Arbitrary file deletion in the Order Tip for WooCommerce WordPress plugin (versions before 1.6.0) allows authenticated Shop Managers to delete any file on the web server by exploiting missing capability checks and absent path restrictions on the deletion endpoint. The plugin fails to validate both the requesting user's permissions and the target file path, meaning a malicious or compromised Shop Manager account could remove critical WordPress files such as wp-config.php, leading to full site compromise. A publicly available proof-of-concept exists per WPScan; however, EPSS sits at only 0.17% (6th percentile) and CISA has not added this to KEV, consistent with the SSVC assessment of no observed exploitation.
Command injection in LibreNMS's Virtualization Discovery module enables authenticated administrator-level users to execute arbitrary OS commands on the underlying host server. Covering all tracked versions per CPE cpe:2.3:a:librenms:librenms:*, this CWE-78 flaw was disclosed by PRJBLK alongside a publicly available proof-of-concept exploit targeting version 26.5.0. No CISA KEV listing was identified at time of analysis, but the public PoC materially lowers the exploitation bar for any attacker who already holds admin credentials.
Log injection in @logtape/syslog allows network-accessible attackers to forge arbitrary syslog records in downstream collectors such as rsyslog, Splunk, and Elastic Stack. The escapeStructuredDataValue() function omits C0 control character escaping, so a literal newline embedded in a log property value terminates the current RFC 6587 TCP syslog frame and begins a new one; if the attacker-supplied bytes constitute a valid RFC 5424 header, the downstream collector accepts them as a separate, authentic-looking record. A second injection path exists through unvalidated SD-NAME keys, which can prematurely close structured-data elements. Both paths require the non-default SyslogSinkOptions.includeStructuredData: true setting. Publicly available proof-of-concept code exists; no CISA KEV listing at time of analysis.
DOM-based XSS in SunEditor's Embed plugin (npm/suneditor <= 3.1.3) allows an authenticated user with editor access to execute arbitrary JavaScript in another user's browser by submitting crafted embed HTML containing an iframe followed by an external script element. The Embed plugin's node-processing loop recreates the attacker-controlled script element and appends it to the live DOM rather than discarding it, bypassing sanitization. A working proof-of-concept is publicly documented in GHSA-w93q-cq9w-58p7; no KEV listing is present, but stored-XSS scenarios targeting higher-privilege users (administrators, editors) compound the impact significantly.
Arbitrary CI command execution in GitLab Enterprise Edition allows an authenticated developer-role user to run unauthorized commands within a CI pipeline context across all EE versions from 18.9 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1. The root cause is CWE-829 (Inclusion of Functionality from Untrusted Control Sphere): a Claude AI agent integration within GitLab EE processes CI pipeline configuration drawn from a user-controlled source without adequate isolation, enabling instruction injection into the agent's execution context. A public proof-of-concept is confirmed via HackerOne report 3863650, though SSVC and EPSS signals indicate no observed widespread active exploitation at time of analysis.
Remote unauthenticated administrative compromise is possible across three WordPress plugins - BlogVault Backup & Staging, MalCare WordPress Security Plugin, and WP Remote WordPress Plugin - in versions 5.16 through 6.64, due to the combination of a weak pseudo-random number generator used to create site-binding secrets and unauthenticated endpoints leaking data derived from those secrets. An attacker who can observe the leaked derived values can reverse the weak PRNG to reconstruct the original secret, then authenticate to the remote management service with administrative privileges and achieve full site takeover. A publicly available proof-of-concept exists; no CISA KEV listing is present, and EPSS sits at 0.17%, indicating limited observed mass exploitation despite the public exploit.
Path traversal in the AI Engine WordPress plugin (versions 3.3.3 through 3.7.1) allows arbitrary server file reads with subsequent exfiltration to an external service. When the plugin's non-default public API feature is enabled, subscriber-level users can supply a crafted URL that the plugin maps to a local filesystem path without confinement, reads, and forwards to an external AI endpoint. In default configurations the flaw is limited to administrator-level users, but on WordPress multisite networks this allows unprivileged subsite administrators to extract network-wide configuration secrets. A publicly available POC exists, though EPSS at 0.19% indicates no widespread automated exploitation at time of analysis.
Unauthenticated account creation in the Project Manager WordPress plugin before version 4.0.7 allows any remote attacker to register WordPress user accounts regardless of the site's registration settings. The import routes in the plugin carry no authorization checks whatsoever (CWE-862), enabling an attacker who already knows the password they will submit to establish a persistent, valid WordPress account on the target site. A publicly available proof-of-concept exploit exists; however, EPSS is currently 0.18% (7th percentile), indicating low observed exploitation volume at the time of analysis.
Path traversal in IzPack's UnpackerBase.unpack() enables arbitrary file writes under victim privileges when a user executes a trojanized installer JAR. The unpacking pipeline calls IoHelper.translatePath(), which performs only file-separator substitution with no canonical-path check, no startsWith(installDir) containment guard, and no normalization of '../' sequences, allowing attacker-controlled PackFile entries to escape the install directory entirely. Because IzPack JARs are standard unsigned ZIPs with no integrity protection, any legitimate IzPack installer can be silently repackaged with malicious entries; a publicly available proof-of-concept confirms the escape. The CVE is not listed in CISA KEV, but the trivial repacking method and social-engineering distribution vector make this a credible supply-chain threat to organizations consuming IzPack-packaged software from untrusted sources.
Remote code execution in the Pods WordPress plugin (versions 3.1.0 through 3.3.9.1) allows authenticated users holding the author role or higher to invoke arbitrary PHP functions on the server by submitting a crafted display callback that bypasses the plugin's blocked-function comparison logic. Exploitation is limited to sites where restricted display-callback mode is active - the automatic default on installations first deployed on Pods versions predating 3.1 - meaning a large subset of long-running Pods deployments are in-scope. A public exploit exists per WPScan reporting, though EPSS at 0.21% (11th percentile) indicates low observed exploitation activity and no CISA KEV listing at time of analysis.
Credential exposure in Rently Smart Home versions 20.1.0 and prior allows authenticated network-based attackers to retrieve all property access PINs, including the Master Pin that overrides the standard user permission hierarchy. Reported by ICS-CERT via CISA advisory ICSA-26-237-01, the flaw is particularly severe in property rental contexts where Master Pin retrieval translates directly to unauthorized physical access to tenant properties. No public exploit code has been identified at time of analysis, but the low attack complexity and network-accessible vector make this a genuine operational and physical security risk.
Command injection in TeamViewer Full Client and Host for Linux (prior to version 15.81.5) allows remote attackers to execute arbitrary OS commands as the current user by sending a crafted URL through the out-of-session chat feature. The attack exploits CWE-78 (OS Command Injection) in the Linux URL-handling path and requires only that the victim click the malicious link - no attacker authentication is needed. No public exploit has been identified at time of analysis; the vendor has released a patch in version 15.81.5 per advisory TV-2026-1009.
OS command injection in Dell PowerProtect One versions 20.1.0.0 and below allows remote code execution by low-privileged authenticated users. The CWE-78 root cause indicates that user-controlled input is passed unsanitized to OS-level shell commands exposed through a network-accessible interface. Dell confirmed this in advisory DSA-2026-369; no public exploit or CISA KEV listing has been identified at time of analysis, though the full C:H/I:H/A:H impact profile makes this a high priority for any organization running this data protection platform.
OS Command Injection in Dell PowerProtect One versions 20.1.0.0 and below allows a remote low-privileged attacker to execute arbitrary operating system commands on the underlying host. The CVSS vector (AV:N/AC:L/PR:L/UI:N) confirms network-accessible exploitation requiring only a valid low-privileged credential, with full confidentiality, integrity, and availability impact on the vulnerable system. No public exploit code or active exploitation has been identified at time of analysis.
Unbounded memory allocation in amqp091-go (RabbitMQ's official Go AMQP 0.9.1 client) before v1.13.0 allows a malicious or compromised AMQP broker to force connected clients to allocate and process content body frames exceeding the negotiated frame_max limit, bypassing protocol framing constraints and causing application-layer denial of service. The root cause - confirmed via PR diff - is the client's blind acceptance of broker-advertised frame sizes during the TUNE handshake without enforcing the AMQP specification's minimum frame floor. No public exploit or CISA KEV listing exists at time of analysis; a vendor-released patch is available in v1.13.0.
Cookie forgery in the Mang Board WP WordPress plugin (≤2.3.7) enables any subscriber-level account holder to forge administrator authentication cookies and change the administrator password, resulting in complete WordPress site takeover. The flaw originates in `mbw_get_hash_key()`, which generates HMAC material from the currently logged-in user's identity rather than the username embedded in the cookie under validation, while `mbw_validate_auth_cookie()` performs insufficient verification - allowing the forged cookie to pass as legitimate. No public exploit has been identified at time of analysis and no CISA KEV listing is present, but the CVSS 8.8 score accurately reflects the low privilege bar required and full confidentiality, integrity, and availability impact.
SQL injection in Thinking Software Technology's Efence (versions ≤ 1.2.66 DB Ver:56) exposes full database contents to unauthenticated remote attackers via the file upload functionality. The CVSS 4.0 score of 8.8 with PR:N and AV:N confirms no credentials are required, and SSVC rates the attack as automatable. No public exploit code or CISA KEV listing exists at time of analysis, but the attack surface is low-complexity and network-accessible.
Out-of-bounds write in FreeBSD's userspace ppp(8) daemon allows a malicious PPP peer to crash the process or execute arbitrary code as root. The flaw is in LcpDecodeConfig(), which fails to validate endpoint discriminator option lengths against the RFC 1717 minimum, enabling memory corruption during LCP negotiation. Affected releases are FreeBSD 15.1-RELEASE prior to p3, 15.0-RELEASE prior to p13, and 14.4-RELEASE prior to p9; no active exploitation or public proof-of-concept has been identified at time of analysis.
Heap-based buffer overflow in FreeBSD's ppp(8) daemon allows a malicious PPP peer to crash the daemon or execute arbitrary code as root. The flaw resides in mp_Enddisc(), which miscalculates buffer lengths when formatting Multilink PPP endpoint discriminator addresses, overflowing a global result buffer. Affected releases are FreeBSD 14.4-RELEASE prior to p9, 15.0-RELEASE prior to p13, and 15.1-RELEASE prior to p3; no active exploitation is confirmed (not in CISA KEV), but SSVC rates the technical impact as total and the attack as automatable.
Privilege escalation in Unraid OS 6.12.14 and earlier is enabled by a CSRF vulnerability rooted in the authentication cookie's lax SameSite policy, allowing a remote attacker to forge authenticated requests on behalf of a logged-in victim. When an authenticated Unraid user visits an attacker-controlled page, the browser's permissive cookie policy causes the session credential to accompany the cross-site request, potentially granting the attacker elevated access to the NAS management interface. No active exploitation is confirmed by CISA KEV; EPSS sits at 0.28% (20th percentile), though public security research at alittleinsecure.com documents the vulnerability in detail.
Improper authentication in Dell PowerProtect Cyber Recovery (versions prior to 20.3) allows a remote low-privileged attacker to bypass authorization controls and gain unauthorized access to the backup and recovery environment. The CVSS 8.8 High score reflects network-accessible exploitation with low attack complexity (AV:N/AC:L/PR:L), and full confidentiality, integrity, and availability impact - suggesting the attacker can read, modify, or destroy vaulted backup data. Vendor patch version 20.3.0.0 is available via Dell Security Advisory DSA-2026-370; no active exploitation has been confirmed in CISA KEV and EPSS indicates low current exploitation probability.
Privilege escalation in Admin By Request (ABR) for macOS allows a low-privileged local user to obtain full administrator rights by exploiting a predictable PIN derivation mechanism via Apple's Cross-Process Communication (XPC) framework. The attacker masquerades as an Apple-signed process during XPC communication, bypassing ABR's authentication logic entirely. Covered by a vendor security advisory and a CSA alert, the flaw carries a CVSS 8.8 with a scope change; no public exploit or CISA KEV listing has been identified at time of analysis.
Out-of-bounds region index access in the Linux kernel's s390/vfio_ccw subsystem exposes systems to potential guest-to-host privilege escalation on IBM mainframe KVM deployments. The read/write region handlers lack the bounds clamping that was applied to the capability chain regions, allowing a low-privileged local attacker - typically a KVM guest with vfio_ccw passthrough access - to trigger out-of-bounds memory access with a CVSS Scope:Changed impact. Vendor-released patches are available across multiple stable kernel branches, and no public exploit has been identified at time of analysis.
Use-after-free in the Linux kernel's s390/vfio_ccw subsystem allows a local low-privileged user on IBM Z hardware to corrupt freed kernel memory by triggering workqueue dispatch after the owning private struct has been released. Affected systems are those running KVM guests with VFIO CCW I/O channel passthrough on s390 architecture, spanning kernel versions from 4.12 through multiple unpatched stable branches. No public exploit or CISA KEV entry exists at time of analysis, but the scope-changing CVSS vector reflects the potential to compromise the host kernel or co-resident VMs.
Race condition in the Linux kernel's s390/vfio_ccw CRW (Channel Report Word) subsystem allows low-privileged local attackers on IBM mainframe KVM hosts to read incoherent CRW payload state, with CVSS-assessed potential for high confidentiality, integrity, and availability impact including scope change into the hypervisor. The root cause is an absent lock on the CRW payload list, which receives exclusively asynchronous hardware events and was therefore never protected for concurrent access. No public exploit code or CISA KEV listing exists; patches have been backported across multiple stable kernel branches including 6.12.105, 6.18.46, 7.1.10, and 7.2.
Missing bounds validation in the amdgpu DRM driver's GFX ring command submission path allows a local low-privileged user to submit oversized Indirect Buffer (IB) requests that corrupt adjacent control bits in GPU ring packet fields, destabilizing command submission and potentially achieving kernel memory corruption with scope-changing impact. Affected systems must have AMD GPU hardware and the amdgpu kernel module loaded; the vulnerability is present across multiple stable branches prior to Linux 6.12.105, 7.1.10, 6.18.46, and 7.2. No public exploit code or CISA KEV listing has been identified at time of analysis; vendor-released patches are available for all affected stable branches.
Arbitrary file upload in EFence (Thinking Software Technology) versions 1.2.66 and earlier allows authenticated remote attackers to upload web shell backdoors and achieve full arbitrary code execution on the underlying server. The CVSS 4.0 score of 8.7 reflects network-accessible exploitation requiring only low-privilege credentials, with confirmed total technical impact per SSVC. No public exploit has been identified at time of analysis and SSVC rates current exploitation as none, though the Taiwan CERT (TWCERT) has published advisories indicating confirmed vendor awareness.
Memory exhaustion in RustDesk versions before 1.4.7 allows unauthenticated remote attackers to crash or severely degrade server availability by sending crafted TCP frame headers through BytesCodec before any authentication occurs. The decoder blindly reserves up to 1,073,741,823 bytes of buffer capacity per connection based solely on an untrusted four-byte length field, and concurrent connections multiply the allocation pressure until host memory is exhausted. No public exploit code has been identified at time of analysis, though the upstream patch commit fully discloses the trigger mechanism; the fix is available in the vendor-released 1.4.7 build.
Missing authorization checks across four methods in TarsWeb's PatchController allow any authenticated account - regardless of its assigned application scope - to deploy arbitrary packages to any server managed by the console, retrieve or delete packages belonging to other applications, and alter default deployment configurations system-wide. Affected versions span TarsWeb through at least v3.0.16 as confirmed by the vulnerable source reference at that tag. No public exploit code has been identified at time of analysis, but the vulnerability is straightforwardly exploitable by any user with a valid TarsWeb account, making it a high-priority internal threat in multi-tenant or shared TarsWeb installations.
Race conditions in the s390/vfio_ccw subsystem of the Linux kernel arise from an insufficiently scoped io_mutex that serialized io_regions but left other I/O operations unserialized, creating exploitable synchronization windows. Local low-privilege users inside guest VMs on IBM s390/zSeries hosts running vfio_ccw can exploit these races to achieve scope-changed privilege escalation into the host kernel, with full confidentiality, integrity, and availability impact. No public exploit or CISA KEV listing has been identified; vendor patches are confirmed across stable branches 6.6.153, 6.12.105, 6.18.46, 7.1.10, and 7.2.
Remote code execution via symlink following in Plesk's Site Import and Migrator extensions allows network-accessible, low-privilege authenticated users to execute arbitrary code as root on the hosting server. Both webpros:plesk_migrator and webpros:plesk_site_import are affected across all versions per CPE wildcard data, with the flaw rooted in CWE-59 improper link resolution during privileged file operations. No public exploit or active exploitation is confirmed at time of analysis, but the low-complexity, network-accessible attack path and root-level impact make this a high-priority remediation target for Plesk hosting environments.
CPU exhaustion via algorithmic complexity in Apache APISIX 3.17.0 allows unauthenticated remote attackers to pin a gateway worker process at 100% CPU using a single small HTTP request targeting routes protected by the graphql-limit-count plugin. The CVSS 4.0 score of 8.7 reflects the high availability impact and trivial exploitation requirements - no authentication, no complexity, no user interaction. No public exploit code or CISA KEV listing has been identified at time of analysis, though the minimal attack payload described makes this class of vulnerability straightforward to weaponize once the affected plugin is known to be in use.
Catastrophic regex backtracking in NLTK before 3.10.0 allows unauthenticated remote attackers to saturate CPU and deny service to all users sharing the Python process by supplying crafted patterns to the Text.findall() or TokenSearcher.findall() methods. Any Python application that exposes NLTK regex search functionality to user-controlled input is affected across all platforms. No public exploit has been identified at time of analysis, but the vulnerability class (ReDoS) is well-understood and trivial to weaponize once the targeted endpoint is known.
Authorization bypass in SeaweedFS versions 4.39 and earlier allows authenticated federated users to assume IAM roles they are explicitly denied through the standard STS path. The S3 API's direct bearer token authentication path validates the OIDC JWT signature but skips trust policy enforcement, which the STS AssumeRoleWithWebIdentity path correctly applies. A federated user with a valid OIDC token can present it directly to the S3 API and obtain the mapped role's full S3 permissions - including object read, write, and delete - even when the role's trust policy explicitly rejects their identity provider. Version 4.40 patches the issue; no public exploit code has been identified at time of analysis.
Stored cross-site scripting in Penpot's comments panel allows any authenticated team member to inject and persistently store arbitrary HTML or JavaScript that executes in collaborators' browsers upon viewing the comments panel. Affected are all Penpot instances running version 2.14.3 and earlier. Because the attack is passive - victims trigger payload execution merely by opening the comments panel as part of normal collaboration - an attacker can silently steal session cookies, hijack accounts, and access victims' files and projects. No public exploit identified at time of analysis; however, the attack mechanism is technically trivial and the fix commit is publicly visible.
Unauthorized device control of TP-Link Kasa smart home devices is achievable by any attacker with local network adjacency, due to missing required cryptographic protections (CWE-325) in the local LAN communication protocol. At least 20 distinct Kasa product models are affected, spanning smart plugs, power strips, outdoor outlets, and in-wall switches. Exploitation enables interception, replay, and forgery of device control messages with no authentication required, allowing complete operational manipulation or denial-of-service of affected hardware.
Arbitrary file upload leading to remote code execution affects CAYIN Technology's CMS-WS, CMS-SE, and SMP series digital signage management platforms. Privileged remote attackers can upload web shells through the product's file upload functionality and then execute arbitrary commands on the underlying server. No public exploit code has been identified at time of analysis, and SSVC assessment confirms no active exploitation; however, the technical impact is rated total across confidentiality, integrity, and availability.
Server-Side Request Forgery in mcp-fetch through version 1.6.3 allows unauthenticated attackers who can influence model tool arguments to bypass the SSRF guard entirely and reach loopback, private, and link-local network endpoints including cloud instance metadata services. The bypass exploits a parsing gap: the guard tests the bracketed IPv6 literal string such as [::1] against Node.js's net.isIP(), which returns zero for bracketed input, causing the private-address branch to be skipped; the HTTP client later strips the brackets and connects normally. A secondary flaw in isPrivateIPv6 - no handling of the ::ffff: IPv4-mapped prefix - provides an independent bypass path for IPv4 targets expressed in mapped form. No public exploit code or CISA KEV listing exists at time of analysis, though a public issue report documenting the flaw is open on the upstream repository.
Cross-tenant insecure direct object reference in Plesk's database management interface allows any authenticated hosting panel customer to read and overwrite databases belonging to other customers on the same server, affecting versions 18.0.79.7 and earlier and 18.0.80 through 18.0.80.3. The CVSS 4.0 score of 8.6 reflects high confidentiality and integrity impact with low attack complexity, consistent with the description: a valid tenant account and knowledge of another tenant's database identifier are all that is required. No public exploit code or CISA KEV listing has been identified at time of analysis, but the multi-tenant hosting context amplifies real-world impact significantly.
Insecure Direct Object Reference in IDURAR ERP CRM through v4.1.1 allows any authenticated administrator to overwrite the password of any other administrator account by supplying an arbitrary account identifier in the URL path of the password-update endpoint. The backend handler resolves the target account from the caller-controlled path parameter rather than the session token, and the two are never compared, enabling full account takeover of peer administrators. No public exploit has been identified at time of analysis, but the logic flaw is mechanically straightforward for any holder of a valid administrator token.
Hard-coded HMAC credential exposure in Resamania's Virtuagym mobile application allows a low-privileged attacker to forge unlimited physical access QR codes, bypassing facility entry controls permanently. The static HMAC key - derived from the badge_number parameter - is retrievable via an authenticated API call, and the QR code generation logic can be extracted by reverse engineering the unobfuscated APK. Generated codes remain valid indefinitely regardless of subsequent password changes or session logouts, meaning revocation of legitimate access does not invalidate attacker-forged credentials. No public exploit has been identified at time of analysis, though the low technical barrier significantly elevates practical exploitability.
Authorization state-confusion in Simple Machines Forum (SMF) through version 2.1.7 enables any authenticated low-privileged user to escalate privileges to administrator without possessing admin credentials. The vulnerability stems from a mismatch between Profile::$member and User::$me->is_owner during sequential profile loading when multiple values are supplied for the user parameter, tricking the application into treating the attacker as the owner of an administrator profile and granting access to password-change functionality. No CISA KEV listing or confirmed public exploit code exists at time of analysis, but the CVSS 4.0 score of 8.6, low attack complexity, and minimal authentication barrier - any registered user qualifies - make this a critical priority for all SMF operators.
Code injection in whichllm's run and snippet CLI commands allows a network-positioned attacker who controls a HuggingFace repository to achieve full arbitrary code execution on any victim's machine by publishing a repository containing a crafted GGUF filename with Python metacharacters. The script generation function in cli.py interpolates the HuggingFace Hub API siblings rfilename field directly into dynamically generated Python source without escaping, enabling a string-literal breakout that fires injected code before any model download occurs. No active exploitation is confirmed in CISA KEV and no public proof-of-concept is referenced; vendor-released patch v0.5.16 is available and directly remediates the root cause.
Argument injection in bestzip, a Node.js npm library wrapping the system zip binary, enables arbitrary shell command execution when attacker-controlled source paths are passed to its API. Because bestzip omits the POSIX '--' end-of-options delimiter when building the zip command line, any source path beginning with a hyphen is interpreted by zip as a flag rather than a filename - zip's built-in -T/-TT test-command feature then executes a caller-supplied command through a shell after archive creation. No public exploit code or CISA KEV listing has been identified at time of analysis; vendor-released patches exist as versions 2.2.6 and 3.0.2.
OAuth authorization code hijacking in Stalwart Mail Server through v0.16.19 enables full email account takeover when a victim authenticates via a crafted phishing link. The validation routine for OAuth redirect URIs in the default shipped configuration - where client authentication is disabled - returns success immediately without comparing the supplied redirect_uri against any registered client destination, allowing any attacker-controlled URI to receive a valid authorization code. The CVSS 4.0 score of 8.5 with high confidentiality and integrity impact reflects the severity of resulting mailbox compromise; no public exploit code has been identified at time of analysis, though the vulnerability is fully described in a public GitHub issue with source-level detail.
NTLM credential capture in Veeam ONE exposes the Reporter service account to any low-privileged authenticated user over the network, enabling theft of service account credentials without user interaction. The captured Net-NTLMv2 hash can be relayed or cracked offline to compromise other systems in the environment, reflected by the high subsequent-system impact scores (SC:H/SI:H/SA:H) in the CVSS 4.0 vector. No public exploit code or CISA KEV listing is confirmed at time of analysis, though the attack technique is well-understood and Veeam backup infrastructure is a high-value ransomware target.
JWT token disclosure in OpenMetadata's SAML and OIDC/OAuth2 authentication flows enables account takeover by exploiting an unvalidated open redirect that appends the victim's freshly issued JWT, email, and account name to an attacker-controlled URL. All 1.x releases are affected because neither SamlLoginServlet nor the OIDC/OAuth2 handler validates the caller-supplied redirect destination against any allowlist or registered callback set. An attacker who socially engineers a victim into clicking a crafted login URL can capture the full JWT upon successful authentication and immediately assume control of that account via the OpenMetadata API. No public exploit has been identified at time of analysis, and no CISA KEV listing is confirmed.
Stored XSS in LimeSurvey Community Edition 7.0.5 allows an authenticated user holding the global settings:read permission to plant a persistent JavaScript payload in the Survey Menu Entries administration page. The malicious value is written to the surveymenu_entries.data field and reflected unsanitized into a single-quoted HTML title attribute, creating a durable attack surface that fires against any higher-privileged administrator who subsequently browses that page. No public exploit or CISA KEV listing has been identified at time of analysis, but the stored nature of the vulnerability means a single write by a low-footprint attacker can target multiple privileged users over time.
Code injection through CorvusSKK's embedded Lua scripting engine permits arbitrary code execution on Windows systems running versions prior to 3.3.4. Vendor release notes for the fixed version explicitly confirm that dangerous Lua engine features were disabled to address this vulnerability (CWE-94). No public exploit code has been identified and CISA has not added this to the Known Exploited Vulnerabilities catalog, though CISA's SSVC framework rates the technical impact as total, reflecting full compromise of confidentiality, integrity, and availability on affected hosts.
Heap out-of-bounds write in the Linux kernel's XFS log recovery path allows an attacker supplying a crafted XFS filesystem image to corrupt adjacent kernel slab memory during mount-time log replay. The flaw resides in xlog_recover_do_reg_buffer(), where a memcpy() copying dirty buffer regions is bounded solely by an ASSERT() that compiles away on production kernels (CONFIG_XFS_DEBUG=n), leaving attacker-controlled offset and length values from the logged dirty bitmap completely unchecked against the buffer's actual allocated size. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code has been identified, though KASAN-confirmed slab-out-of-bounds writes demonstrate the primitive is real and reliable on unpatched kernels.