25025 matches found
GHSA-377P-PRWP-4HWF
creationtimestamp| type| source ---|---|--- 2025-12-29 16:37:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115803830491192724...
GHSA-GRC3-8W5X-G54Q
creationtimestamp| type| source ---|---|--- 2025-12-29 16:00:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115803686314532339...
GHSA-R8G5-CGF2-4M4M
creationtimestamp| type| source ---|---|--- 2025-12-29 15:30:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115803569905538682...
GHSA-M273-6V24-X4M4
creationtimestamp| type| source ---|---|--- 2025-12-29 15:29:24+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115803564473058280...
GHSA-84R2-JW7C-4R5Q
creationtimestamp| type| source ---|---|--- 2025-12-29 15:29:24+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115803564473058280 2026-01-24 22:43:11+00:00| seen| https://gist.github.com/alon710/4388a05a74d07006b58bfa49d1a515eb...
CVE-2025-15131
A vulnerability was found in ZSPACE Z4Pro+ 1.0.0440024. Impacted is the function zfilev2apiSafeStatus of the file /v2/file/safe/status of the component HTTP POST Request Handler. The manipulation results in command injection. The attack may be performed from remote. The exploit has been made publ...
CVE-2025-15253
creationtimestamp| type| source ---|---|--- 2025-12-29 10:35:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115802407522418953 2025-12-30 17:58:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb7wgzszo62e...
CVE-2025-15175
creationtimestamp| type| source ---|---|--- 2025-12-29 08:49:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb4hdbtihz2q...
CVE-2025-15143
creationtimestamp| type| source ---|---|--- 2025-12-28 18:27:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb2x6cykw42x...
EUVD-2025-205505
A vulnerability was found in ZSPACE Z4Pro+ 1.0.0440024. Impacted is the function zfilev2apiSafeStatus of the file /v2/file/safe/status of the component HTTP POST Request Handler. The manipulation results in command injection. The attack may be performed from remote. The exploit has been made publ...
CVE-2025-15131
A vulnerability was found in ZSPACE Z4Pro+ 1.0.0440024. Impacted is the function zfilev2apiSafeStatus of the file /v2/file/safe/status of the component HTTP POST Request Handler. The manipulation results in command injection. The attack may be performed from remote. The exploit has been made publ...
CVE-2025-15131
A vulnerability was found in ZSPACE Z4Pro+ 1.0.0440024. Impacted is the function zfilev2apiSafeStatus of the file /v2/file/safe/status of the component HTTP POST Request Handler. The manipulation results in command injection. The attack may be performed from remote. The exploit has been made publ...
CVE-2025-15131 ZSPACE Z4Pro+ HTTP POST Request status zfilev2_api_SafeStatus command injection
A vulnerability was found in ZSPACE Z4Pro+ 1.0.0440024. Impacted is the function zfilev2apiSafeStatus of the file /v2/file/safe/status of the component HTTP POST Request Handler. The manipulation results in command injection. The attack may be performed from remote. The exploit has been made publ...
CVE-2025-15131 ZSPACE Z4Pro+ HTTP POST Request status zfilev2_api_SafeStatus command injection
A vulnerability was found in ZSPACE Z4Pro+ 1.0.0440024. Impacted is the function zfilev2apiSafeStatus of the file /v2/file/safe/status of the component HTTP POST Request Handler. The manipulation results in command injection. The attack may be performed from remote. The exploit has been made publ...
CVE-2025-15131
Affects ZSPACE Z4Pro+ (version 1.0.0440024). The vulnerability is in the HTTP POST Request Handler, specifically the zfilev2_api_SafeStatus function at /v2/file/safe/status, enabling remote command injection. Exploit public. Impact includes potential arbitrary commands execution; confidentiality,...
CVE-2025-15193
creationtimestamp| type| source ---|---|--- 2025-12-28 09:35:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115796510891537256 2025-12-29 15:25:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115803549320641338...
CVE-2025-15118
creationtimestamp| type| source ---|---|--- 2025-12-28 06:42:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mazpr56e6c2x...
ZSPACE Z4Pro+ 命令注入漏洞
ZSPACE Z4Pro+ is a private cloud storage device from China Pole Space ZSPACE. A command injection vulnerability exists in ZSPACE Z4Pro+ version 1.0.0440024, which originates from a misuse of the function zfilev2apiSafeStatus in the file /v2/file/safe/status, which could lead to command injection...
CVE-2025-15137
creationtimestamp| type| source ---|---|--- 2025-12-27 15:08:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115792156037611825 2025-12-28 17:37:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb2uetxtsc2y 2025-12-29 15:42:43+00:00| published-proof-of-concept|...