Wildcard TLS certificate validation in Eclipse Vert.x allows remote attackers to bypass Server Name Indication (SNI) hostname verification by presenting arbitrary subdomains matching wildcard patterns, potentially disclosing sensitive server configuration and enabling certificate reuse across unintended service endpoints. The vulnerability affects Vert.x versions using unbounded SNI cache mechanisms without proper hostname validation constraints, and is fixed by implementing bounded LRU caching with proper synchronization and hostname matching enforcement.
Missing authentication in PicoTronica e-Clinic Healthcare System ECHS 5.7 allows remote unauthenticated attackers to access the /cdemos/echs/api/v2/patient-records API endpoint and retrieve sensitive patient information. Publicly available exploit code exists for this vulnerability. The vendor released patched version 5.7.1 to address the issue.
Hard-coded administrative credentials in PicoTronica e-Clinic Healthcare System ECHS 5.7 enable remote attackers to bypass authentication and gain privileged access to the healthcare management platform. The vulnerability resides in the /cdemos/echs/priv/echs.js file where the ADMIN_KEY parameter contains static credentials, allowing network-level exploitation without authentication (AV:N/PR:N). Public exploit documentation exists, though CISA KEV does not list active exploitation. EPSS data unavailable, but the combination of healthcare sector targeting, authentication bypass capability, and public POC elevates real-world risk despite moderate CVSS 7.3 scoring.
Information disclosure in PicoTronica e-Clinic Healthcare System ECHS 5.7 allows remote unauthenticated attackers to extract sensitive data via the Response Header Handler in the /cdemos/echs/api/v2/ endpoint. The vulnerability has been publicly disclosed with exploit code available, and a patch (version 5.7.1) has been released by the vendor.
Timing side-channel in pyquorum's modular multiplication allows remote attackers to recover Shamir secret-sharing values by measuring operation latency. The `mul_mod` function in all versions prior to 0.2.1 uses a binary expansion loop whose iteration count and branch path vary with the Hamming weight of the secret-derived operand, creating a measurable timing oracle. Given sufficient query volume and low-latency network access to an exposed secret-sharing service, an attacker can statistically correlate timing measurements to progressively reconstruct protected secrets. No public exploit code has been identified at time of analysis; EPSS is 0.07% (21st percentile) and the vulnerability is not in CISA KEV.
Angular SSR applications fail to properly validate URL-encoded path traversal sequences in the X-Forwarded-Prefix header, allowing attackers to trigger open redirects or steer server-side HTTP requests to unintended endpoints when the application is configured to trust proxy headers and deployed behind an unsanitized proxy. Exploitation requires the upstream proxy to forward the X-Forwarded-Prefix header without stripping encoded dots (%2e%2e), and the Angular application must perform internal redirects or use relative URLs in server-side HttpClient requests. Vendor-released patches are available for all supported versions.
Server-side request forgery in OpenClaw before version 2026.4.22 allows remote attackers to bypass SSRF protection in the Zalo plugin's sendPhoto function by providing malicious photo URLs, enabling unauthorized access to internal resources. The vulnerability affects the Zalo Bot API integration and requires network access but involves time-based attack complexity; no public exploit code or active exploitation has been confirmed.
Information disclosure in HP's Samsung Print Service Plugin for Android exposes high-confidentiality data to other local applications on the same device when an outdated version of the plugin is installed. CWE-926 (Improper Export of Android Application Components) indicates the root cause is improperly exported app components, allowing co-resident Android apps to access sensitive data without declared permissions. No active exploitation is confirmed (not in CISA KEV), EPSS is 0.01% at the 3rd percentile, and SSVC rates exploitation as none with non-automatable impact, making this a low-urgency but valid privacy concern requiring an application update.
Vvveb before version 1.0.8.2 allows unauthenticated remote attackers to disclose sensitive server information including absolute file paths, internal class namespaces, line numbers, and source code excerpts by accessing the admin password-reset endpoint and triggering a fatal error caused by missing namespace imports. The debug exception handler renders full stack traces to unauthenticated requests, enabling reconnaissance attacks without authentication or user interaction. No active exploitation confirmed, but the vulnerability is easily discoverable and exploitable over the network.
Velociraptor versions prior to 0.76.4 allow authenticated users with reader role in the root organization to bypass cross-organization authorization controls via HTTP API GET requests, enabling them to read arbitrary files from other organizations regardless of their permissions in those target organizations. The vulnerability requires high privilege context (authenticated reader in root org) but has high confidentiality impact across organization boundaries. This is a horizontal privilege escalation affecting multi-tenant deployments where organizational isolation is a critical security boundary.
Man-in-the-middle attacks can intercept LDAP credentials in Lemur when LDAP TLS is enabled because the authentication module globally disables TLS certificate verification using `ldap.OPT_X_TLS_NEVER`. Attackers positioned between Lemur and the LDAP server can capture plaintext usernames and passwords, modify LDAP group responses to grant admin access, and compromise the entire PKI infrastructure managed by Lemur. The vulnerability affects Lemur versions before 1.9.0 and is confirmed fixed in version 1.9.0.
Server-side request forgery in Playwright Capture before version 1.39.6 allows remote attackers to access local files and internal network resources through browser-side redirection mechanisms when processing untrusted URLs. An attacker-controlled page can abuse window.location.href and similar navigation primitives to redirect the capture process to file:// URLs or private IP addresses, potentially leaking responses through screenshots, saved content, or logs. The vulnerability is mitigated by request routing checks introduced in version 1.39.6 that block secondary requests to local files, non-global IP addresses, and .local domains.
Malicious environment variable injection in Oracle Cloud Native Environment Command Line Interface v2.3.2 allows local authenticated users with low privileges to execute arbitrary code through user interaction, compromising systems running the affected CLI tool. The vulnerability requires local access and user action but results in high-impact code execution with full confidentiality and integrity compromise.
Denial of service in vLLM v0.18.0-v0.19.1 permanently crashes the EngineCore process when any API request includes a sampling penalty parameter against a deployment configured with `extract_hidden_states` speculative decoding. A refactor in PR #37013 (v0.18.0) removed the `.unsqueeze(-1)` call that normalized tensor shape, causing a broadcast shape mismatch (`(batch_size, 2)` vs. expected `(batch_size, 1)`) during penalty application and an unrecoverable RuntimeError. The crash is deterministic - a single request with `repetition_penalty: 1.1` suffices - but no public exploit code has been identified at time of analysis and EPSS is very low (0.04%, 12th percentile).
Path traversal vulnerability in Apache Wicket's FolderUploadsFileManager allows unauthenticated attackers to read arbitrary files or write files outside the intended upload directory by exploiting unsanitized uploadFieldId and clientFileName parameters. Affected versions 8.0.0-8.17.0, 9.0.0-9.22.0, and 10.0.0-10.8.0 are vulnerable to remote file access and modification without authentication or user interaction. Vendor-released patch available in version 10.9.0.
Authenticated remote attackers with low privileges can read arbitrary files via insufficient access controls in the web-based management interface of Cisco IoT Field Network Director. Exploitation requires valid login credentials and submission of crafted input through the management UI; successful attacks result in unauthorized file disclosure but do not enable modification or system disruption. No public exploit code or active exploitation has been identified at time of analysis.
Cross-tenant IDOR in ShellHub Community v0.24.1 allows any authenticated user to read SSH session records belonging to other namespaces by supplying an arbitrary session UID to `GET /api/sessions/:uid`. The `GetSession` function in `api/services/session.go` omits the `InNamespace` tenant filter present elsewhere, so the `Authorize` middleware validates token presence but not resource ownership. Disclosed data includes SSH username, device UID, remote IP, geolocation, terminal type, authenticated flag, and session timestamps - enabling cross-tenant reconnaissance. No public exploitation is confirmed and EPSS is 0.03% (8th percentile), though the advisory includes a working proof-of-concept curl script.
Cross-tenant IDOR in ShellHub Community's device API exposes full device metadata across namespace boundaries to any authenticated user. An authenticated attacker who knows or can obtain a target device UID can issue a crafted GET request to /api/devices/:uid and receive the victim tenant's device object - including hostname, MAC address, OS fingerprint, public SSH key, namespace name, last-seen timestamp, and remote IP address. A validated proof-of-concept exists against v0.24.1; no public exploit identified at time of analysis and no CISA KEV listing, though EPSS is 0.03% (8th percentile), reflecting low but real probability of opportunistic exploitation in multi-tenant deployments.
Uninitialized memory use in Dawn (GPU abstraction layer) in Google Chrome prior to version 148.0.7778.96 allows remote attackers to read potentially sensitive information from process memory by opening a crafted HTML page. The vulnerability requires user interaction (clicking/viewing the malicious page) but no authentication, and has a high confidentiality impact. Chromium security team classified this as high severity; no public exploit code or active exploitation has been confirmed at time of analysis.
Uninitialized memory use in Chrome's WebCodecs component exposes potentially sensitive process memory contents to remote attackers via crafted HTML pages. All Chrome versions prior to 148.0.7778.96 are affected, with the flaw requiring only that a victim navigate to an attacker-controlled page. No active exploitation has been identified; EPSS sits at the 7th percentile and SSVC rates exploitation as none, placing this in the moderate-priority tier despite the high confidentiality impact signaled by CVSS.
Missing authorization in All-in-One WP Migration Unlimited Extension for WordPress versions up to 2.83 allows authenticated subscribers to create scheduled export jobs without capability verification, enabling attackers to exfiltrate full site backups by redirecting notifications to attacker-controlled email addresses and leveraging exposed backup filenames for download. This results in complete site data disclosure including sensitive information accessible to low-privilege authenticated users.
Hono's bodyLimit() middleware fails to reliably enforce maxSize restrictions on chunked or unknown-length HTTP requests (Transfer-Encoding: chunked), allowing oversized payloads to reach application handlers and return HTTP 200 instead of 413 Payload Too Large. Versions prior to 4.12.16 are vulnerable when handlers do not fully read the request body, read only initial chunks before returning, or catch and suppress read errors. This bypasses the documented guarantee that oversized requests are rejected before business logic execution.
Cisco IoT Field Network Director's web-based management interface allows authenticated remote attackers with low privileges to execute arbitrary commands and access files on managed routers via insufficient input validation in the web interface. The vulnerability enables file creation, deletion, read operations, and execution of limited commands in user EXEC mode on remote routers. CVSS 6.4 (medium severity); no active exploitation or public POC identified at time of analysis.
Stored cross-site scripting in LatePoint calendar booking plugin for WordPress versions up to 5.5.0 allows authenticated customers to inject malicious scripts via unsanitized profile fields (first name, last name, phone, notes) that execute in administrators' browsers when notification templates are previewed. Exploitation requires customer-level access and admin interaction to preview a notification template, but achieves code execution in a high-privilege context (administrator or agent browser session) with scope change from single user to multiple users.
Stored Cross-Site Scripting in SliceWP Affiliates plugin for WordPress (versions up to 1.2.7) allows authenticated contributors and above to inject arbitrary JavaScript via unsanitized shortcode attributes in the 'slicewp_affiliate_url' shortcode. The injected scripts execute in the browsers of all users accessing the affected page, enabling account compromise, credential theft, or malware distribution. No public exploit code or active exploitation has been identified, but the vulnerability is straightforward to exploit given the low attack complexity and requires only contributor-level WordPress access.
Information disclosure in FlowiseAI Flowise up to version 3.0.12 allows remote attackers to extract sensitive data through the Login function in the API Response Handler component. The vulnerability requires high attack complexity and is difficult to exploit, but successful exploitation results in confidentiality impact without authentication requirements. No public confirmation of active exploitation has been identified at time of analysis.
Server-side request forgery in OpenClaw before 2026.4.20 allows unauthenticated remote attackers to relay unintended requests through QQBot direct media upload endpoints (uploadC2CMedia and uploadGroupMedia) by sending crafted image URLs that bypass SSRF protections. The vulnerability affects QQBot outbound media handling and does not expose arbitrary local files, but could allow attackers to make configured QQBot media delivery requests to unintended destinations.
Site isolation bypass in Google Chrome prior to 148.0.7778.96 allows a remote attacker to read cross-origin response data that Chrome's Opaque Response Blocking (ORB) mechanism should render inaccessible, by luring a user to a crafted HTML page. The flaw stems from an inappropriate implementation in the ORB subsystem (CWE-269), undermining one of Chrome's core cross-origin data leak defenses. No active exploitation is confirmed (SSVC: none; EPSS: 0.03%), and a vendor patch is available in the stable channel release 148.0.7778.96.
Site isolation bypass in Google Chrome (all versions prior to 148.0.7778.96) enables a remote attacker who has already achieved renderer process compromise to escape Chrome's cross-site data boundaries via a crafted HTML page. The flaw (CWE-20) lies in insufficient input validation within the SiteIsolation component, a critical security boundary that separates origin contexts. No active exploitation is confirmed by CISA KEV, EPSS is minimal at 0.02% (7th percentile), and SSVC classifies exploitation as none - marking this as a post-exploitation chaining primitive rather than a standalone attack vector.
Same-origin policy bypass in Google Chrome's Canvas implementation allows a remote, unauthenticated attacker to cross origin boundaries by inducing a victim to visit a crafted HTML page. All Chrome versions prior to 148.0.7778.96 are affected. No public exploit exists and CISA KEV confirms no active exploitation, but the SOP bypass primitive could enable partial data exfiltration from other browser origins, making it a meaningful integrity and confidentiality concern for users of unpatched versions.
Keylime verifier uses a hardcoded challenge nonce instead of cryptographically random values for TPM quote attestation, allowing local attackers with root access on enrolled machines to capture valid quotes and replay them to bypass detection after system compromise. The vulnerability affects only push-model deployments and requires root privileges on the monitored endpoint; exploitation enables information disclosure and system integrity evasion with CVSS 6.3 severity.
Hugo static site generator versions 0.43.0 through 0.160.x allow unrestricted file system access when building sites with Node-based asset pipelines (PostCSS, Babel, TailwindCSS), enabling arbitrary code execution through these tools to read or write files outside the project directory. The vulnerability affects only users who deploy Node asset pipelines; those building trusted sites or not using these pipelines are unaffected. A vendor-released patch in v0.161.0 enforces Node's permission model with strict filesystem defaults.
Origin confusion in Tauri's is_local_url() function on Windows and Android allows remote attackers to invoke local-only IPC commands by hosting content on a domain whose first subdomain matches the application's custom URI scheme. An attacker can register a domain like http://app.evil.com/ to bypass origin validation when the target application uses an app:// custom protocol, gaining unauthorized access to backend functionality intended only for the application's own frontend. A public proof-of-concept demonstrates successful command invocation through this bypass.
Unvalidated Omnibox input in Google Chrome prior to version 148.0.7778.96 enables remote attackers to inject arbitrary scripts and HTML (universal XSS) via malicious network traffic, affecting users who click on crafted links. The vulnerability requires user interaction but crosses security boundaries due to its scope impact. No active exploitation has been publicly confirmed, though a patch is available from Google.
Stored XSS in Kyverno policy-reporter-ui 2.5.1 and earlier allows an attacker with Kubernetes write access to PolicyReport resources to inject arbitrary HTML into the Vue 3 frontend, which executes in the browser of any authenticated UI user who views the affected namespace. The sink is the v-html directive in PropertyCard.vue, which is reached whenever a property value is not an http/https URL and exceeds 75 characters - a bypass condition trivially satisfied by padding any HTML payload. A public proof-of-concept demonstrating session cookie exfiltration via a crafted PolicyReport object is included in the GitHub advisory GHSA-q98m-7w8c-w388; no public exploit identified as confirmed actively exploited (not in CISA KEV), though EPSS of 0.03% reflects low opportunistic risk given the Kubernetes-specific prerequisite.
Cross-site scripting (XSS) vulnerability in Apache Wicket allows unauthenticated remote attackers to inject malicious JavaScript through crafted strings that break out of JavaScript sequence contexts. Affected versions include Wicket 8.0.0-8.17.0, 9.0.0-9.22.0, and 10.0.0-10.8.0. User interaction (e.g., clicking a malicious link) is required for exploitation. EPSS score of 0.03% (8th percentile) indicates low empirical exploitation probability despite network-accessible attack vector.
Oracle OCI CLI version 3.77 allows local attackers with user interaction to place imported files outside the intended directory, compromising file integrity and enabling potential code execution or data exfiltration. The vulnerability requires local access and user interaction but carries high integrity impact through arbitrary file placement. No active exploitation or public exploit code has been identified at the time of analysis.
OpenClaw versions 2026.4.10 through 2026.4.13 fail to persist session context when recovering queued outbound media after service restart, allowing authenticated attackers to bypass group tool policy enforcement and weaken channel media restrictions. The vulnerability affects the delivery queue recovery mechanism, which replays queued messages without the original requester's session context needed for policy validation. Exploitation requires authenticated access and prior knowledge of queued delivery entries, with CVSS 6.0 and confirmed patch available in version 2026.4.14.
OpenClaw before version 2026.4.10 allows operators with write permissions to persist Nostr profile configuration without requiring admin authority through unprotected HTTP mutation endpoints. Attackers holding the operator.write scope can modify profile settings via PUT and POST routes that should require operator.admin scope, enabling unauthorized configuration changes. This is a privilege escalation vulnerability affecting the Nostr plugin HTTP API layer.
Granian worker process aborts when a WSGI application returns invalid HTTP response header names or values due to unhandled panic in the header conversion path. An attacker who can influence WSGI application output, such as by injecting user-controlled data into response headers like Location or Content-Disposition, can trigger worker process denial of service. The vulnerability affects Granian versions 0.2.0 through 2.7.3; patch available in version 2.7.4. Proof of concept demonstrates crashes via headers containing spaces, CRLF injection, or null bytes.
SSRF in MISP Modules' html_to_markdown expansion module (misp-modules ≤ 3.0.7) allows an attacker to redirect server-side HTTP requests to loopback, RFC 1918, or link-local addresses, exposing internal infrastructure to enumeration and data exfiltration. The qrcode module independently disabled TLS certificate verification when fetching remote images, enabling a network-adjacent party to intercept or tamper with those responses. No public exploit has been identified at time of analysis; EPSS sits at the 1st percentile, and no CISA KEV listing exists, indicating low observed exploitation activity despite real-world risk in privileged-network MISP deployments.
Denial of service via kernel warning in MPTCP path manager occurs when combining endpoint removal with fullmesh and flag-setting operations through netlink in the Linux kernel. A local attacker with low privileges can trigger a WARNING in net/mptcp/pm_kernel.c:1074 by sending a crafted sequence of netlink commands, causing the system to emit a kernel warning and potentially become unstable. No known public exploit code exists, but the low CVSS (5.5) and minimal EPSS (0.03%) indicate this is a local DoS with limited real-world impact.
Null pointer dereference in the Linux kernel's buffer cache subsystem (`fs/buffer.c`) can cause a kernel panic, resulting in a local denial of service. The flaw is triggered when `try_to_free_buffers()` calls `drop_buffers()` on a folio that has no buffer heads attached - a condition reachable when `filemap_release_folio()` is invoked on a mapping with `AS_RELEASE_ALWAYS` set but no `release_folio` operation defined. No public exploit has been identified and the EPSS score of 0.02% (7th percentile) confirms negligible observed exploitation activity; patched stable kernel releases are available across multiple branches.
Integer wraparound in the Linux kernel JFS (Journaled File System) `jfs_rename` function can be triggered by a local low-privileged user to cause a kernel warning and denial of service. When a directory's hard link count (nlink) is already at its maximum value (-1 as an unsigned overflow scenario), performing an in-place rename of a child subdirectory increments nlink and then decrements it, wrapping the counter to zero and triggering a `drop_nlink` kernel warning. The vulnerability affects a wide range of stable kernel branches from 5.10 through 6.19; no public exploit code exists and CISA has not listed this in KEV, making active exploitation unlikely but not impossible in multi-tenant or container environments where JFS-mounted filesystems are accessible to low-privilege users.
Null pointer dereference in the Linux kernel's bcm_vk misc driver allows a local authenticated attacker to crash the kernel, resulting in a denial of service. The bcm_vk_read() function checks whether the 'entry' pointer is NULL but fails to prevent subsequent dereferences of that pointer when rc is set to -EMSGSIZE, leading to a kernel panic. No public exploit exists and the vulnerability is not listed in CISA KEV; however, vendor-released patches are available across multiple stable kernel branches, and Red Hat and SUSE have tagged this for attention in their ecosystems.
Resource leak in the Linux kernel's mtk-smi (MediaTek System Memory Interface) driver allows a local, low-privileged attacker on MediaTek SoC-based systems to cause a denial of service by exhausting kernel device references. The driver fails to call put_device() on the SMI device reference obtained during common probe when late probe failure (e.g., -EPROBE_DEFER) or driver unbind occurs, leaving dangling references that accumulate over repeated cycles. No public exploit identified at time of analysis and EPSS at 0.02% (7th percentile) indicates very low exploitation probability; patches are available across multiple stable branches.
Device reference leak in the Linux kernel's MediaTek SMI (mtk-smi) memory driver can cause resource exhaustion and denial of service on affected MediaTek SoC-based systems. The flaw exists in the larb (Local Arbiter) probe path, where a reference acquired during SMI device lookup is never released when late probe failure occurs (e.g., probe deferral) or when the driver is unbound - leaving the kernel device struct's reference count permanently inflated. With EPSS at 0.02% (7th percentile), no KEV listing, and no public exploit identified at time of analysis, real-world exploitation risk is very low and narrowly scoped to hardware running MediaTek SoCs.
Out-of-bounds read in the Linux kernel's APEI/GHES subsystem crashes affected systems when processing malformed or oversized CPER (Common Platform Error Record) data supplied by non-conformant firmware. The `ghes_new()` function enforces a maximum size check against `GHES_ESTATUS_MAX_SIZE` (64KB), but the underlying buffer is allocated using the actual page count from the BIOS CPER table location, which may be smaller; when firmware supplies error data exceeding the allocated buffer, subsequent CPER printing via `cper_estatus_print_section()` triggers a kernel OOPS (level-3 page fault) and system crash. No active exploitation is confirmed: EPSS is 0.02% at the 7th percentile, and this vulnerability is absent from the CISA KEV catalog.
Snapshot data integrity corruption in the Linux kernel's CephFS driver allows a local authenticated user to silently corrupt immutable snapshot content by performing a fallocate hole-punch operation on a mounted CephFS volume. The `ceph_zero_partial_object()` function omits the RADOS snapshot context (`snapc`) when issuing OSD zeroing writes, causing those writes to propagate into snapshot objects rather than being scoped to the live file layer only. Affected environments are limited to those running CephFS mounts with active snapshots; no active exploitation is confirmed (absent from CISA KEV), and EPSS sits at 0.02%, though a developer-supplied reproducer effectively functions as proof-of-concept.
Reference count leak in the Linux kernel's mtk-mdp (MediaTek Media Data Path) driver allows a local low-privileged user on MediaTek SoC hardware to cause incremental resource exhaustion. The missing platform_device_put() call in mtk_mdp_remove() means each driver removal cycle permanently leaks one reference to the VPU platform device, preventing kernel memory reclamation. No public exploit exists and EPSS sits at 0.02% (7th percentile); patches are confirmed across eight stable kernel branches.