Remote code execution in AVer PTC310UV2 conference camera firmware v.0.1.0000.59 is reachable by unauthenticated network attackers through command injection in the SendAction function. Unsanitized input passed to the SendAction API is processed directly as a system command, enabling full device compromise on any network-accessible unit. A public proof-of-concept exploit exists on GitHub, materially lowering the attack barrier despite a low EPSS exploitation probability of 0.97%; no active exploitation has been confirmed via CISA KEV.
Remote code execution in PrestaShop 8.2.0 is achievable through a PHAR deserialization flaw in the theme import endpoint (/themes/import), where a crafted POST request containing a malicious PHP Archive triggers arbitrary code execution on the server. A publicly available proof-of-concept exploit exists on GitHub, lowering the technical barrier for skilled attackers. No active exploitation has been confirmed in CISA KEV, but the combination of a public POC and a targeted admin-facing endpoint warrants prompt remediation for any deployment on this version.
Unauthenticated remote code execution in PrestaShop 8.2.0 is achievable via PHAR deserialization in the _getHeaders function, triggered through a crafted POST request. The publicly available proof-of-concept lowers the bar for exploitation against unpatched storefronts. No active KEV listing exists, but the network-accessible attack surface of e-commerce deployments and the confirmed exploit code make this a meaningful priority for PrestaShop 8.2.0 operators despite a low EPSS score of 0.77%.
SQL injection in Campcodes Online Recruitment Management System 1.0 exposes the admin AJAX endpoint at /admin/ajax.php?action=save_user to unauthenticated remote attackers who can manipulate the id parameter to inject arbitrary SQL. Based on the CVSS 4.0 vector (PR:N/UI:N/AV:N), no authentication or user interaction is required, enabling direct database read, write, and potential availability disruption. A public proof-of-concept exploit is available on GitHub, lowering the skill barrier for exploitation, though EPSS at 0.07% (21st percentile) and absence from CISA KEV indicate no confirmed widespread active exploitation at time of analysis.
SQL injection in Campcodes Online Recruitment Management System 1.0 allows remote attackers to manipulate database queries via the unsanitized `id` parameter in `/admin/ajax.php?action=delete_recruitment_status`. A publicly available proof-of-concept exploit has been disclosed on GitHub. No active exploitation is confirmed by CISA KEV, and EPSS sits at 0.07% (21st percentile), indicating low observed exploitation interest likely reflecting the product's niche deployment footprint rather than difficulty of exploitation.
SQL injection in Online Farm System 1.0 (/categoryvalue.php) exposes remote unauthenticated attackers a direct path to read, modify, or delete underlying database contents by manipulating the Value parameter. The affected product is a PHP web application identified under CPE cpe:2.3:a:anisha:online_farm_system:1.0. A public proof-of-concept exploit exists on GitHub, though EPSS at 0.07% (20th percentile) and absence from CISA KEV indicate negligible observed exploitation, consistent with the product's extremely limited real-world deployment footprint.
SQL injection in code-projects Online Farm System 1.0 allows unauthenticated remote attackers to manipulate backend database queries by supplying crafted input to the Username parameter of the /register.php registration endpoint. The vulnerability is confirmed as critical by the reporter and a public proof-of-concept exploit is documented in a GitHub issue. No active exploitation has been confirmed by CISA KEV, and the EPSS score of 0.07% (20th percentile) reflects the product's niche footprint despite the low technical barrier to exploitation.
SQL injection in Online Farm System 1.0 exposes the unauthenticated password-reset endpoint `/forgot_pass.php` to remote attackers who can manipulate the `email` parameter to inject arbitrary SQL commands against the backend database. A public exploit PoC was disclosed on GitHub (https://github.com/wllovemy/cve/issues/10) at time of reporting, lowering the technical barrier for exploitation. Despite the straightforward, unauthenticated attack surface, EPSS is very low at 0.07% (20th percentile), consistent with the product's minimal real-world deployment footprint and niche audience; no CISA KEV listing exists.
SQL injection in code-projects Vehicle Management 1.0 allows remote unauthenticated attackers to manipulate the `sno` parameter in `/edit1.php`, enabling unauthorized reading, modification, or deletion of backend database contents. A public proof-of-concept is disclosed on GitHub (zgqsdx/cve/issues/1), materially lowering the exploitation barrier despite an EPSS score of 0.07% (20th percentile) that reflects the application's negligible real-world deployment footprint. This vulnerability is not listed in the CISA KEV catalog; no public exploit identified at time of analysis as actively exploited in the wild, though publicly available exploit code exists.
SQL injection in code-projects Vehicle Management 1.0 exposes unauthenticated remote attackers to arbitrary database query manipulation via the `company` parameter in /filter3.php. A public POC has been disclosed on GitHub, enabling database enumeration, credential or record exfiltration, and data modification with no authentication required. Despite the ease of exploitation, an EPSS score of 0.07% (20th percentile) and the absence of a CISA KEV listing reflect the product's negligible real-world deployment footprint - consistent with a tutorial/demo application rather than enterprise software.
SQL injection in code-projects Exam Form Submission 1.0 exposes the unauthenticated /register.php registration endpoint to database manipulation via the unsanitized USN parameter. Any network-accessible deployment is vulnerable to unauthenticated remote exploitation - no credentials or special configuration are required. A public proof-of-concept exploit is available on GitHub; however, EPSS at 0.07% (20th percentile) indicates no observed widespread automated exploitation at time of analysis, and no CISA KEV listing exists.
SQL injection in code-projects Exam Form Submission 1.0 exposes the /admin/delete_s8.php endpoint to remote exploitation via a manipulated ID parameter. The unsanitized input is passed directly into a SQL query, enabling an attacker to read, modify, or delete database records. A public proof-of-concept has been disclosed on GitHub; however, EPSS at 0.07% (20th percentile) and absence from CISA KEV indicate no widespread automated exploitation has been observed at time of analysis.
SQL injection in code-projects Exam Form Submission 1.0 exposes the `/admin/delete_s7.php` endpoint to remote database manipulation through an unsanitized `ID` parameter, enabling unauthenticated attackers to read, modify, or delete backend database content. The CVSS 4.0 vector confirms no authentication and no user interaction are required, making this trivially exploitable from the network; a public proof-of-concept has been disclosed on GitHub at https://github.com/vullis0/cve/issues/1. Despite accessible attack conditions, an EPSS score of 0.07% (20th percentile) and absence from CISA KEV indicate no confirmed widespread exploitation at time of analysis, likely reflecting the product's extremely limited deployment footprint.
Safari and related Apple platforms crash when processing maliciously crafted web content due to improper memory handling in a buffer overflow condition (CWE-119). The vulnerability affects Safari 18.5 and earlier, iOS 18.5 and earlier, iPadOS 18.5 and earlier, macOS Sequoia 15.5 and earlier, tvOS 18.5 and earlier, visionOS 2.5 and earlier, and watchOS 11.5 and earlier. An unauthenticated remote attacker can trigger denial of service by hosting or injecting malicious web content that causes an unexpected browser crash. No public exploit code or active exploitation has been confirmed at time of analysis, though the low EPSS score (0.15%) suggests minimal real-world exploitation likelihood despite the moderate CVSS 6.5 severity.
Safari and Apple platform web content processing crashes due to a buffer overflow vulnerability when handling maliciously crafted web content. Affects Safari 18.5 and earlier, iOS 18.5 and earlier, iPadOS 18.5 and earlier, macOS Sequoia 15.5 and earlier, tvOS 18.5 and earlier, visionOS 2.5 and earlier, and watchOS 11.5 and earlier. Unauthenticated remote attackers can trigger a denial of service by enticing users to visit a malicious webpage, resulting in application crash with no data theft or code execution capability. No public exploit identified at time of analysis; EPSS score of 0.12% indicates low real-world exploitation probability despite moderate CVSS rating.
Safari and Apple operating systems contain a use-after-free vulnerability in web content processing that causes unexpected application crashes when users visit maliciously crafted websites. The flaw affects Safari 18.5 and earlier, iOS 18.5 and earlier, iPadOS 18.5 and earlier (also iPadOS 17.7.8 and earlier), macOS Sequoia 15.5 and earlier, tvOS 18.5 and earlier, visionOS 2.5 and earlier, and watchOS 11.5 and earlier. Remote attackers can trigger a denial-of-service condition requiring only user interaction to visit a malicious page, with no elevated privileges required. Apple has released patches for all affected platforms; the EPSS score of 0.10% (28th percentile) indicates low real-world exploitation probability despite the accessibility of the attack vector.
Safari and related Apple platforms crash when processing maliciously crafted web content due to a memory handling vulnerability (buffer overflow). Affects Safari 18.5 and earlier, iOS 18.5 and earlier, iPadOS 18.5 and earlier, macOS Sequoia 15.5 and earlier, tvOS 18.5 and earlier, visionOS 2.5 and earlier, and watchOS 11.5 and earlier. An unauthenticated remote attacker can trigger a denial of service by hosting or injecting malicious web content, with user interaction required to visit the affected content. No public exploit code or active exploitation has been confirmed (EPSS 0.08% indicates minimal real-world exploitation activity to date).
Safari and macOS contain a logic flaw that allows incorrect association of a download's origin, potentially disclosing information about file provenance to local attackers. The vulnerability affects Safari 18.6 and earlier, plus macOS Sequoia 15.6 and earlier, and requires local access (no authentication needed) to exploit. This is a low-exploitation-probability issue (EPSS 0.03%) with no confirmed active exploitation or public POC at time of analysis.
Denial-of-service vulnerability in Apple's WebKit engine affects Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS through improper memory handling during web content processing. Local attackers without authentication can trigger this vulnerability via crafted web content to cause application crashes. Vendor-released patches are available across all affected platforms; EPSS score of 0.02% indicates minimal real-world exploitation likelihood despite the moderate CVSS 6.2 rating.
Universal cross-site scripting (XSS) in Safari and macOS allows remote attackers to execute arbitrary JavaScript in the context of visited websites by processing maliciously crafted web content. The vulnerability affects Safari 18.5 and earlier, and macOS Sequoia 15.5 and earlier, and is fixed in Safari 18.6 and macOS Sequoia 15.6. Attack requires user interaction (clicking a malicious link or visiting a compromised site) but carries no authentication requirement. EPSS score of 0.04% indicates low real-world exploitation probability despite the moderate CVSS rating.
A flaw exists within the Linux kernel's handling of new TCP connections. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Denial of service via mount namespace privilege escalation in Linux kernel allows local authenticated users to crash the system by changing propagation settings on mounts outside their namespace. The do_change_type() function in the mount subsystem failed to validate that mounts belong to the caller's namespace, enabling unprivileged users with local access to trigger an availability impact. CVSS 5.5 reflects local authentication requirement and denial of service scope; EPSS 0.04% indicates low real-world exploitation probability despite the vulnerability being patched upstream.
Local apps can access sensitive user data through inadequate log redaction in iPadOS and macOS, allowing information disclosure when a user interacts with a malicious application. Apple has released patches for iPadOS 17.7.9 and macOS versions 15.6 (Sequoia), 14.7.7 (Sonoma), and 13.7.7 (Ventura) that implement improved data redaction in logging. The EPSS score of 0.01% and absence of public exploit code indicate low real-world exploitation likelihood despite moderate CVSS scoring.
Improper sandbox enforcement in macOS allows local applications to read files outside their designated sandbox boundaries without user authorization. The vulnerability affects macOS Sequoia before 15.6, macOS Sonoma before 14.7.7, and macOS Ventura before 13.7.7. An attacker controlling a sandboxed application can bypass file access restrictions through a permissions validation flaw, enabling confidentiality breaches of user data outside the app's intended scope. No public exploit code or active exploitation has been confirmed; the EPSS score of 0.01% indicates minimal real-world exploitation likelihood despite the medium CVSS rating.
Address bar spoofing in Apple Safari, iOS, and iPadOS allows remote attackers to deceive users about the website they are visiting through malicious web content, exploiting a user interface flaw that fails to adequately distinguish legitimate from spoofed address bar information. The vulnerability affects Safari before version 18.6, iOS before 18.6, and iPadOS before 18.6, and requires user interaction to visit a malicious site. No public exploit code or active exploitation has been confirmed; the EPSS score of 0.04% reflects low real-world exploitation probability despite the network attack vector.
Path traversal vulnerability in macOS allows local applications to bypass directory path validation and access protected user data without authentication. Affecting macOS Ventura, Sonoma, and Sequoia, the flaw stems from improper path parsing that enables an unprivileged app to read sensitive files outside intended boundaries. Apple has released patches for all affected versions (Ventura 13.7.7, Sonoma 14.7.7, Sequoia 15.6); exploitation requires local access and app execution capability, resulting in low real-world risk despite moderate CVSS score.
Privacy indicator bypass in Apple iOS and iPadOS allows local attackers to determine microphone or camera access without user notification. The vulnerability affects iOS 18.6 and earlier, and iPadOS 17.7.9 and earlier, enabling unauthorized monitoring of privacy-sensitive device activity. Apple has released patched versions (iOS 18.6, iPadOS 18.6, and iPadOS 17.7.9) that add logic to correctly display privacy indicators when microphone or camera access occurs. EPSS exploitation probability is very low at 0.02%, and no public exploit code has been identified.
Out-of-bounds read in Apple Safari and system WebKit implementations allows local attackers to disclose internal application state by processing maliciously crafted web content, affecting Safari 18.5 and earlier, iOS 18.5 and earlier, iPadOS 18.5 and earlier, macOS Sequoia 15.5 and earlier, tvOS 18.5 and earlier, visionOS 2.5 and earlier, and watchOS 11.5 and earlier. The vulnerability requires local access and user interaction but poses information disclosure risk with CVSS 4.0 and EPSS 0.02% (very low exploitation probability); no public exploit code or active exploitation has been identified.
Out-of-bounds memory read in Apple's image processing component allows local attackers without privileges to disclose sensitive process memory by supplying a maliciously crafted image, affecting iOS 18.5 and earlier, iPadOS 17.7.8 and earlier, macOS Sequoia 15.5 and earlier, macOS Sonoma 14.7.6 and earlier, tvOS 18.5 and earlier, visionOS 2.5 and earlier, and watchOS 11.5 and earlier. No public exploit code or active exploitation has been identified; exploitation requires local access and user interaction to process the malicious image. The EPSS score of 0.02% (5th percentile) indicates minimal real-world exploitation likelihood despite the broad platform impact.
Insufficient permission checks in Apple operating systems allow local apps to access user-sensitive data without proper authorization. The vulnerability affects iOS 18.5 and earlier, iPadOS 18.5 and earlier (and iPadOS 17.7.8 and earlier), macOS Sequoia 15.5 and earlier, tvOS 18.5 and earlier, visionOS 2.5 and earlier, and watchOS 11.5 and earlier. An unprivileged local application can exploit this to read sensitive user information by circumventing the permission model. No public exploit code has been identified at time of analysis, and EPSS scoring (0.02%, 4th percentile) indicates very low real-world exploitation probability despite the information disclosure impact.