Secret disclosure affects the openssl_encrypt Python library (all versions before 1.4.0), where PublicKeyBundle.from_dict() constructs key bundles from untrusted serialized data without validating the embedded self-signature, and to_identity() then promotes that unverified bundle into a usable Identity. An application that deserializes an attacker-supplied bundle and encrypts to it - without an intervening verify_signature() call - will encrypt secrets to an attacker-controlled public key, allowing the attacker to decrypt them. Reported by VulnCheck and fixed in 1.4.0; no public exploit has been identified at time of analysis.
Schema validation bypass in the openssl_encrypt Python package (by developer 'jahlives') before version 1.4.0 lets attackers slip malformed or malicious metadata past all JSON schema checks. Because validation fails open when the optional jsonschema library is absent - and because unknown metadata format versions are silently skipped - an attacker who controls the runtime environment or the supplied metadata can process unvalidated data. Reported by VulnCheck and carrying a CVSS 4.0 base score of 9.3; no public exploit identified at time of analysis and it is not listed in CISA KEV.
Integrity-protection bypass in the jahlives openssl_encrypt Python library (all versions before 1.4.0) lets an attacker who can influence the process environment silently disable HMAC authentication in the CamelliaCipher code path. When the PYTEST_CURRENT_TEST environment variable is present, the library skips generating and verifying HMAC tags, so ciphertext is produced and accepted without integrity protection, enabling undetected tampering of encrypted data. Reported by VulnCheck with a vendor patch available; no public exploit identified at time of analysis and it is not listed in CISA KEV.
Audit-trail corruption and a security-control race condition in the Python library openssl_encrypt (by jahlives) before version 1.4.0 undermine its module-hiding defenses. The restore_hidden_modules() function logs module counts after clearing them, so it always records zero restored modules and produces misleading audit logs (CWE-117), while a separate time-of-check/time-of-use race between module hiding and import-hook installation lets a concurrent thread re-import modules that were meant to be blocked. Reported by VulnCheck with a vendor patch available; no public exploit identified at time of analysis and it is not on CISA KEV.
Authentication bypass in MemOS (MemTensor), a memory operating system for LLMs and AI agents, lets an unauthenticated remote attacker impersonate a trusted internal principal with full 'all' scopes. When AUTH_ENABLED=true but the undocumented INTERNAL_SERVICE_SECRET variable is left unset, a null-versus-null comparison in the internal-request check fails open, exposing admin API-key management and all data endpoints. Rated CVSS 4.0 9.3 (critical) by VulnCheck; no public exploit identified at time of analysis, though the flaw is trivially reproducible from the disclosed source.
Unauthenticated information disclosure in SiYuan before 3.7.4 exposes Go net/http/pprof debug endpoints (heap, goroutine, and related dumps) to any remote client whenever the application is not started with --mode set exactly to prod. Because non-prod is the effective default, attackers can query /debug/pprof/heap to scrape live process memory and recover secrets such as the AccessAuthCode and configured AI provider API keys. Reported by VulnCheck with a vendor patch available; no public exploit identified at time of analysis.
SQL injection in Stud.IP (an open-source learning management system widely used in German-speaking higher education) affects the 6.0.x branch before 6.0.3 and the 5.4.x branch before 5.4.12, where unsanitized input reaching store() persistence functions lets a remote attacker read and manipulate database contents and, per the researcher's write-up, escalate to arbitrary code execution. The flaw carries a CVSS 9.1 (C:H/I:H) rating with a public technical write-up available from the reporting researcher; there is no public exploit identified as weaponized and no CISA KEV listing at time of analysis. Organizations running the affected LMS branches should treat this as high priority given the confidentiality and integrity impact combined with the RCE claim.
Command and SQL injection in Red Hat Advanced Cluster Management for Kubernetes 2 (acm-search-v2-rhel9) lets a privileged tenant escalate to arbitrary code execution inside the cluster's PostgreSQL pod. An authenticated hub administrator or Search Custom Resource editor can supply an unsanitized WORK_MEM value that is passed into both a bash script and an SQL query, breaking out of the intended data plane. No public exploit is identified at time of analysis and the flaw is not on CISA KEV, but the CVSS 9.1 rating reflects full confidentiality, integrity, and availability loss with a scope change.
Unauthenticated database backup disclosure in JetBrains YouTrack before 2025.3.156085, 2026.1.13913, and 2026.2.18112 allows a remote attacker to abuse a shared draft signature to download full database backups without any credentials. Because backups typically contain issue data, user records, and secrets, this is a high-impact confidentiality exposure. No public exploit has been identified at time of analysis and it is not listed in CISA KEV, but the CVSS 9.1 rating and trivial network exploitability make it a priority patch.
Privilege escalation in the Trueview T18061 WiFi 3MP Robot Pan-Tilt Security Camera (firmware Version 1.0) stems from an embedded RSA private key, letting a nearby attacker who recovers or reuses that key gain elevated access to the device. The flaw is classified under CWE-321 (use of a hard-coded cryptographic key), meaning every unit of this model likely shares the same secret key material. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV; EPSS data was not provided.
Improper access control via path traversal in Mahara's ePortfolio system allows others to reach artefacts (uploaded files/content) they should not see when the file path to an artefact embedded in a page is manipulated. It affects Mahara releases before 25.04.5 and before 26.04.0 and is fixed in those versions. No public exploit identified at time of analysis, and it is not listed in CISA KEV; the impact is unauthorized disclosure of user-owned content rather than server compromise.
Financial fraud via integer overflow in QuantumNous New API (an LLM gateway and AI asset-management platform) lets a low-privileged account with a positive balance or active subscription manipulate user-controlled billing multipliers so that a computed charge wraps into account credit and can drain upstream provider funds. The flaw sits in quota settlement math (common/quota_math.go and related paths) across image, video, audio, and token-count fields, and is fixed in 1.0.0-rc.18. There is no public exploit identified at time of analysis, but the upstream fix commits and GHSA advisory publicly disclose the vulnerable code paths.
Privilege escalation via token disclosure affects QuantumNous New API, an open-source LLM gateway and AI asset management platform, in all versions prior to 1.0.0-rc.7. The admin user-list and user-lookup endpoints (e.g. GET /api/user/) serialize the full User model with only Omit("password"), so User.AccessToken is returned in the access_token field, letting an authenticated administrator harvest the root user's bearer token and pivot to root-only system-configuration APIs. No public exploit identified at time of analysis and it is not in CISA KEV; the fix is confirmed in release 1.0.0-rc.7 (GHSA-6x2c-phff-wx57).
Arbitrary command execution in the conflibot GitHub Action (versions before 1.2.1) lets any user who opens a pull request run shell commands on the workflow runner. conflibot builds git commands via string interpolation and executes them through a shell, and one interpolated value is the attacker-controlled PR head branch name (head.ref); a branch name containing shell metacharacters is executed as code. Under the documented pull_request_target configuration the runner holds a write-scoped GITHUB_TOKEN and repository secrets, so this is a critical CI/CD supply-chain exposure (CVSS 9.1). There is no public exploit identified at time of analysis, but the technique is well understood and the trigger is trivial.
Credential exposure in Logsign SIEM (versions 6.4.97 up to but not including 6.4.114) allows a high-privilege authenticated user to retrieve embedded sensitive data such as stored integration or log-source credentials. The issue was reported by Turkey's national CERT (TR-CERT, advisory TR-26-0847) and carries a vendor CVSS of 9.0; a fixed release (6.4.114) is available and no public exploit has been identified at time of analysis. Because a SIEM aggregates credentials for many connected systems, recovered secrets can enable pivoting well beyond the SIEM itself.
Remote content blocking evasion in Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3 lets a crafted SVG image with an unclosed url() in a FuncIRI attribute slip past the remote-image blocker, so external resources load when a victim views a malicious email. This exposes the recipient's IP, mail-client fingerprint, and email-open telemetry to the sender, and per the advisory may aid further information disclosure or privilege escalation. It has a vendor patch and no public exploit identified at time of analysis; EPSS is low (0.31%) and CISA SSVC rates exploitation as none.