Lucene search
+L

34 matches found

Kitploit
Kitploit
•added 2026/09/25 2:29 p.m.•14 views

EXPLOIT-CVE-2025-27515

CVE-2025-27515 Proof of Concept A practical demonstration of CVE-2025-27515 , a file upload validation bypass vulnerability in Laravel Framework ≤ 12.0.0. Vulnerability Overview CVE-2025-27515 is a validation bypass that allows attackers to circumvent file upload restrictions when Laravel...

9.8CVSS7.6AI score0.00749EPSS
SaveExploits1
Circl
Circl
•added 2026/02/24 4:38 p.m.•16 views

CVE-2026-27515

creationtimestamp| type| source ---|---|--- 2026-02-24 16:38:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmm3ketbj2c 2026-02-25 18:20:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfpcaxsjfl2e...

9.3CVSS4.7AI score0.00466EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2025/12/30 4:31 a.m.•510 views

Exploit for Improper Neutralization of Wildcards or Matching Symbols in Laravel Framework

CVE-2025-27515 Proof of Concept A practical demonstration of...

9.8CVSS7.2AI score0.00749EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/23 9:38 a.m.•16 views

CVE-2024-27515

Osclass 5.1.2 is vulnerable to SQL Injection...

7.2CVSS7.5AI score0.00611EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/03/07 7:37 p.m.•36 views

CVE-2025-27515

Laravel is a web application framework. When using wildcard validation to validate a given file or image field files., a user-crafted malicious request could potentially bypass the validation rules. This vulnerability is fixed in 11.44.1 and 12.1.1...

9.8CVSS7AI score0.00749EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/03/06 12:00 a.m.•21 views

Linux Distros Unpatched Vulnerability : CVE-2025-27515

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Laravel is a web application framework. When using wildcard validation to validate a given file or image field files., a user-crafted malicious request could...

9.8CVSS7.3AI score0.00749EPSS
SaveExploits1References2
Circl
Circl
•added 2025/03/05 10:47 p.m.•12 views

CVE-2025-27515

creationtimestamp| type| source ---|---|--- 2025-03-05 22:47:44+00:00| seen| https://t.me/cvedetector/19655 2025-09-10 00:16:41+00:00| published-proof-of-concept| Telegram/lVThFqOS-THLS2nDZbOqeID9ULvGmdMtchXCk4uxGtisKK 2025-09-10 00:16:42+00:00| seen|...

9.8CVSS5.7AI score0.00749EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/05 7:15 p.m.•56 views

CVE-2025-27515

Laravel is a web application framework. When using wildcard validation to validate a given file or image field files., a user-crafted malicious request could potentially bypass the validation rules. This vulnerability is fixed in 11.44.1 and 12.1.1...

9.8CVSS0.00749EPSS
SaveExploits1References2
CVE
CVE
•added 2025/03/05 6:45 p.m.•308 views

CVE-2025-27515

CVE-2025-27515 affects Laravel: wildcard file/image validation (files.*) can bypass rules during upload. Root cause is improper handling of array-based uploads, enabling a user-controlled bypass. Fixed in Laravel releases 11.44.1 and 12.1.1. A PoC exploiting a wildcard validation bypass exists in...

9.8CVSS7AI score0.00749EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2025/03/05 6:45 p.m.•140 views

CVE-2025-27515 Laravel has a File Validation Bypass

Laravel is a web application framework. When using wildcard validation to validate a given file or image field files., a user-crafted malicious request could potentially bypass the validation rules. This vulnerability is fixed in 11.44.1 and 12.1.1...

6.9CVSS0.00749EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2025/03/05 6:45 p.m.•94 views

CVE-2025-27515

Laravel is a web application framework. When using wildcard validation to validate a given file or image field files., a user-crafted malicious request could potentially bypass the validation rules. This vulnerability is fixed in 11.44.1 and 12.1.1...

9.8CVSS5.3AI score0.00749EPSS
SaveExploits1
Circl
Circl
•added 2024/02/28 2:27 p.m.•11 views

CVE-2024-27515

creationtimestamp| type| source ---|---|--- 2024-02-28 14:27:15+00:00| seen| https://t.me/ctinow/195482 2024-02-28 14:34:06+00:00| seen| https://t.me/ctinow/195497...

7.2CVSS4.8AI score0.00611EPSS
SaveExploits1References2
NVD
NVD
•added 2024/02/28 1:15 p.m.•29 views

CVE-2024-27515

Osclass 5.1.2 is vulnerable to SQL Injection...

7.2CVSS7.1AI score0.00611EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/02/28 12:00 a.m.•36 views

CVE-2024-27515

Osclass 5.1.2 is vulnerable to SQL Injection...

7.3AI score0.00611EPSS
SaveExploits1References1
OSV
OSV
•added 2024/02/28 12:00 a.m.•18 views

CVE-2024-27515

Osclass 5.1.2 is vulnerable to SQL Injection...

7.2CVSS7.4AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2023/08/11 2:37 a.m.•37 views

CVE-2023-27515

Cross-site scripting XSS for the IntelR DSA software before version 23.1.9 may allow unauthenticated user to potentially enable escalation of privilege via network access...

8.1CVSS9.1AI score0.0057EPSS
SaveExploits0References1
CVE
CVE
•added 2023/08/11 2:37 a.m.•58 views

CVE-2023-27515

CVE-2023-27515 affects Intel® DSA software prior to version 23.1.9. The issue is a cross-site scripting (XSS) vulnerability that could allow an unauthenticated user to escalate privileges over a network. Impact and exploit details are supported by multiple connected sources (NVD, Red Hat, Intel a...

9.6CVSS8.7AI score0.0057EPSS
SaveExploits0References1Affected Software1
Intel
Intel
•added 2023/08/08 12:00 a.m.•26 views

Intel® DSA Software Advisory

Summary: A potential security vulnerability in the Intel® Driver and Support Assistant DSA software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-27515 Description: Cross-site scripting XSS f...

9.6CVSS8.6AI score0.0057EPSS
SaveExploits0
Debian
Debian
•added 2023/02/23 12:55 a.m.•123 views

[SECURITY] [DLA 3336-1] node-url-parse security update

Debian LTS Advisory DLA-3336-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin February 23, 2023 https://wiki.debian.org/LTS Package : node-url-parse Version : 1.2.0-2+deb10u2 CVE ID : CVE-2021-3664 CVE-2021-27515 CVE-2022-0512 CVE-2022-0639 CVE-2022-0686...

9.8CVSS6.6AI score0.0222EPSS
SaveExploits6
OpenVAS
OpenVAS
•added 2023/02/23 12:00 a.m.•73 views

Debian: Security Advisory (DLA-3336-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.3AI score0.0222EPSS
SaveExploits6References5
Rows per page
Query Builder