bcoles
10 credited records · 0 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2012-10040Weaponized | Openfiler v2.x NetworkCard Command Executionopenfiler · openfiler · CWE-78 | Critical9.4 | — | 3.3% | Aug 11, 2025 |
40Plan | CVE-2012-10039Weaponized | ZEN Load Balancer Filelog Command Executionzen load balancer · zen load balancer · CWE-78 | Critical9.4 | — | 3.4% | Aug 11, 2025 |
60This week | CVE-2012-10050Weaponized | CuteFlow <= 2.11.2 Arbitrary File Upload RCEcuteflow.org · cuteflow · CWE-434 | Critical9.3 | — | 2.0% | Aug 8, 2025 |
40Plan | CVE-2012-10048Weaponized | Zenoss 3.x showDaemonXMLConfig Command Executionzenoss, inc. · zenoss core · CWE-22 | High8.7 | — | 3.6% | Aug 8, 2025 |
60This week | CVE-2012-10041Weaponized | WAN Emulator v2.3 Command Executionwan emulator · wan emulator · CWE-78 | Critical9.3 | — | 4.0% | Aug 8, 2025 |
60This week | CVE-2013-10066Weaponized | Kordil EDMS v2.2.60rc3 Unauthenticated Arbitrary File Uploadkordil · edms · CWE-434 | Critical10.0 | — | 1.8% | Aug 5, 2025 |
60This week | CVE-2013-10037Weaponized | WebTester 5.x install2.php Unauthenticated Command Executioneppler software · webtester · CWE-78 | Critical9.3 | — | 14.0% | Jul 31, 2025 |
40Plan | CVE-2013-10035Weaponized | ProcessMaker Open Source < 2.5.2 neoclassic Skin PHP Code Executionprocessmaker, inc. · processmaker open source · CWE-94 | High8.7 | — | 2.4% | Jul 31, 2025 |
60This week | CVE-2025-34099Weaponized | VICIdial vicidial_sales_viewer.php Unauthenticated Command Injection via Basic Auth Passwordvicidial group · vicidial · CWE-20 | Critical9.3 | — | 1.6% | Jul 10, 2025 |
40Plan | CVE-2025-34097Weaponized | ProcessMaker < 3.5.4 Authenticated Plugin Upload RCEprocessmaker inc. · processmaker · CWE-434 | High8.6 | — | 1.7% | Jul 10, 2025 |
- CVE-2012-1004040Plan
Openfiler v2.x NetworkCard Command Execution
CriticalCVSS 9.4WeaponizedEPSS 3%openfiler · openfilerAug 11, 2025
- CVE-2012-1003940Plan
ZEN Load Balancer Filelog Command Execution
CriticalCVSS 9.4WeaponizedEPSS 3%zen load balancer · zen load balancerAug 11, 2025
- CVE-2012-1005060This week
CuteFlow <= 2.11.2 Arbitrary File Upload RCE
CriticalCVSS 9.3WeaponizedEPSS 2%cuteflow.org · cuteflowAug 8, 2025
- CVE-2012-1004840Plan
Zenoss 3.x showDaemonXMLConfig Command Execution
HighCVSS 8.7WeaponizedEPSS 3%zenoss, inc. · zenoss coreAug 8, 2025
- CVE-2012-1004160This week
WAN Emulator v2.3 Command Execution
CriticalCVSS 9.3WeaponizedEPSS 4%wan emulator · wan emulatorAug 8, 2025
- CVE-2013-1006660This week
Kordil EDMS v2.2.60rc3 Unauthenticated Arbitrary File Upload
CriticalCVSS 10.0WeaponizedEPSS 1%kordil · edmsAug 5, 2025
- CVE-2013-1003760This week
WebTester 5.x install2.php Unauthenticated Command Execution
CriticalCVSS 9.3WeaponizedEPSS 14%eppler software · webtesterJul 31, 2025
- CVE-2013-1003540Plan
ProcessMaker Open Source < 2.5.2 neoclassic Skin PHP Code Execution
HighCVSS 8.7WeaponizedEPSS 2%processmaker, inc. · processmaker open sourceJul 31, 2025
- CVE-2025-3409960This week
VICIdial vicidial_sales_viewer.php Unauthenticated Command Injection via Basic Auth Password
CriticalCVSS 9.3WeaponizedEPSS 1%vicidial group · vicidialJul 10, 2025
- CVE-2025-3409740Plan
ProcessMaker < 3.5.4 Authenticated Plugin Upload RCE
HighCVSS 8.6WeaponizedEPSS 1%processmaker inc. · processmakerJul 10, 2025