Out-of-bounds memory read and write in the Zephyr RTOS SF32LB MPI QSPI NOR flash driver allows a low-privileged thread, when explicitly granted flash device access in a CONFIG_USERSPACE build, to disclose arbitrary CPU-addressable memory or corrupt flash and invalidate cache beyond the mapped flash window. The root cause is a signed/unsigned type confusion in the offset bounds check: a crafted negative off_t value converts to a large unsigned integer and the subsequent addition wraps to a small result that passes the check, allowing memcpy to read from or program flash at attacker-controlled addresses. No public exploit code has been identified at time of analysis; exploitation is nonetheless mechanically straightforward for any attacker familiar with signed/unsigned integer confusion vulnerabilities.
Datadog Android app versions prior to 5.9.2 structurally associate authenticated users' Datadog UUIDs with Google Firebase Installation IDs on every successful login, transmitting this stable cross-session identifier - alongside crash stack traces that may include in-flight application data, internal class names, package names, and breadcrumbs - to Google's Firebase Crashlytics backend without an identifiable user consent gate or opt-out mechanism. The exposure is not triggered by an external attacker but occurs automatically during normal authenticated app usage for all affected users. No active exploitation has been identified (SSVC Exploitation: none; no CISA KEV listing), and no public exploit code exists; the primary risk is regulatory and privacy-related rather than direct technical compromise.
Ghostfolio's Stripe checkout callback endpoint unconditionally grants a one-year Premium subscription to any authenticated user who supplies a valid Stripe Checkout Session ID, regardless of whether payment was completed. Versions prior to 3.4.0 retrieve the session object by ID and immediately create a subscription using the session's `client_reference_id` without ever asserting `session.payment_status === 'paid'` or `session.status === 'complete'`. Any registered user of an affected Ghostfolio instance can self-grant Premium access at zero cost, with no public exploit identified at time of analysis but trivial exploitability given the complete description of the missing check.
Authorization bypass in the Stream - Activity Log & Audit Trail WordPress plugin (versions through 4.2.0) exposes the full site audit trail to any authenticated user holding a subscriber-level account or higher. The flaw resides in the plugin's Heartbeat API live-update handler, which returns activity records without verifying the requesting user holds the privileges required to view them (CWE-862). No public exploit or CISA KEV listing exists at time of analysis, but the low exploitation bar - any registered user account suffices - makes this a credible insider or low-effort attacker risk on sites with open registration.
Unvalidated HTTP redirect handling in OPeNDAP Hyrax Docker 1.18.0 enables SSRF-assisted credential exfiltration, leaking Earthdata authentication headers (User-Id, Echo-Token) to attacker-controlled endpoints. The AllowedHosts allowlist - intended to restrict outbound server-side requests - is silently bypassed when Hyrax follows HTTP redirects without re-validating the destination against the allowlist, causing sensitive Earthdata Login (EDL) session headers to be forwarded externally. No active exploitation has been confirmed (EPSS 0.21%, 11th percentile; not in CISA KEV), but the confidentiality impact is rated High due to the direct exposure of bearer-equivalent credentials used to access NASA/Earthdata scientific datasets.
Cross-package resource and model poisoning in NLTK's downloader (versions <= 3.9.4) allows an attacker who can influence what packages a user downloads to silently overwrite trusted corpora and model files with adversarial replacements. The root cause is that nltk.downloader extracts archives into shared namespaces (corpora/, taggers/) rather than package-isolated directories, and performs integrity validation only after extraction is complete - a classic TOCTOU-like design flaw. Poisoned resources survive interpreter restarts and propagate silently into ML pipelines, making this particularly dangerous in reproducibility-sensitive or automated NLP workflows. No public exploit code has been identified at time of analysis and this vulnerability is not listed in CISA KEV.
Forged on-call acknowledgment and confused-deputy execution in the Datadog Android application (versions prior to 5.9.2) allows any co-installed malicious app to silently dismiss real production incident alerts on behalf of the victim by exploiting an unguarded exported Activity with no permission check. An attacker-controlled app can supply crafted Intent extras to forge a backend Acknowledge API call using the victim's authenticated session, redirect the Datadog process into non-exported internal components, and surface a spoofed alert over the device lock screen. No public exploit has been identified at time of analysis; exploitation requires a malicious co-installed app plus a single user tap.
Stored XSS in the Code Embed WordPress plugin (versions prior to 2.6.1) permits a Contributor-role attacker to plant a URL embed token referencing an attacker-controlled server; when an Administrator or Editor previews or reviews the pending post, the plugin fetches the remote URL and injects the unfiltered response body-including arbitrary JavaScript-directly into the rendered page. The root cause is a dual omission in add-embeds.php: no output sanitization on fetched remote content and no unfiltered_html capability check before URL-embed expansion, a pattern confirmed by the commit diff from the fix release. No public exploit has been identified at time of analysis; vendor-released patch 2.6.1 is confirmed by a GitHub release tag, a commit, and the plugin changelog.
Relative path traversal in Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.2 enables low-privileged remote attackers to read arbitrary files from the underlying server filesystem. The flaw (CWE-23) affects managed node components across Windows, RHEL 8.10, RHEL 9.4, and SLES 15 deployments, as confirmed by Dell advisory DSA-2026-326. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog, but the high confidentiality impact in a privileged server management context elevates practical risk beyond the moderate CVSS base score alone.
Path traversal in Phoca Commander (Joomla file manager extension by phoca.cz) versions 1.0.0 through 6.1.3 enables authenticated Joomla administrators to escape intended directory boundaries during delete, copy, and move file operations, reaching arbitrary locations on the host filesystem. The CVSS 4.0 vector confirms high subsequent-system impact (SC:H/SI:H/SA:H) with no direct impact on the extension itself, meaning successful exploitation threatens the broader server environment rather than just the Joomla installation. No public exploit code or active exploitation has been identified at time of analysis.
Notification dismissal in the Datadog Android application (versions prior to 5.9.2) can be triggered by any zero-permission co-installed application through the improperly exported BubbleChatActivity component (CWE-926), allowing silent cancellation of the hard-coded Bits AI chat notification (ID 9201) with no identity validation of the caller or their supplied conversation_id. The impact is limited to nuisance-level denial of that specific notification and potential facilitation of in-app phishing workflows, with chat content remaining server-authentication gated and inaccessible to the attacker. SSVC assessment confirms no known active exploitation, and no public exploit code has been identified at time of analysis.
Stored Cross-Site Scripting in the Ultra Addons for Contact Form 7 WordPress plugin (all versions through 3.5.43) permits authenticated contributors to inject persistent malicious scripts via the Range Slider widget's 'data-label' and 'data-separator' attributes. The Scope:Changed CVSS metric confirms that once injected, the payload executes in the security context of any user who subsequently visits the affected page - including administrators - enabling session hijacking, credential theft, or admin-level action forgery. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Root password hash exposure in ZTE F689 firmware allows a physical attacker to extract credential material stored in cleartext or weakly protected form within the device firmware image. The F689 is an ISP-deployed broadband gateway, and this vulnerability (CWE-916) means the hash protecting root-level access uses insufficient computational effort, making offline cracking feasible once extracted. No public exploit code has been identified and no active exploitation is confirmed; however, successful hash recovery grants an attacker a path to persistent root-level device compromise.
OS command injection in HKUDS nanobot 0.2.0 and 0.2.1 allows a low-privileged remote attacker to bypass the configured shell command allowlist by submitting chained shell commands using operators such as `&&`, `||`, `;`, `|`, or `&`. The `ExecTool._guard_command` method in `shell.py` validated the entire raw command string as a single unit against allow patterns, meaning only the first chained segment needed to match - subsequent malicious segments executed unchecked. A public proof-of-concept exploit exists; the vulnerability is not listed in CISA KEV but the CVSS 4.0 E:P modifier confirms publicly available exploit code elevates urgency beyond the base score of 5.3.
UNC path injection in Tobit TeamDavid's Webbox link-storing endpoint (`//ServerClient_celink.htm`) forces the server to initiate outbound SMB connections to attacker-controlled hosts, leaking NTLM authentication credentials and enabling SMB relay attacks against internal systems. The unvalidated `pathname` parameter accepts arbitrary UNC paths (e.g., `\\attacker\share`), triggering Windows credential-passing behavior that exposes the server's NTLM hash. No public exploit code identified at time of analysis, though the underlying NTLM coercion technique is well-understood and documented as part of a broader audit of 22 CVEs in the David platform published by InfoGuard.
UNC path injection in TeamDavid Webbox's !ArcEntryMove archive function causes the server to initiate outbound SMB connections to attacker-controlled infrastructure, exposing the server's NTLM authentication material (Net-NTLMv2 hashes). All TeamDavid deployments through Rollout 524 are affected, with the confidentiality impact occurring on subsequent systems - the attacker's SMB listener - rather than the Webbox host itself. No public exploit has been identified at time of analysis, but the attack technique is fully commoditized via tools such as Responder and Impacket; exploitation feasibility is further complicated by a contradictory authentication requirement in the source data that warrants vendor clarification.
UNC path injection in Tobit Laboratories AG TeamDavid's Webbox messaging component allows attackers to coerce the server into initiating outbound SMB connections to attacker-controlled hosts, exposing NTLM authentication credentials. The server processes @@INCLUDE directives containing Windows UNC paths (e.g., \\Server\Share) without validation across email, fax, and SMS composition features. Captured NTLM hashes can be cracked offline or relayed to authenticate against other internal services; the CVE description explicitly states the pathname parameter vector is exploitable without authentication, conflicting with the PR:L designation in the CVSS 4.0 vector. No public exploit or CISA KEV listing has been identified at time of analysis, but this attack class (NTLM coercion via UNC injection) is well-understood and widely tooled.
Stored XSS in Sonatype Nexus Repository 3 enables an authenticated user holding blob store management permissions to inject arbitrary JavaScript into a blob store name, which later executes in the browser of any user who views the system health-check status page. The CVSS 4.0 vector's SC:H/SI:H scores underscore that the subsequent-system impact is high - an attacker-controlled script running in a victim's session can exfiltrate credentials or perform privileged actions on their behalf. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; Sonatype has released a fix in version 3.95.0.
Session injection in the Datadog Android app (versions prior to 5.9.2) allows any zero-permission co-installed application to hijack the victim's Datadog identity by delivering crafted OAuth tokens directly to an unguarded exported activity, which auto-logs the victim in under an attacker-controlled identity without backend token validation. The vulnerability stems from AppActivity being declared android:exported='true' with no permission guard, accepting and persisting arbitrary UserSession data deserialized from intent Bundle extras. SSVC assessment lists exploitation as none and no public exploit has been identified, but the zero-permission precondition dramatically lowers the attacker capability bar.
Integer overflow in p11-kit's RPC message parser on 32-bit systems allows a local attacker, or any principal with access to a reachable RPC channel, to crash the p11-kit process via a heap out-of-bounds write, resulting in Denial of Service. Affected deployments span Red Hat Enterprise Linux 6 through 10, Red Hat Hardened Images, and OpenShift Container Platform 4. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Path traversal in Phoca Commander (a Joomla file manager extension by phoca.cz) versions 1.0.0 through 6.1.3 allows high-privileged authenticated users to write uploaded files to arbitrary filesystem locations outside the intended upload directory, achieving high integrity impact on the underlying server. The CVSS 4.0 vector (PR:H/SI:H) confirms that while exploitation requires administrator-level Joomla access, a successful attack can affect the server filesystem beyond the Joomla webroot - enabling PHP shell planting or overwriting sensitive configuration files. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code is known at time of analysis.
Unrestricted file upload in SourceCodester Photo Share Website 1.0 exposes the /social/ajax.php?action=save_upload endpoint to abuse via crafted img[] and imgName[] POST parameters, allowing authenticated low-privileged users to upload arbitrary file types - including PHP webshells. If the upload directory permits server-side script execution, this escalates to remote code execution on the host. A public proof-of-concept exploit exists on GitHub; the vulnerability is not listed in the CISA KEV catalog.
Use of an uninitialized variable in WonderTrader up to version 0.9.9 allows a remote low-privileged attacker to cause limited availability disruption by manipulating the m_offsetType argument within the TraderATP Cash Trade Conversion component. The flaw resides in src/Includes/WTSTradeDef.hpp and is exploitable remotely, with a public proof-of-concept available via a Feishu document. No patch has been released and the vendor has not responded to disclosure - exploitation conditions are low complexity once authentication is satisfied, making this a persistent unmitigated risk for deployments using the ATP cash trading interface.
Server-side request forgery in HKUDS nanobot up to 0.2.1 allows authenticated remote attackers to make the server issue HTTP requests to arbitrary internal endpoints by manipulating URLs returned by AI image generation providers. The `_download_image_data_url` function in `nanobot/providers/image_generation.py` fetched provider-returned image URLs directly via `client.get(url)` without routing through the existing `validate_url_target` SSRF guard in `security/network.py`, leaving cloud metadata endpoints (e.g., 169.254.169.254), RFC1918 ranges, and internal services reachable. A public POC exploit exists; a patch is available on the main branch as PR #5095 and is planned for release in v0.3.1. No CISA KEV listing; exploitation is not confirmed at mass scale.
Behavioral workflow enforcement bypass in WonderTrader up to version 0.9.9 allows remote low-privileged attackers to manipulate the getUndoneQty argument within the _undone_qty function of the Pending Order Handler component (src/WtCore/TraderAdapter.h), resulting in unauthorized integrity modification of pending order state. The CVSS 4.0 vector confirms network-accessible exploitation with low privilege requirements and no user interaction. A publicly available proof-of-concept exploit exists (E:P), though no CISA KEV listing is recorded. The vendor was notified prior to disclosure and did not respond, meaning no official patch or advisory has been released.
MCP resource and prompt wrappers in HKUDS nanobot 0.2.0 and 0.2.1 bypass operator-defined `enabledTools` access restrictions, allowing MCP servers to register capabilities beyond the intended scope. Operators who configure a specific tool allowlist to restrict what an MCP server can contribute to a nanobot agent find that resources and prompts from that server are registered unconditionally, exposing capabilities that were explicitly intended to be blocked. A public proof-of-concept exploit exists; this CVE is not in the CISA KEV catalog, so confirmed widespread active exploitation is not established.
Cross-site scripting in SourceCodester Photo Share Website 1.0 allows a low-privileged authenticated attacker to inject malicious JavaScript via the `content` parameter of the comment input box at `/social/ajax.php?action=save_upload`, executing arbitrary script in the browsers of users who subsequently view the injected content. The CVSS 4.0 vector (PR:L/UI:P) confirms exploitation requires an authenticated session and victim interaction, constraining opportunistic mass exploitation. No public exploit identified at time of analysis is incorrect here - publicly available exploit code exists, referenced via a GitHub issue (https://github.com/Andyov0/cve/issues/1), meaningfully elevating near-term risk for any reachable deployment.
Stored or reflected cross-site scripting in SourceCodester Photo Share Website 1.0 enables remote authenticated attackers to inject arbitrary JavaScript via the Comment argument at /social/index.php?page=home, executing in the browsers of other users who view the affected page. A publicly available proof-of-concept exploit exists on GitHub (gensnext/cve/issues/1), though the vulnerability carries a low CVSS 4.0 score of 2.0 and is not listed in the CISA KEV catalog, indicating no confirmed widespread active exploitation. Practical impact is limited to session hijacking, phishing redirection, or DOM manipulation within the application context of other authenticated users.
Stored cross-site scripting in PHPGurukul Company Visitor Management System 1.0 allows a high-privileged authenticated attacker to inject malicious JavaScript via the `fullname` parameter in `/manage-newvisitors.php`, executing arbitrary scripts in the browsers of other users who view the affected page. The CVSS 4.0 score of 4.8 (Medium) reflects the high privilege prerequisite (PR:H) and required passive victim interaction (UI:P), substantially limiting real-world impact. A public proof-of-concept exploit exists (GitHub), though no active exploitation has been confirmed by CISA KEV.
Tenant isolation bypass in SuperTokens Core v6.0.0 through v11.4.0 enables an authenticated user in one tenant to access sessions, data, and API endpoints belonging to separate tenants on the same instance. The flaw represents a failure of authorization enforcement at the multi-tenancy boundary layer - the core authentication service does not adequately scope API operations to the requesting tenant's namespace. No public exploit code has been identified at time of analysis, but the confidentiality impact is rated high given that cross-tenant session hijacking and user data exfiltration are within scope for a successful attacker.
SQL injection in Postgrex (elixir-ecto's PostgreSQL driver) versions 0.19.3 through 0.22.3 allows an attacker who controls the :comment option passed to Postgrex.stream/4 or Ecto.Repo.stream/2 to close the SQL comment delimiter with */ and inject arbitrary SQL clauses into the streamed statement, executing them under the existing database connection's role. The root cause is a missing call to the comment_not_present!/1 guard in stream/4, an oversight absent from every other execution path in the library. No public exploit code has been identified and no active exploitation appears in the CISA KEV catalog; the CVSS 4.0 vector (AV:L, AT:P) signals that exploitation requires specific, non-default application architecture.
Login-shell environment variable leakage in HKUDS nanobot up to 0.2.1 exposes sensitive environment variables to local low-privilege users during agent-driven shell command execution. The `ExecTool._prepare_command` function in `shell.py` defaulted to invoking bash/zsh with the `-l` (login shell) flag, causing system and user profile startup scripts to be sourced and potentially re-exporting credentials, API keys, or tokens into the execution environment where they could be read by the invoking user. A publicly available proof-of-concept exploit exists; no active exploitation has been confirmed (not listed in CISA KEV). The vendor-released fix in v0.3.0 changes the default from login-shell to non-login-shell execution.
Authorization bypass in the kata-agent's ttRPC API allows an untrusted host to invoke two mem-agent methods unconditionally, circumventing the OPA/Rego-based AgentPolicy that forms the security boundary in Confidential Containers (CoCo) deployments. Affected are kata-containers versions prior to 4.0.0 when the mem-agent feature is explicitly enabled (disabled by default). The untrusted host can force in-guest memory operations - swap, aggressive eviction, or compaction - causing attacker-controlled availability and performance degradation of the confidential workload; the description explicitly rules out memory disclosure and code execution. No public exploit or CISA KEV listing has been identified at time of analysis, but the bypass is architecturally significant because it violates the CoCo threat model's fundamental assumption that the host is untrusted.
File and directory information exposure in SourceCodester Online Clothing Store allows unauthenticated remote attackers to retrieve Dreamweaver metadata files from the publicly accessible /_notes/ directory. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) confirms no authentication or special preconditions are required. A publicly disclosed proof-of-concept exists (E:P), documented via a Medium article detailing directory listing and Dreamweaver metadata exposure; no confirmed active exploitation (CISA KEV) has been recorded at time of analysis.
Out-of-bounds kernel memory read in SonicWall Global VPN Client's SWIPsec.sys driver allows a local, low-privileged attacker to crash the host system. Affected versions are 4.10.8.1108 and earlier, running on Windows where the IPsec kernel driver is loaded by the VPN client. No public exploit identified at time of analysis, and EPSS probability stands at a very low 0.16% (5th percentile), indicating no signs of active or widespread exploitation interest.
Kernel null pointer dereference in Imagination Technologies Graphics DDK allows a local non-privileged user to crash the host system via crafted GPU system calls. Multiple release branches are affected, including DDK 26.1 RTM1, 25.1-25.3 RTM, 24.2 RTM2, 23.2 RTM2, and 1.18 RTM2. An attacker with a local shell account on a device running the affected kernel driver can trigger platform instability or a full denial of service - no exploit has been publicly identified at time of analysis, and EPSS probability is extremely low at 0.15% (5th percentile).
Six exported Android App Widget configuration activities in the Datadog Android application (versions prior to 5.9.2) allow a co-installed zero-permission malicious app to brute-force sequential App Widget IDs and trigger automatic Datadog session login for the victim, exposing live operational data - dashboards, SLOs, on-call schedules, incident details - as a visual side-channel. Exploitation is constrained by three simultaneous preconditions and data exfiltration is limited to screen-visible disclosure only, with no programmatic return path. No public exploit has been identified at time of analysis; SSVC rates exploitation as none with partial technical impact.
Server-Side Request Forgery (SSRF) in Revenue Administration Türkiye's E-Signature (versions 2.4.4.0 through before 2.5.1.0) enables network-accessible attackers to coerce the application server into making arbitrary outbound HTTP requests by inducing a user to interact with crafted content. The partial confidentiality and integrity impact (C:L/I:L per CVSS) indicates an attacker could reach internal services or read limited internal responses, but cannot fully compromise the host. No public exploit code or CISA KEV listing has been identified at time of analysis; a vendor-released patch to version 2.5.1.0 is available per TR-CERT advisory.
Arbitrary code execution in the Ruby LSP VS Code extension prior to version 0.10.4 is achievable by any attacker who can deliver a malicious repository to a developer. Workspace-level settings in `.vscode/settings.json` were trusted by the extension to configure the Ruby executable path, version manager binaries, and Bundler Gemfile - all of which the extension invokes at startup - allowing an attacker-controlled repository to redirect those invocations to arbitrary binaries. The Ruby LSP gem and language server clients in other editors are explicitly not affected; no public exploit has been identified at time of analysis, and a vendor fix is available in version 0.10.4.
Open redirect in the Webbox component of TeamDavid (Tobit Laboratories AG's Microsoft 365 alternative) enables unauthenticated network attackers to craft URLs on the trusted TeamDavid domain that silently redirect visiting users to arbitrary external sites by supplying an unsanitized value in the 'replyUrl' parameter. All versions through Rollout 524 are affected per the CPE listing. This issue was disclosed as part of a coordinated report of 22 CVEs in the David platform by InfoGuard and reported to NCSC.ch; no confirmed active exploitation or public exploit code has been identified at time of analysis.
HTTP header injection in Tobit Laboratories AG TeamDavid's Webbox component allows unauthenticated network attackers to manipulate HTTP response headers by embedding URL-encoded newline characters via the unsanitized 'cType' URL parameter, enabling open redirect attacks and potential HTTP response splitting. All Webbox deployments through Rollout 524 are affected, as catalogued by NCSC.ch and detailed in InfoGuard's research covering 22 CVEs in the TeamDavid platform. No confirmed active exploitation (CISA KEV) or public exploit code has been identified at time of analysis; the CVSS 4.0 score of 5.3 reflects medium severity gated by required user interaction.
Open redirect and HTTP response header injection in the Webbox component of TeamDavid (by Tobit Laboratories AG) allow unauthenticated network attackers to manipulate 302 redirect responses by supplying encoded characters in user-controlled URL parameters. Using URL-encoded dots (%2e), an attacker can steer victims toward attacker-registered lookalike TLD domains (e.g., redirecting from a .com application to an attacker-owned .company domain), while URL-encoded line feeds enable HTTP response splitting to inject arbitrary headers. No public exploit or CISA KEV listing has been identified at time of analysis; this CVE is one of 22 disclosed against the David product suite by infoguard.ch researchers.
Reflected XSS in the Webbox component of Tobit Laboratories AG's TeamDavid collaboration platform (marketed as a secure Microsoft 365 alternative) allows unauthenticated remote attackers to execute arbitrary JavaScript in a victim's browser by tricking them into clicking a crafted link. The vulnerability is exploitable via three distinct injection points: the URL path, the `EntryInfo` query parameter, and the `!templateName=entryMail` parameter. Disclosed as part of a coordinated batch of 22 CVEs in TeamDavid by InfoGuard Labs and reported through NCSC.ch; no public exploit code or active exploitation has been identified at time of analysis.
HTTP header injection in TeamDavid's Webbox component allows unauthenticated remote attackers to inject arbitrary HTTP response headers by embedding line feed (LF) characters in request body data sent to the link storing endpoint (//ServerClient_celink.htm). The injected data is appended unsanitized to the Location header of the 302 redirect response, enabling an attacker to control response headers against any user who interacts with a crafted link. This flaw is one of 22 CVEs disclosed by InfoGuard Labs in the David platform (marketed as a secure M365 alternative); no public exploit code or active exploitation has been identified at time of analysis.
Stored cross-site scripting in Tobit Laboratories AG TeamDavid's Webbox email interface allows any network-reachable attacker to embed malicious JavaScript within an email body; the payload executes in the browser context of any Webbox user who opens the message. All TeamDavid versions through Rollout 524 are affected per NCSC.ch disclosure and NVD CPE data. No public exploit identified at time of analysis and no CISA KEV confirmation, though the attack technique is trivial and requires no authentication from the sender.
Cross-site scripting in the ShareOpenly WordPress plugin (versions prior to 1.2.1) allows JavaScript injection into every visitor's browser via an unescaped `$url` variable concatenated directly into an HTML href attribute on all singular posts and pages where the sharing link is rendered. The root cause is the absence of WordPress's mandatory `esc_url()` function on a URL constructed from `home_url( add_query_arg( array(), $wp->request ) )`, meaning any plugin, theme, or server configuration that taints that base URL via a `home_url` filter can introduce HTML-special characters or a `javascript:` URI scheme into the rendered page without sanitization. No public exploit has been identified at time of analysis; vendor-released patch version 1.2.1 is available and confirmed.
Uncontrolled memory consumption in HashiCorp Consul's agent HTTP API endpoints allows unauthenticated remote callers to force the agent to allocate substantial memory before a request is finally rejected. Both Community Edition and Enterprise versions 1.3.0 through 2.0.2 are affected, covering a multi-year release window. No public exploit has been identified and the vulnerability is absent from CISA KEV, but the zero-authentication, low-complexity network attack path makes it straightforward to trigger for any attacker with network access to the Consul agent API port.
Uncontrolled cache growth in HashiCorp Consul's Connect CA roots endpoint allows unauthenticated remote callers to expand the agent's Connect CA roots cache indefinitely, overriding any operator-applied cache-disable configuration. Both Consul Community Edition and Consul Enterprise are affected from version 1.2.0 through 2.0.2. No public exploit code or active exploitation (CISA KEV) has been identified; the CVSS 5.3 Medium rating reflects limited availability impact with no confidentiality or integrity exposure.
JEXL expression sandbox bypass in Sonatype Nexus Repository 3's Content Selector feature allows authenticated users holding the nexus:selectors:create permission to traverse Java object properties outside the intended sandbox scope, disclosing internal JVM metadata such as class and classloader names. The vendor description explicitly confirms this does not permit method invocation, object construction, or code execution - making the 'RCE' intelligence tag a misclassification. Fixed in version 3.95.0; no public exploit or active exploitation has been identified at time of analysis.
Field-level permissions bypass in Frappe framework allows authenticated users to read restricted DocType field values via the document follow timeline feature. Frappe deployments on the v16 branch prior to 16.23.0 and the v15 branch prior to 15.112.0 are affected, including ERPNext and other applications built on Frappe. An authenticated low-privileged user can access historical change values for fields protected by Frappe's permlevel system simply by viewing the document follow timeline - no public exploit has been identified and the vulnerability is not listed in CISA KEV.