CVE-2015-5601

CVE-2015-5601 affects edx-platform prior to 2015-07-20. A vulnerable endpoint (course import) mishandles .tar.gz files, allowing code execution by privileged users. Documents provide CVSS details (2.0/6.5; 3.0/8.8) indicating impact on confidentiality, integrity, and availability (all high/partia...

CVE-2015-6253

edx-platform before 2015-08-17 allows XSS in the Studio listing of courses...

CVE-2015-6253

CVE-2015-6253 affects edx-platform prior to 2015-08-17 and enables Cross-Site Scripting in the Studio listing of courses. Exploitation details are not provided in the connected documents, and no remediation steps are specified here.

CVE-2015-6960

CVE-2015-6960 affects edx-platform prior to 2015-09-17 and allows cross-site scripting via a team name. The connected records corroborate this XSS vulnerability; however, the provided documents do not specify affected versions beyond the date, root cause details, exploit steps, or remediation/pat...

CVE-2015-9288

CVE-2015-9288 affects the Unity Web Player plugin. Affected versions include the plugin prior to 4.6.6f2 and 5.x prior to 5.0.3f2. The vulnerability allows attackers to read messages or access online services using a victim’s credentials, implying credential-access leakage via the plugin. Connect...

CVE-2015-9289

creationtimestamp| type| source ---|---|--- 2019-07-28 03:25:09+00:00| seen| https://t.me/cibsecurity/5753...

CVE-2015-9289

In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. The maximum size for a DiSEqC command is 6, according to the userspace API. However, the code allows larger values such as 23...

CVE-2015-9289

In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. The maximum size for a DiSEqC command is 6, according to the userspace API. However, the code allows larger values such as 23...

Tufin Secure Change Remote Code Execution Exploit

Tufin SecureChange uses Richfaces version 4.3.5 which suffers from a remote code execution vulnerability. Product: Secure Change Vendor: Tufin Subject: Tufin SecureChange uses Richfaces 4.3.5, vulnerable to CVE-2015-0279 unauthenticated RCE CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H base score...

CVE-2019-12815

An arbitrary file copy vulnerability in modcopy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306...

CVE-2019-12815

An arbitrary file copy vulnerability in modcopy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306...

CVE-2019-12815

An arbitrary file copy vulnerability in modcopy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306...

CVE-2015-7882

creationtimestamp| type| source ---|---|--- 2019-07-19 20:33:38+00:00| seen| https://t.me/cibsecurity/5618 2026-09-01 20:01:06+00:00| seen| https://t.me/hackingAttack/85770 2026-09-02 01:01:27+00:00| seen| https://t.me/hackingAttack/85770 2026-09-05 00:00:11+00:00| published-proof-of-concept|...

CVE-2015-7882

Improper handling of LDAP authentication in MongoDB Server versions 3.0.0 to 3.0.6 allows an unauthenticated client to gain unauthorized access...

CVE-2015-7882 Authentication bypass when using LDAP authentication in MongoDB Enterprise Server

Improper handling of LDAP authentication in MongoDB Server versions 3.0.0 to 3.0.6 allows an unauthenticated client to gain unauthorized access...

CVE-2015-7882

CVE-2015-7882 affects MongoDB Server 3.0.0–3.0.6, where improper handling of LDAP authentication can allow an unauthenticated client to gain unauthorized access. The CNVD entry confirms versions 3.0.0 through 3.0.6 are vulnerable and can lead to unauthorized access; other connected records reiter...

Slack data breach: Company resets thousands of passwords

By Uzair Amir Slack data breach took place in 2015 but the company became aware of the incident recently through its bug bounty program. Slack has suffered a data breach in which thousands of users have been affected. As a result, the company is resetting passwords of thousands of impacted users...

Slack Initiates Mass Password Reset

Popular workspace collaboration platform Slack is in the middle of asking tens of thousands of users to reset their passwords after a security breach. The move is actually in response to new information that has come to light regarding a 2015 compromise, when hackers infiltrated Slack’s networks ...

Slack Resets Passwords For Users Who Hadn't Changed It Since 2015 Breach

If you use Slack, a popular cloud-based team collaboration server, and recently received an email from the company about a security incident, don't panic and read this article before taking any action. Slack has been sending a "password reset" notification email to all those users who had not yet...

Oracle Business Intelligence Publisher Multiple Vulnerabilities (Jul 2019 CPU)

The version of Oracle Business Intelligence Publisher running on the remote host is 11.1.1.9.x prior to 11.1.1.9.190716 or 12.2.1.4.x prior to 12.2.1.4.190716. It is, therefore, affected by multiple vulnerabilities as noted in the July 2019 Critical Patch Update advisory: - An unspecified...