Insecure direct object reference in Foxit eSign's signing invitation acceptance process allows authenticated attackers to forge document signatures by manipulating object identifiers. Attackers with low-level privileges can access high-sensitivity resources and modify signing workflows without proper authorization, potentially compromising document integrity and authenticity in electronic signature workflows. EPSS score of 0.03% (8th percentile) indicates low observed exploitation probability, with no public exploit code or active exploitation confirmed at time of analysis.
Path traversal in Dell PowerStore's Service user account allows a locally authenticated low-privileged attacker to write to arbitrary system files across all PowerStore appliance models running firmware before 4.4.0.0-2692403. The flaw (CWE-35) sits in the Service user's file-handling logic, which fails to sanitize path components, enabling escape from the intended file scope to system-critical locations. No public exploit exists and SSVC rates exploitation as none, placing this firmly in a planned-patching rather than emergency-response tier despite the elevated CVSS integrity and availability scores.
Session fixation in listmonk v6.0.0 allows authenticated sessions to persist after password reset or password change, enabling attackers with stolen session cookies to maintain account access despite credential recovery by the victim. Authenticated remote attackers (PR:L) can exploit this to retain high confidentiality impact access. No public exploit code identified at time of analysis, though the vulnerability is trivially reproducible per the detailed proof-of-concept. EPSS data not available; vulnerability confirmed in production release v6.0.0 via GitHub Security Advisory.