{"vulnerability": "CVE-2015-1014", "sightings": [{"uuid": "31fce3a2-28e8-4b96-b1a9-6a202d6d32bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10140", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lul6ed7lfa2j", "content": "", "creation_timestamp": "2025-07-22T18:51:31.068729Z"}, {"uuid": "bac673fa-9ad2-433f-aab2-8cde67bb9d97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10140", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "d3dec2d5-63b9-4889-bead-5bd4f0513a26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10141", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "c5c968ca-5dac-4357-897d-49b242e7ea3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10143", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "538413ec-497c-40a2-a610-9a683fb3d76c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10141", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwcpwywwqz2v", "content": "", "creation_timestamp": "2025-08-13T21:02:38.100785Z"}, {"uuid": "39fd2546-9355-442f-a860-454c10887b83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10147", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4dknyy4u32o", "content": "", "creation_timestamp": "2025-10-29T13:31:56.119708Z"}, {"uuid": "dacffbff-98a6-44bf-82ab-a50a047ff28b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10146", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4dla2v6jw2g", "content": "", "creation_timestamp": "2025-10-29T13:42:06.045148Z"}, {"uuid": "5a46a0d7-f46d-4360-a5b2-204f9b104d7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10143", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wp_platform_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "2a5ffdcd-f12d-4d52-8d6c-51e7ff42abde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10141", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/xdebug_unauth_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "1a254b7c-34f9-4769-a84b-d800936ef1cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10140", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wp_ajax_load_more_file_upload.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "c1cbe872-7944-4199-ba0e-f3d9cddcde43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10145", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-10)", "content": "", "creation_timestamp": "2026-02-10T00:00:00.000000Z"}, {"uuid": "0c59731b-22b5-434a-9152-fa7d986909b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10145", "type": "seen", "source": "https://mastodon.social/users/hrbrmstr/statuses/116046776393725214", "content": "", "creation_timestamp": "2026-02-10T14:21:32.964588Z"}, {"uuid": "ac1a5ea4-1e64-4a59-aa04-79f168bf0119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10145", "type": "seen", "source": "https://bsky.app/profile/hrbrmstr.mastodon.social.ap.brid.gy/post/3mej5wbafjjq2", "content": "", "creation_timestamp": "2026-02-10T14:21:58.590883Z"}, {"uuid": "7f5a33b5-5933-4068-a2e5-ccfe096a16d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10145", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbculed44m2c", "content": "", "creation_timestamp": "2025-12-31T22:02:43.078862Z"}, {"uuid": "437c5e88-6a16-4561-9458-dc29a83cd005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10145", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mbfbpehsoz22", "content": "", "creation_timestamp": "2026-01-01T21:02:55.705290Z"}, {"uuid": "3b90c74f-d991-479f-a06d-9c0cbafed1f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10148", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mimtl3ymni23", "content": "", "creation_timestamp": "2026-04-03T23:07:39.294143Z"}, {"uuid": "6bf984e3-3167-4c48-97f0-c33086ed8511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10148", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3min3ijexda22", "content": "", "creation_timestamp": "2026-04-04T01:29:22.536781Z"}, {"uuid": "31062b7f-2919-4ec1-b632-5cbf4e831b65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10141", "type": "published-proof-of-concept", "source": "Telegram/ly_nGwEBz8_w-QBAqH4vGLawRvod8pIDYMiR5gonnpgcY9c", "content": "", "creation_timestamp": "2025-08-17T21:00:04.000000Z"}, {"uuid": "7753c5e2-924b-4ea6-81e2-f0a672f9b455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-1014", "type": "seen", "source": "https://t.me/cibsecurity/3334", "content": "ATENTION\u203c New - CVE-2015-1014\n\nA successful exploit of these vulnerabilities requires the local user to load a crafted DLL file in the system directory on servers running Schneider Electric OFS v3.5 with version v7.40 of SCADA Expert Vijeo Citect/CitectSCADA, OFS v3.5 with version v7.30 of Vijeo Citect/CitectSCADA, and OFS v3.5 with version v7.20 of Vijeo Citect/CitectSCADA.. If the application attempts to open that file, the application could crash or allow the attacker to execute arbitrary code. Schneider Electric recommends vulnerable users upgrade the OFS to V3.5 and install the latest service pack (SP 6 or newer) for their associated version.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-03-25T21:27:32.000000Z"}, {"uuid": "8016dd8c-3d15-4221-a5df-72edbb0c6b5c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10145", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/afe0f71b-be3f-42e0-8d95-c4f27b9bc4b0", "content": "", "creation_timestamp": "2026-06-23T14:03:56.871386Z"}, {"uuid": "79075e0d-5916-44d1-b7cd-0ba463b9fa9c", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2015-10145", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/061ad775-dc3f-4db7-a214-7f9bed77a3b1", "content": "", "creation_timestamp": "2026-06-30T10:01:22.268921Z"}, {"uuid": "7c8e0bfd-eafd-46d5-ae9c-abb2436930cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10141", "type": "seen", "source": "https://t.me/GithubRedTeam/89368", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2015-10141\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a K3ysTr0K3R\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-17 21:32:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2015-10141 \u2013 Xdebug unauthenticated RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:24.288050Z"}, {"uuid": "4406d928-2aa6-49b4-b125-ed57591b3b50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10141", "type": "seen", "source": "https://t.me/GithubRedTeam/89368", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2015-10141\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a K3ysTr0K3R\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-17 21:32:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2015-10141 \u2013 Xdebug unauthenticated RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:39.886405Z"}, {"uuid": "9593cdf0-9c46-482a-aeaf-ed67d6d8a4a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10141", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/89368", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2015-10141\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a K3ysTr0K3R\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-17 21:32:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2015-10141 \u2013 Xdebug unauthenticated RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:08.346444Z"}, {"uuid": "1e78c0c9-308d-4196-bf5b-2c761cede238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10144", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_responsive_thumbnail_slider_upload.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Arash Khazaei\", \"Shelby Pace\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an arbitrary file upload vulnerability in Responsive Thumbnail Slider\\n          Plugin v1.0 for WordPress post authentication.\", \"disclosure_date\": \"2015-08-28\", \"fullname\": \"exploit/multi/http/wp_responsive_thumbnail_slider_upload\", \"is_install_path\": true, \"mod_time\": \"2026-05-26 13:05:42 +0000\", \"name\": \"WordPress Responsive Thumbnail Slider Arbitrary File Upload\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/wp_responsive_thumbnail_slider_upload.rb\", \"platform\": \"PHP\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/wp_responsive_thumbnail_slider_upload\", \"references\": [\"CVE-2015-10144\", \"EDB-37998\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Responsive Thumbnail Slider Plugin v1.0\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:22.861407Z"}, {"uuid": "b54171c8-79d4-429c-82d6-ab889ae48e4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10141", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/xdebug_unauth_exec.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Ricter Zheng\", \"Shaksham Jaiswal\", \"Mumbai\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Module exploits a vulnerability in the eval command present in Xdebug versions 2.5.5 and below.\\n          This allows the attacker to execute arbitrary php code as the context of the web user.\", \"disclosure_date\": \"2017-09-17\", \"fullname\": \"exploit/unix/http/xdebug_unauth_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:31 +0000\", \"name\": \"xdebug Unauthenticated OS Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/http/xdebug_unauth_exec.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/http/xdebug_unauth_exec\", \"references\": [\"CVE-2015-10141\", \"URL-https://redshark1802.com/blog/2015/11/13/xpwn-exploiting-xdebug-enabled-servers/\", \"URL-http://web.archive.org/web/20231226215418/https://paper.seebug.org/397/\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:38.088130Z"}, {"uuid": "7b068897-672b-4213-9d76-756ef0057cc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10143", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wp_platform_exec.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Marc-Alexandre Montpas\", \"Christian Mehlmauer \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"The WordPress Theme \\\"platform\\\" contains a remote code execution vulnerability\\n          through an unchecked admin_init call. The theme includes the uploaded file\\n          from its temp filename with php's include function.\", \"disclosure_date\": \"2015-01-21\", \"fullname\": \"exploit/unix/webapp/wp_platform_exec\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"WordPress Platform Theme File Upload Vulnerability\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/wp_platform_exec.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/webapp/wp_platform_exec\", \"references\": [\"CVE-2015-10143\", \"URL-http://blog.sucuri.net/2015/01/security-advisory-vulnerabilities-in-pagelinesplatform-theme-for-wordpress.html\", \"WPVDB-7762\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"platform < 1.4.4, platform pro < 1.6.2\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:51.641482Z"}, {"uuid": "fa075d2a-c30e-466f-a6f1-5d98f58c7db7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-10140", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wp_ajax_load_more_file_upload.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"PizzaHatHacker\", \"Roberto Soares Espreto \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an arbitrary file upload in the WordPress Ajax Load More\\n          version 2.8.1.1. It allows to upload arbitrary php files and get remote code\\n          execution. This module has been tested successfully on WordPress Ajax Load More\\n          2.8.0 with Wordpress 4.1.3 on Ubuntu 12.04/14.04 Server.\", \"disclosure_date\": \"2015-10-10\", \"fullname\": \"exploit/unix/webapp/wp_ajax_load_more_file_upload\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"Wordpress Ajax Load More PHP Upload Vulnerability\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/wp_ajax_load_more_file_upload.rb\", \"platform\": \"PHP\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"unix/webapp/wp_ajax_load_more_file_upload\", \"references\": [\"CVE-2015-10140\", \"WPVDB-8209\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Ajax Load More 2.8.1.1\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:49.891854Z"}]}