Sonny
watchTowr
10 credited records · 6 in the last 12 months · 1 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2026-18658No exploit | IBM Operational Decision Manager for Aug 2026 - Multiple CVEs addressedibm · operational decision manager · CWE-89 | Critical9.8 | — | 0.7% | Sep 4, 2026 |
57Plan | CVE-2026-2699Proof of concept | EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC)progress · sharefile storage zones controller · CWE-284 | Critical9.8 | — | 58.3% | Apr 2, 2026 |
44Plan | CVE-2025-71260Proof of concept | BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 VIEWSTATE Deserialization RCEbmc · footprints · CWE-502 | High8.7 | — | 34.3% | Mar 19, 2026 |
25Monitor | CVE-2025-71259Proof of concept | BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Blind SSRF in externalfeed/RSSbmc · footprints · CWE-918 | Medium5.3 | — | 12.9% | Mar 19, 2026 |
26Monitor | CVE-2025-71258Proof of concept | BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Blind SSRF in searchWebbmc · footprints · CWE-918 | Medium5.3 | — | 17.4% | Mar 19, 2026 |
41Plan | CVE-2025-71257Proof of concept | BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Authentication Bypassbmc · footprints · CWE-306 | Medium6.9 | — | 45.3% | Mar 19, 2026 |
60This week | CVE-2025-34299Weaponized | Monsta FTP <= 2.11 Unauthenticated Arbitrary File Uploadmonstaftp · monsta ftp · CWE-434 | Critical9.3 | — | 72.6% | Nov 7, 2025 |
96Now | CVE-2025-34028Weaponized | Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversalcommvault · commvault · CWE-22 | Critical9.3 | KEV | 97.5% | Apr 22, 2025 |
27Monitor | CVE-2025-0109No exploit | PAN-OS: Unauthenticated File Deletion Vulnerability on the Management Web Interfacepalo alto networks · cloud ngfw · CWE-73 | Medium6.9 | — | 0.6% | Feb 12, 2025 |
39Monitor | CVE-2023-30804No exploit | Sangfor Next-Gen Application Firewall Authenticated File Disclosuresangfor · next-gen application firewall · CWE-22 | Medium6.9 | — | 38.9% | Oct 10, 2023 |
- CVE-2026-1865839Monitor
IBM Operational Decision Manager for Aug 2026 - Multiple CVEs addressed
CriticalCVSS 9.8No exploitEPSS 0%ibm · operational decision managerSep 4, 2026
- CVE-2026-269957Plan
EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC)
CriticalCVSS 9.8Proof of conceptEPSS 58%progress · sharefile storage zones controllerApr 2, 2026
- CVE-2025-7126044Plan
BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 VIEWSTATE Deserialization RCE
HighCVSS 8.7Proof of conceptEPSS 34%bmc · footprintsMar 19, 2026
- CVE-2025-7125925Monitor
BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Blind SSRF in externalfeed/RSS
MediumCVSS 5.3Proof of conceptEPSS 12%bmc · footprintsMar 19, 2026
- CVE-2025-7125826Monitor
BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Blind SSRF in searchWeb
MediumCVSS 5.3Proof of conceptEPSS 17%bmc · footprintsMar 19, 2026
- CVE-2025-7125741Plan
BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Authentication Bypass
MediumCVSS 6.9Proof of conceptEPSS 45%bmc · footprintsMar 19, 2026
- CVE-2025-3429960This week
Monsta FTP <= 2.11 Unauthenticated Arbitrary File Upload
CriticalCVSS 9.3WeaponizedEPSS 72%monstaftp · monsta ftpNov 7, 2025
- CVE-2025-3402896Now
Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversal
CriticalCVSS 9.3KEVWeaponizedEPSS 97%commvault · commvaultApr 22, 2025
- CVE-2025-010927Monitor
PAN-OS: Unauthenticated File Deletion Vulnerability on the Management Web Interface
MediumCVSS 6.9No exploitEPSS 0%palo alto networks · cloud ngfwFeb 12, 2025
- CVE-2023-3080439Monitor
Sangfor Next-Gen Application Firewall Authenticated File Disclosure
MediumCVSS 6.9No exploitEPSS 38%sangfor · next-gen application firewallOct 10, 2023