Credential exfiltration in n8n's GraphQL node allows authenticated workflow authors to bypass per-credential allowed-domains enforcement. When the node's Authentication parameter is set to expression mode and two credentials of different types are attached, the platform enforces the domain restriction of only the first credential while silently forwarding secret material from the second to any destination - including attacker-controlled endpoints. No public exploit has been identified at time of analysis, but the CVSS 4.0 subsequent-system confidentiality impact is rated High, reflecting the downstream value of an exfiltrated credential that may carry permissions well beyond the n8n instance.
Server-side request forgery in ATutor's import functionalities allows an authenticated administrator to coerce the server into issuing HTTP requests to arbitrary internal endpoints, cloud metadata services such as AWS IMDSv1, or local filesystem paths via the file:// URI scheme where PHP URL wrappers are enabled. Only version 2.2.4 has been confirmed vulnerable by CERT.pl researchers; the product is end-of-life with no planned fix. No public exploit code or CISA KEV listing has been identified at time of analysis, but the combination of cloud metadata reachability and EOL status makes compensating controls the only available path.
Cross-site scripting in F-RevoCRM versions 7.3.0 through 8.0.3 enables remote attackers to inject and execute malicious client-side scripts in the browser of an authenticated user who is lured to a crafted page. The CVSS S:C (scope changed) metric confirms the injected script operates beyond the application's trust boundary, enabling session hijacking, credential theft, or unauthorized CRM operations performed under the victim's identity. No public exploit code or CISA KEV listing has been identified at time of analysis; the vulnerability was disclosed via JPCERT and documented under JVN#58692577.
Cross-Site Request Forgery in ATutor 2.2.4 allows a network-based attacker to modify authenticated users' profile fields by tricking them into visiting a malicious webpage that submits a forged profile-update request. The application lacks CSRF token validation on the profile update endpoint, so the server cannot distinguish forged requests from legitimate ones. No patch exists or will be released, as ATutor is end-of-life; no public exploit code or active exploitation has been identified at time of analysis.
Insufficient audit logging in HCL IntelliOps Event Management (IEM) allows an authenticated low-privilege network user to perform workflow actions that are not captured in security logs, breaking observability for incident response teams. All versions of IEM are affected per the wildcard CPE, and the CVSS Scope:Changed metric indicates the logging gap propagates impact to downstream audit platforms or SIEMs that depend on IEM event data. No public exploit code exists and CISA has not listed this in the KEV catalog; the primary risk is forensic and compliance-oriented rather than direct system compromise.
Authenticated path traversal in Winter CMS's LESS compilation pipeline allows backend users holding any of four specific permissions to exfiltrate arbitrary files readable by the PHP process - most critically the application .env file containing APP_KEY and database credentials. The vulnerability affects Winter CMS versions through 1.2.12 via four injection sinks: Brand Settings, Editor Settings, Mail Brand Settings colour fields, and theme CSS assets compiled by CombineAssets. No public exploit identified at time of analysis and no active exploitation confirmed, but confidentiality impact is high given .env disclosure enables full application key compromise.
Cross-meeting presentation deletion in BigBlueButton prior to 3.0.29 allows an authenticated presenter in one meeting to permanently delete presentations belonging to a different concurrent meeting by supplying an arbitrary presentationId through the /api/graphql endpoint. The affected Scala handler RemovePresentationPubMsgHdlr issued database deletes scoped only by presentationId, with no verification that the target presentation belonged to the caller's meeting. No public exploit or CISA KEV listing has been identified at time of analysis, but exploitation requires only a valid presenter session and knowledge of a foreign presentationId, making it a realistic cross-tenant sabotage vector in multi-meeting deployments.
Reflected XSS in ATutor 2.2.4's restore functionality allows an authenticated low-privileged attacker to craft a malicious URL that executes arbitrary JavaScript in a victim's browser upon interaction. The CVSS 4.0 vector (PR:L/UI:A/SC:L/SI:L) confirms the attack requires a logged-in account, active victim click, and produces subsequent-system impact on the victim's browser session - not the attacker's own context. Critically, no patch will be issued: ATutor is end-of-life and no longer actively maintained, leaving all deployments permanently exposed.
Reflected XSS in ATutor 2.2.4's preview.php enables an authenticated attacker to inject arbitrary JavaScript into a victim's browser session by manipulating the popup URL parameter. The frameset rendered by preview.php does not sanitize the popup parameter, allowing an attacker to break out of the HTML attribute context and append an event handler such as onload, even though the child frame file preview_top.php does apply sanitization. No patch exists and no patch is planned, as ATutor is no longer actively maintained; no public exploit or CISA KEV listing has been identified at time of analysis.
Cross-site scripting in Znuny's AgentTicketEmailResend template allows a high-privileged authenticated attacker to inject malicious script that executes within other agents' browser sessions, enabling session hijacking or unauthorized agent-level actions. All Znuny LTS versions prior to 6.5.22 are affected per CPE cpe:2.3:a:znuny:znuny:*:*:*:*:*:*:*:* and the vendor advisory at znuny.org/en/advisories/zsa-2026-12. No public exploit or active exploitation has been identified at time of analysis; the high privilege requirement substantially constrains the realistic threat surface.
Missing or insecure Cross-Origin Resource Sharing (CORS) headers in HCL IntelliOps Event Management (IEM) expose the application to unauthorized cross-origin browser interactions. The CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N vector indicates that a highly privileged IEM user must be socially engineered into visiting a malicious page while authenticated, allowing an attacker's script to read IEM responses or issue limited requests on the victim's behalf. No active exploitation has been confirmed and no public exploit code has been identified at time of analysis.
Heap out-of-bounds read in libvips before 8.18.3 leaks four bytes of adjacent heap memory when parsing a crafted Radiance HDR image whose first scanline begins with an RLE repeat marker. The old-style decoder in `scanline_read_old` dereferences `q[-1]` without confirming a prior pixel exists, disclosing data most likely belonging to adjacent image buffers. No public exploit or active exploitation has been identified; the fix is confirmed in the v8.18.3 release.
Cache isolation failure in django CMS allows unauthenticated network attackers to both read other users' header-personalized page content and poison the page cache with attacker-chosen content. Affected installations must have CMS_PAGE_CACHE enabled and at least one plugin implementing get_vary_cache_on() - when those conditions hold, the page cache key is computed without the plugin-declared header values, so the first cached variant is served to all subsequent visitors regardless of their headers. No public exploit exists and CISA KEV has not listed this vulnerability, but the attack is mechanically straightforward in affected configurations.
SVG attribute injection in @dicebear/core and @dicebear/initials prior to 9.4.3 enables cross-site scripting when an application routes untrusted input through the rotate, fontSize, or fontWeight avatar options. TypeScript types these parameters as numbers, but JavaScript runtime coercion allows string values, permitting attribute breakout and injection of arbitrary SVG markup — payloads confirmed in the commit test suite include onerror-carrying <image> elements. Script executes in the page origin when the generated SVG is inlined or served as image/svg+xml; no public exploit identified at time of analysis and no CISA KEV listing, but the patch commit exposes working injection strings.
Terminal escape sequence injection in Ember's interactive TUI allows unauthenticated remote attackers to smuggle ANSI/OSC/CSI control bytes into an operator's terminal by embedding them in HTTP requests sent to the monitored Caddy server. Ember's ParseLogLine restores raw control bytes from Caddy's unicode-escaped JSON access log, and the render helpers fitCellLeft and fitCellRight pass them unfiltered to os.Stdout via bubbletea's View(), enabling clipboard hijacking (OSC 52), dashboard spoofing (CSI cursor/erase), and window-title manipulation (OSC 0/2). No CISA KEV listing or confirmed public exploit exists at time of analysis; the 'RCE' tag in the intelligence metadata conflicts with the advisory's explicit statement that this is not general-case RCE and should not drive incident response decisions without independent verification.
Stored XSS and arbitrary file upload in Laravel Backpack CRUD allows an authenticated admin to bypass the `SingleBase64Image` uploader's trivial `data:image` prefix check, writing files of any MIME type - including SVG with embedded JavaScript - to the configured storage disk. A companion bug in `FileNameGenerator` causes stored files to receive extensionless names because `mime_content_type()` returns false when passed a data URI string rather than a filesystem path, compounding server-side MIME enforcement failures. Affected versions span 6.0.0-6.8.13 and 7.0.0-7.0.37; vendor-released patches 6.8.14 and 7.0.38 address both flaws. No public exploit code or CISA KEV listing was identified at time of analysis.
Stored XSS in django CMS 5.0.8 allows an authenticated editor to execute arbitrary HTML in other staff users' browsers via the edit-mode plugin exception rendering path. When plugin rendering fails in edit mode, ContentRenderer.render_exception in cms/plugin_rendering.py interpolates attacker-controlled values - including get_short_description() output, exception messages, and placeholder source strings - into an HTML heading using an unsafe f-string, then returns the result through mark_safe, bypassing Django's autoescaping. No public exploit has been identified at time of analysis, and this vulnerability is not listed in CISA KEV.
Incomplete HTML escaping in Xapian::MSet::snippet() within xapian-core exposes web applications using this search library to cross-site scripting attacks via a missed corner case of the previously patched CVE-2018-0499. Affected versions include all xapian-core releases before 2.1.0 and before 1.4.32. No public exploit code has been identified and this vulnerability is not listed in the CISA KEV catalog, but applications that render snippet() output directly into web pages without additional sanitization are at real risk.
Unauthorized template information disclosure in Apache InLong 2.0.0 through 2.3.x allows authenticated users who are not designated template responsible persons to view template configurations they should not have access to. The CVE is tagged CWE-400 (Uncontrolled Resource Consumption) and classified as Denial of Service, yet the description describes an access control bypass - this is a data contradiction that analysts should flag before making control decisions. No public exploit or active exploitation has been identified. Vendor fix is available in Apache InLong 2.4.0.
Insecure direct object reference in TREK collaborative travel planner before 3.1.3 allows any authenticated user with file-edit permission on any accessible trip to disclose reservation titles from private trips they do not own. By supplying attacker-controlled reservation_id, place_id, or assignment_id values to three file management API endpoints, the server joins the foreign reservation record in subsequent FILE_SELECT or getFileLinks() database queries and returns reservation_title in the response, crossing private trip boundaries. No public exploit code has been identified at time of analysis; vendor-released patch is confirmed in version 3.1.3.
Path traversal in Apple's open-source container runtime (versions before 1.2.0) enables a malicious builder peer to request host files by crafted names that resolve outside the build context, leaking arbitrary host filesystem contents. The CVSS vector (AV:N/AC:L/PR:L) indicates network-accessible exploitation by a low-privileged builder peer with no user interaction required. No active exploitation has been identified (no CISA KEV listing), and SSVC rates exploitation as none and automatability as no, reducing immediate operational urgency.
Unauthorized page content disclosure in Wagtail's internal Pages admin API allows any authenticated Wagtail admin user to read draft and live page fields - including title, slug, seo_title, search_description, and all custom fields declared in api_fields - for pages outside their permitted access scope. The root cause is CWE-280: the get_base_queryset method on PagesAdminAPIViewSet does not scope its queryset through the page permission policy, bypassing page-level access controls entirely. Patched releases (7.0.9, 7.3.4, 7.4.3, 8.0rc2) are available, and no public exploit or active exploitation has been identified at time of analysis.
Arbitrary code execution is possible on Sony XAV-9500ES car AV receiver devices through a buffer overflow in the gpsd daemon's NMEA data processing, requiring the attacker to be physically present with the device. The flaw (CWE-120) stems from the absence of length validation before copying externally supplied NMEA input into a fixed-size stack or heap buffer within gpsd. Exploitation requires chaining with at least one additional vulnerability to achieve meaningful code execution, and no public exploit code or CISA KEV listing has been identified at time of analysis.
Improper access control in Lighthouse - the cross-cluster service-discovery component of Submariner shipped with Red Hat Advanced Cluster Management for Kubernetes 2 - lets an attacker who has compromised a spoke cluster inject unauthorized EndpointSlices and ServiceImports into arbitrary namespaces on peer clusters. Because the destination namespace is taken from an attacker-controlled label/annotation on the broker object, resources can be planted into privileged namespaces such as kube-system and openshift-*, enabling privilege escalation and lateral cluster compromise. Rated CVSS 9.9 with a scope change; no public exploit identified at time of analysis.
Cross-origin redirect bypass in SecureDrop Client prior to 1.3.1 allows a malicious SecureDrop Server to route the securedrop-proxy component's HTTP requests to arbitrary external origins, circumventing the proxy's intended origin restriction. The Rust-based proxy followed HTTP 3xx redirects without validation, so a server-side redirect response could silently exfiltrate request data to a cross-origin destination. No public exploit code exists and the fix - disabling redirect following entirely via reqwest's RedirectPolicy::none() - is confirmed in version 1.3.1.
Out-of-bounds read in the prh_l2_decode_packet function of Sony XAV-9500ES car head unit firmware 3.02.0.0 exposes device memory contents to network-adjacent attackers over Bluetooth. Exploitation requires a malicious Bluetooth device to be paired with the target unit, after which crafted L2CAP packets trigger a read past the end of an allocated buffer, leaking sensitive memory. While the standalone impact is information disclosure, ZDI notes this vulnerability can be chained with additional flaws to achieve arbitrary code execution on the device; no public exploit identified at time of analysis.
Sandbox escape in Nix versions before 2.35.0 allows a malicious build derivation - executed under the experimental `recursive-nix` feature - to create or truncate empty files outside the build sandbox using the nix-daemon's permissions by exploiting a TOCTOU race in the LocalStore path-restore logic. The race window exists between path resolution and the `open()` call with `O_TRUNC` in `writeFile`, which previously lacked `O_NOFOLLOW` enforcement, letting an attacker substitute a symlink mid-flight to redirect the write. No public exploit has been identified and the vulnerability is not listed in CISA KEV; the official fix is confirmed in Nix 2.35.0.
Cross-cluster traffic redirection in Submariner (as shipped with Red Hat Advanced Cluster Management for Kubernetes 2) allows a malicious or compromised member cluster to hijack traffic from peer clusters by advertising a specially crafted network endpoint. Because Submariner does not validate the subnets a spoke cluster declares, an attacker-controlled cluster can claim arbitrary CIDR ranges and cause peer clusters to route all matching traffic through the attacker's tunnel, enabling information disclosure and denial of connectivity. Rated CVSS 9.9 with a changed scope, this affects the multicluster networking layer, though there is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Authorization bypass in the Sony XAV-9500ES in-car media receiver allows a physically present attacker to connect a crafted USB device that triggers instantiation of otherwise restricted USB device types, circumventing the unit's udev-based authorization controls. Firmware version 3.02.00 of the XAV-9500ES is confirmed affected per EUVD-2026-63430. The CVSS 3.0 score of 2.4 reflects the strict physical access requirement and low integrity-only impact; no public exploit code and no active exploitation (CISA KEV) have been identified at time of analysis.
Terminal escape sequence injection in broot, the interactive Rust-based file tree navigator by Canop, allows any local user with filesystem write access to plant control characters in a filename and have them written verbatim to the terminal of any other user who browses that directory with broot. The vulnerable code path - to_string_lossy() in src/tree/tree_line.rs and src/tree_build/builder.rs - applies no control-character filtering despite an existing doc comment implying sanitization occurs. A proof of concept embedding an OSC 52 clipboard-write sequence confirmed that raw escape bytes reach the terminal unstripped; the terminal emulator then determines the actual impact, ranging from cosmetic disruption to clipboard hijacking. No public exploit identified at time of analysis beyond the reported proof of concept; the vulnerability is not listed in CISA KEV.
Path traversal in ATutor 2.2.4 enables an authenticated low-privilege user to read files belonging to other course directories when the AT_FORCE_GET_FILE configuration option is active, leaking file contents and exposing filesystem structure. The product is end-of-life with no vendor-released patch, making remediation dependent entirely on compensating controls or decommissioning. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
SSRF protection bypass in n8n's OAuth2 credential token-exchange flow allows authenticated users holding credential-creation permissions to direct n8n's backend to issue HTTP POST requests to arbitrary internal network addresses. Affected deployments span all n8n releases prior to 1.123.69 (v1 branch), 2.33.4 (v2.33 branch), and 2.34.1 (v2.34 branch). While n8n applies SSRF guards to OAuth2 discovery and dynamic-client-registration requests, the access-token exchange step uses a separate, unguarded HTTP client, meaning a malicious credential configuration bypasses those controls entirely and reflects internal service responses back to the attacker. No public exploit code has been identified and this vulnerability is not listed in the CISA KEV catalog; the CVSS 4.0 base score of 2.3 reflects the constrained impact and privilege requirement.
Incorrect authorization in Checkmk's frozen BI (Business Intelligence) aggregation feature exposes host and service names to authenticated users whose visibility should be restricted. Specifically, users with intentionally scoped permissions can infer the existence and names of hosts and services outside their authorized scope by querying frozen BI aggregations. Affects all 2.2.0 versions and versions prior to 2.3.0p47, 2.4.0p29, and 2.5.0p2. No public exploit code exists and no active exploitation is confirmed; CVSS 4.0 score of 2.3 reflects the constrained, low-impact nature of this information disclosure.
Server-side request forgery in OpenStack Glance through 32.0.0 allows an authenticated administrator to bypass import_filtering_opts by submitting type=import tasks to the deprecated /v2/tasks API with an internal http:// or https:// URL, causing the Glance service to fetch internal network resources on the admin's behalf. The attack surface is substantially constrained by the PR:H requirement - valid OpenStack admin credentials must already be held - and the affected API has been deprecated for several releases. No public exploit code and no CISA KEV listing have been identified at time of analysis.
SQL injection in itsourcecode Hospital Management System 1.0 permits authenticated low-privilege users to manipulate database queries through the `delid` parameter of `/viewappointmentpending.php`, potentially exposing or corrupting patient appointment records. The CVSS 4.0 vector (PR:L) confirms exploitation requires a valid application account, narrowing the realistic attack surface despite network reachability. Publicly available exploit code (confirmed by E:P in the CVSS 4.0 vector) exists, modestly elevating practical risk; however, no CISA KEV listing indicates no confirmed in-the-wild exploitation at time of analysis.
Stored HTML injection in TREK collaborative travel planner (versions prior to 3.1.0) enables content spoofing and UI redress attacks against authenticated collaborators when the Journey add-on is enabled. An authenticated trip owner embeds raw HTML in a trip title; the backend endpoint GET /api/journeys/suggestions returns it unsanitized, and the frontend renders it directly via React's dangerouslySetInnerHTML, bypassing output encoding. The default Content Security Policy blocks inline handlers and script execution, constraining impact to visual manipulation rather than full cross-site scripting; no public exploit or active exploitation has been identified at time of analysis.
Heap buffer over-read in libvips prior to 8.18.3 allows disclosure of adjacent heap memory or process crash when processing JPEG images through the UltraHDR save pipeline. The flaw in `vips_foreign_save_uhdr_set_raw_hdr` stems from using raw pixel dimension arithmetic instead of the library's safe `VIPS_IMAGE_N_PELS` macro to size an output buffer, producing an undersized allocation when a pipeline enlarges an incoming JPEG before gain-map encoding. No active exploitation is confirmed (not in CISA KEV), no public exploit code exists, and a vendor-released patch is available in v8.18.3.
Unbounded memory consumption in Netty's Binary HTTP (BHTTP) codec allows any remote peer to trigger out-of-memory (OOM) conditions by sending crafted encoded variable-length field values. The BinaryHttpParser in netty-incubator-codec-bhttp versions up to and including 0.0.22.Final applies no upper-bound enforcement on variable-length integers used for field sizes, meaning a malicious or misbehaving peer can instruct the parser to buffer arbitrarily large amounts of data until the JVM heap is exhausted. No public exploit has been identified at time of analysis, and no KEV listing exists, but the straightforward nature of the trigger makes exploitation trivial for any party with network access to a service using this codec.