Remote command injection in GitPilot-MCP allows unauthenticated attackers to execute arbitrary system commands via the repo_path function in main.py. The vulnerability affects all versions up to commit 9ed9f153ba4158a2ad230ee4871b25130da29ffd, with publicly available exploit code demonstrating practical exploitation. CVSS 7.3 (High) with network vector and no authentication required indicates significant exposure, though CVSS impact ratings (L/L/L) suggest attackers may have limited privileges in command execution context.
Remote denial of service in Cesanta Mongoose up to version 7.20 allows unauthenticated attackers to trigger an infinite loop via manipulation of TCP option length parameters in the handle_opt function, causing service unavailability. Publicly available exploit code exists. Patch released in version 7.21.
Improper authorization in Vanna AI's Legacy Flask API allows remote unauthenticated attackers to bypass authentication controls and gain unauthorized access. Affects Vanna versions up to 2.0.2. A publicly available proof-of-concept exploit has been disclosed on GitHub, though vendor has not responded to disclosure. CVSS 7.3 severity reflects network-accessible attack with low complexity requiring no privileges or user interaction, enabling confidentiality, integrity, and availability impacts.
Unintended intermediary exposure in go-kratos kratos up to 2.9.2 allows remote attackers to disclose sensitive information via manipulation of the http.DefaultServeMux fallback handler in the NewServer function. The vulnerability has publicly available exploit code and affects the HTTP transport layer with a CVSS score of 5.5, representing a confidentiality impact without availability or integrity concerns.
SQL injection in KLiK SocialMediaWebsite 1.0.1 and earlier allows remote unauthenticated attackers to execute arbitrary SQL commands via the c_id parameter in /includes/get_message_ajax.php. The vulnerability targets the private message handling component and permits unauthorized database access, modification, and potential data exfiltration. CVSS 7.3 reflects network-accessible, low-complexity exploitation requiring no authentication or user interaction, with partial impact to confidentiality, integrity, and availability. No public exploit code or CISA KEV listing identified at time of analysis, suggesting limited observed exploitation despite the accessible attack surface.
Remote command injection in PicoClaw Web Launcher Management Plane (versions up to 0.2.4) allows unauthenticated attackers to execute arbitrary system commands via the /api/gateway/restart endpoint. CVSS 7.3 (AV:N/AC:L/PR:N/UI:N) indicates network-accessible exploitation without authentication. Proof-of-concept code exists (CVSS:E:P). Vendor has not responded to responsible disclosure (reported via GitHub issue #2307), indicating no official patch is available. The Web Launcher Management Plane component suggests this affects administrative/control interfaces, making it a high-priority target for internet-exposed deployments.
Denial-of-service in the Linux kernel's traffic control `act_csum` module allows a local low-privileged user to crash the kernel by exploiting missing VLAN header validation in `tcf_csum_act()`. Systems running any Linux kernel version from the introducing commit through the stable patch releases (pre-6.12.83, pre-6.18.24, pre-6.19.14) and configured with the `act_csum` tc action on paths carrying nested VLAN-tagged traffic are vulnerable. No public exploit has been identified and EPSS stands at 0.02% (5th percentile), indicating minimal real-world exploitation probability, but the issue is patch-confirmed across multiple stable branches.
Out-of-bounds array access in the Linux kernel's netfilter xt_multiport module enables a local attacker with low privileges to crash the system via a crafted malformed iptables rule. The checkentry validation path for multiport v1 rules fails to verify range encoding, allowing ports_match_v1() to step past the end of the ports[] array when processing rules where the last slot is flagged as a range start or when two consecutive range-start markers appear without an intervening range-end. Exploitation is confined to local actors with CAP_NET_ADMIN capability; no public exploit has been identified and EPSS sits at 0.02% (5th percentile), consistent with the narrow attack surface.
Denial of service in the Linux kernel's AF_ALG crypto socket subsystem allows a local, low-privileged user to crash or hang the system via crafted recvmsg calls. The flaw in af_alg_get_rsgl() causes receive buffer accounting to diverge from actual data attached to skcipher requests - when insufficient RX space remains, the kernel rounds the request length to zero rather than rejecting it, producing an invalid crypto operation. No exploitation has been confirmed (not in CISA KEV) and EPSS is 0.02%, reflecting the narrow local-only attack surface.
Code injection in Envoy up to 1.33.0 via improper query parameter handling in the Header Mutation filter allows authenticated remote attackers to inject arbitrary code through the params.add function, resulting in limited confidentiality and integrity impact. The CVSS 5.3 score reflects the requirement for prior authentication and limited scope of impact, though the injection vector in a core HTTP filtering component warrants prompt patching.
Soft-deleted public books in note-mark allow unauthenticated access to notes and assets via direct API endpoints and slug URLs. When a note-mark owner deletes a public book, the GORM soft-delete mechanism fails to filter raw SQL JOIN clauses in note and asset queries, leaving notes and uploaded content readable to any caller who knows the note ID or slug path. CVSS 5.3 (network, low complexity, no authentication required) reflects confidentiality impact; patch is available from vendor.
SQL injection in ShowDoc API Page Sort Endpoint allows authenticated remote attackers to manipulate the pages parameter and execute arbitrary SQL queries with limited confidentiality, integrity, and availability impact. Affected versions include 2.10.10, 3.6.2, and 3.8.0; vendor has released patch v3.8.1 but explicitly stated no backports will be provided for older versions.