CVE-2015-10138

The Work The Flow File Upload plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the jQuery-File-Upload-9.5.0 server and test files in versions up to, and including, 2.5.2. This makes it possible for unauthenticated attackers to upload arbitrary...

CVE-2015-10136

The GI-Media Library plugin for WordPress is vulnerable to Directory Traversal in versions before 3.0 via the 'fileid' parameter. This allows unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information...

CVE-2015-10133 Subscribe to Comments <= 2.1.2 - Local File Includion

The Subscribe to Comments for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.1.2 via the Path to header value. This allows authenticated attackers, with administrative privileges and above, to include and execute arbitrary files on the server, allowing the...

CVE-2015-10133

The CVE-2015-10133 issue affects the WordPress plugin Subscribe to Comments (

CVE-2015-10133 Subscribe to Comments <= 2.1.2 - Local File Includion

The Subscribe to Comments for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.1.2 via the Path to header value. This allows authenticated attackers, with administrative privileges and above, to include and execute arbitrary files on the server, allowing the...

CVE-2015-10135 WPshop 2 – E-Commerce < 1.3.9.6 - Arbitrary File Upload

The WPshop 2 – E-Commerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajaxUpload function in versions before 1.3.9.6. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may...

CVE-2015-10135 WPshop 2 – E-Commerce < 1.3.9.6 - Arbitrary File Upload

The WPshop 2 – E-Commerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajaxUpload function in versions before 1.3.9.6. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may...

CVE-2015-10135

The CVE concerns the WordPress WPshop 2 – E-Commerce plugin, affected in versions prior to 1.3.9.6. The root cause is missing file type validation in the ajaxUpload function, enabling unauthenticated arbitrary file uploads on the server. This can lead to remote code execution as stated in multipl...

CVE-2015-10136 GI-Media Library < 3.0 - Directory Traversal

The GI-Media Library plugin for WordPress is vulnerable to Directory Traversal in versions before 3.0 via the 'fileid' parameter. This allows unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information...

CVE-2025-34121

An unauthenticated arbitrary file upload vulnerability exists in Idera Up.Time Monitoring Station versions up to and including 7.2. The wizards/post2file.php script accepts arbitrary POST parameters, allowing attackers to upload crafted PHP files to the webroot. Successful exploitation results in...

CVE-2025-34121

Idera Up.Time Monitoring Station

CVE-2025-34121 Idera Up.Time ≤ 7.2 post2file.php Arbitrary File Upload RCE

An unauthenticated arbitrary file upload vulnerability exists in Idera Up.Time Monitoring Station versions up to and including 7.2. The wizards/post2file.php script accepts arbitrary POST parameters, allowing attackers to upload crafted PHP files to the webroot. Successful exploitation results in...

CVE-2015-7697

creationtimestamp| type| source ---|---|--- 2025-07-08 07:10:42+00:00| seen| https://infosec.exchange/users/certvde/statuses/114816361290443115...

CVE-2015-7696

creationtimestamp| type| source ---|---|--- 2025-07-08 07:10:40+00:00| seen| https://infosec.exchange/users/certvde/statuses/114816361290443115...

CVE-2015-20112

RLPx 5 has two CTR streams based on the same key, IV, and nonce. This can facilitate decryption on a private network...

CVE-2015-20112

creationtimestamp| type| source ---|---|--- 2025-06-29 20:57:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19878 2025-06-30 00:39:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsrx2tmeg62v...

CVE-2015-0843

yubiserver before 0.6 is prone to buffer overflows due to misuse of sprintf...

CVE-2015-0843

creationtimestamp| type| source ---|---|--- 2025-06-27 01:17:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lskhryw5tr2i 2025-06-27 08:52:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19682...

CVE-2015-0849

creationtimestamp| type| source ---|---|--- 2025-06-27 01:07:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lskha3tfzx2v...

CVE-2015-0842

creationtimestamp| type| source ---|---|--- 2025-06-27 00:52:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lskggj7gux2p 2025-06-27 18:51:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19776...