{"vulnerability": "CVE-2015-0235", "sightings": [{"uuid": "d398f195-62ae-4c4b-86f4-48ef0c8112b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0235", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:42.000000Z"}, {"uuid": "9e1eccf4-8011-4103-a7d6-d2b254b72582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0235", "type": "seen", "source": "https://bsky.app/profile/tuxpanik.bsky.social/post/3lgvcfgpuk72g", "content": "", "creation_timestamp": "2025-01-29T15:37:38.060438Z"}, {"uuid": "7a785d0d-857d-4a98-80b6-981842ff0e31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0235", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:34.000000Z"}, {"uuid": "4bb3de36-cf99-4f52-918d-97be66771605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0235", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wordpress_ghost_scanner.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "f6383314-0606-487d-bdd7-88543576b2e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0235", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/smtp/exim_gethostbyname_bof.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "fea5f74c-79fc-4c9d-b137-ebe3d8307714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0235", "type": "seen", "source": "https://gist.github.com/darkobserved/604a4fcff27f7aee2d97c417de2800a6", "content": "", "creation_timestamp": "2025-12-09T21:37:46.000000Z"}, {"uuid": "235c4333-5a30-44f4-a840-79ce6ad68e56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2015-0235", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/36421", "content": "", "creation_timestamp": "2015-03-18T00:00:00.000000Z"}, {"uuid": "579d4a02-9a6e-414f-812c-c98639bc3326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0235", "type": "published-proof-of-concept", "source": "https://t.me/pwnwiki_zhchannel/840", "content": "Fabasoft Cloud Website XSS\u6f0f\u6d1e\nhttps://short.pwnwiki.org/?c=IqMVpN\nTelegram Desktop 2.9.2 \u62d2\u7d55\u670d\u52d9\u6f0f\u6d1e\nhttps://short.pwnwiki.org/?c=oCGAFS\nWordPress Plugin Payments Plugin&GetPaid 2.4.6 HTML\u6ce8\u5165\u6f0f\u6d1e\nhttps://short.pwnwiki.org/?c=nmKPJY\nCVE-2021-40352 OpenEMR 6.0.0 \u4e0d\u5b89\u5168\u7684\u76f4\u63a5\u5c0d\u8c61\u5f15\u7528\nhttps://short.pwnwiki.org/?c=qyNCzS\nCiclope SQL\u6ce8\u5165\u6f0f\u6d1e\nhttps://short.pwnwiki.org/?c=S4atKH\nCREFONO 8 SQL\u6ce8\u5165\u6f0f\u6d1e\nhttps://short.pwnwiki.org/?c=GDFZKn\nBank of Saint Lucia SQL\u6ce8\u5165\u6f0f\u6d1e\nhttps://short.pwnwiki.org/?c=on3IV3\nCVE-2021-39279&CVE-2021-39278&CVE-2015-0235&CVE-2013-1914 Moxa \u547d\u4ee4\u6ce8\u5165&XSS\u6f0f\u6d1e\nhttps://short.pwnwiki.org/?c=g3rHRb\nFillip Technologies SQL\u6ce8\u5165\u6f0f\u6d1e\nhttps://short.pwnwiki.org/?c=fwCNnF", "creation_timestamp": "2021-09-21T04:41:53.000000Z"}, {"uuid": "201bcf60-ecda-4c61-8eb4-e7d1e7d1a7f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0235", "type": "seen", "source": "Telegram/vS4gZMwqtePTaCuyggknZrxiTunrmQA1Kmn-EUdwMGgktAE", "content": "", "creation_timestamp": "2021-06-10T02:57:23.000000Z"}, {"uuid": "099ef806-0f54-49b3-b5b8-5a13f27050a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0235", "type": "seen", "source": "Telegram/7nTr5Boy9ceRZIwzvInsdCdZXiKVxwAmx2LZ99vpiVTDaKQ", "content": "", "creation_timestamp": "2026-08-29T23:00:14.547490Z"}, {"uuid": "7eb8ac07-ca7c-4cc9-805a-ae29b6e2fa0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0235", "type": "seen", "source": "Telegram/7nTr5Boy9ceRZIwzvInsdCdZXiKVxwAmx2LZ99vpiVTDaKQ", "content": "", "creation_timestamp": "2026-08-30T00:00:24.384812Z"}, {"uuid": "97d38e13-ce4a-4a4a-8e28-8fb2c63db947", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0235", "type": "published-proof-of-concept", "source": "Telegram/7nTr5Boy9ceRZIwzvInsdCdZXiKVxwAmx2LZ99vpiVTDaKQ", "content": "", "creation_timestamp": "2026-08-31T00:00:44.902208Z"}, {"uuid": "05cf685d-7116-4922-b56f-d0ff83d4d83f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0235", "type": "seen", "source": "Telegram/6eKPSIg_MBwqtVbSvi4h5yH150gUXx9aHGjCMtRHjPBfQAk", "content": "", "creation_timestamp": "2026-09-07T20:00:03.774695Z"}, {"uuid": "e1753d81-6dd2-4576-bde3-fcf830c06f31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0235", "type": "published-proof-of-concept", "source": "Telegram/6eKPSIg_MBwqtVbSvi4h5yH150gUXx9aHGjCMtRHjPBfQAk", "content": "", "creation_timestamp": "2026-09-08T00:00:25.144384Z"}, {"uuid": "295361b2-db03-4442-919c-f7f3691fb557", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0235", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wordpress_ghost_scanner.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Robert Rowley\", \"Christophe De La Fuente\", \"Chaim Sanders\", \"Felipe Costa\", \"Jonathan Claudius\", \"Karl Sigler\", \"Christian Mehlmauer \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module can be used to determine hosts vulnerable to the GHOST vulnerability via\\n          a call to the WordPress XMLRPC interface. If the target is vulnerable, the system\\n          will segfault and return a server error. On patched systems, a normal XMLRPC error\\n          is returned.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/http/wordpress_ghost_scanner\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"WordPress XMLRPC GHOST Vulnerability Scanner\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/scanner/http/wordpress_ghost_scanner.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/wordpress_ghost_scanner\", \"references\": [\"CVE-2015-0235\", \"URL-https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/ghost-gethostbyname-heap-overflow-in-glibc-cve-2015-0235/\", \"URL-http://web.archive.org/web/20250117140537/https://blog.sucuri.net/2015/01/critical-ghost-vulnerability-released.html\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:55.598024Z"}, {"uuid": "e4c25a6d-cebd-4c28-94c9-e511399685f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0235", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/smtp/exim_gethostbyname_bof.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Unknown\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module remotely exploits CVE-2015-0235, aka GHOST, a heap-based\\n          buffer overflow in the GNU C Library's gethostbyname functions on x86\\n          and x86_64 GNU/Linux systems that run the Exim mail server.\", \"disclosure_date\": \"2015-01-27\", \"fullname\": \"exploit/linux/smtp/exim_gethostbyname_bof\", \"is_install_path\": true, \"mod_time\": \"2026-05-14 11:43:36 +0000\", \"name\": \"Exim GHOST (glibc gethostbyname) Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"AKA\": [\"ghost\"], \"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/smtp/exim_gethostbyname_bof.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"linux/smtp/exim_gethostbyname_bof\", \"references\": [\"CVE-2015-0235\", \"US-CERT-VU-967332\", \"OSVDB-117579\", \"BID-72325\", \"URL-https://www.qualys.com/research/security-advisories/GHOST-CVE-2015-0235.txt\", \"URL-https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability\", \"URL-http://r-7.co/1CAnMc0\"], \"rport\": 25, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:22.927560Z"}]}