Path traversal in the misp-stix Python library allows an attacker who can supply crafted STIX 2 content to escape the configured object-template directory during PyMISP template resolution, reading arbitrary files accessible to the conversion process and copying their contents into converted MISP objects. All MISP deployments performing STIX 2 import or MISP-to-STIX 2 export via misp-stix are affected, with the flaw carrying a CVSS 4.0 score of 8.8. No public exploit or CISA KEV listing exists at time of analysis, but the vulnerability's persistent re-triggering pathway - where a poisoned MISP event is later re-exported by a higher-privilege process - represents a privilege-escalation risk beyond what the base score alone reflects.
Cleartext credential exposure in Johnson Controls Simplex Incident Manager / Autocall Fire Administrator (all versions before 2.01.05) allows a local low-privilege attacker who meets specific preconditions to retrieve sensitive data stored unencrypted in application memory (CWE-316). The CVSS 4.0 vector's subsequent-system confidentiality impact (SC:H) is especially notable given this platform interfaces with fire alarm controllers and building safety networks, meaning extracted credentials could be leveraged against downstream safety-critical infrastructure. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Unauthenticated arbitrary file upload in Datiphy Data Management Center v8.3.0 through v8.5.1 exposes the upload API endpoint without any authentication enforcement, permitting remote attackers to write arbitrary files directly to the server's configured upload directory. The root cause is CWE-306 (Missing Authentication for Critical Function), confirmed by ZUSO ART and registered as ENISA EUVD-2026-63792. The CVSS 4.0 vector scores network-accessible, zero-complexity, unauthenticated exploitation with high integrity and availability impact; no public exploit or CISA KEV listing has been identified at time of analysis.
Path traversal in LeafWiki's asset rename endpoint allows authenticated editors to relocate any file readable by the server process into a page's public asset directory, making it downloadable over HTTP. All releases from 0.3.0 through 0.10.0 (CPE: cpe:2.3:a:perber:leafwiki:*:*:*:*:*:*:*:*) are affected; version 0.10.1 contains the fix. No CISA KEV listing or public exploit code has been identified at time of analysis, but the low exploitation complexity and high-impact outcome - including potential exposure of the application database - make prompt patching urgent for any multi-user deployment.
Heap out-of-bounds write in LibVNCClient 0.9.12-0.9.15 allows a malicious or man-in-the-middle VNC server to corrupt client heap memory with attacker-controlled data, leading to unconditional denial of service or demonstrated remote code execution via callback pointer overwrite. The flaw fires from a single FramebufferUpdate message the moment a victim connects, requires no authentication, and works against default builds with default settings. No public exploit has been identified at time of analysis, though the GitHub Security Advisory explicitly demonstrates code execution under default configuration.
DNS rebinding against Microsoft UFO's Linux MCP server (all versions prior to 3.0.8) enables an attacker-controlled web page to bypass localhost binding protections and reach the local /mcp endpoint via the victim's browser. Because the FastMCP streamable HTTP server bound to localhost:8010 performed no Host, Origin, or Sec-Fetch-Site header validation, a browser performing a DNS rebind could enumerate available tool schemas via tools/list and invoke execute_command with a valid UFO_MCP_API_KEY, resulting in arbitrary file reads or OS command execution as the victim's local user. No public exploit code has been identified at time of analysis, though the DNS rebinding technique is well-documented and the commit-confirmed patch validates the described attack path.
Reflected XSS in Combodo iTop's foreign key search criteria API (all versions prior to 3.2.3) enables remote attackers to execute arbitrary JavaScript in the browser context of authenticated iTop users by delivering a crafted URL. The CVSS 8.8 rating reflects low attack complexity and high impact on confidentiality, integrity, and availability within the ITSM platform's session context. No public exploit code and no CISA KEV listing have been identified at time of analysis; vendor-released patch 3.2.3 is available.
Missing object-level authorization in Combodo iTop prior to 3.2.3 allows authenticated users to retrieve IT management objects outside their permitted access scope via the search interface. The flaw resides in AjaxRenderController::GetDataForTable(), which returned DBObjectSet results without calling UserRights::IsActionAllowed() - confirmed by the fix commit. No public exploit has been identified at time of analysis, but the low-privilege, network-accessible attack path makes this a credible threat for any multi-tenant or role-segmented iTop deployment.
Privilege escalation in LeafWiki versions 0.1.0 through 0.10.0 allows any authenticated user to elevate their own account role to administrator by manipulating the user update API. The flaw stems from improper privilege management (CWE-269) in the API endpoint responsible for account updates, which fails to enforce role-assignment restrictions. No public exploit code has been identified at time of analysis, but the attack is straightforward for any user with a valid account, making instances with open or semi-trusted registration particularly exposed.
Two-factor authentication bypass in Apache CloudStack allows an authenticated low-privileged user to exploit an improper privilege management flaw in the 2FA plugin's disable flow, effectively circumventing the second authentication factor. Affected deployments span versions 4.18.0.0 through 4.20.3.0 and 4.21.0.0 through 4.22.1.0, with vendor-confirmed fixes in 4.20.3.1 and 4.22.1.1. No public exploit code has been identified and EPSS sits at 0.18% (8th percentile), indicating low observed exploitation pressure despite the high vendor-assigned CVSS of 8.8.
Cross-tenant root command execution in Apache CloudStack (4.14.0.0-4.20.3.0 and 4.21.0.0-4.22.1.0) allows an authenticated tenant holding only the default User role to run arbitrary shell commands as root on the KVM hypervisor host, which also runs other tenants' VMs. The flaw stems from CloudStack fetching a user-supplied .metalink file during directDownload template registration and dispatching its inner URLs to the KVM agent without re-validating them against the scheme allowlist; a related SSRF variant lets the Secondary Storage VM retrieve internal targets and persist them as downloadable templates. No public exploit identified at time of analysis, and no CVSS is provided by the vendor.
Out-of-bounds host memory access in the Linux kernel vhost subsystem results from a stale metadata cache that is not invalidated when vring addresses or sizes are reconfigured via VHOST_SET_VRING_ADDR or VHOST_SET_VRING_NUM while a virtqueue is live. Systems running KVM/QEMU virtualization with vhost and a device IOTLB attached - spanning kernel versions from 4.11 through unpatched stable series - are affected, with the scope change (S:C) in the CVSS vector indicating potential read/write access to host memory beyond the vhost subsystem boundary. No public exploit has been identified at time of analysis, and EPSS sits at 0.17% (6th percentile), consistent with a complex kernel-internal flaw not yet commoditized.
Argument injection in Apache InLong's Agent Installer (versions 2.0.0 through 2.3.x) enables arbitrary shell command execution via the ModuleManager's ExcuteLinux.exeCmd() method, which applies no input filtering or whitelist validation. Any deployment running InLong agents within the affected version range is exposed to OS-level command execution on the agent host system. Apache has released version 2.4.0 as the authoritative fix; no public exploit has been identified at time of analysis.
Remote code execution in Omnigent's multi-tenant runner allows any authenticated user to hijack the runner process by uploading a crafted agent bundle that specifies a dotted Python import path (e.g., subprocess.check_output) as a server-side callable tool. The server's bundle validator failed to inspect the callable field, so the runner blindly imported and executed the specified Python symbol with its own process permissions. All Omnigent deployments prior to version 0.3.0 running in shared or multi-tenant mode are affected; no public exploit has been identified at time of analysis, though the GHSA advisory and fix PR provide a detailed exploitation roadmap.
Path traversal in Omnigent AI agent framework (versions prior to 0.3.0) allows authenticated users to escape the session workspace by uploading a crafted agent bundle with an absolute or traversal-containing os_env.cwd value, exposing host filesystem contents and runner environment secrets. The vulnerability chain spans four source files - parser.py, validator.py, resource_registry.py, and os_env.py - and the security boundary collapses specifically when OMNIGENT_RUNNER_WORKSPACE is unset on the runner. No public exploit or active exploitation (CISA KEV) has been identified at time of analysis; a vendor-confirmed fix was released in v0.3.0.
Denial-of-service in misp-stix allows remote attackers to terminate long-running MISP importer processes or exhaust host memory and CPU by submitting malformed or oversized STIX 1 or STIX 2 documents. Two distinct conditions combine: parsing failures invoked sys.exit(), which raises SystemExit - a BaseException subclass that bypasses standard except Exception handlers in callers - causing unconditional process termination instead of a recoverable error; and the library materialized full document content in memory before applying any size or validity checks, with processing costs of 2-7x the raw input size enabling resource exhaustion. No public exploit identified at time of analysis; upstream fix commits are available on GitHub.
Symlink escape in Infinite Image Browsing (zanllp/infinite-image-browsing) allows remote attackers to read arbitrary files from the host filesystem by placing a symbolic link inside a scanned image directory, which satisfies a string-based path containment check that does not resolve symlinks. The flaw is exploitable only in network-exposed Stable Diffusion WebUI deployments where access control is active - those started with share, ngrok, listen, or server_name options, or with IIB_ACCESS_CONTROL=enable. No public exploit or CISA KEV listing has been identified at time of analysis; an upstream fix is available as commit 4057a624 (PR #969), but no specifically tagged patched release has been confirmed.
Cross-tenant transaction data exposure in Roskus Prospero Flow CRM 5.0.0-5.3.5 allows any authenticated user on a shared instance to read financial transaction records belonging to other companies by iterating the integer ID in GET /api/transaction/{id}, which performed no company-scoping and no permission check. Source code analysis of the fix confirms the vulnerable controller called Transaction::find($id) directly against the full dataset, making every transaction on the instance reachable to any valid session. No CISA KEV listing exists and no public exploit code has been identified, though the trivial exploitation pattern (sequential integer enumeration) requires minimal skill.
Order content disclosure in J2Store (Joomla e-commerce extension by j2commerce.com) versions 1.0.0-3.3.20, 4.0.0-4.0.20, and 4.1.0-4.1.5 allows any unauthenticated visitor to read the full checkout confirmation of arbitrary orders - including line items, prices, and totals - by supplying a controlled order_id query parameter, with no authentication required. This is a textbook CWE-639 Insecure Direct Object Reference flaw: the application fails to verify that the requesting party owns or is authorized to view the referenced order record. No public exploit code or CISA KEV listing has been identified at time of analysis, but the trivially low exploitation barrier (unauthenticated, network-accessible, likely sequential order IDs) makes this a high-priority remediation target for any J2Store deployment handling customer order data.
Path traversal in Infinite Image Browsing (zanllp/infinite-image-browsing), a Stable Diffusion WebUI extension, exposes arbitrary files outside configured allowed directories to unauthenticated remote attackers by exploiting a missing trailing path separator in the is_path_trusted prefix comparison. The bypass is only exploitable in network-exposed deployments - those started with --share, --ngrok, --listen, or --server_name flags, or with IIB_ACCESS_CONTROL=enable - which are precisely the configurations relying on this confinement for protection. No public exploit has been identified at time of analysis, but the bypass is trivially replicable from the public patch diff; an upstream fix is confirmed at commit 4057a624.
Unauthenticated remote enumeration of all penetration-testing projects and client organisations is possible in Reconmap due to a misapplied [AllowAnonymous] attribute on the report preview endpoint, overriding the application-wide administrator-role policy. Any unauthenticated caller can issue sequential GET requests to /reports/{id}/preview and receive rendered HTML containing project names, descriptions, and linked client organisation names, addresses, and URLs; 404 responses for missing IDs further confirm which project IDs exist, enabling complete database enumeration. No CISA KEV listing or public exploit code has been identified at time of analysis, but the trivial attack mechanics - sequential HTTP GETs requiring no credentials or tooling - make exploitation highly accessible to any network-adjacent attacker.
Unauthenticated remote PHP file execution in Combodo iTop prior to 3.2.3 allows attackers to invoke arbitrary PHP files from the env-production module directory by sending crafted requests to the exec.php dispatcher, which performed no authentication check before routing to module pages. The flaw is classified as CWE-306 (Missing Authentication for Critical Function) and carries a CVSS 3.1 score of 8.6 (AV:N/AC:L/PR:N/UI:N), indicating zero-friction network exploitation with no credentials required. No public exploit code or CISA KEV listing has been identified at time of analysis.
Stored cross-site scripting in Zoo Extension for Joomla (all versions before 4.1.66) allows unauthenticated remote attackers to inject persistent JavaScript payloads through comment fields and user-supplied field elements. Because these inputs were not escaped before being rendered, any user or administrator who subsequently views the affected content triggers execution of the attacker's script in their browser context, enabling session hijacking, credential theft, or privilege escalation to administrator level. No public exploit or CISA KEV listing has been identified at time of analysis.
Stored Cross-Site Scripting in J2Store and J2Commerce allows unauthenticated attackers to inject persistent malicious scripts via guest checkout billing address fields, affecting all versions from 1.0.0 through 4.1.5. The exploit abuses an interaction between Joomla's Input::getArray() sanitization and PHP's default variables_order=EGPCS setting, where Cookie values silently override POST parameters in $_REQUEST, allowing unsanitized HTML to persist in fields such as billing_first_name. When a privileged user such as a store administrator subsequently views the affected order record, the stored payload executes in their browser session. No public exploit code or CISA KEV listing has been identified at time of analysis.
SQL injection in YOOtheme Pro for Joomla (versions 1.0.0-5.0.40) allows any authenticated contributor-level user to embed arbitrary SQL content into backend queries, potentially exposing or corrupting the entire Joomla site database including user credentials and content. The vulnerability spans the full release history of the extension through 5.0.40 and is particularly dangerous in multi-author or open-registration Joomla deployments where untrusted users hold contributor roles. No public exploit code has been identified at time of analysis, and CISA SSVC confirms current exploitation status as none, though SSVC also rates the technical impact as total if exploitation occurs.
Command injection in UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 allows an attacker who controls /etc/passwd entries on a target system to execute arbitrary commands on a forensic analyst's host machine. The vulnerability targets the DFIR tool itself rather than the system under investigation: when an analyst runs UAC against a compromised host, crafted usernames or home directory paths containing shell metacharacters are substituted into command strings and passed to eval without sanitization in parse_artifact.sh. This creates a novel attacker-pivots-to-analyst scenario with no public exploit identified at time of analysis, but the attack chain is straightforward given /etc/passwd write access on the investigated system.
Stored cross-site scripting in Jet Admin allows an authenticated attacker to inject arbitrary JavaScript into the sign-in page via the scripts and styles configuration option, with the payload executing in the browser context of every subsequent visitor to that page. The sign-in page is a high-traffic, public-facing endpoint, so any user - including administrators - who visits the login page becomes a victim after the payload is planted. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog; however, the CVSS 4.0 score of 8.5 reflects high confidentiality and integrity impact against affected users.
Stack-based buffer overflow in TP-Link TL-MR6400 v7 firmware update functionality enables an authenticated, adjacent-network attacker to achieve arbitrary code execution on the affected device. The flaw (CWE-121) arises from unsafe parsing of attacker-controlled metadata embedded in a firmware image, leading to memory corruption at the stack level. No public exploit or CISA KEV listing has been identified at time of analysis; exploitation is further constrained by requirements for high-privilege access (PR:H) and network adjacency (AV:A).
Command injection in UAC (Unix-like Artifacts Collector) versions before 3.3.0 allows an attacker who controls evidence under forensic analysis to execute arbitrary commands on the investigating analyst's own host system. The _command_collector function substitutes placeholders such as %user%, %user_home%, and %line% into shell command strings via sed without sanitizing shell metacharacters, then passes the result to eval - enabling malicious filenames or artifact definitions to inject and execute arbitrary shell code on the analyst's workstation. No CISA KEV listing or public exploit code has been identified at time of analysis; vendor patch is available in 3.3.0 per GitHub commit 2cc367d.
Command injection in UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 enables arbitrary command execution on a forensic analyst's workstation when processing evidence containing attacker-controlled data. The root cause is unsafe use of shell `eval` to expand untrusted placeholders - including `%user%`, `%user_home%`, `%line%`, and `%mount_point%` - in the `_run_command` function, allowing shell metacharacters or command substitutions embedded in usernames, filenames, or artifact definitions to execute in the analyst's shell context. No public exploit has been identified at time of analysis, and a vendor-released patch is available in version 3.3.0.
Path traversal in Arc Enterprise's Raft finite state machine allows low-privileged cluster peers to register arbitrary file paths via manifest-registration proposals, bypassing all path validation in the applyRegisterFile handler (internal/cluster/raft/fsm.go). All Arc Enterprise deployments running in cluster mode prior to version 2026.06.1 are affected. No public exploit code has been identified at time of analysis, but successful exploitation enables data writes outside the configured storage backend root, directly undermining storage isolation guarantees.
Missing application-layer authentication in Arc Enterprise's cluster replication receiver (prior to version 2026.06.1) allows any peer with access to the cluster network to inject or replay MsgReplicateSync messages, silently corrupting replicated telemetry data across all cluster nodes. The CVSS 4.0 score of 8.3 reflects high integrity impact on both the vulnerable system and subsequent cluster peers (VI:H, SI:H) with only low privilege requirements, scoped to cluster-mode deployments. A vendor-released patch is available in version 2026.06.1; no public exploit code and no CISA KEV listing have been identified at time of analysis.
Out-of-bounds heap metadata corruption in FreeRTOS-Kernel's TrustZone secure context allocation exposes ARM Cortex-M devices to local privilege escalation across the normal-to-secure world boundary. Versions 10.2.0 through 11.3.0 are affected; an attacker with low-privilege local code execution can supply an undersized stack size parameter that bypasses missing minimum-size validation, triggering a CWE-787 out-of-bounds write into secure-world heap metadata. No public exploit has been identified at time of analysis, and this CVE does not appear in CISA KEV; vendor-released patch V11.3.1 is available.
Use-after-free in FreeRTOS-Kernel's secure context cleanup handler (versions 10.2.0 through 11.3.0) allows a local low-privileged user to corrupt or crash TrustZone secure-world memory by invoking the SVC handler for secure context deallocation without privilege verification. The missing privilege check permits normal-world code to trigger deallocation of already-freed secure-world memory regions, producing high integrity and availability impact on the secure execution environment - a severe outcome in security-sensitive embedded deployments. No public exploit has been identified at time of analysis; vendor-released patch V11.3.1 is available via Amazon's security bulletin and the FreeRTOS GitHub repository.
Server-side request forgery in OpenViking before 0.3.4 allows authenticated low-privilege users to pivot the application server into an internal network proxy, reaching loopback addresses, RFC 1918 private ranges, link-local addresses, and cloud metadata endpoints such as AWS IMDS. By POSTing crafted URLs to /api/v1/resources, the attacker causes the server to issue outbound HEAD and GET requests with redirect-following enabled, then retrieves the responses through the normal content APIs - effectively mapping and interacting with internal services invisible from the public network. No public exploit identified at time of analysis; vendor-released patch in v0.3.4 is confirmed.
Craftplan versions prior to 0.5.1 expose decrypted SMTP passwords, email API keys, and email API secrets to unauthenticated network attackers via a broken always-allow authorization policy on the Settings JSON:API resource. Exploitation requires only a valid Settings record ID and a standard GET request - no credentials or elevated access are needed. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low post-enumeration technical barrier makes this a meaningful credential-exposure risk for any internet-facing Craftplan instance.
Stored cross-site scripting in DiscordChatExporter prior to 2.47.2 allows a Discord bot or webhook operator to plant script payloads in message content or embed fields that execute in a victim's browser when the channel is exported with markdown formatting disabled. Affected fields include message body, forwarded and referenced message content, embed titles, descriptions, and field name/value pairs - all rendered without HTML entity encoding in the vulnerable code path. The issue is fixed in version 2.47.2, confirmed by GitHub security advisory GHSA-8qrv-mmch-fr9c; no public exploit code or active exploitation has been identified at time of analysis.
Unprivileged task memory disclosure in FreeRTOS-Kernel before 11.3.1 enables a low-privileged task to read privileged kernel memory by exploiting missing type validation in the xQueueAddToSet() function (CWE-843). Exploitation is constrained to deployments using MPU-enabled ports with the queue sets feature active, but on affected configurations the CVSS 4.0 score of 8.2 reflects high confidentiality impact across both the vulnerable system and subsequent (privileged) system contexts. No public exploit code or CISA KEV listing exists; Amazon (AWS), who reported the issue, has released a fix in version 11.3.1.
CSRF in the LitExtension WordPress migration plugin (≤1.2.5) allows an unauthenticated remote attacker to overwrite the store-migration connector's authentication token by tricking a logged-in administrator into clicking a crafted link. Token replacement gives the attacker control over the connector, potentially enabling unauthorized access to migrated store data or disruption of active migration workflows. A publicly available proof-of-concept exploit was published via WPScan; this vulnerability has not been added to the CISA KEV catalog at time of analysis.
Privilege escalation in HP OMEN Gaming Hub prior to version 1101.2608.0.0 allows local attackers holding standard user credentials to gain elevated system access by exploiting improper JWT signature verification (CWE-347). The gaming hub service, which operates with elevated OS privileges to manage hardware performance settings on HP OMEN systems, fails to validate cryptographic signatures on JWT tokens used for internal access control, enabling privilege claim forgery. No public exploit code has been identified at time of analysis, and this vulnerability does not appear in the CISA Known Exploited Vulnerabilities catalog.
Process-wide Mustache HTML escaping is permanently disabled in Unleash (all versions prior to 8.0.3) from the first moment any notification addon formats a feature event, allowing an editor-level user who has placed Slack or Teams link syntax in their unrestricted username to inject attacker-controlled hyperlinks into every configured outbound notification channel - including Slack, Microsoft Teams, Datadog, New Relic, and email. The scope change (S:C in CVSS) reflects that the vulnerable assignment in FeatureEventFormatterMd contaminates Mustache rendering across email-service.ts, webhook.ts, datadog.ts, and new-relic.ts for the lifetime of the Node.js process. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code has been identified at time of analysis.
SAML authentication bypass in Apache CloudStack 4.20.3.0 and 4.22.1.0 permits a network-positioned attacker to forge SAML responses and authenticate as any user against the management server without valid credentials. The flaw stems from improper cryptographic signature verification (CWE-347): the management server fails to validate SAML response certificates, so a forged assertion passes unchecked. Exploitation requires either spoofing the IdP's IP address or registering a controlled URL as a trusted IdP endpoint in the management server - conditions that raise the practical bar but, if met, yield full administrative access. No public exploit or CISA KEV listing has been identified; the EPSS score of 0.07% reflects minimal observed exploitation at time of analysis.
Reflected XSS in Combodo iTop's universal search feature (all versions prior to 3.2.3) allows an authenticated attacker to inject arbitrary JavaScript via the OQL filter parameter, which executes in a victim's browser upon visiting a crafted URL. The root cause is direct HTML output of the user-supplied OQL query string in UniversalSearch.php without sanitization, confirmed by the patch commit adding utils::EscapeHtml(). No CISA KEV listing or confirmed public exploit exists at time of analysis; exploitation requires attacker-supplied credentials and victim interaction, limiting opportunistic risk despite the CVSS 8.0 rating.
Reflected Cross-Site Scripting in Combodo iTop's tagadmin.php page allows an authenticated attacker to craft a malicious URL that, when visited by another authenticated user, executes arbitrary JavaScript in their browser session. All iTop installations prior to version 3.2.3 are affected, with the vulnerability root-caused to the $sFilter request parameter being reflected into HTML output without sanitization. No public exploit or active exploitation has been identified at time of analysis, but the high CVSS impact scores reflect the realistic potential for session hijacking or privilege escalation within the iTop management interface.
Reflected XSS in Combodo iTop's synchro import script prior to version 3.2.3 enables attackers to inject and execute arbitrary JavaScript in the browsers of authenticated users who click a crafted link. The vulnerable parameter `data_source_id` in `synchro/synchro_import.php` was processed without output encoding, as confirmed by the vendor fix commit. No active exploitation has been identified at time of analysis, and no public exploit code has been disclosed.
Reflected XSS in Combodo iTop's OQL query testing interface (run_query.php) allows authenticated attackers to inject and execute arbitrary JavaScript in the browser sessions of other authenticated users. All iTop versions prior to 3.2.3 are affected; the vendor has released a patch in 3.2.3 confirmed by a public GitHub advisory and commit. No public exploit code or active exploitation has been identified at time of analysis.
Arbitrary code execution in Facebook Research Hydra prior to version 1.3.4 allows any party who can supply untrusted configuration - including YAML config files, CLI overrides, or ML model metadata - to invoke dangerous Python callables through hydra.utils.instantiate(). The vulnerability stems from _resolve_target() accepting any Python callable path without restriction, enabling an attacker to trigger functions such as os.system, subprocess.Popen, or builtins.exec inside the consuming application's process. No public exploit code has been identified at time of analysis, and no CISA KEV listing exists; the upstream fix is confirmed shipped in v1.3.4.
Command injection in Cloud Foundry's BOSH CLI on Windows enables an adjacent-network attacker to execute arbitrary shell commands - specifically via PowerShell injection - without requiring authentication. The vulnerability affects all tracked versions of the BOSH CLI (cpe:2.3:a:cloud_foundry_foundation:bosh_cli) when deployed on Windows hosts, resulting in full confidentiality, integrity, and availability compromise of the affected system. No public exploit code or CISA KEV listing has been identified at time of analysis, but the high-impact CVSS vector (7.5) and the specificity of the PowerShell injection vector indicate meaningful risk for Cloud Foundry operators running BOSH on Windows.
Use-after-free in the Linux kernel's route4 (cls_route) traffic classifier fastmap cache allows a local attacker with CAP_NET_ADMIN to read freed kernel heap memory by racing filter deletion against fastmap cache population, potentially escalating to full kernel compromise. Affected versions span Linux 3.18 through current stable branches; the kernel security team backported fixes to eight LTS/stable lines (5.10.265, 5.15.216, 6.1.183, 6.6.152, 6.12.104, 6.18.45, 7.1.9, and 7.2). No public exploit identified at time of analysis; EPSS of 0.17% (6th percentile) reflects minimal current exploitation activity, though the theoretical impact is severe given the kernel-level UAF primitive.
Out-of-bounds kernel memory write in the Linux kernel packet socket implementation allows a local low-privilege attacker to corrupt kernel memory by exploiting a race condition between `packet_snd()` reads of `dev->hard_header_len` and concurrent device reconfiguration. When the race is won - for example during a bonding device type change - `skb->data` is positioned before `skb->head`, and the subsequent userspace copy writes beyond the allocated socket buffer, creating a kernel memory corruption primitive suitable for local privilege escalation. No public exploit or CISA KEV listing exists at time of analysis; EPSS of 0.16% reflects very low current exploitation probability, though the primitive is powerful and patch availability across multiple stable branches makes remediation straightforward.