Cookie injection in Adminer before 5.4.3 allows network-accessible, unauthenticated attackers to manipulate Set-Cookie path attributes by injecting arbitrary values through the unsanitized X-Forwarded-Prefix HTTP header, enabling downgrade of SameSite protection and subsequent cross-origin authenticated requests against victim sessions. Exploitation is gated on a misconfigured reverse proxy that forwards attacker-controlled header values and requires passive user interaction (UI:P per CVSS 4.0), making this a realistic but non-trivial attack path. No active exploitation confirmed (not in CISA KEV) and no public exploit code identified at time of analysis; vendor-released patch is available as version 5.4.3.
Denial of service in SurrealDB's embedded JavaScript scripting engine allows any query-executing user - including unauthenticated guests when guest access is enabled alongside scripting - to immediately crash the server process by passing an oversized string to the QuickJS-NG v0.8 runtime for compilation, triggering a null pointer dereference. The crash requires a manual operator restart with no graceful shutdown, and cannot be leveraged for code execution or data compromise. The attack is constrained to instances where the non-default `--allow-scripting` capability is active; no public exploit identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Buffer underflow in HDF5 library versions through 1.14.6 corrupts memory when H5Iget_name is called with a size parameter of zero on a group identifier, writing a null terminator before the intended buffer boundary and potentially crashing the host application. Applications that ingest attacker-supplied HDF5 files and expose user-controlled size values to H5Iget_name face availability disruption and, under specific heap layouts, possible disclosure of adjacent memory contents. No public exploit has been identified at time of analysis and the vulnerability is absent from CISA KEV; the CVSS 4.0 score of 5.9 reflects the high attack complexity and required active user interaction that meaningfully constrain real-world exploitation.
Out-of-bounds read in HDF5 (all versions prior to 2.0.0) is triggered when parsing a maliciously crafted file whose array datatype metadata violates the internal invariant that element_size × nelem must equal the stored full datatype size. When a victim opens such a file, the HDF5 parser reads beyond its intended buffer boundary, causing application crash or potential memory disclosure. No active exploitation is confirmed in CISA KEV, but SSVC intelligence confirms a POC exists, and the vendor has released a patch in version 2.0.0.
Unauthenticated access to the ApprovalInbox HTTP server in Network-AI 5.0.0-5.12.1 allows any party that can reach the inbox port to enumerate pending agent approvals and approve or deny them without operator consent, completely defeating the human-in-the-loop Approval Gate designed to gate high-risk operations such as shell commands and file writes. Exploitation via CSRF is possible against the default 127.0.0.1 binding because the server unconditionally sets Access-Control-Allow-Origin: * on all routes, including state-changing POST endpoints, enabling any website the operator visits to silently submit approval requests through their browser. No public exploit code or CISA KEV listing has been identified at time of analysis; a vendor-released patch is available as of v5.12.2.
Hidden field injection in HeyForm's form submission API allows anonymous submitters to bypass server-side schema validation and store arbitrary key/value pairs - including XSS payloads and forged authorization metadata - directly into submission records. All HeyForm deployments prior to version 3.0.0-rc.9 are affected. The injected data is subsequently forwarded verbatim to every registered webhook integration, enabling downstream system poisoning and stored XSS against any admin interface that renders submission data. SSVC rates this as automatable with a POC exploit available; no KEV listing at time of analysis.
Arbitrary host file disclosure in BuildKit's WCOW (Windows Container on Windows) worker mode allows an untrusted build author to read any file reachable by the BuildKit daemon process. By placing NTFS directory junctions inside the cache mount root - a technique the `source=` selector fails to detect on Windows - a malicious Dockerfile can redirect cache access to traverse outside the container's expected filesystem boundary. This affects any multi-tenant or shared CI/CD environment running a WCOW-configured BuildKit daemon where untrusted users can submit builds; no active exploitation has been confirmed (not listed in CISA KEV) and no public exploit code has been identified at time of analysis.
Incorrect error-path logic in the Linux kernel's i2c-i801 SMBus driver allows a local, low-privileged user to trigger a hardware state machine corruption leading to a system-wide hung task panic. When i801_check_pre() returns -EBUSY because the BIOS/ACPI firmware legitimately holds the SMBus controller, the driver unconditionally writes to SMBHSTSTS hardware registers without owning the controller, destroying the firmware's in-progress transaction and permanently corrupting the SMBus state machine. This produces an infinite 'SMBus is busy' error log flood, causes a console livelock that starves processes competing for mmap_lock, and ultimately triggers the hung task watchdog. No public exploit is identified at time of analysis; EPSS is 0.17% (6th percentile) and the vulnerability is not in CISA KEV.
NULL pointer dereference in the Linux kernel XFS log recovery path allows a local attacker to crash the kernel by mounting a crafted XFS filesystem image. The flaw exists in xlog_recover_reorder_trans() at fs/xfs/xfs_log_recover.c:1836, where a committed log transaction containing zero regions leaves ri_buf NULL, causing a fatal dereference when ITEM_TYPE() is called during recovery. EPSS is 0.16% (5th percentile) and no active exploitation has been observed; the vulnerability was discovered through an AI-assisted code audit, not in-the-wild activity.
NULL pointer dereference in the Linux kernel's DualPI2 traffic scheduler crashes the kernel when GSO segmentation accounting mismatches occur under a QFQ parent queueing discipline. Systems running Linux kernels prior to 6.18.39, 7.1.4, or 7.2-rc1 with DualPI2 configured as a child of QFQ are vulnerable to a local denial-of-service via kernel panic. No public exploit code exists and EPSS is 0.15% (5th percentile), reflecting the niche configuration required; however, the availability impact is total (kernel crash) when conditions are met.
Kernel panic via NULL dereference in the Linux kernel BPF subsystem affects systems compiled with CONFIG_BPF_LSM=y where the BPF LSM is not activated at boot. A locally authenticated user with low privileges can create a BPF_MAP_TYPE_INODE_STORAGE map under this misconfigured state, causing bpf_inode() to alias the struct rcu_head.func callback pointer; when map cleanup nulls this aliased pointer, rcu_do_batch() subsequently attempts an instruction fetch at address 0x0, triggering an immediate kernel panic and complete system denial of service. No public exploit is identified at time of analysis; EPSS sits at 0.14% (4th percentile), consistent with the narrow triggering conditions required.
NULL pointer dereference in the Linux kernel's team network driver (net/team/team_core.c) allows a local attacker with CAP_NET_ADMIN to crash the kernel by racing a mode change against concurrent packet transmission. The vulnerability arises because __team_change_mode() wipes team->ops via memset() before reinstalling safe dummy handlers, creating a window where team_xmit() running under RCU on a parallel CPU can invoke a NULL function pointer. No public exploit code exists and the issue is not listed in CISA KEV, but the availability impact is total (kernel panic), and the fix is present in upstream stable commits.
Symlink traversal in Network-AI's EnvironmentManager.backup() allows a local attacker with write access to an environment data directory to exfiltrate arbitrary files from outside the environment root into readable backup artifacts. All Network-AI versions prior to 5.12.2 (npm package jovancoding/network-ai) are affected, confirmed in v5.12.1 per GHSA-6x2m-p4xp-wg22. A proof-of-concept is publicly available in the GHSA advisory; no active exploitation (CISA KEV) has been identified at time of analysis.
Stored XSS in Best Practical RT (versions 5.0.0-5.0.9 and 6.0.0-6.0.2) allows any authenticated user with file upload permissions to embed malicious JavaScript in an uploaded file that executes in the browser session of any RT user who later views or downloads that content. The root cause is RT serving uploaded files inline rather than forcing browser download via Content-Disposition: attachment, enabling browsers to render and execute embedded scripts. Vendor-released patches 5.0.10 and 6.0.3 are available (released 2026-05-20); no public exploit identified at time of analysis.
Arbitrary file write in Apache MINA SSHD's sshd-git component enables any SSH-authenticated user to write files to arbitrary server filesystem paths via the JGit git archive --output argument. Servers are only affected when explicitly configured with GitPgmCommandFactory; the vulnerability does not exist in default MINA SSHD deployments. No public exploit code or CISA KEV listing exists at time of analysis; vendor-confirmed fixes are available in versions 2.19.0 and 3.0.0-M5.
Cross-site request forgery in Revive Adserver 6.0.7 allows an unauthenticated remote attacker to manipulate ad zone configurations - linking or unlinking banners and campaigns to zones - by tricking an authenticated administrator into loading a crafted page or request. The zone-include.php script accepts both GET and POST requests for these state-changing operations without verifying any CSRF token, meaning the browser's ambient session credentials are sufficient to authorize the action. No public exploit has been identified at time of analysis, and the vulnerability has not been added to the CISA KEV catalog.
Stored Cross-Site Scripting in Best Practical RT versions 6.0.0 through 6.0.2 allows an authenticated attacker with write access to inject persistent JavaScript payloads into ticket or configuration data, which then executes in the browsers of other RT users who view the affected pages. The CVSS scope change (S:C) reflects cross-user browser context impact - injected scripts operate in the victim's session, enabling session hijacking or unauthorized actions. No public exploit is identified at time of analysis; vendor-released patch is confirmed in RT 6.0.3, published 2026-05-20.
Stored cross-site scripting in Bifra Engineering Consulting Ltd. Q-smart NexT Poll (all versions before 1.8.7) allows a low-privileged authenticated attacker to inject persistent malicious JavaScript into poll content that executes in the browsers of any user who subsequently views the affected page. The scope change (S:C in CVSS) indicates impact extends beyond the submitting user to other authenticated or unauthenticated viewers, enabling session hijacking, credential theft, or unauthorized actions performed in the victim's browser context. No public exploit code has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Two-factor authentication bypass in Webmin prior to version 2.640 allows a network attacker holding valid username and password credentials to gain full administrative access by sending requests via the HTTP Basic authentication code path, which skips TOTP enforcement entirely. All Unix-like systems running Webmin with 2FA enabled on any account are affected, making this particularly dangerous in environments where 2FA was deployed as the primary compensating control against credential exposure. No active exploitation has been confirmed via CISA KEV, and no public exploit code was identified in the provided data at time of analysis.
Unrestricted file upload in Windu CMS version 4.1 enables authenticated low-privilege attackers to upload arbitrary PHP files and achieve remote code execution on the host server. The application performs no validation of uploaded file types, allowing a webshell to be placed and subsequently invoked via HTTP. No public exploit code has been identified at the time of analysis, and no KEV listing exists, but the attack path is trivial once credentials are obtained.
Username enumeration via authentication timing side-channel in FileBrowser Quantum's `/api/auth/login` endpoint allows unauthenticated remote attackers to distinguish valid from invalid usernames by measuring response latency. Valid usernames trigger a bcrypt password hash comparison (~40-50 ms), while non-existent usernames return almost immediately (~1-4 ms), creating a statistically exploitable timing differential. A working proof-of-concept Python script was published in the GHSA advisory; the CVE is not in CISA KEV, so active exploitation is not confirmed at time of analysis.
Privilege escalation in rConfig before 8.2.8 allows any authenticated low-privilege user to self-assign or assign the Admin role to arbitrary accounts via a missing allowlist and absent authorization check in the Users API. The StoreUserRequest handler accepts a caller-supplied role field without validating it against permitted values and without verifying the requesting account already holds Admin status, enabling direct mass-assignment of the Admin role to any user model during creation or profile updates. No public exploit code has been identified and CISA KEV listing is absent; a vendor-released patch is available in version 8.2.8.
Resource exhaustion in GLib's GDBus authentication component allows attackers to crash or hang processes by sending unbounded data streams before authentication completes. The `gdbusauth` handler reads lines from connecting clients without enforcing any maximum length, meaning an attacker who can reach a GDBus endpoint can force the target process to allocate unbounded memory and saturate CPU cycles. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog, but the unbounded allocation primitive (CWE-770) in a widely-deployed system library warrants attention from Red Hat and GNOME ecosystem consumers.
Uncontrolled resource consumption in FreeScout's file upload endpoint allows any user to flood the server with upload requests, overloading the database and causing denial of service for all platform users on versions prior to 1.8.224. The root cause is the complete absence of rate limiting on the upload route - a low-complexity, network-accessible weakness requiring no special privileges per the CVSS vector. No public exploit code or CISA KEV listing exists at time of analysis, but the trivial exploitation mechanics mean any motivated user can weaponize this without tooling.
Server-side request forgery in HyperDX before 2.31.0 allows authenticated team members to weaponize the server's network identity against internal infrastructure by supplying attacker-controlled URLs to the webhook test endpoint. The root cause is an insufficient hostname blacklist that can be bypassed using IPv6 notation (e.g., http://[fd00::1]/path) or other alternate IP representations, enabling enumeration of internal services, interaction with internal containers, and retrieval of cloud instance metadata including IMDSv1 credential endpoints. No public exploit code has been identified and the vulnerability is not in CISA KEV, though the GitHub issue and fix PR are publicly visible, making the attack surface discoverable.
Authorization bypass in SurrealDB LIVE SELECT subscriptions allows authenticated record users to receive real-time notifications for records that table-level SELECT permission expressions should have filtered out. Affected versions before 3.1.0 incorrectly evaluate permission expressions against attacker-supplied variable bindings rather than trusted document context when the expression references $value, $before, $after, or $event. No public exploit code has been identified and the issue is not listed in CISA KEV, but the bypass is straightforward for any authenticated subscriber on a vulnerable deployment using the affected variable names in permission logic.
SurrealDB before version 3.1.0 leaks restricted field values to authenticated record users by exploiting an indexed COUNT query optimization that skips field-level SELECT permission checks. When a field is protected by DEFINE FIELD ... PERMISSIONS FOR select but is also covered by a DEFINE INDEX, an attacker holding table-level SELECT can confirm or enumerate the field's contents by submitting SELECT count() FROM t WHERE hidden_field = 'guess' GROUP ALL - the query planner's indexed fast path returns a nonzero count for correct guesses without ever evaluating the permission predicate. No public exploit exists and the vulnerability is not in CISA KEV; however, the attack is straightforwardly reconstructable from the detailed vendor advisory.
Permissions bypass in SurrealDB before 3.2.0 allows any authenticated user to write to tables they lack explicit access to by embedding data-modifying statements inside PERMISSIONS clauses. Because the database disables enforcement during PERMISSIONS clause evaluation, embedded CREATE, UPDATE, DELETE, or UPSERT statements execute without access control checks, enabling unauthorized writes and data corruption across any table in the instance. No public exploit code or CISA KEV listing exists at time of analysis, but the CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L) indicates straightforward network exploitation by any low-privilege authenticated user.
LIVE SELECT subscriptions in SurrealDB before 3.1.0 persist real-time change notifications under revoked, expired, or superseded session credentials, violating session boundary enforcement. Authenticated users who register a LIVE SELECT query retain delivery of change notifications after their session is invalidated, expires via TTL, or is replaced by a different identity authenticating on the same WebSocket connection. No public exploit has been identified and no active exploitation is confirmed; vendor-released patch is available in SurrealDB 3.1.0.
Field-level SELECT permission bypass in SurrealDB 3.1.0-3.1.4 allows authenticated record users to recover field values explicitly hidden by DEFINE FIELD ... PERMISSIONS FOR select NONE by routing queries through graph-edge (`->`) or back-reference (`<~`) traversals rather than direct table scans. The shared `resolve_record_batch` helper used by the 3.1.x query planner's GraphEdgeScan and ReferenceScan paths enforces only table-level authorization, silently skipping the `build_field_state`/`filter_fields_by_permission` routines applied on all other read paths. No public exploit has been identified at time of analysis; vendor-released patch is available in version 3.1.5.
SurrealDB versions before 3.1.0 expose field values protected by field-level SELECT permissions through verbose error messages returned to authenticated users who hold UPDATE access. By issuing UPDATE statements that trigger arithmetic or extend operations against hidden fields - such as adding an integer to a string-typed email field - an attacker receives an error response embedding the raw operand value (e.g., 'Tried to compute "alice@example.com" + 1'). No public exploit code exists and this vulnerability is not listed in the CISA KEV catalog, but the technique is trivially repeatable across any field on any record the attacker holds UPDATE permission on.
Open redirect in cal.diy's conferencing OAuth callback endpoint (through v6.2.0) enables remote unauthenticated attackers to silently redirect authenticated users to attacker-controlled URLs by injecting a malicious external URL into the unsigned `onErrorReturnTo` field of the OAuth `state` parameter. Because the state payload is never cryptographically signed or validated against a trusted origin allowlist, the endpoint blindly issues a 301 redirect to any URL supplied by the caller, making the trusted cal.diy domain a transparent phishing launchpad. No public exploit code has been identified at time of analysis, but exploitation requires only a crafted URL - no special tooling - with user interaction as the sole barrier.
Authorization bypass in SurrealDB's KILL statement before version 3.1.0 allows any authenticated database-level user to silently terminate other users' LIVE SELECT real-time subscriptions by targeting their live query UUIDs, with no ownership verification performed. The affected user receives no notification of termination, breaking real-time data pipelines and multi-tenant isolation guarantees - a low-privilege record-scoped user can disrupt a root user's monitoring subscriptions within the same database. Discovered during a cure53 code audit and penetration test; no public exploit code or CISA KEV listing exists at time of analysis.
Authorization bypass in SurrealDB before 3.1.0 allows authenticated users to circumvent tenant-isolation and object-keyed permission rules by spoofing composite record-id field values through writable body fields. Attackers who can write to any record can set a same-named body field to an arbitrary value; because the permission evaluator incorrectly reads from the editable body rather than the immutable id key, `PERMISSIONS FOR` clauses gating access on `id.<field>` (the common pattern for tenant isolation) are silently defeated. No public exploit has been identified at time of analysis, and the vulnerability requires valid credentials, but the impact includes cross-tenant data exposure and silent UNIQUE constraint corruption. Fix is available in 3.1.0.
Server-Side Request Forgery via HTTP redirect in SurrealDB before 3.1.0 allows authenticated users to circumvent port-scoped `--deny-net` network restriction rules. When an `http::*` function call targets an allowed hostname that responds with a 3xx redirect to a denied `host:port`, the redirect policy in `core/src/fnc/util/http/mod.rs` constructs the redirect `NetTarget` from `url.host_str()` alone - silently discarding the port - causing the capability matcher to skip port-specific deny rules entirely. No public exploit has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Blind server-side request forgery in AVideo's encoder download-by-URL flow allows authenticated attackers to probe internal network infrastructure by exploiting an unpinned cURL retry fallback. When the primary DNS-pinned fetch to a supplied downloadURL fails, the application retries with a null resolvedIP argument to ssrfPinnedFetchToFile, stripping the DNS-binding protection and allowing attacker-controlled HTTP redirects to reach RFC-1918 or loopback addresses. No active exploitation is confirmed (not in CISA KEV) and no public exploit code has been identified; the CVSS 4.0 score of 5.3 with PR:L reflects a real but bounded risk gated behind authenticated access.
Field-level SELECT permission bypass in SurrealDB before 3.1.0 allows authenticated users to exfiltrate protected field values via a crafted JSON Patch operation. Submitting an UPDATE PATCH with an empty string as the `from` pointer in a `copy` or `move` operation causes the database to duplicate the entire record - including fields restricted by `PERMISSIONS FOR select` - into an attacker-controlled destination field that bypasses the post-query redaction filter. Impact is confidentiality-only and bounded to fields of the single targeted record; no KEV listing and no public exploit code identified at time of analysis, though exploitation requires only a valid authenticated session and standard JSON Patch syntax.
Authorization bypass in SurrealDB before 3.1.0 allows authenticated users holding only CREATE permission on an edge table to silently overwrite existing edge records without possessing UPDATE permission. By crafting a RELATE statement with an explicit SET id clause pointing to an already-existing edge id, the storage layer skips the expected conflict check and performs an overwrite instead of returning an error - violating the permission boundary between CREATE and UPDATE operations. No public exploit code has been identified and the vulnerability is not listed in CISA KEV; the CVSS 4.0 score of 5.3 reflects the network-reachable but low-privilege, integrity-only impact.
SurrealDB before v3.1.0 silently substitutes ES384 (P-384 curve) when operators configure JWT access methods with ALGORITHM ES512 (P-521 curve), because the underlying Rust jsonwebtoken crate v10.x omits an ES512 variant entirely. Operators who provision correct P-521 keys experience authentication handshake failures, and external systems expecting genuine ES512 signatures will reject SurrealDB-issued tokens. No public exploit has been identified at time of analysis; the vendor and GHSA advisory both confirm the flaw cannot be used to forge tokens or compromise confidentiality or integrity, as ES384 itself remains cryptographically strong.
XSS via unescaped attribute name interpolation in Astro's renderHTMLElement affects all versions of the npm package 'astro' prior to 7.0.6, representing an incomplete fix for CVE-2026-54298. The renderHTMLElement() function in dom.ts interpolates spread prop keys directly into HTML attribute names without sanitization - escaping only the value - allowing an attacker who controls prop key names on a native HTMLElement-subclass Astro component to inject event-handler attributes or sibling script elements into SSR-rendered output. Exploitation is constrained to SSR runtimes that expose a global HTMLElement (Deno, Bun with a DOM shim, jsdom/happy-dom in Node); standard Node.js SSR is not reachable. A proof of concept is publicly available in the GitHub advisory (GHSA-f48w-9m4c-m7f5). This CVE is not listed in CISA KEV.
Stored cross-site scripting in Quix Page Builder Pro, a Joomla CMS extension by ThemeXpert, allows authenticated builder-role users to inject persistent malicious scripts by breaking out of id/class HTML attribute fields rendered in public-facing pages. The payload executes in the browsers of any visitor loading the affected page, enabling session hijacking, phishing redirects, or malware delivery at scale across the site's audience. No public exploit code or active exploitation has been identified at time of analysis, and no confirmed patched version is available from the provided references.
Blind SSRF in SurrealDB's JWKS fetcher before 3.1.5 allows Owner-role database principals to bypass network capability controls by chaining an allowlisted host redirect to blocked internal addresses. The JWKS client in `core/src/iam/jwks.rs` applies `check_capabilities_url` only to the originally configured URL, not to 3xx redirect targets, while the hardened `HttpClient` used by `http::*` functions already re-validates each hop since 3.1.0. Exploitation requires Owner-level credentials and yields only blind timing-based probing of internal hosts - no response body is returned - with no public exploit identified at time of analysis.
Server-Side Request Forgery in the JMedia Extension for Joomla (themexpert.com) allows authenticated administrators to direct the extension's remote-URL download feature to issue server-side HTTP requests to internal or reserved IP address ranges, effectively using the Joomla host as a network proxy. With high privilege required (PR:H per CVSS 4.0 vector) and no direct impact on the vulnerable system itself (VC/VI/VA all N), real-world risk is primarily limited to internal network reconnaissance and interaction with co-located services. No public exploit code and no CISA KEV listing exist at time of analysis.
Server-Side Request Forgery in SurrealDB's JWKS fetcher allows an Owner-role attacker to weaponize the server as an internal network proxy. By configuring an access method with a JWKS URL whose hostname passes the string-based allow-list check but resolves via DNS to a private or loopback address, the attacker causes SurrealDB to issue GET requests to internal infrastructure that would otherwise be unreachable. No public exploit has been identified and no CISA KEV listing exists; exploitation is constrained by the requirement for Owner-level privileges, making this a meaningful but bounded risk in privileged-access-compromise scenarios.
Arbitrary file read via path traversal in FreeScout's App Logs feature exposes any server-local file readable by the PHP process to authenticated administrators prior to version 1.8.224. The bundled `rap2hpoutre/laravel-log-viewer` override decrypts a user-supplied `dl` parameter and resolves its absolute path before applying the intended `storage/logs` directory restriction, allowing the restriction to be bypassed entirely. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog; however, successful exploitation could expose sensitive server files such as environment credentials or application secrets.
Missing length validation for the NEW_TOKEN format in HAProxy Community Edition 3.0 through 3.3 exposes network-accessible deployments to low-integrity and availability impacts via crafted requests. The flaw affects HAProxy Enterprise and ALOHA distributions as well, broadening the potential attack surface beyond the open-source edition. No public exploit code and no CISA KEV listing have been identified at time of analysis; patches are available across all affected release branches. Notably, the 'Information Disclosure' tag attached to this CVE conflicts with the CVSS C:N rating - defenders should consult the vendor advisory to clarify whether memory exposure is a realistic outcome.
Stored cross-site scripting in Frogman's chat-console markdown formatter allows a FreePBX admin with write access to entity fields (extension names, ring-group descriptions, IVR names, queue descriptions) to inject JavaScript payloads that execute in a second, higher-privileged admin's browser session when those fields are reflected through Frogman chat tool responses. All versions prior to 1.6.6 are affected; version 1.6.6, released following an internal audit on 2026-05-13, is the patching release. No public exploit code exists and no active exploitation has been confirmed (no CISA KEV listing); real-world risk is bounded by the product's experimental status and PR:H requirement.
Rsync daemon before version 3.4.3 allows hostname-based access control rules to be silently bypassed when the daemon is configured with chroot and the chroot directory lacks the files glibc requires for DNS resolution. When resolution fails inside the chroot, the client hostname is set to "UNKNOWN", which never matches administrator-defined "hosts deny" hostname patterns, effectively nullifying those rules. An attacker who controls the PTR record for their source IP can exploit this to connect to an rsync module they were explicitly denied access to; no public exploit code is identified and this is not listed in CISA KEV.
Prototype Pollution in FreeScout's client-side `getQueryParam` function allows an authenticated attacker to write arbitrary properties into `Object.prototype` via crafted URL query strings on any page loading `main.js`. An initial mitigation introduced in version 1.8.139 blocked direct top-level `__proto__` keys but failed to sanitize nested bracket-notation bypass forms such as `b[__proto__][polluted]=PWNED`, leaving all installations between 1.8.139 and 1.8.222 still exploitable. The complete fix shipped in version 1.8.223; no public exploit or active exploitation is confirmed at time of analysis.
Improper authorization in dataCycle-CORE versions up to and including 25.07.3 allows any Standard user to enumerate the full names and email addresses of other users - including internal staff, guest accounts, and external test accounts - via the `/users/search` endpoint, bypassing access controls that correctly deny direct user profile access. The CVSS vector (AV:N/AC:L/PR:L/UI:N) confirms low-complexity network exploitation by any authenticated Standard user with no user interaction required. No public exploit code has been identified at time of analysis, and this vulnerability is not listed in CISA KEV.