5 matches found
CVE-2025-15561 Local Privilege Escalation in NesterSoft WorkTime
An attacker can exploit the update behavior of the WorkTime monitoring daemon to elevate privileges on the local system to NT Authority\SYSTEM. A malicious executable must be named WTWatch.exe and dropped in the C:\ProgramData\wta\ClientExe directory, which is writable by "Everyone". The...
5.4AI score0.00104EPSS
SaveExploits0References1
EUVD-2022-15561
Malicious code in bioql PyPI...
5.9CVSS7.4AI score0.00935EPSS
SaveExploits1References9
CVE-2019-15561
CVE-2019-15561 affects FlashLingo prior to 2019-06-12, with a SQL injection flaw related to the internal components flashlingo.js and db.js. The available documents confirm an injectable condition enabling SQL commands, but they do not provide concrete information about affected versions beyond t...
9.8CVSS9.5AI score0.01371EPSS
SaveExploits0References1Affected Software1
20