SQL injection vulnerability in the WPBot WordPress plugin before version 8.5.2 allows authenticated administrators to inject arbitrary SQL queries via unsanitized field identifiers. This injection executes when a site visitor triggers a search, potentially leading to low-level data exposure or modification. A public exploit is available, though no active exploitation has been confirmed by CISA KEV.
Incorrect authorization in AstrBot up to 4.25.5 allows remote authenticated users to bypass persona-based tool restrictions and execute unauthorized function tools. A public exploit exists, and a patch is available from the vendor. No active exploitation has been reported via CISA KEV, but the public exploit increases risk for deployments using persona tool controls.
Path traversal in ZJONSSON node-unzipper up to version 0.12.3 allows local attackers with low privileges to write files outside the intended extraction directory by crafting a malicious archive. Exploit code is publicly available, but no active exploitation has been confirmed. The vendor has not yet responded to the vulnerability report.
Authorization bypass in unitedbyai Droidclaw up to version 0.5.3 allows low-privileged remote attackers to bypass authorization checks on the Unsigned Scheduled Callback endpoint. Exploitation is difficult due to high attack complexity, but publicly available exploit code exists. The flaw can grant unauthorized access to or modification of goal data.
Information disclosure vulnerability in HCL Connections 8.0 allows an authenticated low-privilege user to access sensitive data through a vulnerable endpoint, requiring user interaction. No public exploit or active exploitation has been identified, and the overall risk is low.
Low-severity information disclosure in HCL Connections allows authenticated users with low privileges to obtain sensitive information they are not entitled to, caused by improper error handling. Exploitation requires user interaction and does not affect integrity or availability. No active exploitation or public exploit code has been reported.
Authentication bypass via lock screen in macOS allows a person with physical access to view contacts and photos on a locked device. The issue affects macOS prior to Sequoia 15.7.8 and Tahoe 26.6. No active exploitation or public exploit code is reported, but the vulnerability bypasses a fundamental security boundary.
Improper authorization in AstrBot up to version 4.25.5 allows authenticated remote attackers to bypass tool access restrictions in the Subagent component. The flaw arises from insufficient filtering of handoff tools, exposing restricted functionality to low-privileged users. A public proof-of-concept exploit exists, though the overall severity is low (CVSS 4.0 score 2.1) and no active exploitation is reported in CISA KEV.
Local denial of service in ggml-org whisper.cpp 95ea8f9b via reachable assertion in ggml_ftype_to_ggml_type function. A local attacker with low privileges can cause a crash by supplying an invalid ftype argument. No public exploit identified; no patch available as vendor has not responded to issue report.
Local attackers with low privileges can trigger an out-of-bounds read in whisper.cpp 1.8.4-58 by supplying a very short audio sample to the log_mel_spectrogram function. This heap read overflow may leak sensitive information but does not allow code execution or system compromise. No public exploit or active exploitation has been reported.
Path traversal in ZTE File Manager allows third-party Android apps to read sensitive files under /data/data and /data/local/tmp. The vulnerability is exposed via the FilePreViewActivity which accepts arbitrary file paths from external intents. Exploitation requires a malicious app installed on the device and user installation, but no special privileges; no evidence of active exploitation.