Command injection in COMFAST CF-N1-S firmware 2.6.0.1 allows remote authenticated attackers to execute arbitrary OS commands via the macaddress parameter of the /cgi-bin/mbox-config CGI endpoint. The vulnerable function sub_44A968 fails to sanitize input passed through the ptest_macaddress section before passing it to a system-level command. A public proof-of-concept has been disclosed (GitHub PDF), and the vendor did not respond to responsible disclosure.
Remote command injection in kylecui NetForensicMCP 2.1.0 allows authenticated remote attackers to execute arbitrary OS commands by supplying shell metacharacters in the `interface` or `protocol` arguments passed to the `execAsync` function in `index.js`. A public proof-of-concept exists via a GitHub issue, though this vulnerability is not currently listed in CISA KEV, indicating no confirmed widespread exploitation at time of analysis. The CVSS 4.0 score of 5.3 (Medium) reflects limited confidentiality, integrity, and availability impact with no lateral scope change, but the public exploit and absent vendor response elevate practical urgency for any deployment.
Heap-based buffer overflow in Assimp's 3DGS MDL7 model parser allows remote attackers to crash applications processing maliciously crafted model files, causing a denial-of-service condition. The flaw resides in the ReadFaces_3DGS_MDL7 function and affects all Assimp versions through commit 17c12da (CPE wildcard-versioned), with a public proof-of-concept exploit already circulating on GitHub. No active exploitation is confirmed in CISA KEV; the CVSS 4.0 score of 5.3 (Medium) reflects availability-only impact gated by passive user interaction.
Reflected cross-site scripting in code-projects Online Shopping System 1.0 allows remote attackers to inject arbitrary JavaScript into victim browsers by manipulating the email argument in offersmail.php. The vulnerability requires no authentication (PR:N per CVSS 4.0 vector) but does require a victim to interact with a crafted link or page (UI:P). Publicly available exploit code exists on GitHub, though no active exploitation has been confirmed by CISA KEV.
Improper privilege management in Bagisto's backend customer management endpoint allows authenticated low-privileged users to access customer behavior data beyond their authorization scope. The vulnerability affects all Bagisto releases from 2.4.0 through 2.4.4 at the /admin/customers endpoint via manipulation of the ID parameter. A publicly available proof-of-concept exploit exists on GitHub; the vendor has acknowledged the issue and confirmed partial internal remediation with remaining fixes planned for upcoming releases.
Heap-based buffer overflow in Open Asset Import Library (Assimp) at commit 17c12da allows remote attackers to corrupt heap memory by supplying a crafted MDL7 3DGS format file that triggers out-of-bounds writes in the AddBonesToNodeGraph_3DGS_MDL7 function via a manipulated bones_num argument. Any application embedding Assimp that accepts untrusted 3D model files is exposed, with no vendor patch released as the project has not responded to disclosure. A publicly available proof-of-concept exploit exists, meaningfully lowering the exploitation bar for opportunistic attackers.
Buffer overflow in Open Asset Import Library (Assimp) commit 17c12da allows remote attackers to corrupt memory by delivering a maliciously crafted MDL7 3D model file to a victim application. The vulnerable function `GenerateOutputMeshes_3DGS_MDL7` in `MDLLoader.cpp` fails to enforce buffer bounds during mesh generation, resulting in low-severity integrity and availability impact per CVSS 4.0 (score: 2.1). A public proof-of-concept exploit has been disclosed; no vendor patch exists as the project has not responded to the coordinated disclosure.
Authorization bypass in Webkul Bagisto's cache management endpoint allows authenticated low-privileged remote attackers to execute unauthorized cache management operations by manipulating the `action` parameter at `/admin/configuration/cache-management/execute`. Affected versions span the entire 2.4.x branch (2.4.0 through 2.4.4), with CWE-639 (Authorization Bypass Through User-Controlled Key) as the root cause. A public proof-of-concept exploit has been released, and the vendor has confirmed awareness with partial remediation underway - though no specific fixed version has been disclosed; no public exploit identified at time of analysis maps to confirmed active exploitation in CISA KEV.
Reflected cross-site scripting in SourceCodester Class and Exam Timetabling System 1.0 allows remote attackers to inject arbitrary JavaScript via the unsanitized `course` parameter in /BSCE2.php, executing in the context of a victim's browser upon interaction with a crafted link. A public proof-of-concept exploit exists (GitHub issue, VulDB reference), raising the practical exploitability above the base CVSS 4.0 score of 5.3 would suggest in isolation. No active exploitation is confirmed by CISA KEV, and real-world impact is substantially constrained by the product's narrow academic/student deployment footprint.
Reflected cross-site scripting in SourceCodester Class and Exam Timetabling System 1.0 allows remote unauthenticated attackers to inject arbitrary JavaScript via the unsanitized `course` parameter in /BSHRM1.php, executing within the victim's browser session when a crafted link is followed. A public proof-of-concept exploit is available via a GitHub issue, lowering the practical bar for exploitation despite the low CVSS 4.0 score of 2.1. No active exploitation has been confirmed by CISA KEV; impact is bounded by mandatory user interaction and the browser-session scope of injected code.
Buffer overflow in Open Asset Import Library (Assimp) commit 17c12da allows remote attackers to cause memory corruption by supplying a crafted MDL7 format 3D model file. The `ParseBoneTrafoKeys_3DGS_MDL7` function in `MDLLoader.cpp` fails to validate that the bone transformation matrix span derived from `transmatrix_count` and `bonetrans_stc_size` falls within the bounds of the loaded file, allowing heap memory reads or writes beyond the allocated buffer. A public proof-of-concept exploit exists, though no active exploitation has been confirmed in CISA KEV. The CVSS 4.0 score of 2.1 reflects limited individual component impact, though buffer overflows in file parsers carry inherent code execution risk that warrants prompt patching.
RMA state validation in Webkul Bagisto 2.4.0-2.4.4 permits authenticated customers to bypass the intended Return Merchandise Authorization workflow by submitting crafted requests to /customer/account/rma/update-status, forcing unauthorized state transitions without merchant review. An authenticated customer can escalate an RMA to an approved or completed state outside the designed approval sequence, enabling potential fraudulent return processing. A public proof-of-concept exploit exists; the vendor has confirmed internal awareness and is addressing the issues in upcoming releases, though no specific patched version has been publicly confirmed.
Heap-based buffer overflow in Open Asset Import Library (Assimp) commit 17c12da enables remote attackers to corrupt memory by supplying a crafted file processed by the decompressBlock routine in Compression.cpp. Any application embedding Assimp for 3D asset import is exposed when a user opens a malicious model file, making this a supply-chain-style risk across game engines, editors, and design tools that depend on the library. No vendor patch exists at time of analysis - the project was notified via GitHub issue #6624 but has not responded - and a public proof-of-concept archive has already been released, lowering the barrier to exploitation.
Cross-site scripting in the Alaev SEO Tools Chrome Extension (versions up to 1.0.10) exposes users to script injection via the popup UI's addDiv function, which fails to sanitize externally sourced page SEO field data before inserting it into the DOM. A working proof-of-concept exploit is publicly available on GitHub, demonstrating injection through crafted page metadata. The vendor did not respond to responsible disclosure, and no patch has been released, leaving all users of affected versions without an official fix.
Server-side request forgery in PromptShopMCP's Image-Toolkit-MCP-Server exposes internal network resources via the download_image function in server.py, where insufficient validation of the image_url argument allows an authenticated remote attacker to direct the server to make arbitrary HTTP requests. All commits up to 5bc0cd17358e19a5415d11a531088170d7b81452 are affected, and a public exploit exists via GitHub issue #4. The vendor has been notified but has not responded, and no patch is available; the rolling release model further complicates fixed-version remediation.
SQL injection in itsourcecode Hospital Management System 1.0 exposes patient management functionality to low-privileged authenticated attackers who can manipulate the `delid` parameter in /viewpatient.php to alter or extract database records. Successful exploitation allows unauthorized read, modification, or deletion of patient data, carrying significant regulatory and privacy consequences in healthcare environments. A proof-of-concept exploit has been publicly disclosed via GitHub, materially lowering the bar for opportunistic attacks against unpatched instances; the vulnerability is not currently listed in the CISA KEV catalog.
Persistent ad-blocking bypass in Adblock for Youtube Extension versions up to 7.2.1 on Google Chrome allows remote web content to silently disable the extension's filtering rules by exploiting an improper authorization flaw (CWE-285) in the contentscript.js event listener. The updateDynamicRules function processes the yt-anti-adblock-detected DOM event without verifying the caller's origin or authorization, meaning any adversarial webpage can trigger the function and persistently disable ad blocking. Publicly available exploit code demonstrates this technique; the vulnerability is not listed in the CISA KEV catalog and no vendor patch exists, as the maintainer did not respond to pre-disclosure outreach.
Authorization bypass in CodeCanyon's TimeCamp Integration for CRM (all versions through 2.8) allows authenticated remote attackers to manipulate the contact_id parameter submitted to the /clients/save_contact endpoint, overwriting or corrupting contact records belonging to other users without owning those records. The flaw is a classic Insecure Direct Object Reference (CWE-639): the application trusts the caller-supplied contact_id without verifying record ownership against the authenticated session. Publicly available exploit code exists on GitHub, materially lowering the barrier to exploitation.
Server-side request forgery in jkawamoto mcp-florence2 (all versions through 0.3.13) enables remote low-privilege attackers to manipulate the `src` argument of the `get_images` function, causing the server to issue arbitrary HTTP requests to attacker-controlled destinations - including internal network services and cloud metadata endpoints. A public proof-of-concept is available via GitHub issue #59, lowering the exploitation bar significantly. This vulnerability is not currently listed in the CISA KEV catalog, but the publicly available exploit and network-accessible attack vector make it relevant to any deployment where the server host has access to sensitive internal resources.
SQL injection in itsourcecode Hospital Management System 1.0 exposes the /viewprescriptionrecord.php endpoint to authenticated remote attackers who can manipulate the `delid` parameter to execute arbitrary SQL commands against the underlying database. Publicly available exploit code exists on GitHub, confirmed by the CVSS 4.0 E:P modifier, though no CISA KEV listing indicates active widespread exploitation at time of analysis. Given the healthcare context, the combination of public exploit availability and sensitive patient data makes this a higher-priority remediation than the low CVSS 4.0 score of 2.1 alone suggests.
SQL injection in itsourcecode Hospital Management System 1.0 allows authenticated remote attackers to manipulate database queries via the `delid` parameter in /viewpaymentreport.php. A publicly available proof-of-concept exploit exists on GitHub, lowering the barrier to exploitation for any reachable instance. The CVSS 4.0 vector confirms low-privilege authentication is required (PR:L), and impact is rated partial across confidentiality, integrity, and availability - though SQL injection primitives can often be escalated beyond initial scoring to achieve broader data extraction.
Authorization bypass in Bagisto's backend RMA endpoint allows authenticated admin-level users to access or manipulate Return Merchandise Authorization records they are not authorized to view or modify, affecting all Bagisto releases through version 2.4.4. The flaw is rooted in CWE-639 (Authorization Bypass Through User-Controlled Key), an IDOR-class weakness in the /admin/sales/rma/requests handler, enabling horizontal privilege escalation across sales data within the admin panel. A public proof-of-concept exploit is available on GitHub; however, the CVSS 4.0 score of 2.0 and the PR:H requirement confirm that exploitation is bounded to already-authenticated high-privilege accounts, not unauthenticated external actors.
OS command injection in android-mcp-server's `build/index.js` allows local low-privilege attackers to execute arbitrary shell commands by supplying malicious values for parameters such as `deviceId`, `packageName`, `permission`, or `extras` fields passed to the `child_process.exec()` ADB command builder. The vulnerable code interpolates user-supplied input directly into shell command strings without sanitization, making exploitation trivial for any local user with access to the MCP server process. A publicly available proof-of-concept exists via the GitHub issue tracker, and a patch commit has been published; no CISA KEV listing confirms active in-the-wild exploitation at time of analysis.
Cross-site scripting in Webkul Bagisto's RMA Message Handler (versions 2.4.0-2.4.4) allows authenticated customers to inject arbitrary JavaScript via the message argument at the /customer/account/rma/send-message endpoint, with execution occurring in the browser of any privileged user (e.g., store administrator) who reviews the RMA thread. A public proof-of-concept exploit is available on GitHub, lowering the exploitation barrier. The vendor has acknowledged the issues were already identified internally, with partial fixes applied and remaining items deferred to upcoming releases - no confirmed patched version has been published.
DualSafe Password Manager & Digital Vault Extension (versions up to and including 1.4.35 for Chrome) exposes stored credentials and TOTP codes through an unauthenticated postMessage-based bridge, enabling cross-origin secret exfiltration by any webpage the victim visits. The extension's bridge component processes incoming postMessage calls without validating the sender's origin, meaning an attacker-controlled page can query the vault directly without any extension-level authentication. A publicly available proof-of-concept hosted on GitHub demonstrates the technique; the vulnerability has not been added to the CISA KEV catalog as of this analysis.
Dell iDRAC9 (prior to 7.20.30.50) and iDRAC10 (prior to 1.20.60.50) expose residual memory contents to low-privileged remote attackers due to improper memory sanitization classified under CWE-1330 (Remanent Data Readable after Memory Erase). Exploitation requires authenticated low-privilege access and user interaction, yielding limited confidentiality impact with no integrity or availability consequence. No public exploit code or active exploitation has been identified at time of analysis, and Dell has released patched firmware versions per advisory DSA-2026-348.
Incomplete cleanup of thread membership records in Mattermost allows a re-invited user to read private channel thread root post content and metadata they should no longer have access to. Affected are all Mattermost deployments on versions 10.11.x through 10.11.20 and 11.7.x through 11.7.5. An authenticated user who was previously removed from or left a team, and is subsequently re-invited, can exploit stale membership records via the team threads API to access residual private channel thread data. No public exploit identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Path traversal in Dell ObjectScale before version 4.3.0.1 enables a local, low-privileged attacker to read files outside the intended directory scope, resulting in partial information disclosure. The CVSS 3.3 (Low) score reflects the constrained attack surface - local authenticated access and an existing low-privileged account are prerequisites, and impact is limited to confidentiality with no integrity or availability consequence. No public exploit code or active exploitation has been identified at time of analysis.
Mattermost Desktop App versions through 6.2.2.0 expose the pre-auth server secret in plaintext within generated diagnostics reports, specifically in the Server Connectivity Step-3 output section. A local attacker who obtains a copy of a user's diagnostics report or log files - whether through filesystem access or social engineering - can extract this secret and use it to authenticate against the configured Mattermost server as a pre-authorized client. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code has been identified at the time of analysis; the risk is realistic primarily in shared-workstation or insider-threat scenarios.
Use-after-free in HarmonyOS 6.1.0's time and time zone module allows a local low-privileged attacker to crash the affected component, degrading availability. Exploitation is local and requires existing user-level access, limiting the realistic attacker pool to on-device processes or malicious apps. No public exploit code or active exploitation has been identified at time of analysis.
Memory corruption via a race condition in Apple's web content processing engine (WebKit) causes Safari to crash when a user loads maliciously crafted content on iOS, iPadOS, or macOS Tahoe. The root cause is an improper locking deficiency (CWE-362), confirmed by Apple's own description of the fix as "improved locking." No public exploit code has been identified at time of analysis and the vulnerability is not listed in CISA's KEV catalog; Apple has released patches across all affected platforms.
Memory corruption via race condition in Safari's web content processing causes unexpected application crashes on iOS, iPadOS, and macOS. Affected platforms include iOS and iPadOS prior to 18.7.10 and 26.6.1, and macOS Tahoe prior to 26.6.2, covering both the legacy 18.x and current 26.x release trains. No public exploit identified at time of analysis, and exploitation requires high attack complexity due to the race condition timing requirement, making opportunistic mass exploitation unlikely.
User enumeration via observable response discrepancy in automad's password reset endpoint (versions up to 2.0.0-beta.32) allows unauthenticated remote attackers to determine whether a given username or email address is registered. The `requestPasswordResetToken` function in `UserController.php` previously returned a distinct error (`userNotFoundError`) for non-existent accounts while returning a success response for valid ones, enabling systematic account enumeration. No active exploitation is confirmed by CISA KEV, though the exploit technique has been publicly disclosed per the VulDB submission.
Authentication bypass in TreeFrog Framework through version 2.11.2 exploits a timing side-channel in the Session Cookie Handler, where std::strncmp's early-exit comparison behavior allows remote attackers to statistically recover valid session token values and forge authenticated sessions. Any web application compiled against the affected framework that uses default session cookie authentication is exposed. A public proof-of-concept exploit has been released, increasing targeted risk despite the high attack complexity required.
Command injection in Edimax EW-7478APC wireless access point firmware 1.04 enables remote authenticated attackers to execute arbitrary OS commands by manipulating the `interface` argument sent to the `/goform/stainfo` CGI endpoint. A public proof-of-concept exploit has been disclosed (CVSS 4.0 supplemental metric E:P confirmed), the vendor has not responded to disclosure, and no patch exists - leaving the attack surface permanently open absent network-level mitigations. No confirmed active exploitation (not in CISA KEV) at time of analysis, but the public POC lowers the bar for opportunistic targeting.
Cross-site request forgery in SiYuan's CheckAuth() session-cookie authentication branch affects all versions before 3.7.4, allowing remote attackers to perform unauthorized actions on behalf of authenticated users. The session-cookie code path neither validates Origin nor Referer headers, and omits an explicit SameSite attribute on session cookies, leaving browser-default SameSite policies as the sole defense - a gap exploitable via a crafted malicious page when the victim has an active authenticated session. The CVSS 4.0 score of 2.3 reflects genuinely constrained real-world risk; no public exploit has been identified and no active exploitation is confirmed.
Code injection in Jij-Inc Jij-MCP-Server 0.1.0 enables remote attackers with low-privilege authenticated access to execute arbitrary Python code by manipulating the `code` argument passed to the `PythonREPL.run` function within the `jm_check` component. A public proof-of-concept exploit has been disclosed, and the vendor has not responded to the responsible disclosure filed via GitHub issue tracker. No CISA KEV listing is present, but the availability of public exploit code elevates operational risk well above what the low CVSS 4.0 score of 2.0 would suggest in isolation.
Race condition in Azuriom CMS up to v1.2.12 allows authenticated users to exploit a time-of-check time-of-use (TOCTOU) flaw in the money transfer handler, potentially duplicating in-game currency by submitting concurrent transfer requests that each pass the balance check before any deduction is applied. The commit diff confirms the vulnerability in ProfileController.php::transferMoney(), where a balance check was performed outside any database transaction lock. No public exploit identified at time of analysis, though the CVSS 4.0 supplemental metric E:P indicates proof-of-concept code exists. Attack complexity is rated high due to the narrow timing window required to win the race.