-2021-31728:\nVulnerability in zam64.sys, zam32.sys allowing ring 0 code execution\nhttps://github.com/irql0/CVE-2021-31728", "url": "https://t.me/CyberSecurityTechnologies/3325", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 86928530.0, "hours": 24146.81388888889, "days": 1006.1172453703704, "min_seconds": 86928530.0, "max_seconds": 86928530.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-05-17T12:06:57Z", "date_only": false, "value": "2021-05-17T12:06:57.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-31728", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-02-17T14:55:47Z", "date_only": false, "value": "2024-02-17T14:55:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/3325", "record": "CVE-2021-31728", "field": "creation_timestamp", "uuid": "ac135e92-7746-4237-a6dc-325574596d98", "content": "#exploit\nCVE-2021-31727, CVE-2021-31728:\nVulnerability in zam64.sys, zam32.sys allowing ring 0 code execution\nhttps://github.com/irql0/CVE-2021-31728", "url": "https://t.me/CyberSecurityTechnologies/3325", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 172041680.406291, "hours": 47789.355668414166, "days": 1991.2231528505904, "min_seconds": 172041680.406291, "max_seconds": 172041680.406291, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-05-17T12:06:57Z", "date_only": false, "value": "2021-05-17T12:06:57.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-31728", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T17:28:17.406Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 85113150.406291, "hours": 23642.541779525276, "days": 985.1059074802198, "min_seconds": 85113150.406291, "max_seconds": 85113150.406291, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-02-17T14:55:47Z", "date_only": false, "value": "2024-02-17T14:55:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/3325", "record": "CVE-2021-31728", "field": "creation_timestamp", "uuid": "ac135e92-7746-4237-a6dc-325574596d98", "content": "#exploit\nCVE-2021-31727, CVE-2021-31728:\nVulnerability in zam64.sys, zam32.sys allowing ring 0 code execution\nhttps://github.com/irql0/CVE-2021-31728", "url": "https://t.me/CyberSecurityTechnologies/3325", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-29T17:28:17.406Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}