Lucene search
K

33 matches found

Circl
Circl
added 2026/02/24 4:38 p.m.3 views

CVE-2026-27515

creationtimestamp| type| source ---|---|--- 2026-02-24 16:38:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmm3ketbj2c 2026-02-25 18:20:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfpcaxsjfl2e...

9.3CVSS4.7AI score0.00321EPSS
Exploits0References2
GithubExploit
GithubExploit
added 2025/12/30 4:31 a.m.403 views

Exploit for Improper Neutralization of Wildcards or Matching Symbols in Laravel Framework

CVE-2025-27515 Proof of Concept A practical demonstration of...

9.8CVSS7.2AI score0.00691EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/23 9:38 a.m.4 views

CVE-2024-27515

Osclass 5.1.2 is vulnerable to SQL Injection...

7.2CVSS7.5AI score0.00611EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/03/07 7:37 p.m.22 views

CVE-2025-27515

Laravel is a web application framework. When using wildcard validation to validate a given file or image field files., a user-crafted malicious request could potentially bypass the validation rules. This vulnerability is fixed in 11.44.1 and 12.1.1...

9.8CVSS7AI score0.00691EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.19 views

Linux Distros Unpatched Vulnerability : CVE-2025-27515

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Laravel is a web application framework. When using wildcard validation to validate a given file or image field files., a user-crafted malicious request could...

9.8CVSS5.5AI score0.00691EPSS
Exploits1References2
Circl
Circl
added 2025/03/05 10:47 p.m.0 views

CVE-2025-27515

creationtimestamp| type| source ---|---|--- 2025-03-05 22:47:44+00:00| seen| https://t.me/cvedetector/19655 2025-09-10 00:16:41+00:00| published-proof-of-concept| Telegram/lVThFqOS-THLS2nDZbOqeID9ULvGmdMtchXCk4uxGtisKK 2025-09-10 00:16:42+00:00| seen|...

9.8CVSS5.7AI score0.00691EPSS
Exploits1References1
NVD
NVD
added 2025/03/05 7:15 p.m.15 views

CVE-2025-27515

Laravel is a web application framework. When using wildcard validation to validate a given file or image field files., a user-crafted malicious request could potentially bypass the validation rules. This vulnerability is fixed in 11.44.1 and 12.1.1...

9.8CVSS0.00691EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/03/05 6:45 p.m.76 views

CVE-2025-27515 Laravel has a File Validation Bypass

Laravel is a web application framework. When using wildcard validation to validate a given file or image field files., a user-crafted malicious request could potentially bypass the validation rules. This vulnerability is fixed in 11.44.1 and 12.1.1...

6.9CVSS0.00691EPSS
Exploits1References2
CVE
CVE
added 2025/03/05 6:45 p.m.169 views

CVE-2025-27515

CVE-2025-27515 affects Laravel: wildcard file/image validation (files.*) can bypass rules during upload. Root cause is improper handling of array-based uploads, enabling a user-controlled bypass. Fixed in Laravel releases 11.44.1 and 12.1.1. A PoC exploiting a wildcard validation bypass exists in...

9.8CVSS7AI score0.00691EPSS
Exploits1References2Affected Software1
Debian CVE
Debian CVE
added 2025/03/05 6:45 p.m.13 views

CVE-2025-27515

Laravel is a web application framework. When using wildcard validation to validate a given file or image field files., a user-crafted malicious request could potentially bypass the validation rules. This vulnerability is fixed in 11.44.1 and 12.1.1...

9.8CVSS5.3AI score0.00691EPSS
Exploits1
Circl
Circl
added 2024/02/28 2:27 p.m.0 views

CVE-2024-27515

creationtimestamp| type| source ---|---|--- 2024-02-28 14:27:15+00:00| seen| https://t.me/ctinow/195482 2024-02-28 14:34:06+00:00| seen| https://t.me/ctinow/195497...

7.2CVSS4.8AI score0.00611EPSS
Exploits1References2
NVD
NVD
added 2024/02/28 1:15 p.m.12 views

CVE-2024-27515

Osclass 5.1.2 is vulnerable to SQL Injection...

7.2CVSS7.1AI score0.00611EPSS
Exploits1References1
OSV
OSV
added 2024/02/28 1:15 p.m.5 views

CVE-2024-27515

Osclass 5.1.2 is vulnerable to SQL Injection...

7.2CVSS7.4AI score
Exploits0References1
Cvelist
Cvelist
added 2024/02/28 12:0 a.m.14 views

CVE-2024-27515

Osclass 5.1.2 is vulnerable to SQL Injection...

7.3AI score0.00611EPSS
Exploits1References1
Cvelist
Cvelist
added 2023/08/11 2:37 a.m.14 views

CVE-2023-27515

Cross-site scripting XSS for the IntelR DSA software before version 23.1.9 may allow unauthenticated user to potentially enable escalation of privilege via network access...

8.1CVSS9.1AI score0.00491EPSS
Exploits0References1
CVE
CVE
added 2023/08/11 2:37 a.m.43 views

CVE-2023-27515

CVE-2023-27515 affects Intel® DSA software prior to version 23.1.9. The issue is a cross-site scripting (XSS) vulnerability that could allow an unauthenticated user to escalate privileges over a network. Impact and exploit details are supported by multiple connected sources (NVD, Red Hat, Intel a...

9.6CVSS8.7AI score0.00491EPSS
Exploits0References1Affected Software1
Intel
Intel
added 2023/08/08 12:0 a.m.16 views

Intel® DSA Software Advisory

Summary: A potential security vulnerability in the Intel® Driver and Support Assistant DSA software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-27515 Description: Cross-site scripting XSS f...

9.6CVSS8.6AI score0.00491EPSS
Exploits0
Debian
Debian
added 2023/02/23 12:55 a.m.49 views

[SECURITY] [DLA 3336-1] node-url-parse security update

Debian LTS Advisory DLA-3336-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin February 23, 2023 https://wiki.debian.org/LTS Package : node-url-parse Version : 1.2.0-2+deb10u2 CVE ID : CVE-2021-3664 CVE-2021-27515 CVE-2022-0512 CVE-2022-0639 CVE-2022-0686...

9.8CVSS6.6AI score0.0222EPSS
Exploits6
OpenVAS
OpenVAS
added 2023/02/23 12:0 a.m.21 views

Debian: Security Advisory (DLA-3336-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.3AI score0.0222EPSS
Exploits6References5
RedhatCVE
RedhatCVE
added 2021/08/03 6:24 a.m.71 views

CVE-2021-3664

An input validation flaw was found in the nodejs url-parse library, which incorrectly parses a URL that contains backslashes. This flaw allows an attacker to specify a relative URL and cause the browser to redirect to a malicious website. The highest threat from this vulnerability is to integrity...

5.3CVSS4.1AI score0.01964EPSS
Exploits2References4
Rows per page
Query Builder