24932 matches found
GHSA-84R2-JW7C-4R5Q
creationtimestamp| type| source ---|---|--- 2025-12-29 15:29:24+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115803564473058280 2026-01-24 22:43:11+00:00| seen| https://gist.github.com/alon710/4388a05a74d07006b58bfa49d1a515eb...
CVE-2025-15131
A vulnerability was found in ZSPACE Z4Pro+ 1.0.0440024. Impacted is the function zfilev2apiSafeStatus of the file /v2/file/safe/status of the component HTTP POST Request Handler. The manipulation results in command injection. The attack may be performed from remote. The exploit has been made publ...
CVE-2025-15253
creationtimestamp| type| source ---|---|--- 2025-12-29 10:35:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115802407522418953 2025-12-30 17:58:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb7wgzszo62e...
CVE-2025-15175
creationtimestamp| type| source ---|---|--- 2025-12-29 08:49:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb4hdbtihz2q...
CVE-2025-15143
creationtimestamp| type| source ---|---|--- 2025-12-28 18:27:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb2x6cykw42x...
EUVD-2025-205505
A vulnerability was found in ZSPACE Z4Pro+ 1.0.0440024. Impacted is the function zfilev2apiSafeStatus of the file /v2/file/safe/status of the component HTTP POST Request Handler. The manipulation results in command injection. The attack may be performed from remote. The exploit has been made publ...
CVE-2025-15131
A vulnerability was found in ZSPACE Z4Pro+ 1.0.0440024. Impacted is the function zfilev2apiSafeStatus of the file /v2/file/safe/status of the component HTTP POST Request Handler. The manipulation results in command injection. The attack may be performed from remote. The exploit has been made publ...
CVE-2025-15131
A vulnerability was found in ZSPACE Z4Pro+ 1.0.0440024. Impacted is the function zfilev2apiSafeStatus of the file /v2/file/safe/status of the component HTTP POST Request Handler. The manipulation results in command injection. The attack may be performed from remote. The exploit has been made publ...
CVE-2025-15131 ZSPACE Z4Pro+ HTTP POST Request status zfilev2_api_SafeStatus command injection
A vulnerability was found in ZSPACE Z4Pro+ 1.0.0440024. Impacted is the function zfilev2apiSafeStatus of the file /v2/file/safe/status of the component HTTP POST Request Handler. The manipulation results in command injection. The attack may be performed from remote. The exploit has been made publ...
CVE-2025-15131 ZSPACE Z4Pro+ HTTP POST Request status zfilev2_api_SafeStatus command injection
A vulnerability was found in ZSPACE Z4Pro+ 1.0.0440024. Impacted is the function zfilev2apiSafeStatus of the file /v2/file/safe/status of the component HTTP POST Request Handler. The manipulation results in command injection. The attack may be performed from remote. The exploit has been made publ...
CVE-2025-15131
Affects ZSPACE Z4Pro+ (version 1.0.0440024). The vulnerability is in the HTTP POST Request Handler, specifically the zfilev2_api_SafeStatus function at /v2/file/safe/status, enabling remote command injection. Exploit public. Impact includes potential arbitrary commands execution; confidentiality,...
CVE-2025-15193
creationtimestamp| type| source ---|---|--- 2025-12-28 09:35:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115796510891537256 2025-12-29 15:25:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115803549320641338...
CVE-2025-15118
creationtimestamp| type| source ---|---|--- 2025-12-28 06:42:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mazpr56e6c2x...
ZSPACE Z4Pro+ 命令注入漏洞
ZSPACE Z4Pro+ is a private cloud storage device from China Pole Space ZSPACE. A command injection vulnerability exists in ZSPACE Z4Pro+ version 1.0.0440024, which originates from a misuse of the function zfilev2apiSafeStatus in the file /v2/file/safe/status, which could lead to command injection...
CVE-2025-15137
creationtimestamp| type| source ---|---|--- 2025-12-27 15:08:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115792156037611825 2025-12-28 17:37:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb2uetxtsc2y 2025-12-29 15:42:43+00:00| published-proof-of-concept|...
CVE-2025-68952
creationtimestamp| type| source ---|---|--- 2025-12-27 04:34:23+00:00| seen| https://infosec.exchange/users/offseq/statuses/115789664153553095...
CVE-2025-15097
A vulnerability was found in Alteryx Server. Affected by this issue is some unknown functionality of the file /gallery/api/status/. Performing manipulation results in improper authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used...
CVE-2025-25341
creationtimestamp| type| source ---|---|--- 2025-12-26 21:24:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mawa3hdej42y...
GHSA-62R4-HW23-CC8V
creationtimestamp| type| source ---|---|--- 2025-12-26 18:56:03+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115787390217635084 2026-01-05 18:04:56+00:00| published-proof-of-concept| Telegram/enKzt3bxSKd8zB2DxOAdSs1JHzkbkyRgEfAWm4z9IF02rbM 2026-01-24 22:43:55+00:00| seen|...