CVE-2026-9015

creationtimestamp| type| source ---|---|--- 2026-05-28 12:08:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvyejj6hv2e 2026-09-29 12:47:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117354399908091855...

EUVD-2025-9015

Malicious code in bioql PyPI...

MAL-2025-9015 Malicious code in @malware-test-tossy-beany-ryals-makos/test-mlw3-tossy-beany-ryals-makos (npm)

The package @malware-test-tossy-beany-ryals-makos/test-mlw3-tossy-beany-ryals-makos was found to contain malicious code...

CVE-2024-9015

creationtimestamp| type| source ---|---|--- 2025-02-11 02:20:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulvj52rj23...

CVE-2024-22894

CVE-2024-22894 affects AIT-Deutschland Alpha Innotec Heatpumps (V2.88.3+, V3.89.0+, V4.81.3+) and Novelan Heatpumps (V2.88.3+, V3.89.0+, V4.81.3+). The root cause is hardcoded credentials in the wp2reg-V3.88.0-9015 file, enabling remote attackers to execute arbitrary code via the password compone...

SUSE CVE-2016-9015

Versions 1.17 and 1.18 of the Python urllib3 library suffer from a vulnerability that can cause them, in certain configurations, to not correctly validate TLS certificates. This places users of the library with those configurations at risk of man-in-the-middle and information leakage attacks. Thi...

Mageia: Security Advisory (MGASA-2014-0492)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2019:0139-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-9015

...

CVE-2017-9015

CVE-2017-9015 is rejected/not used and does not represent an active vulnerability entry.

CVE-2020-9015

creationtimestamp| type| source ---|---|--- 2020-06-16 12:00:47+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/ssh/aristatacplusshell.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:32+00:00| seen|...

Arista Restricted Shell Escape / Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'net/ssh' require 'net/ssh/commandstream' class MetasploitModule 'Arista restricted shell escape with privesc', 'Description' = %q This exploit module takes...

Arista Restricted Shell Escape / Privilege Escalation Exploit

This Metasploit module takes advantage of a poorly configured TACACS+ config, Arista's bash shell, and a TACACS+ read-only account to achieve privilege escalation. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework requi...

Arista restricted shell escape (with privesc)

This exploit module takes advantage of a poorly configured TACACS+ config, Arista's bash shell and TACACS+ read-only account to privilage escalate. A CVSS v3 base score of 9.8 has been assigned. Module Options msf use exploit/unix/ssh/arista/tacplusshell msf undefinedtacplusshell show actions...

CVE-2019-9015

CVE-2019-9015 affects MOPCMS up to 2018-11-30. A path traversal vulnerability in the “column management” function allows unverified paths to be added to a column, enabling an attacker to delete the corresponding directory when a column is removed, potentially deleting parts or the entire website....

openSUSE Security Update : python-urllib3 (openSUSE-2019-159)

This update for python-urllib3 fixes the following issues : python-urllib3 was updated to version 1.22 fate326733, bsc1110422 and contains new features and lots of bugfixes : The full changelog can be found on : https://github.com/Lukasa/urllib3/blob/1.22/CHANGES.rst Security issues fixed : -...

CVE-2018-9015

dsmall v20180320 allows XSS via the public/index.php/home/predeposit/index.html pdrsn parameter aka the CMS search box...

CVE-2018-9015

CVE-2018-9015 affects dsmall v20180320, with a cross-site scripting (XSS) vulnerability exploitable via the public/index.php/home/predeposit/index.html page’s pdr_sn parameter (the CMS search box). The issue stems from unsanitized input in the pdr_sn field, enabling injection of arbitrary web scr...

CVE-2016-9015

CVE-2016-9015 affects Python urllib3 versions 1.17 and 1.18 when using PyOpenSSL with OpenSSL 1.1.0; in such configurations TLS certificate validation can be bypassed, enabling MITM and information leakage. The issue is considered low impact due to the very specific configuration. remediation fro...

pyupdater (2.1.7) potentially affected by CVE-2016-9015 via urllib3 (1.18.0)

urllib3 PYPI version 1.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - pyupdater 2.1.7 Source cves: CVE-2016-9015 Source advisory: MEND:CVE-2016-9015...