CVE-2026-9015

creationtimestamp| type| source ---|---|--- 2026-05-28 12:08:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvyejj6hv2e...

EUVD-2025-9015

Malicious code in bioql PyPI...

MAL-2025-9015 Malicious code in @malware-test-tossy-beany-ryals-makos/test-mlw3-tossy-beany-ryals-makos (npm)

The package @malware-test-tossy-beany-ryals-makos/test-mlw3-tossy-beany-ryals-makos was found to contain malicious code...

CVE-2024-9015

creationtimestamp| type| source ---|---|--- 2025-02-11 02:20:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulvj52rj23...

CVE-2024-22894

CVE-2024-22894 affects AIT-Deutschland Alpha Innotec Heatpumps (V2.88.3+, V3.89.0+, V4.81.3+) and Novelan Heatpumps (V2.88.3+, V3.89.0+, V4.81.3+). The root cause is hardcoded credentials in the wp2reg-V3.88.0-9015 file, enabling remote attackers to execute arbitrary code via the password compone...

SUSE CVE-2016-9015

Versions 1.17 and 1.18 of the Python urllib3 library suffer from a vulnerability that can cause them, in certain configurations, to not correctly validate TLS certificates. This places users of the library with those configurations at risk of man-in-the-middle and information leakage attacks. Thi...

pyupdater (=2.1.7) potentially affected by CVE-2016-9015 via urllib3 (=1.18.0)

urllib3 PYPI version =1.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - pyupdater =2.1.7 Source cves: CVE-2016-9015 Source advisory: OSV:GHSA-V4W5-P2HG-8FH6...

Mageia: Security Advisory (MGASA-2014-0492)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2019:0139-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-9015

CVE-2017-9015 is rejected/not used and does not represent an active vulnerability entry.

CVE-2017-9015

...

CVE-2020-9015

creationtimestamp| type| source ---|---|--- 2020-06-16 12:00:47+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/ssh/aristatacplusshell.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:32+00:00| seen|...

Arista Restricted Shell Escape / Privilege Escalation Exploit

This Metasploit module takes advantage of a poorly configured TACACS+ config, Arista's bash shell, and a TACACS+ read-only account to achieve privilege escalation. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework requi...

Arista Restricted Shell Escape / Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'net/ssh' require 'net/ssh/commandstream' class MetasploitModule 'Arista restricted shell escape with privesc', 'Description' = %q This exploit module takes...

Arista restricted shell escape (with privesc)

This exploit module takes advantage of a poorly configured TACACS+ config, Arista's bash shell and TACACS+ read-only account to privilage escalate. A CVSS v3 base score of 9.8 has been assigned. This module requires Metasploit: https://metasploit.com/download Current source:...

CVE-2019-9015

CVE-2019-9015 affects MOPCMS up to 2018-11-30. A path traversal vulnerability in the “column management” function allows unverified paths to be added to a column, enabling an attacker to delete the corresponding directory when a column is removed, potentially deleting parts or the entire website....

openSUSE Security Update : python-urllib3 (openSUSE-2019-159)

This update for python-urllib3 fixes the following issues : python-urllib3 was updated to version 1.22 fate326733, bsc1110422 and contains new features and lots of bugfixes : The full changelog can be found on : https://github.com/Lukasa/urllib3/blob/1.22/CHANGES.rst Security issues fixed : -...

CVE-2018-9015

dsmall v20180320 allows XSS via the public/index.php/home/predeposit/index.html pdrsn parameter aka the CMS search box...

CVE-2018-9015

CVE-2018-9015 affects dsmall v20180320, with a cross-site scripting (XSS) vulnerability exploitable via the public/index.php/home/predeposit/index.html page’s pdr_sn parameter (the CMS search box). The issue stems from unsanitized input in the pdr_sn field, enabling injection of arbitrary web scr...

pyupdater (=2.1.7) potentially affected by CVE-2016-9015 via urllib3 (=1.18.0)

urllib3 PYPI version =1.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - pyupdater =2.1.7 Source cves: CVE-2016-9015 Source advisory: OSV:PYSEC-2017-98...