Privilege escalation in Microsoft Purview eDiscovery enables an authenticated low-privileged attacker to gain elevated access over the network, with full confidentiality, integrity, and availability impact once exploited. The vulnerability stems from improper access control (CWE-284), meaning the service fails to enforce authorization boundaries between privilege levels for eDiscovery operations such as case management, legal holds, and content searches. No active exploitation has been confirmed in CISA KEV, and no public exploit code has been identified at time of analysis, though the low attack complexity and network accessibility make this a credible threat in Microsoft 365 enterprise environments.
Unauthenticated account takeover in the TrueBooker Appointment Booking and Scheduler System plugin for WordPress (all versions through 1.2.3) allows remote attackers to reset the password of any account, including administrators, because a password-change action fails to verify the requester's authorization. Successful exploitation yields full admin login and therefore complete control of the WordPress site. No public exploit identified at time of analysis; the flaw was reported by Wordfence and an upstream fix is present in the plugin repository.
Account takeover in the TrueBooker Appointment Booking and Scheduler System plugin for WordPress (all versions through 1.2.3) lets unauthenticated attackers reset the password of any account, including administrators, because the plugin's password-reset flow never verifies the requester's identity. Successful exploitation yields full control of the targeted account and, via an admin takeover, the entire WordPress site. No public exploit identified at time of analysis, but the CVSS 9.8 rating and trivial network exploitability make this a high-priority patch.
Heap type confusion in the Apache Fory C++ deserialization engine (versions 0.14.0 up to but not including 1.5.0) lets a crafted payload bypass type-compatibility checks during polymorphic smart-pointer deserialization, so an object of an incompatible type is handled as its declared base type. Because CWE-502 untrusted-data handling here corrupts memory rather than merely mis-parsing values, an attacker who controls serialized input can trigger undefined behavior ranging from denial of service to arbitrary code execution. This is rated CVSS 9.8 and is fixed in 1.5.0; there is no public exploit identified at time of analysis and EPSS is low at 0.21%.
Improper authentication in Dell OpenManage Server Administrator (OMSA) Managed Node before version 11.1.0.2 allows a remote, unauthenticated attacker to bypass authentication controls and gain unauthorized access to the systems management interface across Windows, RHEL 8.10/9.4, and SLES 15 deployments. The CVSS 3.1 base score is 9.8 (network vector, no privileges, no user interaction) with total confidentiality, integrity, and availability impact. There is no public exploit identified at time of analysis and CISA SSVC lists exploitation as none, but the trivial attack path makes prompt patching important.
Host root code execution in Kata Containers kata-runtime prior to 4.0.0 lets a pod user escape the guest VM boundary by abusing the unvalidated 'io.katacontainers.config_path' pod annotation, which caused the runtime to load an arbitrary host TOML configuration file without restriction. Because that config selects the hypervisor and virtio-fs daemon binaries, an attacker who can both set the annotation and drop a file at a host-visible path can point the runtime at an attacker-controlled binary and have it executed as root on the host, collapsing the security isolation Kata exists to provide (CVSS 9.6, scope-changed). There is no public exploit identified at time of analysis, but the fix (removal of the annotation in version 4.0.0) is confirmed by the vendor GHSA advisory and commit.
Cross-origin request forgery leading to remote code execution in OpenYak before 1.1.3 lets any malicious webpage a user visits drive the desktop backend's loopback HTTP API (typically 127.0.0.1:19141) to run arbitrary shell commands on the host, terminate the service, and steal chat history and account PII. The local API ships with no Origin validation, no loopback authentication, no Content-Type enforcement, and a wildcard CORS policy, so the victim's browser is abused as a proxy that defeats OS-level network isolation. No public exploit identified at time of analysis; the flaw is fixed in version 1.1.3.
Denial of service with potential for remote code execution affects Tobit Laboratories' TeamDavid (David Webbox) groupware through Rollout 524, where an unauthenticated attacker can crash the server by sending a specially crafted JSON body to a vulnerable API endpoint - a payload as small as 8 characters beginning with a number triggers an out-of-bounds stack write. The reliably reachable impact is a server crash, but the underlying buffer overflow could escalate to full server compromise if a stack canary is disclosed via a separate vulnerability. No public exploit identified at time of analysis and the flaw is not listed in CISA KEV; the high CVSS 4.0 base score (9.5) reflects the worst-case RCE potential rather than confirmed code execution.
Denial of service, and potentially remote code execution, in Tobit Laboratories' David (TeamDavid/Webbox) collaboration suite affects all releases through Rollout 524. Multiple file-upload handlers fail to bounds-check the supplied filename, so an unauthenticated attacker who sends an upload request with an excessively long filename triggers an out-of-bounds stack write (CWE-787) that reliably crashes the server; where the stack layout is favorable or a stack canary can be leaked via a separate flaw, the same overflow may yield code execution and full server compromise. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the flaw was reported by Switzerland's NCSC and detailed by InfoGuard Labs as one of 22 CVEs in David.
Denial of service (with conditional remote code execution potential) affects Tobit Laboratories AG's TeamDavid groupware through Rollout 524, where the Webbox endpoint "//serverClient_close.html" fails to bounds-check multiple form-data parameters. An attacker submitting over-long parameter values triggers an out-of-bounds write (CWE-787) that crashes the server; if a stack canary can be leaked via a separate flaw, the memory corruption could escalate to full server compromise. No public exploit identified at time of analysis, and this CVE is one of 22 reported in the David platform by researchers at InfoGuard/NCSC.ch.
SQL injection in SourceCodester Simple Doctors Appointment System 1.0 exposes the application's database to remote manipulation through the unsanitized 'id' parameter in the admin delete-appointment endpoint. The CVSS 4.0 vector (AV:N/AC:L/PR:N/UI:N) indicates low-complexity remote exploitation with no authentication formally required per the reporter's assessment, though the /admin/ path implies a session context that should be independently verified. A public proof-of-concept is available on GitHub, raising practical exploitation risk despite the product's limited real-world footprint; no active exploitation (CISA KEV) has been recorded.
SQL injection in SourceCodester Photo Share Website 1.0 exposes the unauthenticated user registration endpoint (/social/ajax.php?action=signup) to database manipulation via the email parameter. The CVSS 4.0 vector confirms network-exploitable with no authentication, no complexity, and no special attack conditions, while the E:P modifier reflects publicly available exploit code hosted on GitHub. No active exploitation is confirmed in CISA KEV, but the combination of a zero-barrier attack surface and public POC code means any internet-exposed instance should be treated as immediately at risk.
SQL injection in SourceCodester Photo Share Website 1.0 exposes the login endpoint `/social/ajax.php?action=login` to remote unauthenticated exploitation via the `email` parameter, enabling attackers to manipulate backend database queries. The CVSS 4.0 vector confirms zero-barrier access - no credentials, no complexity, no user interaction required against a default deployment. A public proof-of-concept exploit is available on GitHub, meaningfully lowering the threshold for opportunistic attacks, though no active exploitation has been confirmed in CISA KEV.
Stored cross-site scripting in Meow Gallery WordPress plugin (all versions before 5.5.2) allows any WordPress user holding the Author role or higher to persist a JavaScript payload via unsanitized attachment alt text in linked gallery anchor attributes. Any visitor - including site administrators - who subsequently loads a post containing the affected gallery executes the injected script, enabling session hijacking, credential theft, or malicious redirects. A publicly available proof-of-concept exists per WPScan; EPSS at 0.15% reflects low automated exploitation probability, though the threat to sites with multiple or untrusted author accounts is concrete.
Stored cross-site scripting in BNE Testimonials WordPress plugin (all versions before 2.0.8.2) allows contributor-level authenticated users to inject arbitrary JavaScript into an inline script block via an unescaped shortcode attribute. The payload persists in published content and executes in the browser of any visitor who views the affected page, including administrators. A public proof-of-concept is documented by WPScan; however, the vulnerability is not listed in CISA KEV and EPSS sits at the 5th percentile, indicating low automated exploitation probability.
Arbitrary file read in Postiz (gitroomhq/postiz-app before 2.22.1) lets an unauthenticated remote attacker retrieve any file readable by the application process via the /api/uploads media route, which fails to confine URL-supplied path segments to the upload directory. Because URL-encoded traversal sequences survive Next.js route matching and are decoded only at the filesystem call, an attacker can read the process environment to steal the JWT signing secret, then forge a non-expiring administrator session without a password - turning a file-disclosure bug into full account takeover. There is publicly available fix code (vendor commit and v2.22.1 release), but no public exploit identified at time of analysis and the issue is not in CISA KEV.
Quadratic-complexity denial of service in Hono's `languageDetector` middleware (versions 4.12.0-4.12.33) allows unauthenticated remote attackers to exhaust CPU resources by sending HTTP requests with crafted language tags containing large numbers of hyphen-separated subtags. The default middleware configuration accepts language values from query parameters, cookies, and the Accept-Language header without authentication, meaning the vulnerable code path is reachable from the network in any default Hono deployment using this middleware. No public exploit code has been identified and this CVE is not in the CISA KEV catalog, but the attack is trivially constructible from the advisory description; the fix was released in version 4.12.34.
Remote denial-of-service in @sveltejs/kit (versions ≤ 2.70.1) is achievable by any unauthenticated attacker who sends a specially crafted Accept header, triggering quadratic backtracking in the framework's content negotiation regex and causing excessive CPU consumption. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms zero-barrier remote exploitation against default SvelteKit deployments, though real-world impact is partly mitigated where platform-level header length limits are in place. No public exploit code has been identified at time of analysis, and this vulnerability is not listed in CISA KEV.
Log flooding via unbounded username input in JupyterHub's form-based login handler allows unauthenticated remote attackers to exhaust logging and disk storage resources on multi-user Jupyter notebook servers running versions prior to 5.5.0. The root cause (CWE-400) is that failed login attempts wrote the full attacker-supplied username - with no length cap - directly into application logs across three distinct code paths: the base login handler, the login POST handler, and the PAM authenticator. No public exploit code has been identified at the time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Persistent denial of service in Tobit Laboratories AG's TeamDavid (David/Webbox groupware) allows any remote, unauthenticated attacker to shut down the server by requesting the exposed /internalRestart endpoint, which fully halts the service rather than restarting it. All releases through Rollout 524 are affected, and recovery requires manual administrator intervention to bring the server back online. No public exploit identified at time of analysis, though the trigger is trivial (a single HTTP request to a known path).
TLS credential exposure in ZTE ZXHN F680 fiber gateway firmware allows an adjacent-network attacker to extract unencrypted cryptographic key material - classified under CWE-321 (Use of Hard-coded Cryptographic Key) - enabling potential decryption or impersonation of TLS-protected communications between the device and upstream ISP services. Seven discrete firmware versions are confirmed affected per the ENISA EUVD entry and ZTE's own advisory. No public exploit code or CISA KEV listing is confirmed at time of analysis, and the CVSS adjacency requirement and high complexity rating limit realistic exploitation to technically capable actors with local network proximity.
WP Events Manager for WordPress (all versions before 2.2.5) exposes a payment notification endpoint that accepts fraudulent booking-paid confirmations from unauthenticated attackers. The plugin neither validates that an incoming payment callback originates from the configured merchant nor that the notified amount matches the booking total, enabling any remote actor to mark arbitrary bookings - including other users' bookings - as fully paid without money reaching the merchant. A publicly available exploit exists; the vulnerability is not currently listed in CISA KEV, but the AV:N/AC:L/PR:N/UI:N attack profile means exploitation requires zero privileges and trivial effort.
CAPTCHA bypass in the Simple CAPTCHA with Cloudflare Turnstile WordPress plugin before 1.42.0 allows unauthenticated network attackers to defeat anti-abuse protections on Forminator-integrated forms by exploiting a flawed validation cache keying mechanism. After solving a single legitimate Turnstile challenge, an attacker can replay token-less form submissions during the validation cache window because the cache is bound to an attacker-controlled, reusable request value rather than the one-time challenge token. A publicly available proof-of-concept exists (WPScan); this vulnerability is not currently listed in CISA KEV, and no EPSS score was provided in source data.
Unauthenticated memory disclosure in Tobit Laboratories' David (TeamDavid) groupware through Rollout 524 lets remote attackers harvest sensitive server memory - including user passwords - by repeatedly requesting the malformed endpoint "/.well-known/mta-sts.", which causes the application to return raw memory contents in its response. The flaw resembles a Heartbleed-style over-read affecting a self-hosted Microsoft 365 alternative, and no public exploit identified at time of analysis, though it was disclosed as part of a broader research batch (22 CVEs) by InfoGuard Labs and reported via NCSC.ch. With CVSS 4.0 9.2 (Critical), network-reachable and requiring no authentication or user interaction, it is a high-priority disclosure risk wherever David is internet-exposed.
Arbitrary file disclosure in the SEBLOD content construction kit (CCK) extension for Joomla lets unauthenticated remote attackers read files both inside and outside the webroot via directory traversal, affecting versions before 3.30.0, before 4.7.0, and before 6.0.1. Reported by the Joomla project (EUVD-2026-54480) and rated CVSS 4.0 9.2, the flaw requires no authentication or user interaction and can expose configuration files, credentials, and secrets. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Missing authentication in VHF Data Link (VDL) CPDLC (Controller-Pilot Data Link Communications) enables rogue ground stations to inject unauthorized clearance messages into cockpit avionics over radio frequency. Pilots receiving spoofed CPDLC messages may follow misleading ATC instructions - altitude changes, heading redirections, or route modifications - with no indication the messages are inauthentic. This ICS-CERT advisory (ICSA-26-219-01) exposes a systemic protocol-level authentication gap with no public exploit identified at time of analysis.
Message injection into Controller-Pilot Data Link Communications (CPDLC) enables remote attackers operating over radio frequency to insert false emergency or operational status messages into aviation communication channels, causing flight crews, air traffic controllers, and ground operations personnel to misallocate resources or take unsafe response actions. Disclosed by CISA ICS-CERT under advisory ICSA-26-219-01, this vulnerability affects CPDLC-equipped aircraft avionics and ATC ground systems globally, with high integrity impact to both the vulnerable communication system and downstream aviation safety systems. No public exploit has been identified at time of analysis, though the high attack complexity constrains the threat actor population to technically sophisticated adversaries with aviation-domain knowledge and RF transmission capability.
Remote denial-of-service in Tobit Laboratories AG TeamDavid's Webbox application allows unauthenticated network attackers to crash the server by crafting an HTTP password-change request with a non-INI target file of excessive size. The handler activates solely on the presence of the string "(editini)" in the request path with no further validation, triggering a buffer overflow that terminates the server process. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, though the trigger mechanism is fully detailed in the InfoGuard coordinated disclosure.
Privilege escalation in Sonatype Nexus Repository 3 allows an authenticated low-privileged user - who holds the 'update privilege definitions' permission - to silently elevate themselves to full administrative access by editing wildcard privilege definitions already scoped to their own role. No additional authorization check, role reassignment, or administrator approval is required for this escalation. No public exploit code has been identified at time of analysis, but the CVSS 4.0 score of 8.9 and the complete confidentiality, integrity, and availability impact - including lateral impact on downstream systems - indicate high real-world risk for any organization using Nexus Repository 3 as a software supply chain hub.
Hard-coded cryptographic key exposure in Tobit Laboratories TeamDavid Webbox allows any attacker who obtains server-side password files - via direct filesystem access or through the companion 'Random File Read' vulnerability - to reverse the obfuscation applied to locally-created user passwords and recover plaintext credentials. All TeamDavid deployments through Rollout 524 using locally created accounts are affected, making this a critical identity compromise risk for organizations relying on TeamDavid as an M365 alternative. No public exploit has been independently confirmed, but InfoGuard Labs published a 22-CVE research campaign against this product that likely includes technical detail enabling exploitation.
Cross-user HTML disclosure in Hono's server-side rendering affects all applications using hono/jsx with memo()-wrapped components that read request-scoped context. On a warm server instance, when two requests share comparator-equal props, the memoized render from the first request is served to the second user verbatim - bypassing per-request context isolation for values obtained via createContext()/useContext(), useRequestContext(), or getContext(). This can leak another user's profile data, CSRF tokens embedded in HTML, or role-gated content. No public exploit or CISA KEV listing exists at time of analysis; the vendor released a confirmed fix in v4.12.34.
DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows enables a local low-privileged attacker to execute arbitrary code at the privilege level of the SDK process by planting a malicious DLL in a user-controlled directory present in the PATH environment variable. The SDK's dependency resolution fallback traverses PATH when a required DLL is not found locally, making the attack reliable and requiring no special tooling. No public exploit has been identified at time of analysis, but the technique is well-documented and the CVSS scope change (S:C) signals that impact can extend beyond the attacker's own privilege tier if the SDK runs under a higher-privileged account.
Uncontrolled memory consumption in pypdf's /ToUnicode CMap parser allows a remote attacker to cause denial of service by supplying a crafted PDF containing font entries with abnormally large bfrange code or string tokens. All pypdf versions prior to 6.15.0 are affected when performing text extraction operations. No public exploit or active exploitation is identified, but the fix is straightforward and the attack requires only the ability to supply a PDF to an application using the library.
Resource exhaustion in pypdf before 6.15.0 enables denial of service via crafted PDF files containing CID font width entries with maliciously large range values. Any application that processes untrusted PDFs using pypdf's text extraction or font parsing routines is affected, as the library iterates over attacker-controlled CID width ranges without bounds enforcement, consuming excessive CPU and memory. No public exploit code has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Unauthenticated remote denial-of-service in absinthe_federation 0.1.0-0.9.2 allows an attacker to permanently exhaust the BEAM (Erlang VM) atom table and crash the application node by sending crafted GraphQL `_entities` queries with large numbers of unique representation keys. The `convert_key/2` function in `entities_field.ex` unconditionally calls `String.to_atom/1` on all client-supplied keys, bypassing schema coercion through the open-ended `_Any` scalar; since BEAM atoms are never garbage collected and the atom table is hard-capped at approximately 1,048,576 entries, a handful of requests carrying tens of thousands of unique keys exhausts the table and aborts the node. No public exploit code or CISA KEV listing exists at time of analysis, but the attack mechanism is well-understood in the Erlang ecosystem and trivially automatable.
Path traversal in Pathling Server's FHIR bulk export result endpoint (`/$result`) prior to version 2.0.0 allows any caller holding a valid async export job ID to read arbitrary files from the warehouse database root by supplying crafted `file` parameter values containing directory traversal sequences. Because the server validates the job ID but never normalizes or confines the requested file path to the job's designated `jobs/<jobId>` subdirectory, and because export scratch space cohabits the same filesystem root as persisted FHIR resource tables, an attacker can exfiltrate sensitive clinical health data. No public exploit has been identified at time of analysis, but the CVSS 4.0 score of 8.7 with a fully unauthenticated network vector makes this a high-priority patch for healthcare deployments with export operations enabled.
Path traversal in Pathling Server's FHIR async export `/$result` endpoint exposes arbitrary warehouse filesystem files to any caller who can supply a valid export job ID. All Pathling Server deployments prior to version 2.0.0 running without authentication and with async export enabled are affected, as the file handler accepts user-supplied path components without normalization or directory confinement. No public exploit code has been identified at time of analysis, but the technique is straightforward - the attacker need only initiate their own export job to obtain a valid job ID, then traverse out of the job directory to reach co-located FHIR resource tables, which may contain protected health information.
Stored XSS in SP Page Builder (Joomla extension by JoomShaper) prior to version 6.7.0 allows unauthenticated remote attackers to persist arbitrary JavaScript in a Joomla site's database via a single HTTP request to the Shapes API endpoint. When any administrator subsequently opens the SP Page Builder editor, the payload executes automatically in their browser session, enabling session hijacking, credential theft, or full backend site compromise. No public exploit or CISA KEV listing has been identified at time of analysis, but the unauthenticated injection vector combined with automatic detonation on routine admin activity makes this a high-priority patch target for any Joomla installation running this extension.
Remote code execution in Sonatype Nexus Repository 3 is achievable by any user holding the nx-datastores-update permission, who can exploit an insufficiently restricted HikariCP connection-pool property passthrough in the DataStore configuration API to inject arbitrary SQL via the connectionInitSql property. On the default H2 embedded database backend - common in non-production and smaller deployments - H2's ability to invoke Java methods from SQL allows this injection to escalate to OS-level command execution as the Nexus process user. No public exploit has been identified at time of analysis, but the H2-to-RCE escalation path is a well-understood Java ecosystem technique that lowers the practical skill bar significantly.
Credential exfiltration in Pathling Server prior to 2.0.0 allows an allowed submitter to hijack the bulk-submit OAuth flow by supplying an attacker-controlled `oauthMetadataUrl` parameter that is never validated against the server's configured `pathling.bulkSubmit.allowableSources` allowlist. Pathling blindly fetches OAuth metadata from the caller-supplied URL, trusts the returned `token_endpoint`, and transmits stored OAuth client credentials directly to the attacker's infrastructure. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV, but the credential theft impact is severe for any healthcare organization running FHIR bulk data pipelines on this platform.
Pathling Server before version 2.0.0 permits authenticated callers holding only coarse operation-level authorities (e.g., `pathling:search`) to act on arbitrary FHIR resource families - including resource types they are not explicitly authorized to read or write - because typed search, update, and batch handlers enforce the operation-level authority check but skip the documented per-resource authority check (e.g., `pathling:read:Patient`). The flaw breaks the two-factor authorization model the product documents, exposing potentially all FHIR resource families to any valid operation-authority holder. No confirmed active exploitation (not in CISA KEV) and no public exploit code has been identified at time of analysis; the vulnerability is fixed in Pathling Server 2.0.0.
Authorization bypass in Pathling Server (prior to 2.0.0) allows an authenticated caller holding only coarse operation-level permissions (e.g., `pathling:search`) to access arbitrary FHIR resource types without possessing the required per-resource authority (e.g., `pathling:read:Patient`), enabling unauthorized disclosure of clinical health records across the FHIR repository. The root cause is that typed search, update, and related FHIR handlers are annotated solely with `@OperationAccess(...)` and omit the second-layer per-resource authority check mandated by the documented authorization model. No public exploit has been identified at time of analysis and a vendor-released patch is available in version 2.0.0.
Stored cross-site scripting in lakeFS Web UI allows an authenticated contributor to execute arbitrary JavaScript in any other user's authenticated browser session. The renderer for `.md` objects and `README.md` files in both the open-source edition (< 1.81.1) and Enterprise edition (< 1.84.0) passes Markdown-derived HTML to the DOM without sanitization, making any writable branch a potential injection point. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low attack complexity and automatic rendering of `README.md` on directory browse materially lower the barrier to exploitation for any insider or contributor with write access.
Insufficient session expiration in Sonatype Nexus Repository 3 allows a previously-authenticated user to retain full repository access after their account is deleted, deactivated, or their password is changed. Any user holding an active session at the moment of an administrative revocation event can continue reading, modifying, or deleting repository content until that session naturally times out - bypassing the intended access control action. No public exploit has been identified and this is not listed in CISA KEV, but the CVSS 4.0 score of 8.7 reflects the high-impact triad of confidentiality, integrity, and availability against network-accessible repositories once the prerequisite session exists.
Privilege escalation in Sonatype Nexus Repository 3 allows an authenticated user holding privilege-management rights to elevate their own access to full administrator by exploiting a type-confusion flaw (CWE-843) in the REST privilege update endpoint. Exploitation is constrained to specific role configurations, but the network-accessible attack surface and high confidentiality and integrity impact (VC:H/VI:H per the CVSS 4.0 vector) make this a meaningful insider or compromised-account risk in enterprise DevOps environments. A vendor-released patch is available in the Nexus Repository 3.95.0 release; no public exploit code or CISA KEV listing has been identified at time of analysis.
The `$import-pnp` operation in Pathling Server allows low-privileged callers to supply an arbitrary `exportUrl`, causing the server to forward its configured PNP credentials to an attacker-controlled FHIR endpoint and stage the returned files as trusted local sources - effectively bypassing the `allowableSources` allowlist that guards the standard `$import` operation. All Pathling Server deployments prior to version 2.0.0 with PNP credentials configured are affected, with high confidentiality and integrity impact (credential theft and unauthorized data import). No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, though the attack requires only low-privilege API access and is low-complexity.
Command injection via unsanitized backup filenames in Kakoune (all versions prior to 2026.05.21) enables arbitrary Kakoune script and shell command execution when a victim opens a file in the editor. The bundled `autorestore.kak` script - enabled by default - discovers backup files by pattern-matching filenames in the same directory as the opened file, then incorporates those filenames directly into shell command strings without validating special characters in the suffix component. No public standalone exploit has been identified at time of analysis, though the fix commit (25c7b13) includes test cases that explicitly demonstrate the injection pattern using filenames such as `.out.kak.;"foo"`, confirming exploitability.
Arbitrary file write in the Webbox component of Tobit Laboratories AG TeamDavid (through Rollout 524) allows unauthenticated remote attackers to create or overwrite server-side files with attacker-controlled content, enabling persistent stored cross-site scripting. Because user input is written directly to disk without content or file-type validation, an attacker can plant .htm files containing malicious JavaScript that execute in any victim's browser upon access. No public exploit has been identified at time of analysis and the vulnerability is not in CISA KEV, but the unauthenticated write primitive combined with stored XSS persistence makes this a high-priority remediation target for TeamDavid operators.
Path traversal in Tobit Laboratories AG TeamDavid's Webbox archive creation functionality allows authenticated low-privilege remote attackers to create directories in arbitrary filesystem locations, including sensitive Windows system paths such as C:\Windows and other users' directories. All TeamDavid releases through Rollout 524 are affected, as confirmed by NCSC.ch and detailed in InfoGuard's research disclosing 22 CVEs across the David platform. No active exploitation has been confirmed (not in CISA KEV), and no public exploit code has been identified at time of analysis; however, the CVSS 4.0 score of 8.5 reflects significant potential impact on both the vulnerable host and downstream systems.
Remote code execution in ZenML 0.94.6 allows any attacker with write access to a shared artifact store to plant a malicious cloudpickle payload that executes arbitrary system commands when a legitimate user or pipeline materializes the tampered artifact. The root cause is unsanitized deserialization via cloudpickle.load() in CloudpickleMaterializer without any integrity verification of the stored artifact.pkl file before loading. No public exploit code has been identified at time of analysis and the vulnerability is not listed in CISA KEV, but the attack is conceptually straightforward for any attacker with artifact store write access in a multi-user ZenML deployment.