Home Assistant HACS - Local File Inclusion

Home Assistant before 2021.1.3 lacks a protection layer against directory-traversal attacks in custom integrations, letting attackers access arbitrary files, exploit requires attacker to deploy malicious custom integration. id: CVE-2021-3152 info: name: Home Assistant HACS - Local File Inclusion...

pwnacle-fusion

pwnacle-fusion Automated exploit for Oracle Reports, CVE-2012-3153 / CVE-2012-3152 Credits to @misssudo for the disclosure Usage: ./pwnacle.rb targeturl payloadurl This exploit uses both CVEs to upload a .jsp shell from your payloadurl which is then reachable from /reports/images/shell.jsp...

mysslstrip

mysslstrip mysslstrip is a Python-based proof of concept showing how to MITM MySQL traffic and strip SSL/TLS, as per CVE-2015-3152. Usage mysslstrip.py -h -p LISTENPORT -i LISTENINTERFACE dest Example Output root@kitploit: root@duo1 python2.7 mysslstrip.py -p 3307 127.0.0.1:3306 2015-04-29...

GO-2026-4338 vulnerabilities

Vulnerabilities for packages: k6-fips, consul-k8s, nri-f5-fips, kubescape-operator-fips, restic-fips, temporal-ui-server, octo-sts, coredns-fips, linkerd2-cni-plugin, harbor-scanner-trivy-fips, fluxcd-kustomize-mutating-webhook, rabbitmq-cluster-operator, flannel-fips, clickhouse-operator-fips,...

SUSE SLES15: aws-nitro-enclaves-binaryblobs-upstream / aws-nitro-enclaves-cli / etc (SUSE-SU-2026:3152-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3152-1 advisory. This update for aws-nitro-enclaves-cli fixes the following issues - CVE-2026-41677: openssl: out-of-bounds read in PEM password...

CVE-2015-3152

creationtimestamp| type| source ---|---|--- 2026-05-22 12:39:13+00:00| seen| https://gist.github.com/rayepenber095/9265581788dc4d7e014abf52554d8b7f...

CVE-2021-3152

creationtimestamp| type| source ---|---|--- 2026-04-22 08:43:03+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-3152.yaml 2026-04-23 21:03:09+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mk6vwthxjx2x...

CVE-2026-3152

creationtimestamp| type| source ---|---|--- 2026-02-25 16:40:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfp4o5hsbh2h...

openSUSE Security Advisory (SUSE-SU-2026:0290-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2026:0280-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2026:0280-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EUVD-2015-8704

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2014-3152

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer underflow in the LCodeGen::PrepareKeyedOperand function in arm/lithium-codegen-arm.cc in Google V8 before 3.25.28.16, as used in Google Chrome before...

CVE-2021-3152

Home Assistant before 2021.1.3 does not have a protection layer that can help to prevent directory-traversal attacks against custom integrations. NOTE: the vendor's perspective is that the vulnerability itself is in custom integrations written by third parties, not in Home Assistant; however, Hom...

RHEL 6 / 7 : mariadb55-mariadb (RHSA-2015:1647)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1647 advisory. MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. It was found that the MySQL client...

CVE-2025-3152

creationtimestamp| type| source ---|---|--- 2025-04-03 08:34:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10191 2025-04-03 11:03:05+00:00| seen| https://t.me/cvedetector/21949...

CVE-2025-3152

A vulnerability classified as problematic has been found in caipeichao ThinkOX 1.0. This affects an unknown part of the file /ThinkOX-master/index.php?s=/Weibo/Index/search.html of the component Search. The manipulation of the argument keywords leads to cross site scripting. It is possible to...

CVE-2025-3152 caipeichao ThinkOX Search search.html cross site scripting

A vulnerability classified as problematic has been found in caipeichao ThinkOX 1.0. This affects an unknown part of the file /ThinkOX-master/index.php?s=/Weibo/Index/search.html of the component Search. The manipulation of the argument keywords leads to cross site scripting. It is possible to...

CVE-2025-3152 caipeichao ThinkOX Search search.html cross site scripting

A vulnerability classified as problematic has been found in caipeichao ThinkOX 1.0. This affects an unknown part of the file /ThinkOX-master/index.php?s=/Weibo/Index/search.html of the component Search. The manipulation of the argument keywords leads to cross site scripting. It is possible to...

CVE-2025-3152

CVE-2025-3152 affects Caipeichao ThinkOX 1.0, specifically the Search component at /ThinkOX-master/index.php?s=/Weibo/Index/search.html. The vulnerability arises from manipulation of the keywords argument, enabling cross-site scripting. It can be triggered remotely and the exploit has been disclo...