Reflected cross-site scripting in SourceCodester Queue Management System 1.0 allows unauthenticated remote attackers to inject arbitrary JavaScript via the unvalidated `Name` parameter of `/api/add_customer.php`. The flaw (CWE-79) stems from PHP output rendered without encoding, enabling script execution in a victim's browser when a crafted URL is visited. No public KEV listing exists, but a proof-of-concept exploit is publicly available on GitHub.
Server-side request forgery in Forgejo up to 15.0.4 allows authenticated users to bypass the repository migration IP allowlist by manipulating `net.LookupIP` in the migration handler, causing the Forgejo server to issue requests to internal network resources that should be unreachable. The CVSS 4.0 vector confirms network-exploitable, low-privilege access with limited but real impact across confidentiality and integrity. Publicly available exploit code exists via Codeberg issue #13433, and the project maintainer has explicitly declined to backport the fix to v15 or v16, leaving those release lines permanently exposed absent a self-applied patch.
Improper authorization in sambitraj Student Management System allows authenticated low-privileged users (students) to access or tamper with other students' records by manipulating the `roll_no` parameter in `student_dashboard.php`. Confirmed by CPE `cpe:2.3:a:sambitraj:student_management_system:*:*:*:*:*:*:*:*`, all commits up to `56ba287f2e9031523ccb4244cb6e3fe530e4e5d5` are affected. A public proof-of-concept is available via a GitHub issue; the project has not responded to disclosure, leaving the flaw unpatched with no KEV listing.
Weak password recovery in Beetel 450TC3 router firmware 01.00.00_01 allows low-privileged authenticated attackers to exploit a flawed account recovery workflow over the network, potentially escalating privileges to administrative control of the device. A public proof-of-concept has been disclosed on GitHub, and the exploit reference explicitly describes authenticated privilege escalation as the realized impact. The vendor did not respond to coordinated disclosure, meaning no patch exists and no vendor-confirmed mitigations are available.
SQL injection in itsourcecode Sales and Inventory System 1.0 exposes the /pages/sup_searchfrm.php endpoint to database manipulation via the unsanitized ID parameter. Low-privileged authenticated attackers can remotely exploit this classic CWE-89 flaw to read, modify, or potentially delete backend database records. A public proof-of-concept exploit has been disclosed via GitHub; no active exploitation or CISA KEV listing has been identified at time of analysis.
SQL injection in itsourcecode Sales and Inventory System 1.0 exposes the `/pages/cust_searchfrm.php` customer search endpoint to database manipulation via an unsanitized `ID` parameter. Authenticated remote attackers with low-privilege access can alter backend SQL queries to read, modify, or delete customer and inventory records. A public proof-of-concept exploit is available, lowering the bar for targeted attacks despite the absence of a CISA KEV listing.
SQL injection in itsourcecode Sales and Inventory System 1.0 allows authenticated remote attackers to manipulate database queries via the ID parameter in /pages/pro_edit.php. The vulnerability stems from unsanitized user input passed directly to SQL queries (CWE-89), enabling read and limited write access to the underlying database. A public proof-of-concept exploit has been disclosed on GitHub; no active exploitation by KEV standards is confirmed at this time.
SQL injection in itsourcecode Sales and Inventory System 1.0 exposes the `/pages/emp_searchfrm.php` endpoint to authenticated remote attackers who can manipulate database queries by injecting malicious SQL through the unsanitized `ID` parameter. Low-privileged users with valid credentials can read, modify, or corrupt application database contents. A public proof-of-concept exploit has been published via GitHub, making active exploitation a credible near-term risk for any internet-exposed instance.
Stored cross-site scripting in the Beetel 450TC3 router's User Management component allows a low-privileged authenticated attacker to inject persistent malicious scripts via the Username field. Any administrator who subsequently views the User Management page triggers execution of the stored payload in their browser context. A public proof-of-concept exploit is available on GitHub; no vendor patch has been issued and the vendor did not respond to responsible disclosure.
Stored cross-site scripting in Coppermine Photo Gallery up to 1.6.28 allows an authenticated attacker to inject persistent malicious scripts via the Hidden Album Update Endpoint in db_input.php, which execute in the browsers of other users who view the affected album. The public proof-of-concept (stored_xss_album_desc.md on GitHub) confirms exploitation via the album description field. No active exploitation has been confirmed by CISA KEV, and the low CVSS 4.0 score of 2.0 reflects limited server-side impact, though browser-side session hijacking remains a realistic outcome.
Stored cross-site scripting in Coppermine Photo Gallery up to version 1.6.28 allows an authenticated user to inject malicious JavaScript into the Biography field of the edit_profile endpoint in profile.php, which executes in the browser of any user who subsequently views that profile. A public proof-of-concept exploit is available on GitHub (Leousum/VulnPoC), and the vendor has released version 1.6.29 to remediate the issue. No active exploitation is confirmed in the CISA KEV catalog, but the PoC lowers the practical barrier to abuse significantly.
Server-Side Request Forgery (SSRF) in Apache Shiro's Jakarta EE integration module (shiro-jakata-ee) enables a low-privileged authenticated user to steer server-initiated POST requests to an attacker-controlled host and transmit attacker-controlled data. Versions 2.0.0-alpha-0 through 3.0.0 of the shiro-jakata-ee artifact are affected, but only when the Jakarta EE integration module is deployed - the 1.x line and non-Jakarta-EE deployments are not vulnerable. No public exploit has been identified at time of analysis, and vendor-released patch 3.0.1 is available as of 2026-08-24.
Unsafe Erlang term deserialization in ash_cloak 0.1.0-0.3.x allows an attacker who can influence encrypted column bytes to crash the BEAM runtime node via unbounded atom table exhaustion or a decompression bomb. Applications configured with Cloak's unauthenticated AES.CTR cipher are the highest-risk targets: an authenticated application user who knows their own plaintext can XOR-derive the keystream and write a forged ciphertext of equal length without the encryption key, causing the deserialization to fire on any subsequent column read. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV, but the patch commit confirms two distinct, low-skill attack primitives against unpatched deployments.
Path traversal in SiYuan 3.8.0 allows an authenticated attacker to read arbitrary files within the workspace directory via the POST /api/template/render endpoint, including conf/conf.json, which contains the API token and cookie signing key. The RenderTemplate function enforces only a workspace-boundary check (util.IsAbsPathInWorkspace) but omits the sensitive-path exclusion (refuseToAccess() blocklist) applied by the file API, creating an inconsistency in access controls across API surfaces. The issue is fixed in v3.8.1; no public exploit identified at time of analysis.
AshOban versions 0.2.5 through 0.8.13 expose an authorization bypass and tenant isolation break in the build_trigger/3 function, allowing any user whose input reaches the :args option to retarget update or destroy background jobs at arbitrary records - including records belonging to other tenants. The root cause is an Elixir atom-vs-string key collision: trusted job fields are stored as atom keys, user-supplied :args arrive as string keys after JSON round-tripping, Map.merge sees no collision and both survive, and JSON serialization then keeps the last (string) key when the job is persisted, causing the worker to read attacker-controlled values. No public exploit has been identified at time of analysis, though the mechanism is straightforward and fully documented by the vendor advisory GHSA-gj9p-x393-rf9h.
Authorization policy bypass in ash_sql (versions 0.4.1 through 0.7.0) silently drops the caller-supplied `exists/2` predicate when a relationship combines a limit or `from_many?` declaration with a `parent(...)`-referencing filter or sort. Policy expressions such as `authorize_if expr(exists(memberships, user_id == ^actor(:id)))` degenerate to matching any actor that has any related row regardless of the actor-ID condition, enabling unauthorized access to data the policy was designed to protect. No public exploit code is known at time of analysis and no CISA KEV listing exists; a vendor-released patch is available in version 0.7.1.
Uncontrolled recursion in ash_oban's compile-time-generated Oban worker code enables unbounded heap growth and CPU exhaustion in the BEAM worker process when a trigger's on_error action deterministically raises on the job's final attempt. Affected versions span 0.8.0-rc.1 through 0.8.13 of the ash-project/ash_oban Elixir library. Any condition that causes the on_error action to fail repeatedly - a data-layer outage, a misconfigured action, or a record the action validates and rejects - loops handle_error/4 forever, growing the process heap without bound until the BEAM runtime kills the worker. No public exploit has been identified at time of analysis; a vendor-released patch is confirmed at 0.8.14.
Cleartext exposure of nested sensitive fields in Ash Paper Trail audit logs (versions 0.3.0-0.6.x) allows any principal with read access to the version resource table to recover credentials, tokens, or other sensitive values stored inside embedded resources, union types, or lists. The redaction logic in `maybe_redact_changes/3` and `AshPaperTrail.Resource.Changes.CreateNewVersion` only inspects top-level resource attributes for the `sensitive?` flag, never recursing into nested structures, so a parent attribute that is not itself marked sensitive silently passes its embedded sensitive children through to the version table in cleartext. No public exploit has been identified and the issue is not listed in CISA KEV; a vendor-released patch is available at version 0.7.0.
Cleartext storage of sensitive Ash resource attributes in AshPaperTrail versions 0.1.1 through 0.6.x allows any actor with read access to the generated version resource to recover plaintext values of fields marked `sensitive? true`. The library's `CreateVersionResource` transformer incorrectly derives the sensitivity flag for the `changes` map from the `ignore_attributes` exclusion list rather than from the actual tracked attributes, causing the map to always be declared `sensitive? false` and `public? true`, which bypasses Ash's built-in redaction and exposes sensitive values in API responses, logs, and inspect output. No public exploit is identified and no active exploitation is confirmed; a vendor patch was released in version 0.7.0.
Information disclosure in the InitialUEMessage Handler of Linux Foundation Magma 1.9.0 allows unauthenticated remote attackers to extract sensitive data by sending crafted UE attachment requests to the mobile core network. A proof-of-concept exploit has been publicly disclosed, elevating practical risk above theoretical concern despite the CVE's medium severity rating. The CVSS 4.0 vector confirms no integrity or availability impact - the exposure is limited to low-confidentiality data leakage - but the zero-authentication, network-accessible nature of the flaw broadens the attack surface for any operator with reachable core signaling interfaces.
Path traversal in Apache Wicket's package resource URL handling exposes files outside the intended package directory to unauthenticated remote attackers, including files under WEB-INF that servlet containers ordinarily protect from direct access. Affected are all releases from 8.0.0 through 8.18.0, 9.0.0 through 9.23.0, and 10.0.0 through 10.10.0. Under default configuration the readable file set is bounded by the SecurePackageResourceGuard's extension allowlist (excluding .xml, .properties, .class), but all configurations unconditionally expose a path-existence oracle usable for reconnaissance, and applications using looser guard configurations can disclose web.xml and other sensitive configuration files. No public exploit identified at time of analysis.
Reachable assertion (CWE-617) in Open5GS through 2.7.7 allows remote authenticated attackers to abort the SMF (Session Management Function) process by supplying an invalid ARP preemption capability or vulnerability enum value via the Nudm SDM interface, disrupting all active PDU sessions managed by that instance. The root cause is the use of ogs_assert() for enum validation in smf_nudm_sdm_handle_get() - when preemptCap or preemptVuln holds an unexpected value, the assertion fires unconditionally and kills the process. No public exploit code has been identified and the vulnerability is not listed in CISA KEV; vendor-confirmed fix is available in version 2.8.0.
Null pointer dereference in Open5GS versions up to 2.7.7 allows network-accessible low-privileged attackers to crash the AMF (Access and Mobility Management Function) by sending crafted SBI messages with missing required body fields to the N1/N2 Transfer Endpoint. The vulnerability exists across multiple code paths in src/amf/namf-handler.c, including UE context transfer, registration status update, and UE MM context list decoding, where pointers were dereferenced without null guards. Successful exploitation causes AMF process termination, denying 5G mobility and UE registration services to all subscribers managed by the affected AMF instance. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Buffer overflow in NASA Core Flight System (cFS) up to version 7.0.1 allows adjacent-network attackers to corrupt memory through the SBN TCP Module's OS_read function. The MsgSz argument read from incoming TCP messages is not bounds-checked before use, enabling a crafted packet to overflow an internal buffer. No vendor patch exists - NASA did not respond to the coordinated disclosure - and no public exploit or KEV listing has been identified at time of analysis.
Integer underflow in NASA cFS's cFE Software Bus module (versions up to 7.0.1) allows a network-reachable, low-privileged attacker to manipulate TotalMsgSize and HdrSize arguments in CFE_SB_GetUserDataLength, triggering a CWE-191 wrap-around that produces an incorrect message-length value. The resulting memory misread yields low-level confidentiality, integrity, and availability impacts on both the vulnerable system and downstream Software Bus consumers. No vendor patch exists - NASA did not respond to coordinated disclosure - and no public exploit or CISA KEV listing has been identified at time of analysis.
Insecure Direct Object Reference in Dolibarr's Users::getGroups REST API endpoint allows any authenticated user to read group memberships of arbitrary users across tenant boundaries without authorization. Versions 10.0.0 through 23.x omit the per-object access check in GET /users/{id}/groups, exposing group names, entity associations, and private notes to any API credential holder. Fixed in 24.0.0; no public exploit or CISA KEV listing identified at time of analysis.
Broken access control in Admidio's profile_function.php allows any authenticated low-privilege user to enumerate another user's future role memberships by directly invoking the reload_future_memberships endpoint with a known victim UUID. Affected are all Admidio installations running versions prior to 5.0.12. An attacker with a valid account can bypass profile-level authorization to harvest sensitive organizational membership planning data without elevated privileges; no public exploit code has been identified at time of analysis.
Cross-site request forgery in wger's gym password-reset endpoint allows a remote attacker to force an arbitrary member's password to be reset by tricking an authenticated trainer or admin into loading a malicious URL. The vulnerable `reset_user_password` view in `wger/gym/views/gym.py` performed its state-changing operation via HTTP GET, which Django's CSRF middleware does not protect by design. The upstream fix - commit 3c6ce4b7f3eeafeb35318c6c4e82b1a3fd28b314 - converts the action to a POST-based confirmation form with full CSRF token enforcement; no public exploit and no CISA KEV listing have been identified at time of analysis.
Reflected cross-site scripting in WWBN AVideo's url2Embed.json.php endpoint allows unauthenticated remote attackers to execute arbitrary JavaScript in a victim's browser session. The attack is distinctive because the malicious payload is delivered as an encrypted evideo parameter, enabling the crafted link to originate from the target site's own domain and bypass naive URL-reputation checks. Successful exploitation enables session cookie theft and CSRF token harvesting, facilitating account takeover. No public exploit or CISA KEV listing is identified at time of analysis.
Cross-site request forgery in WWBN AVideo's sendEmail.json.php endpoint enables network-based abuse of an authenticated administrator's session to dispatch arbitrary emails from the site's legitimate contact address. When an admin is tricked into visiting a malicious page while logged in, the attacker controls the email subject, body, and recipient list - and because the server sends the message itself, it passes SPF/DKIM/DMARC authentication, making it a viable phishing and brand impersonation vector. No public exploit has been identified at time of analysis; exploitation is constrained by the requirement for admin user interaction.
Heap-based buffer overflow in Open Asset Import Library (Assimp) through version 6.0.2 allows a local low-privilege attacker to corrupt heap memory by supplying a crafted MD5 mesh file. The root cause, confirmed by the patch diff, is that `MakeDataUnique()` pre-allocated only `faces × 3` vertex slots when the output can grow to `numOrigVerts + faces × 3` - meshes declaring more original vertices than face corners overflow the allocation. No public exploit exists and the vulnerability is absent from CISA KEV; impact is locally bounded with a CVSS 4.0 base score of 4.8.
Cross-site request forgery protection bypasses in Apache Wicket's ResourceIsolationRequestCycleListener allow network attackers to execute authenticated listener actions - link callbacks, form submits, behavior endpoints - on behalf of logged-in users across versions 9.1.0-9.23.0 and 10.0.0-10.10.0. The default FetchMetadataResourceIsolationPolicy incorrectly permits cross-site top-level GET navigations (exploitable because Wicket routes Link.onClick() and form callbacks through ordinary browser navigations) and unconditionally trusts Sec-Fetch-Site: same-site requests from sibling origins - both vectors deliver the victim's SameSite=Lax session cookie to the targeted listener. No public exploit has been identified at time of analysis; vendor-released patches are available in versions 9.24.0 and 10.11.0.
GraphQL subscription payloads carrying unauthorized record data leak to authenticated subscribers in ash_graphql 1.4.0-1.10.x due to a missing authorization filter in the batch-processing codepath of AshGraphql.Subscription.Batcher. When two or more subscription notifications arrive within the default one-second batching window, only the first is passed through the should_send?/1 authorization gate; all subsequent notifications in the same batch bypass that check entirely and are published to the subscriber's WebSocket connection. No public exploit has been identified at time of analysis, and a vendor-released patch is available in version 1.11.0.
Cross-session record leakage in ash_graphql's subscription batcher allows one subscriber's resolved GraphQL records to be delivered to a different subscriber's topic, potentially crossing tenant and actor boundaries. Versions 1.4.0 through 1.10.x are affected when the Batcher process falls back to inline `:backpressure_sync` or `:noproc` execution paths and a subscription resolver triggers a nested synchronous Ash notification in the same caller process. No public exploit has been identified at time of analysis, and a vendor-released patch is available in version 1.11.0.
Improper access control in SiteServer SSCMS 7.4.0's Agent Installation Workflow allows remote attackers to bypass security restrictions by manipulating the SecurityKey argument, potentially gaining unauthorized access to protected functionality. The CVSS 4.0 score of 2.3 reflects genuine exploitation difficulty - high attack complexity and required passive user interaction significantly limit opportunistic abuse - though the authentication bypass characterization indicates a security boundary violation is achievable under the right conditions. No patch is available; the project has not responded to responsible disclosure submitted via GitHub issue #3898, and no public exploit has been identified at this time.
Memory corruption in Open5GS versions up to 2.7.7 allows a low-privileged remote attacker to crash the Access and Mobility Management Function (AMF) by sending a crafted UE MM context transfer request with an oversized allowedNssai array. The vulnerable function amf_namf_comm_decode_ue_mm_context_list in src/amf/namf-handler.c lacked both null-pointer checks and array bounds enforcement on mmContextList[*].allowedNssai entries, relying instead on ogs_assert() which terminates the process rather than handling the error gracefully. No public exploit is confirmed in CISA KEV, but the CVSS 4.0 vector carries E:P indicating publicly disclosed exploit code exists.
Zip Slip-style path traversal in Admidio's photo ZIP download feature allows authenticated users who hold album-creation rights to embed directory traversal sequences in album names, which are then reflected verbatim as archive entry paths. When a recipient extracts the resulting ZIP, files may be written outside the intended target directory, providing a limited but real filesystem write primitive on the extracting machine. No public exploit code has been identified at time of analysis; the CVSS 4.0 base score of 2.1 reflects the multiple preconditions - authentication, user interaction, and high attack complexity - that constrain real-world exploitability.
Incorrect string trimming in ash_sql causes divergent behavior between SQL-layer and in-memory evaluation of the `string_trim/1` function, enabling users to pad string fields with tab, newline, carriage-return, or form-feed characters to bypass trimmed uniqueness or equality checks. All ash_sql versions from 0.1.0 up to (not including) 0.7.1 are affected wherever `string_trim/1` appears in Ash filters, validations, or identity constraints that are evaluated at the SQL layer. No public exploit has been identified and no active exploitation is confirmed; the overall risk is low (CVSS 4.0: 2.1), but the bypass can permit duplicate record creation or filter evasion in affected applications.
SQL injection in itsourcecode Sales and Inventory System 1.0 exposes the supplier edit endpoint `/pages/sup_edit.php` to authenticated remote attackers who can manipulate the `ID` parameter to interact with the underlying database. The vulnerability allows low-privileged authenticated users to read, modify, or potentially delete database records via crafted SQL payloads. A public exploit has been released (reflected in CVSS 4.0 E:P), though no active exploitation or CISA KEV listing has been identified; the realistic risk is bounded by the product's narrow deployment footprint as a student/demo PHP codebase.
JSON path injection in AshSqlite (0.1.2-rc.0 through 0.2.17) allows any attacker who can supply user-controlled input to a get_path/2 query segment to read nested JSON sub-fields that the application never intended to expose. The vulnerable AshSqlite.SqlImplementation code naively concatenates user-supplied segments with periods into a SQLite json_extract path, so a segment containing a dot (e.g., 'private.secret') descends two JSON levels instead of matching a single literal key. No public exploit has been identified and the vulnerability is absent from the CISA KEV catalog; a vendor patch is available targeting version 0.2.18.
SQL LIKE wildcard injection in ash_sql (Elixir, versions 0.1.1-rc.10 through 0.7.0) allows any user who can supply a search string to the contains/2, string_starts_with/2, or string_ends_with/2 filter functions to reintroduce live LIKE wildcards that the escape helper was intended to neutralize. The escape helper prefixes % and _ with backslash but never first escapes a backslash already present in user input, so the sequence \% survives escaping with its % intact as an unescaped wildcard, enabling attackers to widen query matches, evade negated filter guards, or crash individual queries with a trailing lone backslash. No public exploit has been identified at time of analysis, and a vendor-released fix is available in version 0.7.1.
Cubic-complexity denial of service in ash_paper_trail's full-diff list change builder allows any user permitted to invoke a paper-trailed Ash action with an accepted array attribute to exhaust backend CPU and memory. Versions 0.1.1 through 0.6.x are affected; the root cause is an O(n³) list accumulation pattern in `AshPaperTrail.ChangeBuilders.FullDiff.ListChange` where unbounded action input directly drives allocation. No public exploit has been identified and the issue is not in CISA KEV, but no rate-limiting or length check guards the vulnerable path, making the attack trivially reproducible by any user with action access.
Aggregate authorization bypass in ash_sql 0.1.0 through 0.7.0 allows a caller to receive aggregate data - counts, sums, or lists - computed over rows that a stricter actor- or tenant-scoped filter should have excluded. The root cause is a single-character logical operator error in AshSql.Aggregate.different_queries?/2 (AND instead of OR), causing same-named aggregates carrying different authorization filters to be treated as already-computed identical queries, returning the first-registered broader value. No public exploit has been identified at time of analysis, and the vendor-confirmed fix is available in ash_sql 0.7.1.
Cross-tenant aggregate data leakage in ash_sql affects Elixir applications using schema-based multitenancy with strategy(:context), covering versions 0.1.0 through 0.7.0. The AshSql.AggregateQuery.add_single_aggs/5 function discards the tenant schema prefix when rebuilding outer queries for distinct aggregates, causing aggregate computations to silently read the repository default schema instead of the tenant's isolated schema. An authenticated tenant user can thereby receive aggregate values - counts, sums, or other statistics - derived from another tenant's rows, breaching the core data isolation guarantee of the multitenant deployment. No public exploit has been identified and the issue is not listed in CISA KEV.
Plaintext values of encrypted fields in ash_cloak leak verbatim into application logs, error-tracker payloads, changeset inspection output, and telemetry when the source attribute is not explicitly declared sensitive. All ash_cloak versions 0.1.0 through 0.3.x for the Elixir/Ash Framework are affected; a patch is available in 0.4.0. No public exploit is identified at time of analysis.
Out-of-bounds read in Exiv2's RemoteIo::Impl::populateBlocks() function affects versions prior to 0.28.9, exploitable only when the tool is invoked against a remote URL rather than a local file. An attacker controlling a remote server can serve a crafted image to trigger the read when a user runs exiv2 against that URL, potentially causing information disclosure or a crash. No public exploit code or active exploitation has been identified; the vulnerability is rated low severity and fixed in the 0.28.9 release.
Out-of-bounds read in Exiv2's CrwMap::decodeBasic() function affects versions prior to 0.28.9, impacting applications that use the library to parse Canon CRW image metadata. Classified as low severity by the Exiv2 maintainers, this flaw has only been reproduced using a dedicated fuzz target - the standard exiv2 command-line tool cannot trigger it under normal operation. No public exploit exists and no active exploitation has been identified, making real-world impact minimal despite the memory safety class of defect.
Out-of-bounds write in Exiv2's RemoteIo::Impl::populateBlocks() affects all versions prior to 0.28.9, exploitable only when Exiv2 is invoked with a remote URL as input rather than a local file path. Memory corruption from the write could theoretically enable code execution in the Exiv2 process context if a user or automated pipeline fetches a specially crafted image from an attacker-controlled server. Fixed in the 0.28.9 release; no public exploit or KEV listing identified at time of analysis.