Signature forgery in the MonsterInsights WordPress plugin before 11.1.0 allows unauthenticated network attackers to overwrite plugin configuration values when the site is not connected to Google Analytics. The root cause is that the HMAC signing key used to authenticate a specific AJAX action defaults to an empty string in that disconnected state, making any forged HMAC trivially valid. The practical impact is limited to disrupting server-side analytics in Manual GA4 mode; no public exploit identified as actively exploited (not in CISA KEV), though a publicly available proof-of-concept exists and the EPSS probability is low at 0.15%.
Stored XSS in the Brizy WordPress plugin (all versions before 2.8.19) allows authenticated Author-level users to inject arbitrary JavaScript into site-global design data, which is then rendered unsanitized on every front-end page of the affected site. Every visitor's browser - including site administrators - silently executes the payload upon page load, enabling session hijacking, credential theft, or full site takeover. A publicly available proof-of-concept exists per WPScan, though no active exploitation is confirmed in CISA KEV; EPSS sits at 0.16% (6th percentile), suggesting opportunistic rather than automated mass exploitation.
Open WebUI versions 0.9.6 through 0.10.2 contain an authorization-ordering flaw in the DELETE /api/v1/chats/{id} handler that allows any authenticated user to silently cancel another user's active LLM generation tasks - including streaming model responses, title generation, and tag generation - without holding delete permissions on the target chat. The task-cancellation helper executes unconditionally at the top of the handler, before ownership verification, admin checks, or permission gate evaluation, meaning even revoking the chat.delete role permission leaves the cancellation side effect fully reachable. A detailed proof-of-concept is included in the GitHub security advisory; no public exploitation confirmed at time of analysis.
Authorization bypass in the Brizy WordPress plugin before 2.8.19 permits authenticated Contributor-level users to hijack template-type metadata on templates owned by other users. The plugin validates authorization against one request parameter while executing the write operation against a different, attacker-controlled parameter - a textbook CWE-639 Insecure Direct Object Reference variant. A publicly available exploit is documented by WPScan; however, no active exploitation is confirmed via CISA KEV, and the EPSS score of 0.13% (3rd percentile) indicates negligible observed in-the-wild activity.
Server-side request forgery in NousResearch hermes-agent up to version 0.16.0 allows low-privileged remote attackers to manipulate the server into issuing arbitrary HTTP requests via the browser_snapshot function in tools/browser_tool.py. Exploitation can expose internal network services, cloud provider metadata endpoints, and other non-public resources reachable from the server. A public proof-of-concept exploit has been disclosed; the vendor did not respond to coordinated disclosure.
Open redirect in kodbox 1.67 Build 02 SSO API Login allows unauthenticated remote attackers to redirect victims to arbitrary external URLs by manipulating the callbackUrl parameter at the /user/sso/apiLogin endpoint. The CVSS 4.0 vector (AV:N/AC:L/PR:N/UI:P) confirms network-accessible, low-complexity exploitation requiring only passive user interaction - a victim clicking a crafted SSO link - with no authentication or special configuration needed from the attacker's side. A proof-of-concept exploit has been publicly disclosed on GitHub (E:P), lowering the exploitation barrier, though no CISA KEV listing indicates confirmed widespread exploitation at time of analysis.
Authorization bypass in DWSurvey up to version 6.14.0 permits remote authenticated attackers to manipulate user-controlled keys in the Survey Handler's devSurvey function, bypassing access controls on the /api/dwsurvey/app/v6/dw-design-survey/dev-survey.do endpoint. The flaw (CWE-639, Insecure Direct Object Reference class) allows unauthorized read or write access to survey resources belonging to other users. A public proof-of-concept exploit is available and the vendor has not responded to disclosure, leaving no official patch for deployed instances.
Server-side request forgery in NousResearch hermes-agent through version 0.16.0 allows authenticated remote attackers to coerce the server into making arbitrary outbound HTTP requests by supplying a crafted URL to the xAI Image Generation Provider component. The vulnerability resides in the save_url_image function within agent/image_gen_provider.py, which fails to validate or restrict URLs before fetching them server-side. A proof-of-concept exploit has been publicly disclosed on GitHub; no vendor patch exists as the vendor did not respond to disclosure outreach.
Incorrect authorization in NousResearch hermes-agent's Quick Command Handler allows low-privileged remote attackers to bypass slash command access controls via a flaw in the `_check_slash_access` function within `gateway/run.py`. All versions through 2026.6.5 are confirmed affected, with a public proof-of-concept exploit available on GitHub. The vendor did not respond to responsible disclosure, leaving no official patch available at time of analysis.
Improper authorization in diaowen DWSurvey (all versions through 6.14.0) permits authenticated low-privileged users to invoke the Survey Status Handler endpoint beyond their intended access level, enabling unauthorized manipulation of survey state - such as publishing, closing, or altering surveys owned by other accounts. The affected endpoint `/api/dwsurvey/app/survey/up-survey-status.do` is remotely reachable and lacks sufficient authorization enforcement. A public proof-of-concept exploit has been disclosed via Google Drive; no vendor patch exists as the vendor did not respond to responsible disclosure, leaving all current deployments unmitigated.
SQL injection in chetans9's core-php-admin-panel exposes the customers.php endpoint to remote authenticated attackers who can manipulate the filter_col argument to execute arbitrary SQL against the backend database. All code up to commit 90d07ed5aac5e0f09b6a5828d7bb2eb83010763f on the rolling-release branch is affected, with no vendor patch issued as the maintainer did not respond to disclosure. A public proof-of-concept exploit is available via GitHub, though no confirmed active exploitation has been recorded by CISA KEV; CVSS 4.0 scores the overall risk at 2.1, reflecting limited but real partial data exposure and database manipulation potential.
Cross-site request forgery in RackTables through version 0.22.0 enables remote attackers to perform unauthorized state-changing actions against authenticated users' sessions by enticing them to visit attacker-controlled pages. The project maintainer has publicly confirmed the complete absence of any CSRF protection across the entire codebase and has explicitly declined to commit to a timely fix, making this a persistent, unfixed exposure. A public POC exists on GitHub; however, no active exploitation is confirmed in CISA KEV, and the CVSS 4.0 score of 2.1 reflects the limited integrity-only impact and mandatory user interaction requirement.
Path traversal in ZomboDroid Meme Generator App 4.6830 for Android exposes file system access beyond intended directories through manipulation of function t5.l.c in the com.zombodroid.MemeGenerator component. Exploitation is constrained to local access, yielding limited confidentiality, integrity, and availability impact consistent with the CVSS 4.0 score of 1.9. A public proof-of-concept is available on GitHub, though no patch has been released and the vendor did not respond to coordinated disclosure - leaving no official remediation path.
Heap-based buffer overflow in open62541 up to version 1.5.5 allows local low-privileged attackers to corrupt heap memory via the UA_Client_readNodeClassAttribute function in the client high-level API. The vulnerability is confined to local exploitation (AV:L/PR:L), limiting its network attack surface, but publicly available exploit code lowers the barrier for abuse on compromised or multi-tenant systems running open62541 OPC UA clients. The open62541 project closed the issue report as filed through unofficial channels, leaving patch status and official acknowledgment unconfirmed.
Out-of-bounds read in Systerel S2OPC versions 1.7.0 through 1.7.3 allows a local, low-privileged attacker to disrupt the OPC-UA client process by triggering a memory read violation in the DeleteMonitoredItemsRequest handler state machine function. The flaw is confined to the client-side wrapper component and results in an availability impact rather than code execution or data exfiltration. A public proof-of-concept exploit has been released on GitHub, and the vendor has not responded to coordinated disclosure, leaving no official patch confirmed at time of analysis.
Epsilla-cloud VectorDB's filter query parser crashes under malformed input due to an improper exception/condition check (CWE-754) in the SplitTokens and ShuntingYard functions of engine/query/expr/expr.cpp. All releases from 0.3.0 through 0.3.18 (including commit df5a5f5afb85a2376a0f2f316c79dea9b2c6ac7a) are affected. A local, low-privileged user who can submit filter expressions to the database engine can trigger an abnormal termination of the parser, causing an availability impact. A public proof-of-concept exploit exists; the vendor did not respond to responsible disclosure.
Use-after-free memory corruption in open62541's example client code allows a local low-privileged user to cause memory corruption with potential for denial of service or limited code execution. The vulnerability resides in the UA_Client_getRemoteDataTypes function within the examples/custom_datatype/client_types_custom.c file - notably example/sample code rather than the core library - at commit ca356b088ada7dee824d1b4acd07c1ff07ce242b. A publicly available proof-of-concept exploit exists, though the project closed the issue report citing improper disclosure channel, leaving no official patch or advisory. No confirmed active exploitation (CISA KEV absent), but the CVSS 4.0 E:P modifier reflects the published POC.
Forced logout via unsigned backchannel requests affects Red Hat Build of Keycloak when an OIDC identity provider is configured to skip signature validation. Under this non-default configuration, the backchannel logout endpoint in keycloak-services improperly accepts logout requests lacking any cryptographic signature (CWE-347), violating the OIDC backchannel logout specification. An unauthenticated network attacker who possesses knowledge of a target user's session identifiers can submit a forged unsigned logout request, terminating that session without the user's consent. No public exploit or active exploitation (CISA KEV) has been identified; with CVSS 3.7 and EPSS data absent from the input, this is a low-priority availability-only issue gated by a specific non-default configuration.
Uninitialized heap memory disclosure in SSSD's NSS responder exposes cached directory data and heap layout to local authenticated users on RHEL 6 through 10 and OpenShift Container Platform 4. The sss_nss_protocol_fill_initgr() function pre-allocates a reply buffer sized for all group entries but fails to shrink it when groups are skipped, causing uninitialized heap bytes to be included in the response transmitted back to the requesting client. No public exploit code has been identified at time of analysis, and this is not listed in CISA KEV; however, leaked heap addresses may assist in chained attacks targeting ASLR bypass in sssd_nss.
Off-by-one memory corruption in popt's poptStuffArgs function allows a local low-privileged attacker to overwrite adjacent memory and potentially execute arbitrary code within any host application that unsafely processes the corrupted argument data. All supported Red Hat Enterprise Linux releases (6 through 10), Red Hat Hardened Images, and OpenShift Container Platform 4 ship the affected library. No public exploit code has been identified and no CISA KEV listing exists; exploitation requires high-complexity triggering conditions, making this a routine patch priority rather than an emergency response item.
Improper authentication in Baserow's 2FA verify endpoint (versions 2.3.0-2.3.2) allows a low-privileged remote attacker to manipulate which user identity the 2FA verification applies to, by supplying a different user identifier in the HTTP request body rather than relying on the authenticated session token. The affected component is the `verify` function in `backend/src/baserow/api/two_factor_auth/views.py`, confirmed by the 2.3.3 release refactor note referencing GitHub issue #5743. Exploitation is characterized as high complexity (CVSS 4.0 AV:N/AC:H/PR:L), and no public exploit or CISA KEV listing has been identified at time of analysis.
Reflected XSS in Snowstorm's Web Route redirection endpoint allows remote unauthenticated attackers to execute arbitrary JavaScript in a victim's browser by luring them to a crafted malicious link. The vulnerability resided in a Spring Boot REST controller's error-handling path, where attacker-controlled input in the `uri` parameter was reflected verbatim in a 400 Bad Request response body; when combined with an `Accept: text/html` request header, Spring's content negotiation rendered the response as HTML, enabling script injection. No CISA KEV listing or public exploit code was identified at time of analysis; two upstream patch commits and a CISA advisory reference confirm vendor acknowledgment and fix availability in versions 10.12.2 and 10.9.3.
Baserow's admin impersonation endpoint in versions 2.3.0 through 2.3.2 allows authenticated administrators to obtain authentication tokens for deactivated (inactive, non-staff) users via an improper authorization flaw in `BaserowImpersonateAuthTokenSerializer`. The Baserow maintainer explicitly notes that issued tokens for deactivated accounts are functionally inert because all downstream API endpoints reject them, calling the issue 'more like a bug instead of a vulnerability.' No public exploit code exists, no active exploitation has been observed, and a CVSS 4.0 score of 2.1 reflects the extreme privilege requirement and negligible real-world impact.
SQL injection in sar2html 4.0.0's Search component permits remote low-privileged attackers to manipulate backend SQL queries by supplying crafted input to the Search argument in sar2html.py. Public exploit code exists (CVSS 4.0 E:P), though the vulnerability has not been confirmed as actively exploited in the wild via CISA KEV. The vendor did not respond to coordinated disclosure, leaving no official patch available and no timeline for remediation.
Login CSRF in oidcc_plug (versions 0.2.0-beta.1 through 0.5.0) enables an attacker to silently sign a victim into the attacker's own identity provider account by luring the victim to a crafted OIDC callback URL carrying the attacker's authorization code. The root cause is that Oidcc.Plug.AuthorizationCallback.call/2 substitutes permissive defaults (`:any` nonce, `:none` PKCE and state verifiers) when no prior Oidcc.Plug.Authorize session exists instead of rejecting the stateless request outright, causing every downstream security check - nonce, state, PKCE, peer IP, and user-agent binding - to silently pass against nothing. No public exploit code or CISA KEV listing exists at time of analysis; however, the attack primitive is straightforward for any attacker holding an account at the same identity provider.
Debug unlock token cross-device reuse in Caliptra Core ROM and Core Firmware (subsystem mode) allows an attacker who already holds access to an integrator's debug unlock signing service to unlock production debug on an unintended device by presenting a token originally issued for a different device sharing the same debug unlock key hash. The 384-bit challenge nonce prevents replay of previously captured tokens but does not bind a token to a specific target device identity, enabling lateral debug access within a shared-key-hash trust group. No public exploit has been identified and the CVSS 4.0 score of 1.8 reflects the narrow real-world impact, which is bounded by the requirement for high-privilege signing-service access and the hard constraint that exploitation cannot cross key-hash group boundaries.
Insecure temporary file creation in Lenovo XClarity Essentials OneCLI 5.5.0 and earlier on Linux enables a local low-privileged attacker to overwrite or truncate arbitrary system files via a race condition (CWE-377), but only when a privileged user concurrently executes OneCLI with elevated rights. The attack timing requirement (AT:P in the vendor CVSS 4.0 vector) confirms this is a classic TOCTOU-style symlink race, limiting realistic exploitation to shared multi-user Linux environments where an administrator routinely runs the tool elevated. No public exploit code or CISA KEV listing exists; the vendor has released a patch via advisory LEN-ht116433.