Arbitrary file upload in the admin/profile_update.php script of Fabian Ros Library Management System 2.0 permits remote authenticated attackers to upload files without type or extension restrictions, potentially leading to remote code execution. Exploit code is publicly available, though EPSS exploitation probability is low (0.08%) and no active exploitation has been reported. The vulnerability is considered critical due to the ease of exploitation combined with the possibility of full system compromise.
SQL injection in itsourcecode Insurance Management System up to version 1.0 allows remote attackers to inject arbitrary SQL commands via the agent_id parameter in the /insertAgent.php endpoint. Publicly available exploit code exists, though EPSS indicates low exploitation probability (0.04%) and no active exploitation is confirmed in CISA KEV. The vulnerability can lead to unauthorized database access and data manipulation.
Heap-based buffer overflow in plan9port's x509 certificate parsing library allows adjacent network attackers with low privileges to potentially execute arbitrary code or crash the service. Exploit code is publicly available, but no active exploitation has been confirmed (not listed in CISA KEV).
Local denial of service in 9fans plan9port via a null pointer dereference in the X.509 certificate parsing function value_decode. A local attacker with low privileges can crash applications using the libsec port, disrupting availability. Public exploit code is available, but EPSS indicates low exploitation likelihood and no active exploitation has been reported via CISA KEV.
Local heap-based buffer overflow in mruby compiler (codegen.c) through version 3.4.0-rc2 allows low-privileged local attackers to cause denial of service. The flaw resides in the scope_new function where missing initialization of the nregs variable leads to heap corruption when processing a crafted Ruby script. Public exploit code is available, though no active exploitation in the wild has been confirmed.
Cleartext storage of Wi-Fi credentials in FNKvision FNK-GU2 firmware up to 40.1.7 allows a physically present attacker with high privileges on the device to extract sensitive information from the file /rom/wpa_supplicant.conf. The exploit has been publicly disclosed, but EPSS indicates a 0.01% exploitation probability, and no active exploitation has been confirmed.
Password hashes stored in /etc/shadow on FNKvision FNK-GU2 IoT cameras use the weak MD5 algorithm, enabling local attackers with physical access to crack credentials. A public exploit exists, but no active exploitation has been reported. The vulnerability has a low assessed risk due to required physical access, high attack complexity, and elevated privileges.