Lucene search
+L

14 matches found

Circl
Circl
added 2026/07/12 11:33 a.m.15 views

CVE-2026-15495

creationtimestamp| type| source ---|---|--- 2026-07-12 11:33:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh3fua6jo2z 2026-07-14 00:37:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkxoxfy4y27...

6.5CVSS6.6AI score0.02676EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/12 11:16 a.m.17 views

CVE-2026-15495

A vulnerability has been found in SonicCloudOrg sonic-agent up to 2.7.2. The affected element is an unknown function of the file AndroidWSServer.java of the component Android WebSocket Server. The manipulation of the argument path leads to os command injection. The attack can be initiated remotel...

6.5CVSS0.02676EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/12 10:45 a.m.35 views

CVE-2026-15495

The vulnerability CVE-2026-15495 affects SonicCloudOrg sonic-agent up to version 2.7.2, specifically in the Android WebSocket Server component’s AndroidWSServer.java. The issue arises from manipulating the path argument, causing os command injection. It is remotely exploitable and has public disc...

6.5CVSS6.3AI score0.02676EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/01/13 10:53 p.m.7 views

CVE-2025-15495

A vulnerability was found in BiggiDroid Simple PHP CMS 1.0. This impacts an unknown function of the file /admin/editsite.php. The manipulation of the argument image results in unrestricted upload. The attack can be launched remotely. The exploit has been made public and could be used. The vendor...

7.2CVSS6.6AI score0.00428EPSS
SaveExploits2References1
Circl
Circl
added 2026/01/09 7:29 p.m.14 views

CVE-2025-15495

creationtimestamp| type| source ---|---|--- 2026-01-09 19:29:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbza7b3pba2c...

7.2CVSS5.8AI score0.00428EPSS
SaveExploits2References1
OSV
OSV
added 2026/01/09 5:15 p.m.10 views

CVE-2025-15495

A vulnerability was found in BiggiDroid Simple PHP CMS 1.0. This impacts an unknown function of the file /admin/editsite.php. The manipulation of the argument image results in unrestricted upload. The attack can be launched remotely. The exploit has been made public and could be used. The vendor...

7.2CVSS5.5AI score0.00428EPSS
SaveExploits2References6
Cvelist
Cvelist
added 2026/01/09 5:02 p.m.38 views

CVE-2025-15495 BiggiDroid Simple PHP CMS editsite.php unrestricted upload

A vulnerability was found in BiggiDroid Simple PHP CMS 1.0. This impacts an unknown function of the file /admin/editsite.php. The manipulation of the argument image results in unrestricted upload. The attack can be launched remotely. The exploit has been made public and could be used. The vendor...

5.8CVSS0.00428EPSS
SaveExploits2References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.15 views

EUVD-2018-10578

Malware in sbrugna...

8.6CVSS8.8AI score0.01503EPSS
SaveExploits1References2
CVE
CVE
added 2021/07/15 2:19 p.m.56 views

CVE-2020-15495

CVE-2020-15495 affects Acronis True Image for macOS (2019 update 1 through 2020). The root cause is an insecure XPC service configuration that can enable local privilege escalation. The available sources validate the affected product and the local attack surface, but do not provide exploit detail...

7.8CVSS7.5AI score0.00256EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2018/10/31 5:29 a.m.17 views

CVE-2018-18867

An SSRF issue was discovered in tecrail Responsive FileManager 9.13.4 via the upload.php url parameter. NOTE: this issue exists because of an incomplete fix for CVE-2018-15495...

8.6CVSS7AI score
SaveExploits0References1
OSV
OSV
added 2018/08/18 2:29 a.m.24 views

CVE-2018-15495

/filemanager/upload.php in Responsive FileManager before 9.13.3 allows Directory Traversal and SSRF because the url parameter is used directly in a curlexec call, as demonstrated by a file:///etc/passwd value...

7.5CVSS6.8AI score
SaveExploits0References2
CVE
CVE
added 2018/08/18 2:00 a.m.49 views

CVE-2018-15495

CVE-2018-15495 affects Responsive FileManager prior to 9.13.3. The vulnerability allows Directory Traversal and SSRF because the url parameter is used directly in a curl_exec call, demonstrated by file:///etc/passwd. Several connected records (OSV and related entries) note that a fix existed but ...

7.5CVSS7.8AI score0.02373EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2018/01/23 5:00 p.m.12 views

CVE-2017-15495

...

SaveExploits0
CVE
CVE
added 2018/01/23 5:00 p.m.24 views

CVE-2017-15495

CVE-2017-15495 is rejected/not used and does not represent an active vulnerability entry.

7.4AI score
SaveExploits0
Rows per page
Query Builder