{"metadata": {"vulnerability": "cve-2015-3306", "count": 79, "kinds": {"milestone": 6, "sighting": 37, "kev": 11, "other": 25}}, "data": [{"timestamp": "2015-04-07T00:00:00Z", "date_only": false, "value": "2015-04-07T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "cve-2015-3306", "field": "containers.cna.datePublic"}, {"timestamp": "2015-04-13T00:00:00Z", "date_only": false, "value": "2015-04-13T00:00:00.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://www.exploit-db.com/exploits/36742", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "036e3a1a-5701-4016-b8a4-5530c0d0b278", "url": "https://www.exploit-db.com/exploits/36742"}, {"timestamp": "2015-04-15T00:00:00Z", "date_only": false, "value": "2015-04-15T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2015-3306", "field": "cveMetadata.dateReserved"}, {"timestamp": "2015-04-16T00:00:00Z", "date_only": false, "value": "2015-04-16T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2015-AVI-178", "record": "CERTFR-2015-AVI-178", "field": "revisions.0.revision_date"}, {"timestamp": "2015-04-24T00:00:00Z", "date_only": true, "value": "2015-04-24", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2015-02769", "record": "CNVD-2015-02769", "field": "submitTime"}, {"timestamp": "2015-04-28T00:00:00Z", "date_only": true, "value": "2015-04-28", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2015-02769", "record": "CNVD-2015-02769", "field": "openTime"}, {"timestamp": "2015-05-18T15:00:00Z", "date_only": false, "value": "2015-05-18T15:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2015-3306", "field": "cveMetadata.datePublished"}, {"timestamp": "2015-05-18T15:59:00Z", "date_only": false, "value": "2015-05-18T15:59:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4MFJ-5WR8-X32Q", "record": "GHSA-4MFJ-5WR8-X32Q", "field": "database_specific.nvd_published_at"}, {"timestamp": "2015-05-18T15:59:00Z", "date_only": false, "value": "2015-05-18T15:59:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2015-3306", "record": "UBUNTU-CVE-2015-3306", "field": "published"}, {"timestamp": "2015-05-18T15:59:00Z", "date_only": false, "value": "2015-05-18T15:59Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2015-3306", "record": "GSD-2015-3306", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2015-05-18T15:59:10.743Z", "date_only": false, "value": "2015-05-18T15:59:10.743", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2015-3306", "record": "FKIE_CVE-2015-3306", "field": "published"}, {"timestamp": "2015-05-20T00:00:00Z", "date_only": false, "value": "2015-05-20T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2015-AVI-235", "record": "CERTFR-2015-AVI-235", "field": "revisions.0.revision_date"}, {"timestamp": "2015-06-10T00:00:00Z", "date_only": false, "value": "2015-06-10T00:00:00.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://www.exploit-db.com/exploits/37262", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "ff50ee29-629a-4b93-865b-5c3555f8a1ce", "url": "https://www.exploit-db.com/exploits/37262"}, {"timestamp": "2018-05-29T15:50:33Z", "date_only": false, "value": "2018-05-29T15:50:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/ftp/proftpd_modcopy_exec.rb", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "90513fe3-2a60-4a05-b1dc-a42588e4a9c7", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/ftp/proftpd_modcopy_exec.rb"}, {"timestamp": "2019-07-23T16:25:00Z", "date_only": false, "value": "2019-07-23T16:25:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysodmins/5616", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "95e92d87-45a7-4b7f-b225-e1bce5a65ae5", "content": "\u200b\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ProFTPD \u0441\u0442\u0430\u0432\u0438\u0442 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a \u0431\u043e\u043b\u0435\u0435 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u043f\u043e\u0438\u0441\u043a\u0430 Shodan, \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432 \u0441\u0435\u0442\u0438 \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 1 \u043c\u043b\u043d \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 ProFTPd. https://www.shodan.io/search?query=ProFTPD\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u0431\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043c\u043e\u0433\u0443\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043c\u043e\u0434\u0443\u043b\u044c \"mod_copy\" \u0432 \u0444\u0430\u0439\u043b\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 ProFTPd, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0435\u0431\u044f \u043e\u0442 \u043b\u044e\u0431\u044b\u0445 \u0430\u0442\u0430\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u044d\u0442\u0438\u043c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u043c.\n\n\u0412 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 ProFTPD \u0434\u043b\u044f Linux \u0438 UNIX-\u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0435\u0437 \u043f\u0440\u0430\u0432\u0430 \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c \u0441\u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u0444\u0430\u0439\u043b \u043d\u0430 FTP-\u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\nProFTPd \u2014 \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u044b\u0439 FTP-\u0441\u0435\u0440\u0432\u0435\u0440 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e UNIX-\u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0438 Windows. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 ProFTPd \u0432\u043f\u043b\u043e\u0442\u044c \u0434\u043e 1.3.6.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-12815 https://www.cert-bund.de/advisoryshort/CB-K19-0642) \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 \"mod_copy\", \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u043c\u0441\u044f \u0432 \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u043e\u0439 \u0441\u0431\u043e\u0440\u043a\u0435 ProFTPd \u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u043c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, Debian). \u041f\u0435\u0440\u0435\u0434\u0430\u0447\u0430 \u043a\u043e\u043c\u0430\u043d\u0434 CPFR, CPTO \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 ProFTPd \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0435\u0437 \u043f\u0440\u0430\u0432\u0430 \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 FTP-\u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0411\u0430\u0433 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e 2015 \u0433\u043e\u0434\u0430 (CVE-2015-3306), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b SITE CPFR \u0438 SITE CPTO.", "url": "https://t.me/sysodmins/5616"}, {"timestamp": "2019-07-23T21:48:20Z", "date_only": false, "value": "2019-07-23T21:48:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/tech_b0lt_Genona/786", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "e77927e2-e1f2-4e38-8bf2-d60900b47f65", "content": "\u0422\u0443\u0442 \u0432 ProFTPD \u043d\u0430\u0448\u043b\u0438 \u0434\u044b\u0440\u0435\u043d\u044c\nAn arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306.\n\nhttps://nvd.nist.gov/vuln/detail/CVE-2019-12815\n\n\u0410 \u0438\u0445 \u043c\u0438\u043b\u043b\u0438\u043e\u043d \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0442\u043e\u0440\u0447\u0438\u0442 \u0433\u043e\u043b\u044b\u043c\u0438 \u043f\u043e\u0440\u0442\u0430\u043c\u0438\nhttps://www.shodan.io/search?query=ProFTPD", "url": "https://t.me/tech_b0lt_Genona/786"}, {"timestamp": "2021-05-26T00:00:00Z", "date_only": false, "value": "2021-05-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://www.exploit-db.com/exploits/49908", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "37fb47d9-a255-4175-9c48-0b540d5655b3", "url": "https://www.exploit-db.com/exploits/49908"}, {"timestamp": "2021-05-26T19:06:22Z", "date_only": false, "value": "2021-05-26T19:06:22.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2015-3306", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-05-26T20:15:00Z", "date_only": false, "value": "2021-05-26T20:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2015-3306", "record": "GSD-2015-3306", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-13T01:09:57Z", "date_only": false, "value": "2022-05-13T01:09:57Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4MFJ-5WR8-X32Q", "record": "GHSA-4MFJ-5WR8-X32Q", "field": "published"}, {"timestamp": "2023-12-13T01:20:07.409Z", "date_only": false, "value": "2023-12-13T01:20:07.409757Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2015-3306", "record": "GSD-2015-3306", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-03-20T08:50:27Z", "date_only": false, "value": "2024-03-20T08:50:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/lostsec/193", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "a5e377cd-9d70-4498-800a-afe33aed12e0", "content": "SHODAN DORK: \nwebcamXP/webcam7:\n(\"webcam 7\" OR \"webcamXP\") http.component:\"mootools\" -401\n\nSome Webcams(SQ Webcams?):\nServer: SQ-WEBCAM\n\nYawcam Webcams:\n\"Server: yawcam\" \"Mime-Type: text/html\"\n\nSurveillance Cams:\nServer: uc-httpd 1.0.0\nNETSurveillance uc-httpd\nSurveillance cams with admin:admin or admin:(none) creds\n\nHikvision Cameras:\nproduct:\"Hikvision IP Camera\"\nLink for Hikvision backdoor here: https://ipvm.com/reports/hik-exploit\n\nGeneric dork for finding cameras:\ntitle:camera\n\nGeneric dork for finding cameras (with screenshots):\nwebcam has_screenshot:true\n\nDahua Cameras:\nhttp.title:\"WEB VIEW\"\n\nSome random webcams:\nhttp.title:\"Webcam\"\n\nVulnerable Services / Servers\n\nEternalBlue SMB RCE:\nos:\"Windows 10 Home 19041\n\nProFTPD 1.3.5 (mod_copy exec; CVE-2015-3306) :\n\"220 ProFTPD 1.3.5\"\n\nAnonymous FTP Login #1:\n\"230 User anonymous\"\n\nAnonymous FTP Login #2:\n\"220\" \"230 Login successful.\" port:21\n\nAlready Logged-In as root via Telnet:\n\"root@\" port:23 -login -password -name -Session\n\nNo password for Telnet Access:\nport:23 console gateway\n\nOther Services that you can find\n\nOpenSSH:\nopenssh port:22\n\nLogitech Media Servers:\n\"Server: Logitech Media Server\" \"200 OK\"\n\nJenkins Unrestricted Dashboard:\nx-jenkins 200\n\nMySQL:\n\"product:MySQL\"\n\nMongoDB #1:\nmongodb port:27017\n\nMongoDB #2:\nproduct:\"MongoDB\"\n\nInteresting Things that you can find on Shodan\n\nRDP/VNC's WITHOUT AUTH:\n\"authentication disabled\" \"RFB 003.008\"\nremote desktop \"port:3389\"\n\nXZERES Wind Turbines:\ntitle:\"xzeres wind\"\n\ntitle:\"IP CAMERA Viewer\" Content-Length: 703\n\nMikroTik Routers:\nport:8291 os:\"MikroTik RouterOS 6.45.9\"\n\nMinecraft Servers:\n\"Minecraft Server\" \"protocol 340\" port:25565\n\nSmart TVs:\n\"Chromecast:\" port:8008\n\nMaritime Satellites:\n\"Cobham SATCOM\" OR (\"Sailor\" \"VSAT\")\nReal-time location of ships via satelite\n\nTesla PowerPack Charging Status Page:\nhttp.title:\"Tesla PowerPack System\" http.component:\"d3\"\n\nSamsung Electronic Billboards:\n\"Server: Prismview Player\"", "url": "https://t.me/lostsec/193"}, {"timestamp": "2024-05-07T20:43:15Z", "date_only": false, "value": "2024-05-07T20:43:15.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/W-f6wZWCO4dnAdFELDjHo4l86fuhQo-YNqn13QAyKW1bA54", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "fd0829f8-dc4e-406f-8be7-41fc244e28af"}, {"timestamp": "2024-05-07T23:12:19Z", "date_only": false, "value": "2024-05-07T23:12:19.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/r1PvUwOziPm76oA72goN3XQl1cawuNYc_Wi3095TUu4q47A", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "817f678b-6194-4d05-8a0e-b4b0acd6f6ff"}, {"timestamp": "2024-05-07T23:15:42Z", "date_only": false, "value": "2024-05-07T23:15:42.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/fRsWGrysxNfnfVrAINUlDHsnyDzZ8XlI0RAgeuDQlNSE2Jg", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "0a87b34d-39b8-4ca5-8c56-8cf811d1c41f"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10048-1", "record": "OPENSUSE-SU-2024:10048-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10048-1", "record": "OPENSUSE-SU-2024:10048-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10048-1", "record": "OPENSUSE-SU-2024:10048-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10048-1", "record": "OPENSUSE-SU-2024:10048-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-08-06T05:39:32.231Z", "date_only": false, "value": "2024-08-06T05:39:32.231Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2015-3306", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-12T02:21:28Z", "date_only": false, "value": "2025-01-12T02:21:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/zYP_FO4NY3tiE27NccUP27gU7zoU9jKYqvktU03MPlH4oA", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "c65332d6-d0b2-4b89-b134-ac30cc92365b"}, {"timestamp": "2025-02-06T03:13:42Z", "date_only": false, "value": "2025-02-06T03:13:42.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "418f0af4-0a48-4f33-aebe-f7ec0658b98d"}, {"timestamp": "2025-02-23T04:09:39Z", "date_only": false, "value": "2025-02-23T04:09:39.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "7a104e87-a789-4308-bd80-1444141785ca"}, {"timestamp": "2025-05-26T08:46:21Z", "date_only": false, "value": "2025-05-26T08:46:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/kn1l/6c5e129353bfb9c8637009fe0410d762", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "59b5ad43-cf0e-4a87-ad13-38c533f356c2", "url": "https://gist.github.com/kn1l/6c5e129353bfb9c8637009fe0410d762"}, {"timestamp": "2025-05-26T09:19:46Z", "date_only": false, "value": "2025-05-26T09:19:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/kn1l/eebac17da6f13c3cc71e7e240d7f8368", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "ea74a2cb-829b-487e-a7fd-25b6e858df85", "url": "https://gist.github.com/kn1l/eebac17da6f13c3cc71e7e240d7f8368"}, {"timestamp": "2025-11-03T03:00:05Z", "date_only": false, "value": "2025-11-03T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Qlu2TxpQ7PzRE5b0iJTHRMQcK91tVZ4jRE6zApsmv8LxsDQ", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "d0900be8-c385-455d-b472-e2e8f0edf09f"}, {"timestamp": "2025-11-17T12:21:23Z", "date_only": false, "value": "2025-11-17T12:21:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/59991", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "59260f5e-ad0a-476b-b6b2-63b70f318e3b", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aCVE-2015-3306 - ProFTPD - RCE Home Lab setup (Docker) easy to use for Red Teaming or Penetration Testing\nURL\uff1ahttps://github.com/netw0rk7/CVE-2015-3306-Home-Lab\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/59991"}, {"timestamp": "2026-06-03T21:00:04Z", "date_only": false, "value": "2026-06-03T21:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/kE9cLUPBGVlQM0eKet2aE5O-03aGK7deKtr42pLnxraAufk", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "54db7478-8b8b-4111-a7df-4efee6641779"}, {"timestamp": "2026-09-01T20:02:41.396Z", "date_only": false, "value": "2026-09-01T20:02:41.396747Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/10252", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "1452f807-0cfd-4982-bd5b-bb8538c95750", "content": "Exploit Collector\nProFTPd 1.3.5 Remote Command Execution\n\nhttps://4.bp.blogspot.com/-yl8JZs3kPK0/WWlvOF1SUeI/AAAAAAAAIMk/jv5-1ECzklsqpq4rMFWFx2wFFGh-Q9GlwCLcBGAs/s1600/h24.png \nProFTPd version 1.3.5 remote command execution exploit. This is a variant of the original vulnerability discovered in 2015 with credit going to R-73eN.\n\nMD5 | 65284b1eff912220e6161a800f3801c5\n\nDownload\n# Exploit Title: ProFTPd 1.3.5 - 'mod_copy' Remote Command Execution (2)\n# Date: 25/05/2021\n# Exploit Author: Shellbr3ak\n# Version: 1.3.5 \n# Tested on: Ubuntu 16.04.6 LTS\n# CVE : CVE-2015-3306\n\n#!/usr/bin/env python3\n\nimport sys\nimport socket\nimport requests\n\ndef exploit(client, target):\nclient.connect((target,21)) # Connecting to the target server\nbanner = client.recv(74)\nprint(banner.decode())\nclient.send(b'site cpfr /etc/passwd\\r\\n')\nprint(client.recv(1024).decode())\nclient.send(b'site cpto \nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/10252"}, {"timestamp": "2026-09-08T06:00:04.945Z", "date_only": false, "value": "2026-09-08T06:00:04.945919Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/10252", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "14bcd92b-bcee-4198-8653-18cb72b1520d", "content": "Exploit Collector\nProFTPd 1.3.5 Remote Command Execution\n\nhttps://4.bp.blogspot.com/-yl8JZs3kPK0/WWlvOF1SUeI/AAAAAAAAIMk/jv5-1ECzklsqpq4rMFWFx2wFFGh-Q9GlwCLcBGAs/s1600/h24.png \nProFTPd version 1.3.5 remote command execution exploit. This is a variant of the original vulnerability discovered in 2015 with credit going to R-73eN.\n\nMD5 | 65284b1eff912220e6161a800f3801c5\n\nDownload\n# Exploit Title: ProFTPd 1.3.5 - 'mod_copy' Remote Command Execution (2)\n# Date: 25/05/2021\n# Exploit Author: Shellbr3ak\n# Version: 1.3.5 \n# Tested on: Ubuntu 16.04.6 LTS\n# CVE : CVE-2015-3306\n\n#!/usr/bin/env python3\n\nimport sys\nimport socket\nimport requests\n\ndef exploit(client, target):\nclient.connect((target,21)) # Connecting to the target server\nbanner = client.recv(74)\nprint(banner.decode())\nclient.send(b'site cpfr /etc/passwd\\r\\n')\nprint(client.recv(1024).decode())\nclient.send(b'site cpto \nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/10252"}, {"timestamp": "2026-09-08T10:00:06.158Z", "date_only": false, "value": "2026-09-08T10:00:06.158953Z", "kind": "sighting", "label": "Seen", "source": "Telegram/AcUEPe8LX7ijLf5mjlUTXq8NmBuGi1YXQWjg2aEhc601QhY", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "162e3a7b-452d-4cf4-a304-44b1fee32eff"}, {"timestamp": "2026-09-09T00:00:32.996Z", "date_only": false, "value": "2026-09-09T00:00:32.996542Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/AcUEPe8LX7ijLf5mjlUTXq8NmBuGi1YXQWjg2aEhc601QhY", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "39d8721d-580f-4162-a827-bcc14698a6a8"}, {"timestamp": "2026-09-20T19:51:18Z", "date_only": false, "value": "2026-09-20T19:51:18Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10048-1", "record": "OPENSUSE-SU-2024:10048-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": false, "value": "2026-10-08T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2015-3306", "field": "timestamps.asserted_at", "uuid": "731832ff-03c8-41cd-99e7-3de4d08fcc20", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": true, "value": "2026-10-08", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2015-3306", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": true, "value": "2026-10-08", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2015-3306", "field": "evidence.0.details.date_added", "uuid": "731832ff-03c8-41cd-99e7-3de4d08fcc20", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": false, "value": "2026-10-08T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2015-3306", "field": "timestamps.first_seen_at", "uuid": "731832ff-03c8-41cd-99e7-3de4d08fcc20", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": false, "value": "2026-10-08T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2015-3306", "field": "status.status_updated_at", "uuid": "731832ff-03c8-41cd-99e7-3de4d08fcc20", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-08T17:40:54Z", "date_only": false, "value": "2026-10-08T17:40:54+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2015-3306", "field": "timestamps.asserted_at", "uuid": "917791c5-a237-490d-9c0d-8d0318ff465b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-08T17:40:54Z", "date_only": false, "value": "2026-10-08T17:40:54+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2015-3306", "field": "timestamps.first_seen_at", "uuid": "917791c5-a237-490d-9c0d-8d0318ff465b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-08T17:40:54Z", "date_only": false, "value": "2026-10-08T17:40:54+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2015-3306", "field": "status.status_updated_at", "uuid": "917791c5-a237-490d-9c0d-8d0318ff465b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-08T17:40:54.555Z", "date_only": false, "value": "2026-10-08T17:40:54.555Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2015-3306", "field": "evidence.0.details.added_date", "uuid": "917791c5-a237-490d-9c0d-8d0318ff465b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-08T18:00:01Z", "date_only": false, "value": "2026-10-08T18:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2015-3306", "field": "timestamps.recorded_at", "uuid": "731832ff-03c8-41cd-99e7-3de4d08fcc20", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-08T18:00:03.040Z", "date_only": false, "value": "2026-10-08T18:00:03.040710Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/731832ff-03c8-41cd-99e7-3de4d08fcc20", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "a9202476-f876-4bff-a39e-a43a5bdebfea", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/731832ff-03c8-41cd-99e7-3de4d08fcc20"}, {"timestamp": "2026-10-08T18:00:32.731Z", "date_only": false, "value": "2026-10-08T18:00:32.731169Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mxf22zfpjr2x", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "512c5acc-4180-4d21-8cf8-6dc153dc8470", "content": "\ud83d\uded1 CVE-2015-3306\nProFTPD ProFTPD\nEPSS 97% / KEV: No\nTL;DR: The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via t\u2026\nhttps://cvesentinel.com/report/CVE-2015-3306?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "url": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mxf22zfpjr2x"}, {"timestamp": "2026-10-08T18:31:47Z", "date_only": false, "value": "2026-10-08T18:31:47Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4MFJ-5WR8-X32Q", "record": "GHSA-4MFJ-5WR8-X32Q", "field": "modified"}, {"timestamp": "2026-10-08T19:16:11.530Z", "date_only": false, "value": "2026-10-08T19:16:11.530408Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ninjaintelgroup.bsky.social/post/3mxf6ccezvy22", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "ecd765d0-e003-4131-a3e0-bef9b535ffb8", "content": "\ud83d\udea8 NEW on CISA KEV \u2014 exploited in the wild\nProFTPD ProFTPD: ProFTPD Improper Access Control Vulnerability\nCVE-2015-3306 \u00b7 patch by 2026-10-11\n\ud83d\udd17 https://ninjasignal.ninja/intel/cve/CVE-2015-3306\n#KEV #cybersecurity #infosec", "url": "https://bsky.app/profile/ninjaintelgroup.bsky.social/post/3mxf6ccezvy22"}, {"timestamp": "2026-10-08T20:05:50.999Z", "date_only": false, "value": "2026-10-08T20:05:50.999858Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/secdb/statuses/117406827249675241", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "c9a3bc01-538b-4573-b57b-249524e96113", "content": "\ud83d\udea8 [CISA-2026:1008] CISA Adds 5 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1008)\nCISA has added 5 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.\n\u26a0\ufe0f CVE-2015-3306 (https://secdb.nttzen.cloud/cve/detail/CVE-2015-3306)- Name: ProFTPD Improper Access Control Vulnerability- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: ProFTPD- Product: ProFTPD- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: http://www.proftpd.org/ ; https://lists.debian.org/debian-security-announce/2015/msg00154.html ; https://lists.opensuse.org/archives/list/updates@lists.opensuse.org/message/WE6YZRG5UVXMGQ7IVDRYBPIWV4M6UUGM/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2015-3306\n\u26a0\ufe0f CVE-2015-5477 (https://secdb.nttzen.cloud/cve/detail/CVE-2015-5477)- Name:  ISC BIND Data Processing Errors Vulnerability- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: ISC- Product: BIND- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://web.archive.org/web/20150729014733/https://kb.isc.org/article/AA-01272 ; https://access.redhat.com/errata/RHSA-2015:1513.html; https://supportportal.juniper.net/s/article/2016-01-Security-Bulletin-Junos-Vulnerability-in-ISC-BIND-named-CVE-2015-5477 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2015-5477\n\u26a0\ufe0f CVE-2016-3081 (https://secdb.nttzen.cloud/cve/detail/CVE-2016-3081)- Name: Apache Struts Command Injection Vulnerability- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: Apache- Product: Struts- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://cwiki.apache.org/confluence/display/WW/S2-032 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2016-3081\n\u26a0\ufe0f CVE-2021-3199 (https://secdb.nttzen.cloud/cve/detail/CVE-2021-3199)- Name: ONLYOFFICE Docs Server Path Traversal Vulnerability- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: ONLYOFFICE- Product: Docs- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://github.com/ONLYOFFICE/DocumentServer/blob/903fe5ab7a275bd69c3c3346af2d21cf87ebeabf/CHANGELOG.md#563 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2021-3199\n\u26a0\ufe0f CVE-2023-22894 (https://secdb.nttzen.cloud/cve/detail/CVE-2023-22894)- Name: Strapi Cleartext Storage of Sensitive Information Vulnerability- Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: Strapi- Product: Strapi- Notes: This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve ; https://github.com/strapi/strapi/releases ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2023-22894\n#ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261008 #cisa20261008 #cve_2015_3306 #cve_2015_5477 #cve_2016_3081 #cve_2021_3199 #cve_2023_22894 #cve20153306 #cve20155477 #cve20163081 #cve20213199 #cve202322894", "url": "https://infosec.exchange/users/secdb/statuses/117406827249675241"}, {"timestamp": "2026-10-08T21:20:04.580Z", "date_only": false, "value": "2026-10-08T21:20:04.580751Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aipostdaily.bsky.social/post/3mxff7rzztp2o", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "15f7ecde-5d1e-4f7c-8fb5-1f095ce88f72", "content": "CISA added CVE-2015-3306 to its Known Exploited Vulnerabilities list (2026-10-08).\nProFTPD Improper Access Control\nEPSS 30 days before listing: 0.968 \u00b7 today: 0.968\n#infosec #KEV", "url": "https://bsky.app/profile/aipostdaily.bsky.social/post/3mxff7rzztp2o"}, {"timestamp": "2026-10-09T02:22:25.705Z", "date_only": false, "value": "2026-10-09T02:22:25.705675Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mxfw4g7rn22y", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "428d5d8d-a3ec-4912-85e9-042b94464e16", "content": "\u3010\u7dca\u6025\u3011ProFTPD CVE-2015-3306 \u307b\u304b\u30012015\u301c2023\u5e74\u516c\u8868\u306e\u53e4\u3044\u8106\u5f31\u60275\u4ef6\uff08Struts\u30fbBIND\u30fbStrapi\u30fbONLYOFFICE Docs\u542b\u3080\uff09\u304cCISA\u306eKEV\u306b\u8ffd\u52a0\u3055\u308c\u307e\u3057\u305f\u3002\u65b0\u3057\u3044\u7a74\u3067\u306f\u306a\u304f\u300c\u53e4\u3044\u7248\u304c\u6b8b\u3063\u3066\u3044\u306a\u3044\u304b\u300d\u306e\u554f\u984c\u3067\u3059\u3002\u8a72\u5f53\u88fd\u54c1\u304c\u52d5\u3044\u3066\u3044\u306a\u3044\u304b\u68da\u5378\u3057\u3057\u3001\u4fee\u6b63\u7248\u3078\u66f4\u65b0\u3057\u3066\u304f\u3060\u3055\u3044\u3002\nforsmile.jp/articles/kev...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #CVE", "url": "https://bsky.app/profile/forsmile.jp/post/3mxfw4g7rn22y"}, {"timestamp": "2026-10-09T03:55:32.860Z", "date_only": false, "value": "2026-10-09T03:55:32.860386Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2015-3306", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2026-10-09T03:55:32.860Z", "date_only": false, "value": "2026-10-09T03:55:32.860386Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2015-3306", "record": "FKIE_CVE-2015-3306", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-09T06:13:48Z", "date_only": false, "value": "2026-10-09T06:13:48+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2015-3306", "field": "timestamps.recorded_at", "uuid": "917791c5-a237-490d-9c0d-8d0318ff465b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-09T06:14:11.688Z", "date_only": false, "value": "2026-10-09T06:14:11.688120Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/917791c5-a237-490d-9c0d-8d0318ff465b", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "744241cb-6cfd-47ab-b7b9-b69d823771c0", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/917791c5-a237-490d-9c0d-8d0318ff465b"}, {"timestamp": "2026-10-09T06:31:22.693Z", "date_only": false, "value": "2026-10-09T06:31:22.693921Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mxgdzmpvrj22", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "32beb242-3b5f-4088-b431-14978bdc352e", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2015-3306: \u26a0\ufe0f CVE-2015-3306: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 96.8%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2015-3306-the-mod_copy-module-in-proftpd-135", "url": "https://bsky.app/profile/threatspotai.bsky.social/post/3mxgdzmpvrj22"}, {"timestamp": "2026-10-09T07:29:18.026Z", "date_only": false, "value": "2026-10-09T07:29:18.026971Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mxghb6xttr2g", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "883d7ba9-182b-480a-9472-6e0419ead518", "content": "\ud83d\udd34 Exploitation confirm\u00e9e (CISA KEV, ajouts du 08/10) \u00b7 5\n\u2022 ProFTPD CVE-2015-3306, CVSS 10.0\n\u2022 ISC BIND CVE-2015-5477, CVSS 7.5\n\u2022 Apache Struts CVE-2016-3081, CVSS 8.1\n\u2022 ONLYOFFICE Docs CVE-2021-3199, CVSS 9.8\n\u2022 Strapi CVE-2023-22894, CVSS 4.9", "url": "https://bsky.app/profile/cybowl.bsky.social/post/3mxghb6xttr2g"}, {"timestamp": "2026-10-09T09:06:53.311Z", "date_only": false, "value": "2026-10-09T09:06:53.311651Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/csirts.com/post/3mxgmpoqws22e", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "23da98d5-1607-4ec3-b547-35eb1e5b610a", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2015-3306: ProFTPD Improper Access Control Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2015-3306", "url": "https://bsky.app/profile/csirts.com/post/3mxgmpoqws22e"}, {"timestamp": "2026-10-09T13:10:16Z", "date_only": false, "value": "2026-10-09T13:10:16.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/dCYLV_pA78EGOMWMcBmkZJJyZWxnEntDu0inwtZNEjuraA", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "c508e396-71a8-4e9a-b5cc-e16e735ad11a"}, {"timestamp": "2026-10-09T13:10:16Z", "date_only": false, "value": "2026-10-09T13:10:16.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/dCYLV_pA78EGOMWMcBmkZJJyZWxnEntDu0inwtZNEjuraA", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "c339dc6c-4711-47ed-a176-546b9a42c92c"}, {"timestamp": "2026-10-09T16:02:13.824Z", "date_only": false, "value": "2026-10-09T16:02:13.824Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2015-3306", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-09T16:02:13.824Z", "date_only": false, "value": "2026-10-09T16:02:13.824Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2015-3306", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-09T16:17:18.210Z", "date_only": false, "value": "2026-10-09T16:17:18.210", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2015-3306", "record": "FKIE_CVE-2015-3306", "field": "lastModified"}, {"timestamp": "2026-10-09T18:25:22.762Z", "date_only": false, "value": "2026-10-09T18:25:22.762630Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxhlwebbl22f", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "59c78237-4799-4d26-a099-136fcfc285eb", "content": "\ud83e\udd16 CISA added 5 flaws to its KEV catalog after exploitation by China-linked Flax Typhoon, incl. CVE-2015-3306 (CVSS 10.0, ProFTPD mod_copy). Federal agencies must patch by Oct 11.\nhttps://thehackernews.com/2026/10/flax-typhoon-exploits-five-flaws-as.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mxhlwebbl22f"}, {"timestamp": "2026-10-11T00:00:00Z", "date_only": true, "value": "2026-10-11", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2015-3306", "field": "evidence.0.details.due_date", "uuid": "731832ff-03c8-41cd-99e7-3de4d08fcc20", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-11T11:53:38Z", "date_only": false, "value": "2026-10-11T11:53:38Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10048-1", "record": "OPENSUSE-SU-2024:10048-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-11T11:53:38Z", "date_only": false, "value": "2026-10-11T11:53:38Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10048-1", "record": "OPENSUSE-SU-2024:10048-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-12T10:41:07Z", "date_only": false, "value": "2026-10-12T10:41:07Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2015-3306", "record": "UBUNTU-CVE-2015-3306", "field": "modified"}, {"timestamp": "2026-10-12T12:35:19.848Z", "date_only": false, "value": "2026-10-12T12:35:19.848287Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/160355e6-36c4-42a6-a839-70a2c2c3a87e", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "ccfe09b5-dc3a-4f43-b04b-7d8d95b7dfb2", "url": "https://vulnerability.circl.lu/bundle/160355e6-36c4-42a6-a839-70a2c2c3a87e"}, {"timestamp": "2026-10-12T14:09:27.223Z", "date_only": false, "value": "2026-10-12T14:09:27.223087Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3mxoozh4ysjw6", "record": "CVE-2015-3306", "field": "creation_timestamp", "uuid": "075d21ae-73a1-403e-bc6b-3f0dc73f407c", "content": "CISA KEV | CVE-2015-3306 | ProFTPD / ProFTPD\n\nCISA lists this vulnerability as exploited in the wild. Check affected products and vendor guidance.\n\nSource: CISA KEV\n\nFull analysis: https://t.me/aiutocomputerhelp_lab/1233", "url": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3mxoozh4ysjw6"}]}