5 matches found
CVE-2025-15561 Local Privilege Escalation in NesterSoft WorkTime
An attacker can exploit the update behavior of the WorkTime monitoring daemon to elevate privileges on the local system to NT Authority\SYSTEM. A malicious executable must be named WTWatch.exe and dropped in the C:\ProgramData\wta\ClientExe directory, which is writable by "Everyone". The...
5.8AI score0.0012EPSS
SaveExploits0References1
EUVD-2022-15561
Malicious code in bioql PyPI...
5.9CVSS6.6AI score0.00931EPSS
SaveExploits1References9
CVE-2019-15561
CVE-2019-15561 affects FlashLingo prior to 2019-06-12, with a SQL injection flaw related to the internal components flashlingo.js and db.js. The available documents confirm an injectable condition enabling SQL commands, but they do not provide concrete information about affected versions beyond t...
9.8CVSS9.5AI score0.01371EPSS
SaveExploits0References1Affected Software1
20