{"vulnerability": "CVE-2021-29921", "sightings": [{"uuid": "2cdef152-5ef9-4dfa-9422-94ab88246438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-29921", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "a1efeda4-2c08-4f5e-af62-5dceb17dff4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29921", "type": "seen", "source": "https://t.me/cKure/5112", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Python also impacted by critical IP address validation vulnerability. CVE-2021-29921\n\nhttps://www.bleepingcomputer.com/news/security/python-also-impacted-by-critical-ip-address-validation-vulnerability/", "creation_timestamp": "2021-05-01T13:45:49.000000Z"}, {"uuid": "00b45a46-6670-4923-a661-f4f96a782a2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29921", "type": "seen", "source": "https://t.me/BleepingComputer/9649", "content": "Python also impacted by critical IP address validation vulnerability\n\nPython 3.3 standard library 'ipaddress' suffers from a critical IP address vulnerability (CVE-2021-29921) identical to the flaw that was reported in the \"netmask\" library earlier this year. [...]\n\nhttps://www.bleepingcomputer.com/news/security/python-also-impacted-by-critical-ip-address-validation-vulnerability/", "creation_timestamp": "2021-05-01T14:16:07.000000Z"}, {"uuid": "c9eafff8-57d5-4803-8ef2-9ef48082ab75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29921", "type": "published-proof-of-concept", "source": "https://t.me/pwnwiki_zhchannel/284", "content": "CVE-2021-29921  python3.8.0-v3.10 SSRF&RFI\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-29921_python3.8.0-v3.10_SSRF%26RFI%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-05-01T03:03:16.000000Z"}, {"uuid": "375cd9ad-7b3c-4bf9-b7aa-003b6624cb08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29921", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3262", "content": "CVE-2021-29921 - python stdlib \"ipaddress\" - Improper Input Validation of octal literals in python 3.8.0 thru v3.10 results in indeterminate SSRF/RFI vulnerabilities. - \"ipaddress leading zeros in IPv4 address\" (PoC)\nhttps://sick.codes/sick-2021-014", "creation_timestamp": "2021-05-01T12:41:31.000000Z"}, {"uuid": "10275e90-91c4-488b-a2fa-cecbd341051f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29921", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1131", "content": "CVE-2021-29921 \u2013 python stdlib \u201cipaddress\u201d \u2013 Improper Input Validation of octal literals in python 3.8.0 thru v3.10 results in indeterminate SSRF & RFI vulnerabilities https://sick.codes/sick-2021-014/", "creation_timestamp": "2026-08-03T11:08:45.018792Z"}, {"uuid": "c24e78d3-29c0-4d60-bf67-7514786edd02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29921", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1131", "content": "CVE-2021-29921 \u2013 python stdlib \u201cipaddress\u201d \u2013 Improper Input Validation of octal literals in python 3.8.0 thru v3.10 results in indeterminate SSRF & RFI vulnerabilities https://sick.codes/sick-2021-014/", "creation_timestamp": "2026-08-04T00:00:41.749174Z"}, {"uuid": "97ed38f3-5685-4a0a-aa42-763e9e61e2db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29921", "type": "seen", "source": "https://t.me/reverseame/1131", "content": "CVE-2021-29921 \u2013 python stdlib \u201cipaddress\u201d \u2013 Improper Input Validation of octal literals in python 3.8.0 thru v3.10 results in indeterminate SSRF & RFI vulnerabilities https://sick.codes/sick-2021-014/", "creation_timestamp": "2026-07-29T12:02:58.385047Z"}, {"uuid": "3e69072b-24fa-4f72-b64a-53e79ca8bd68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29921", "type": "seen", "source": "https://t.me/reverseame/1131", "content": "CVE-2021-29921 \u2013 python stdlib \u201cipaddress\u201d \u2013 Improper Input Validation of octal literals in python 3.8.0 thru v3.10 results in indeterminate SSRF & RFI vulnerabilities https://sick.codes/sick-2021-014/", "creation_timestamp": "2026-07-30T00:02:48.011764Z"}, {"uuid": "be2c5c40-c39d-43c0-bdbc-dcee388e6a76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29921", "type": "seen", "source": "https://t.me/cissp/3085", "content": "Red Team Tactics:\n1. Red Team engagement platform with the goal of unifying offensive tools behind a simple UI\ud83d\ude0a\nhttps://github.com/KCarretto/paragon\n2. Bypass UAC by hijacking a DLL located in the Native Image Cache\nhttps://github.com/AzAgarampur/byeintegrity-uac#uacme\n\nMalware analysis:\n1. Ragnarok Ransomware\nhttps://labs.yarix.com/2021/04/malware-analysis-ragnarok-ransomware\n2. RotaJakiro: A secret backdoor with 0 VT detection\nhttps://blog.netlab.360.com/stealth_rotajakiro_backdoor_en\n\nexploit\nCVE-2021-30128:\nApache OFBiz has unsafe deserialization prior to 17.12.07 version (PoC)\nhttps://github.com/LioTree/CVE-2021-30128-EXP\n\nThreat Research:\n1. KDC Spoofing Vulnerability in F5 Big-IP (CVE-2021-23008)\ud83d\ude42\nhttps://www.silverfort.com/blog/silverfort-researchers-discover-kdc-spoofing-vulnerability-in-f5-big-ip-cve-2021-23008\n2. UNC2447 SOMBRAT/FIVEHANDS Ransomware:\ud83d\ude2d\nA Sophisticated Financial Threat\nhttps://www.fireeye.com/blog/threat-research/2021/04/unc2447-sombrat-and-fivehands-ransomware-sophisticated-financial-threat.html\n\nCVE-2021-29921 - python stdlib \"ipaddress\" - Improper Input Validation of octal literals in python 3.8.0 thru v3.10 results in indeterminate SSRF/RFI vulnerabilities. - \"ipaddress leading zeros in IPv4 address\" (PoC)\nhttps://sick.codes/sick-2021-014", "creation_timestamp": "2026-09-01T17:00:52.298215Z"}, {"uuid": "d073cb50-199f-47a6-8c9b-3a930bd0f236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29921", "type": "seen", "source": "https://t.me/cissp/3085", "content": "Red Team Tactics:\n1. Red Team engagement platform with the goal of unifying offensive tools behind a simple UI\ud83d\ude0a\nhttps://github.com/KCarretto/paragon\n2. Bypass UAC by hijacking a DLL located in the Native Image Cache\nhttps://github.com/AzAgarampur/byeintegrity-uac#uacme\n\nMalware analysis:\n1. Ragnarok Ransomware\nhttps://labs.yarix.com/2021/04/malware-analysis-ragnarok-ransomware\n2. RotaJakiro: A secret backdoor with 0 VT detection\nhttps://blog.netlab.360.com/stealth_rotajakiro_backdoor_en\n\nexploit\nCVE-2021-30128:\nApache OFBiz has unsafe deserialization prior to 17.12.07 version (PoC)\nhttps://github.com/LioTree/CVE-2021-30128-EXP\n\nThreat Research:\n1. KDC Spoofing Vulnerability in F5 Big-IP (CVE-2021-23008)\ud83d\ude42\nhttps://www.silverfort.com/blog/silverfort-researchers-discover-kdc-spoofing-vulnerability-in-f5-big-ip-cve-2021-23008\n2. UNC2447 SOMBRAT/FIVEHANDS Ransomware:\ud83d\ude2d\nA Sophisticated Financial Threat\nhttps://www.fireeye.com/blog/threat-research/2021/04/unc2447-sombrat-and-fivehands-ransomware-sophisticated-financial-threat.html\n\nCVE-2021-29921 - python stdlib \"ipaddress\" - Improper Input Validation of octal literals in python 3.8.0 thru v3.10 results in indeterminate SSRF/RFI vulnerabilities. - \"ipaddress leading zeros in IPv4 address\" (PoC)\nhttps://sick.codes/sick-2021-014", "creation_timestamp": "2026-09-02T01:04:41.252569Z"}]}