Lucene search
+L

32 matches found

Circl
Circl
added 2026/05/28 12:08 p.m.17 views

CVE-2026-9015

creationtimestamp| type| source ---|---|--- 2026-05-28 12:08:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvyejj6hv2e...

4.3CVSS5.8AI score0.003EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2025-9015

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.00242EPSS
SaveExploits0References3
OSV
OSV
added 2025/08/14 6:52 p.m.3 views

MAL-2025-9015 Malicious code in @malware-test-tossy-beany-ryals-makos/test-mlw3-tossy-beany-ryals-makos (npm)

The package @malware-test-tossy-beany-ryals-makos/test-mlw3-tossy-beany-ryals-makos was found to contain malicious code...

7.2AI score
SaveExploits0
Circl
Circl
added 2025/02/11 2:20 a.m.7 views

CVE-2024-9015

creationtimestamp| type| source ---|---|--- 2025-02-11 02:20:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulvj52rj23...

7AI score
SaveExploits0References1
CVE
CVE
added 2024/01/30 12:00 a.m.112 views

CVE-2024-22894

CVE-2024-22894 affects AIT-Deutschland Alpha Innotec Heatpumps (V2.88.3+, V3.89.0+, V4.81.3+) and Novelan Heatpumps (V2.88.3+, V3.89.0+, V4.81.3+). The root cause is hardcoded credentials in the wp2reg-V3.88.0-9015 file, enabling remote attackers to execute arbitrary code via the password compone...

6.8CVSS7.2AI score0.00731EPSS
SaveExploits1References2Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 4:56 a.m.8 views

SUSE CVE-2016-9015

Versions 1.17 and 1.18 of the Python urllib3 library suffer from a vulnerability that can cause them, in certain configurations, to not correctly validate TLS certificates. This places users of the library with those configurations at risk of man-in-the-middle and information leakage attacks. Thi...

3.7CVSS6.6AI score0.00775EPSS
SaveExploits0References15
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.37 views

Mageia: Security Advisory (MGASA-2014-0492)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS6.3AI score0.82234EPSS
SaveExploits3References9
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.21 views

SUSE: Security Advisory (SUSE-SU-2019:0139-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.7CVSS4.3AI score0.00775EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2020/08/17 2:10 p.m.11 views

CVE-2017-9015

...

SaveExploits0
CVE
CVE
added 2020/08/17 2:10 p.m.30 views

CVE-2017-9015

CVE-2017-9015 is rejected/not used and does not represent an active vulnerability entry.

7.3AI score
SaveExploits0
Circl
Circl
added 2020/06/16 12:00 p.m.27 views

CVE-2020-9015

creationtimestamp| type| source ---|---|--- 2020-06-16 12:00:47+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/ssh/aristatacplusshell.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:32+00:00| seen|...

9.8CVSS9.2AI score0.16464EPSS
SaveExploits4References1
Packet Storm
Packet Storm
added 2020/06/16 12:00 a.m.683 views

Arista Restricted Shell Escape / Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'net/ssh' require 'net/ssh/commandstream' class MetasploitModule 'Arista restricted shell escape with privesc', 'Description' = %q This exploit module takes...

7.5CVSS0.8AI score0.16464EPSS
SaveExploits4
zdt
zdt
added 2020/06/16 12:00 a.m.135 views

Arista Restricted Shell Escape / Privilege Escalation Exploit

This Metasploit module takes advantage of a poorly configured TACACS+ config, Arista's bash shell, and a TACACS+ read-only account to achieve privilege escalation. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework requi...

9.8CVSS0.7AI score0.16464EPSS
SaveExploits4
Metasploit
Metasploit
added 2020/02/02 12:00 a.m.148 views

Arista restricted shell escape (with privesc)

This exploit module takes advantage of a poorly configured TACACS+ config, Arista's bash shell and TACACS+ read-only account to privilage escalate. A CVSS v3 base score of 9.8 has been assigned. Module Options msf use exploit/unix/ssh/arista/tacplusshell msf undefinedtacplusshell show actions...

9.8CVSS8.3AI score0.16464EPSS
SaveExploits4
CVE
CVE
added 2019/02/22 4:00 p.m.52 views

CVE-2019-9015

CVE-2019-9015 affects MOPCMS up to 2018-11-30. A path traversal vulnerability in the “column management” function allows unverified paths to be added to a column, enabling an attacker to delete the corresponding directory when a column is removed, potentially deleting parts or the entire website....

9.1CVSS7.7AI score0.01891EPSS
SaveExploits1References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/02/13 12:00 a.m.56 views

openSUSE Security Update : python-urllib3 (openSUSE-2019-159)

This update for python-urllib3 fixes the following issues : python-urllib3 was updated to version 1.22 fate326733, bsc1110422 and contains new features and lots of bugfixes : The full changelog can be found on : https://github.com/Lukasa/urllib3/blob/1.22/CHANGES.rst Security issues fixed : -...

3.7CVSS5.6AI score0.00775EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2018/03/25 6:29 p.m.3 views

CVE-2018-9015

dsmall v20180320 allows XSS via the public/index.php/home/predeposit/index.html pdrsn parameter aka the CMS search box...

5.4CVSS5.3AI score0.00548EPSS
SaveExploits1References2
CVE
CVE
added 2018/03/25 6:00 p.m.50 views

CVE-2018-9015

CVE-2018-9015 affects dsmall v20180320, with a cross-site scripting (XSS) vulnerability exploitable via the public/index.php/home/predeposit/index.html page’s pdr_sn parameter (the CMS search box). The issue stems from unsanitized input in the pdr_sn field, enabling injection of arbitrary web scr...

5.4CVSS5.2AI score0.00548EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2017/01/11 4:00 p.m.151 views

CVE-2016-9015

CVE-2016-9015 affects Python urllib3 versions 1.17 and 1.18 when using PyOpenSSL with OpenSSL 1.1.0; in such configurations TLS certificate validation can be bypassed, enabling MITM and information leakage. The issue is considered low impact due to the very specific configuration. remediation fro...

3.7CVSS3.7AI score0.00775EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2016/10/28 12:00 a.m.30 views

FreeBSD : urllib3 -- certificate verification failure (c5c6e293-9cc7-11e6-823f-b8aeed92ecc4)

urllib3 reports : CVE-2016-9015: Certification verification failure %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and contributors Redistribution and...

3.7CVSS5.5AI score0.00775EPSS
SaveExploits0References3
Rows per page
Query Builder