CVE-2025-15131 ZSPACE Z4Pro+ HTTP POST Request status zfilev2_api_SafeStatus command injection

A vulnerability was found in ZSPACE Z4Pro+ 1.0.0440024. Impacted is the function zfilev2apiSafeStatus of the file /v2/file/safe/status of the component HTTP POST Request Handler. The manipulation results in command injection. The attack may be performed from remote. The exploit has been made publ...

CVE-2025-15131

Affects ZSPACE Z4Pro+ (version 1.0.0440024). The vulnerability is in the HTTP POST Request Handler, specifically the zfilev2_api_SafeStatus function at /v2/file/safe/status, enabling remote command injection. Exploit public. Impact includes potential arbitrary commands execution; confidentiality,...

CVE-2025-15193

creationtimestamp| type| source ---|---|--- 2025-12-28 09:35:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115796510891537256 2025-12-29 15:25:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115803549320641338...

CVE-2025-15118

creationtimestamp| type| source ---|---|--- 2025-12-28 06:42:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mazpr56e6c2x...

ZSPACE Z4Pro+ 命令注入漏洞

ZSPACE Z4Pro+ is a private cloud storage device from China Pole Space ZSPACE. A command injection vulnerability exists in ZSPACE Z4Pro+ version 1.0.0440024, which originates from a misuse of the function zfilev2apiSafeStatus in the file /v2/file/safe/status, which could lead to command injection...

CVE-2025-15137

creationtimestamp| type| source ---|---|--- 2025-12-27 15:08:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115792156037611825 2025-12-28 17:37:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb2uetxtsc2y 2025-12-29 15:42:43+00:00| published-proof-of-concept|...

CVE-2025-68952

creationtimestamp| type| source ---|---|--- 2025-12-27 04:34:23+00:00| seen| https://infosec.exchange/users/offseq/statuses/115789664153553095...

CVE-2025-15097

A vulnerability was found in Alteryx Server. Affected by this issue is some unknown functionality of the file /gallery/api/status/. Performing manipulation results in improper authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used...

CVE-2025-25341

creationtimestamp| type| source ---|---|--- 2025-12-26 21:24:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mawa3hdej42y...

GHSA-62R4-HW23-CC8V

creationtimestamp| type| source ---|---|--- 2025-12-26 18:56:03+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115787390217635084 2026-01-05 18:04:56+00:00| published-proof-of-concept| Telegram/enKzt3bxSKd8zB2DxOAdSs1JHzkbkyRgEfAWm4z9IF02rbM 2026-01-24 22:43:55+00:00| seen|...

CVE-2025-57403

creationtimestamp| type| source ---|---|--- 2025-12-26 16:15:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115786759987426922...

CVE-2025-62578

creationtimestamp| type| source ---|---|--- 2025-12-26 06:34:36+00:00| seen| https://infosec.exchange/users/offseq/statuses/115784474565121976 2025-12-26 08:47:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mauvsmrixu2q 2026-01-08 23:06:17+00:00| published-proof-of-concept|...

CVE-2025-15097

A vulnerability was found in Alteryx Server. Affected by this issue is some unknown functionality of the file /gallery/api/status/. Performing manipulation results in improper authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used...

EUVD-2025-205409

A vulnerability was found in Alteryx Server. Affected by this issue is some unknown functionality of the file /gallery/api/status/. Performing manipulation results in improper authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used...

CVE-2025-15097 Alteryx Server status improper authentication

A vulnerability was found in Alteryx Server. Affected by this issue is some unknown functionality of the file /gallery/api/status/. Performing manipulation results in improper authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used...

CVE-2025-15097

CVE-2025-15097 affects Alteryx Server, where an unknown functionality in the file /gallery/api/status/ can be manipulated to bypass authentication. The vulnerability enables remote exploitation and has publicly available exploit guidance. Affected releases include Alteryx Server versions prior to...

CVE-2025-15097 Alteryx Server status improper authentication

A vulnerability was found in Alteryx Server. Affected by this issue is some unknown functionality of the file /gallery/api/status/. Performing manipulation results in improper authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used...

PT-2025-53435

Name of the Vulnerable Software and Affected Versions Alteryx Server versions prior to 2023.1.1.13.486 Alteryx Server versions prior to 2023.2.1.10.293 Alteryx Server versions prior to 2024.1.1.9.236 Alteryx Server versions prior to 2024.2.1.6.125 Alteryx Server versions prior to 2025.1.1.1.31...

Alteryx Server 授权问题漏洞

Alteryx Server is a cloud-hosted or self-hosted application from Alteryx, Inc. It is used to publish, share and execute workflows. An authorization issue vulnerability exists in Alteryx Server that stems from improper authentication in the file /gallery/api/status/, which could lead to a remote...

CVE-2025-15092

creationtimestamp| type| source ---|---|--- 2025-12-25 16:07:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115781063425366366 2025-12-26 01:06:11+00:00| seen| https://infosec.exchange/users/offseq/statuses/115783183199935725 2025-12-26 01:06:12+00:00| seen|...