Inefficient regular expression in RocketChat's IRC parseMessage function allows remote authenticated users to cause a denial of service via crafted input. A publicly available exploit exists, but no active exploitation has been reported. EPSS score is low (0.22%), indicating low exploitation likelihood.
Regular expression denial of service (ReDoS) in Metabase 0.54.10 allows remote low-privileged attackers to trigger CPU exhaustion via crafted data URIs processed by the parseDataUri function. The vulnerability stems from an inefficient regex susceptible to catastrophic backtracking, leading to availability impact. Public exploit code is available, and a vendor patch has been released.
Inefficient regular expression complexity in Unitech pm2 up to 6.0.6 allows remote attackers to cause a denial of service via crafted input to the Config.js file. A publicly available exploit exists, but no active exploitation has been confirmed. EPSS score is low (0.12%), indicating limited exploitation likelihood.
SQL injection in PHPGurukul Nipah Virus Testing Management System 1.0 allows a remote, low-privileged attacker to inject SQL commands via the 'assignto' parameter of /test-details.php, potentially reading or modifying database contents. Public exploit code is available, but the EPSS score of 0.09% (25th percentile) suggests very low probability of widespread exploitation. The vulnerability has not been added to CISA's KEV catalog, indicating no known active exploitation.
Cross-site request forgery (CSRF) in WebStack-Guns 1.0 allows an attacker to perform unauthorized actions on behalf of an authenticated user. The vulnerability is triggered via a crafted request and requires user interaction. Public exploit code exists, but no active exploitation has been reported.
SQL injection in code-projects Chat System 1.0 allows remote authenticated attackers to manipulate the cid parameter in /user/confirm_password.php, potentially leading to data leakage or modification. A public exploit exists, but no active exploitation has been confirmed.
SQL injection in PHPGurukul Nipah Virus Testing Management System 1.0 allows authenticated remote attackers to extract database contents via the searchdata parameter in /patient-report.php. A public exploit exists, but no active exploitation has been confirmed (EPSS 0.06%).
SQL injection in code-projects Patient Record Management System 1.0 allows remote authenticated attackers to execute arbitrary SQL commands via the itr_no parameter in /urinalysis_record.php. A public exploit exists, but no active exploitation has been reported and EPSS risk is low.
Cross-site request forgery in Tenda AC9 router firmware 15.03.02.13 allows an attacker to trigger unintended actions like reboot or factory reset by tricking an authenticated admin into visiting a malicious page. Public exploit code exists, but no active exploitation has been confirmed.
CVE-2025-5877 is a security vulnerability (CVSS 6.3). Risk factors: public PoC available.
Cross-site scripting in Emlog Pro up to 2.5.7 allows remote authenticated attackers to inject web scripts via the active_post parameter in /admin/article.php. A low-privileged user can craft a malicious URL that, when clicked by an admin, executes arbitrary JavaScript in the admin's browser. Exploit code is publicly available, but EPSS indicates low exploitation probability (0.07%) and the vulnerability is not listed in CISA KEV.
Stored cross-site scripting in WebStack-Guns 1.0 allows authenticated users with file upload privileges to inject arbitrary JavaScript via the File parameter in UserMgrController.java. Public exploit code exists, but no active exploitation has been reported and EPSS risk is low (0.03%).
Stored cross-site scripting in WukongCRM 9.0 allows authenticated attackers to inject arbitrary web scripts via the file upload functionality in AdminSysConfigController.java. An attacker with low privileges can upload a malicious file, which executes in the context of a victim user who views it, potentially leading to session hijacking or defacement. A public exploit is available, but the vendor has not responded.
Privilege escalation via a sandbox escape in Redash Python data source allows authenticated adjacent-network attackers with low privileges to execute arbitrary code, bypassing standard safeguards. This vulnerability affects Redash versions through 10.1.0/25.1.0 only when the optional, disabled-by-default Python data source is manually enabled. A publicly available proof-of-concept demonstrates the technique, but the vendor disputes it as a bug, noting the feature is explicitly discouraged due to inherent security risks.
A security vulnerability in eCharge Hardy Barth Salia PLCC (CVSS 6.3). Remediation should follow standard vulnerability management procedures.
Improper restriction of excessive authentication attempts in Tenda TDSEE App up to 1.7.12 allows remote attackers to brute-force password reset confirmation codes, potentially leading to account takeover. A public exploit exists, but exploitation is difficult due to high attack complexity. No active exploitation in CISA KEV.
Path traversal vulnerability in Whistle 2.9.98 allows attackers to read arbitrary files via the /cgi-bin/sessions/get-temp-file endpoint by manipulating the filename argument. Public exploit code exists, but no active exploitation has been reported and EPSS score is low (0.04%).
Cross-site request forgery in Konica Minolta bizhub multifunction printers up to firmware version 20250202 allows a remote attacker to trick an authenticated administrator into performing unintended actions, such as altering device settings. A public exploit is available, though no active exploitation has been confirmed by CISA KEV, and EPSS indicates a low probability of widespread exploitation (0.04%).
Cross-site scripting (XSS) vulnerability in Konica Minolta bizhub multifunction printers (firmware up to 20250202) allows remote attackers with low-privilege access to inject arbitrary web scripts via the Model Name parameter in the Display MFP Information List component. When an administrative user views the crafted page, the injected script executes in their browser, potentially leading to session hijacking or credential theft. Publicly available exploit code exists, though no active exploitation in the wild has been confirmed.
A security vulnerability in A vulnerability classified as critical (CVSS 5.3). Remediation should follow standard vulnerability management procedures.
Local out-of-bounds write in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb allows an attacker with local access to trigger memory corruption via the parse_variables_option function in utilities/pspp-convert.c. Public exploit code exists, but no active exploitation has been confirmed. EPSS score is low (0.03%), indicating limited exploitation likelihood.
Inefficient regular expression complexity in brace-expansion up to versions 1.1.11/2.0.1/3.0.0/4.0.0 allows remote attackers to cause a denial of service via a crafted brace pattern. The vulnerability is publicly known with a proof of concept, but exploitation is difficult due to high attack complexity and low EPSS score (0.03%). No active exploitation in the wild has been reported.