[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2015-5287":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-27T05:51:03.152Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":195,"aliases":265,"duplicate_of":9,"upstream":266,"downstream":267,"duplicates":270,"related":271,"reserved_at":9,"published_at":272,"modified_at":273,"state":274,"summary":275,"references_raw":284,"kevs":338,"epss":349,"epss_history":351,"metrics":597,"affected":610},"CVE-2015-5287","The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-59","Improper Link Resolution Before File Access ('Link Following')","The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","weakness","Draft","Base","Medium",[20,101,162,191],{"id":21,"name":22,"techniques":23},"CAPEC-132","Symlink Attack",[24],{"id":25,"name":26,"tactics":27,"countermeasures":34},"T1547.009","Shortcut Modification",[28,31],{"id":29,"name":30},"TA0110","Persistence",{"id":32,"name":33},"TA0111","Privilege Escalation",[35,40,44,49,53,58,62,66,70,74,78,83,88,92,96],{"id":36,"name":37,"tactic":38},"D3-CF","Content Filtering",{"name":39},"Isolate",{"id":41,"name":42,"tactic":43},"D3-RFAM","Remote File Access Mediation",{"name":39},{"id":45,"name":46,"tactic":47},"D3-FEV","File Eviction",{"name":48},"Evict",{"id":50,"name":51,"tactic":52},"D3-CM","Content Modification",{"name":39},{"id":54,"name":55,"tactic":56},"D3-EFA","Emulated File Analysis",{"name":57},"Detect",{"id":59,"name":60,"tactic":61},"D3-LFP","Local File Permissions",{"name":39},{"id":63,"name":64,"tactic":65},"D3-FIM","File Integrity Monitoring",{"name":57},{"id":67,"name":68,"tactic":69},"D3-DA","Dynamic Analysis",{"name":57},{"id":71,"name":72,"tactic":73},"D3-FA","File Analysis",{"name":57},{"id":75,"name":76,"tactic":77},"D3-CQ","Content Quarantine",{"name":39},{"id":79,"name":80,"tactic":81},"D3-DF","Decoy File",{"name":82},"Deceive",{"id":84,"name":85,"tactic":86},"D3-RF","Restore File",{"name":87},"Restore",{"id":89,"name":90,"tactic":91},"D3-EAL","Executable Allowlisting",{"name":39},{"id":93,"name":94,"tactic":95},"D3-EDL","Executable Denylisting",{"name":39},{"id":97,"name":98,"tactic":99},"D3-FE","File Encryption",{"name":100},"Harden",{"id":102,"name":103,"techniques":104},"CAPEC-17","Using Malicious Files",[105,142],{"id":106,"name":107,"tactics":108,"countermeasures":120},"T1574.005","Executable Installer File Permissions Weakness",[109,110,111,114,117],{"id":29,"name":30},{"id":32,"name":33},{"id":112,"name":113},"TA0030","Defense Evasion",{"id":115,"name":116},"TA0005","Stealth",{"id":118,"name":119},"TA0104","Execution",[121,125,130,134,138],{"id":122,"name":123,"tactic":124},"D3-SU","Software Update",{"name":100},{"id":126,"name":127,"tactic":128},"D3-AVE","Asset Vulnerability Enumeration",{"name":129},"Model",{"id":131,"name":132,"tactic":133},"D3-SWI","Software Inventory",{"name":129},{"id":135,"name":136,"tactic":137},"D3-SBV","Service Binary Verification",{"name":57},{"id":139,"name":140,"tactic":141},"D3-RS","Restore Software",{"name":87},{"id":143,"name":144,"tactics":145,"countermeasures":151},"T1574.010","Services File Permissions Weakness",[146,147,148,149,150],{"id":29,"name":30},{"id":32,"name":33},{"id":112,"name":113},{"id":115,"name":116},{"id":118,"name":119},[152,154,156,158,160],{"id":139,"name":140,"tactic":153},{"name":87},{"id":131,"name":132,"tactic":155},{"name":129},{"id":135,"name":136,"tactic":157},{"name":57},{"id":122,"name":123,"tactic":159},{"name":100},{"id":126,"name":127,"tactic":161},{"name":129},{"id":163,"name":164,"techniques":165},"CAPEC-35","Leverage Executable Code in Non-Executable Files",[166,173,180],{"id":167,"name":168,"tactics":169,"countermeasures":172},"T1027.006","HTML Smuggling",[170,171],{"id":112,"name":113},{"id":115,"name":116},[],{"id":174,"name":175,"tactics":176,"countermeasures":179},"T1027.009","Embedded Payloads",[177,178],{"id":112,"name":113},{"id":115,"name":116},[],{"id":181,"name":182,"tactics":183,"countermeasures":186},"T1564.009","Resource Forking",[184,185],{"id":112,"name":113},{"id":115,"name":116},[187],{"id":188,"name":189,"tactic":190},"D3-FFV","File Format Verification",{"name":39},{"id":192,"name":193,"techniques":194},"CAPEC-76","Manipulating Web Input to File System Calls",[],[196,205,210,224,232,246],{"_key":197,"name":198,"source":199,"url":200,"maturity":201,"reliability_score":202,"verified":203,"type":9,"platforms":204,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_BE92EE3780B2B3FB","Exploit Reference (openwall.com)","reference","http://www.openwall.com/lists/oss-security/2015/12/01/1","unknown",0.2,false,[],{"_key":206,"name":207,"source":199,"url":208,"maturity":201,"reliability_score":202,"verified":203,"type":9,"platforms":209,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_E8CD9D8C369036F6","Exploit Reference (bugzilla.redhat.com)","https://bugzilla.redhat.com/show_bug.cgi?id=1266837",[],{"_key":211,"name":212,"source":213,"url":214,"maturity":215,"reliability_score":216,"verified":217,"type":218,"platforms":219,"requires_auth":9,"exploitdb":221,"metasploit":9},"47421","ABRT - sosreport Privilege Escalation (Metasploit)","exploit-database","https://www.exploit-db.com/exploits/47421","weaponized",0.8,true,"local",[220],"linux",{"verified":217,"type":218,"platform":220,"file":222,"codes":223},"exploits/linux/local/47421.rb",[7],{"_key":225,"name":226,"source":213,"url":227,"maturity":215,"reliability_score":216,"verified":217,"type":218,"platforms":228,"requires_auth":9,"exploitdb":229,"metasploit":9},"38832","RHEL 7.0/7.1 - 'abrt/sosreport' Local Privilege Escalation","https://www.exploit-db.com/exploits/38832",[220],{"verified":217,"type":218,"platform":220,"file":230,"codes":231},"exploits/linux/local/38832.py",[7],{"_key":233,"name":234,"source":213,"url":235,"maturity":215,"reliability_score":216,"verified":217,"type":218,"platforms":236,"requires_auth":9,"exploitdb":238,"metasploit":9},"38835","abrt (Centos 7.1 / Fedora 22) - Local Privilege Escalation","https://www.exploit-db.com/exploits/38835",[237],"multiple",{"verified":217,"type":218,"platform":237,"file":239,"codes":240},"exploits/multiple/local/38835.py",[7,241,242,243,244,245],"CVE-2015-5273","OSVDB-130747","OSVDB-130746","OSVDB-130745","OSVDB-130609",{"_key":247,"name":248,"source":249,"url":250,"maturity":215,"reliability_score":251,"verified":217,"type":252,"platforms":253,"requires_auth":203,"exploitdb":9,"metasploit":254},"MSF_EXPLOIT_LINUX_LOCAL_ABRT_SOSREPORT_PRIV_ESC","ABRT sosreport Privilege Escalation","metasploit","https://github.com/rapid7/metasploit-framework/blob/master/modules/exploit/linux/local/abrt_sosreport_priv_esc.rb",1,"remote",[],{"fullname":255,"rank":256,"rank_name":257,"post_auth":203,"check":217,"notes":258},"exploit/linux/local/abrt_sosreport_priv_esc",600,"excellent",{"Stability":259,"SideEffects":261,"Reliability":263},[260],"unknown-stability",[262],"unknown-side-effects",[264],"unknown-reliability",[],[],[268],{"_key":269},"RHSA-2015:2505",[],[],"2015-12-07T18:00:00.000Z","2026-08-27T03:56:39.465Z","Analyzed",{"cisa_kev":217,"cisa_ransomware":203,"cisa_vendor":276,"epss_severity":277,"epss_score":278,"severity":279,"severity_score":280,"severity_version":281,"severity_source":282,"severity_vector":283,"severity_status":274},"Red Hat","low",0.03412,"high",7.8,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[285,292,300,304,309,312,318,323,328,332],{"url":286,"sources":287,"tags":289},"http://rhn.redhat.com/errata/RHSA-2015-2505.html",[288,282],"cve.org",[290,291],"Vendor Advisory","X Refsource REDHAT",{"url":293,"sources":294,"tags":295},"https://www.exploit-db.com/exploits/38832/",[288,282],[296,297,298,299],"Exploit","X Refsource EXPLOIT DB","Mailing List","Third Party Advisory",{"url":200,"sources":301,"tags":302},[288,282],[298,303,296],"X Refsource MLIST",{"url":305,"sources":306,"tags":307},"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",[288,282],[308,299],"X Refsource CONFIRM",{"url":208,"sources":310,"tags":311},[288,282],[308,296],{"url":313,"sources":314,"tags":315},"http://www.securityfocus.com/bid/78137",[288,282],[316,317,299],"VDB Entry","X Refsource BID",{"url":319,"sources":320,"tags":321},"https://github.com/abrt/abrt/commit/3c1b60cfa62d39e5fff5a53a5bc53dae189e740e",[288,282],[308,322],"Patch",{"url":324,"sources":325,"tags":326},"http://packetstormsecurity.com/files/154592/ABRT-sosreport-Privilege-Escalation.html",[288,282],[327,299],"X Refsource MISC",{"url":329,"sources":330,"tags":331},"https://blog.talosintelligence.com/uat-10147-chinese-speaking-adversary-integrates-agentic-ai-into-post-compromise-operations/",[288,282],[299],{"url":333,"sources":334,"tags":335},"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-5287",[288,282],[336,299,337],"Government Resource","US Government Resource",[339],{"source":340,"vendor":276,"product":341,"date_added":342,"vulnerability_name":343,"short_description":344,"required_action":345,"due_date":346,"known_ransomware_campaign_use":347,"notes":348,"exploitation_type":9},"cisa","Automatic Bug Reporting Tool","2026-08-26","Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability","Red Hat Automatic Bug Reporting Tool (ABRT) contains a privilege escalation vulnerability that could allow local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","2026-09-09","Unknown","This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/abrt/abrt/commit/3c1b60cfa62d39e5fff5a53a5bc53dae189e740e ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2015-5287",{"date":342,"score":278,"percentile":350},0.87992,[352,356,359,362,365,368,370,372,375,378,381,384,387,390,393,396,399,402,405,407,410,413,416,419,421,424,426,428,431,434,437,439,442,444,446,448,451,454,457,460,462,464,467,470,473,476,479,482,484,486,489,491,494,497,500,503,506,509,511,514,517,520,523,525,528,530,533,535,538,540,542,544,547,550,553,556,559,561,563,566,569,572,575,578,581,583,586,589,591,594],{"date":353,"score":354,"percentile":355},"2025-11-04",0.12902,0.93737,{"date":357,"score":354,"percentile":358},"2025-11-05",0.93736,{"date":360,"score":354,"percentile":361},"2025-11-06",0.9374,{"date":363,"score":354,"percentile":364},"2025-11-07",0.93743,{"date":366,"score":354,"percentile":367},"2025-11-08",0.93744,{"date":369,"score":354,"percentile":364},"2025-11-09",{"date":371,"score":354,"percentile":364},"2025-11-10",{"date":373,"score":354,"percentile":374},"2025-11-11",0.93745,{"date":376,"score":354,"percentile":377},"2025-11-12",0.93751,{"date":379,"score":354,"percentile":380},"2025-11-13",0.93752,{"date":382,"score":354,"percentile":383},"2025-11-14",0.93756,{"date":385,"score":354,"percentile":386},"2025-11-15",0.93753,{"date":388,"score":354,"percentile":389},"2025-11-16",0.93757,{"date":391,"score":354,"percentile":392},"2025-11-17",0.93755,{"date":394,"score":354,"percentile":395},"2025-11-18",0.9339,{"date":397,"score":354,"percentile":398},"2025-11-19",0.93393,{"date":400,"score":354,"percentile":401},"2025-11-20",0.934,{"date":403,"score":354,"percentile":404},"2025-11-21",0.93765,{"date":406,"score":354,"percentile":404},"2025-11-22",{"date":408,"score":354,"percentile":409},"2025-11-23",0.93771,{"date":411,"score":354,"percentile":412},"2025-11-24",0.93773,{"date":414,"score":354,"percentile":415},"2025-11-25",0.93775,{"date":417,"score":354,"percentile":418},"2025-11-26",0.93774,{"date":420,"score":354,"percentile":415},"2025-11-27",{"date":422,"score":354,"percentile":423},"2025-11-28",0.93768,{"date":425,"score":354,"percentile":412},"2025-11-29",{"date":427,"score":354,"percentile":412},"2025-11-30",{"date":429,"score":354,"percentile":430},"2025-12-01",0.93817,{"date":432,"score":354,"percentile":433},"2025-12-02",0.93819,{"date":435,"score":354,"percentile":436},"2025-12-03",0.93821,{"date":438,"score":354,"percentile":412},"2025-12-04",{"date":440,"score":354,"percentile":441},"2025-12-05",0.93777,{"date":443,"score":354,"percentile":441},"2025-12-06",{"date":445,"score":354,"percentile":415},"2025-12-07",{"date":447,"score":354,"percentile":441},"2025-12-08",{"date":449,"score":354,"percentile":450},"2025-12-09",0.93783,{"date":452,"score":354,"percentile":453},"2025-12-10",0.93789,{"date":455,"score":354,"percentile":456},"2025-12-11",0.93792,{"date":458,"score":354,"percentile":459},"2025-12-12",0.93793,{"date":461,"score":354,"percentile":456},"2025-12-13",{"date":463,"score":354,"percentile":456},"2025-12-14",{"date":465,"score":354,"percentile":466},"2025-12-15",0.93795,{"date":468,"score":354,"percentile":469},"2025-12-16",0.93799,{"date":471,"score":354,"percentile":472},"2025-12-17",0.93804,{"date":474,"score":354,"percentile":475},"2025-12-18",0.93808,{"date":477,"score":354,"percentile":478},"2025-12-19",0.93807,{"date":480,"score":354,"percentile":481},"2025-12-20",0.93806,{"date":483,"score":354,"percentile":478},"2025-12-21",{"date":485,"score":354,"percentile":481},"2025-12-22",{"date":487,"score":354,"percentile":488},"2025-12-23",0.93805,{"date":490,"score":354,"percentile":475},"2025-12-24",{"date":492,"score":354,"percentile":493},"2025-12-25",0.93816,{"date":495,"score":354,"percentile":496},"2025-12-26",0.93815,{"date":498,"score":354,"percentile":499},"2025-12-27",0.93863,{"date":501,"score":354,"percentile":502},"2025-12-28",0.93811,{"date":504,"score":354,"percentile":505},"2025-12-29",0.93809,{"date":507,"score":354,"percentile":508},"2025-12-30",0.93812,{"date":510,"score":354,"percentile":430},"2025-12-31",{"date":512,"score":354,"percentile":513},"2026-01-01",0.9386,{"date":515,"score":354,"percentile":516},"2026-01-02",0.93855,{"date":518,"score":354,"percentile":519},"2026-01-03",0.93853,{"date":521,"score":354,"percentile":522},"2026-01-04",0.93813,{"date":524,"score":354,"percentile":505},"2026-01-05",{"date":526,"score":354,"percentile":527},"2026-01-06",0.9381,{"date":529,"score":354,"percentile":502},"2026-01-07",{"date":531,"score":354,"percentile":532},"2026-01-08",0.93814,{"date":534,"score":354,"percentile":430},"2026-01-09",{"date":536,"score":354,"percentile":537},"2026-01-10",0.93818,{"date":539,"score":354,"percentile":493},"2026-01-11",{"date":541,"score":354,"percentile":532},"2026-01-12",{"date":543,"score":354,"percentile":496},"2026-01-13",{"date":545,"score":354,"percentile":546},"2026-01-14",0.93823,{"date":548,"score":354,"percentile":549},"2026-01-15",0.93825,{"date":551,"score":354,"percentile":552},"2026-01-16",0.93829,{"date":554,"score":354,"percentile":555},"2026-01-17",0.93834,{"date":557,"score":354,"percentile":558},"2026-01-18",0.9383,{"date":560,"score":354,"percentile":558},"2026-01-19",{"date":562,"score":354,"percentile":558},"2026-01-20",{"date":564,"score":354,"percentile":565},"2026-01-21",0.93833,{"date":567,"score":354,"percentile":568},"2026-01-22",0.93836,{"date":570,"score":354,"percentile":571},"2026-01-23",0.93843,{"date":573,"score":354,"percentile":574},"2026-01-24",0.93847,{"date":576,"score":354,"percentile":577},"2026-01-25",0.93849,{"date":579,"score":354,"percentile":580},"2026-01-26",0.9385,{"date":582,"score":354,"percentile":580},"2026-01-27",{"date":584,"score":354,"percentile":585},"2026-01-28",0.93854,{"date":587,"score":354,"percentile":588},"2026-01-29",0.93856,{"date":590,"score":354,"percentile":516},"2026-01-30",{"date":592,"score":354,"percentile":593},"2026-01-31",0.93858,{"date":595,"score":354,"percentile":596},"2026-02-01",0.93896,[598,608],{"source":282,"cvss_v2_0":599,"cvss_v3_0":9,"cvss_v3_1":604,"cvss_v4_0":9},{"baseScore":600,"baseSeverity":9,"vectorString":601,"impactScore":602,"exploitabilityScore":603},6.9,"AV:L/AC:M/Au:N/C:C/I:C/A:C",10,3.4,{"baseScore":280,"baseSeverity":605,"vectorString":283,"impactScore":606,"exploitabilityScore":607},"HIGH",9.8,4.6,{"source":288,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":609,"cvss_v4_0":9},{"baseScore":280,"baseSeverity":605,"vectorString":283,"impactScore":606,"exploitabilityScore":607},[611,618,628,636,641,646,651],{"ecosystem":9,"name":220,"vendor":612,"product":220,"cpe_part":613,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":614},"oracle","o",[615],{"version":616,"is_range":203,"range_type":617,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7","cpe",{"ecosystem":9,"name":619,"vendor":620,"product":621,"cpe_part":622,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":623},"automatic bug reporting tool","redhat","automatic_bug_reporting_tool","a",[624],{"version":625,"is_range":217,"range_type":617,"version_start":9,"version_start_type":9,"version_end":626,"version_end_type":627,"fixed_in":9},"lte2.7.0","2.7.0","including",{"ecosystem":9,"name":629,"vendor":620,"product":630,"cpe_part":613,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":631},"enterprise linux","enterprise_linux",[632,634],{"version":633,"is_range":203,"range_type":617,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.0",{"version":635,"is_range":203,"range_type":617,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0",{"ecosystem":9,"name":637,"vendor":620,"product":638,"cpe_part":613,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":639},"enterprise linux desktop","enterprise_linux_desktop",[640],{"version":635,"is_range":203,"range_type":617,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":642,"vendor":620,"product":643,"cpe_part":613,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":644},"enterprise linux hpc node","enterprise_linux_hpc_node",[645],{"version":635,"is_range":203,"range_type":617,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":647,"vendor":620,"product":648,"cpe_part":613,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":649},"enterprise linux server","enterprise_linux_server",[650],{"version":635,"is_range":203,"range_type":617,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":652,"vendor":620,"product":653,"cpe_part":613,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":654},"enterprise linux workstation","enterprise_linux_workstation",[655],{"version":635,"is_range":203,"range_type":617,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9}]