Stored Cross-Site Scripting in the Groundhogg - CRM, Newsletters, and Marketing Automation WordPress plugin before version 4.5.13 allows unauthenticated attackers to inject persistent malicious scripts through optional web form fields, which subsequently execute in the browsers of privileged administrative users. Successful exploitation can yield full administrative session compromise, unauthorized rogue account creation, or arbitrary site modification. A publicly available proof-of-concept is confirmed by WPScan; however, EPSS remains low at 0.17% (7th percentile), indicating limited observed mass exploitation despite that availability.
Stored Cross-Site Scripting in Customer Reviews for WooCommerce (all versions before 5.118.0) lets unauthenticated attackers inject persistent malicious scripts by submitting crafted review content through a vulnerable plugin endpoint, with the payload stored in the WordPress database. When an authenticated user - particularly a store administrator - views the affected review, the injected script executes in their browser context, enabling session hijacking, credential theft, or unauthorized administrative actions. A publicly available exploit exists per WPScan; EPSS sits at 0.17% (7th percentile), indicating limited observed mass exploitation despite POC availability, and the vulnerability is not currently in CISA KEV.
Stack-based buffer overflow in the D-Link DIR-825M 1.1.8 LTE Module Firmware Upgrade handler allows low-privileged remote attackers to achieve remote code execution by supplying an oversized fota_url argument to /boafrm/formLtefotaUpgradeFibocom. The CVSS 4.0 vector scores this at 8.6 with subsequent-system impact (SC:H/SI:H/SA:H), reflecting the potential to compromise the attached Fibocom LTE module as well as the primary router. A public proof-of-concept exploit is available on GitHub, significantly lowering the bar for exploitation; no public patch has been identified at time of analysis.
Memory corruption in TOTOLINK A720R router firmware 4.1.5cu.630_B20250509 allows authenticated remote attackers to trigger a buffer overflow in the MAC filtering subsystem, with potential for arbitrary code execution. The vulnerable path is the `setMacFilterRules` function within `cstecgi.cgi`, exploitable by sending a crafted `desc` argument over the network. A public proof-of-concept is available on GitHub; no CISA KEV listing exists at time of analysis, but the combination of network reachability and published exploit code meaningfully elevates real-world risk.
Reflected XSS in the geotargetingwp WordPress plugin before 3.5.6.2 enables unauthenticated attackers to inject arbitrary JavaScript into victims' browsers via unsanitized parameters echoed back in HTML-typed AJAX responses. Exploitation requires social engineering to trick a target - ideally an authenticated WordPress administrator - into submitting a crafted request, after which the reflected payload executes in the victim's browser session. A publicly available proof-of-concept exists per WPScan; the vulnerability is not listed in CISA KEV, and EPSS sits at 0.17%, indicating limited observed exploitation to date.
Path traversal in Pake before 3.13.1 allows a malicious or compromised web page loaded inside any Pake-generated desktop app to write attacker-fetched content to arbitrary user-writable filesystem locations, including persistence directories. The `download_file` Tauri command accepted a JavaScript-supplied filename and joined it directly to the Downloads directory without stripping path separators or sanitizing sequences such as `../`, enabling writes to locations such as `~/Library/LaunchAgents/` on macOS, `~/.config/autostart/` on Linux, or the Windows Startup folder. Because the HTTP fetch is performed by the Rust backend rather than the sandboxed browser renderer, browser-level download restrictions do not apply. No public exploit is identified at time of analysis, though the attack primitive is straightforward given JFrog's public disclosure.
Arbitrary code execution is achievable in Readest versions prior to 0.11.16 by embedding a malicious EPUB file that bypasses the application's DOMPurify-based HTML sanitizer via a crafted srcdoc attribute on an iframe element. DOMPurify treats srcdoc as an opaque string and does not sanitize its contents, allowing a complete HTML document containing JavaScript to survive sanitization and execute inside an iframe configured with sandbox="allow-same-origin allow-scripts"; the executing script can then call parent.parent.__TAURI_INTERNALS__.invoke() to access the full Tauri IPC command surface and achieve OS-level arbitrary code execution. The attack requires only that a victim open a specially crafted EPUB file, and the payload can be rendered invisibly as a zero-size transparent iframe. No public exploit code has been identified at time of analysis; vendor-released patch version 0.11.16 is available.
Unauthenticated exposure of live TLS session keys in Keploy 3.1.0-3.6.25 allows any network-reachable attacker to decrypt recorded application TLS traffic by calling the agent control-plane's /agent/pcap/keylog endpoint, which streams NSS keylog lines without any authentication gate. The root cause is the agent HTTP server binding to 0.0.0.0 (all interfaces) rather than loopback, as confirmed by the patch commit diff. Additional endpoints /agent/stop and /agent/storemocks allow unauthenticated manipulation of test recording sessions. No public exploit code or CISA KEV listing has been identified at time of analysis, though exploitation requires only a standard HTTP client.
Path traversal in AJCloud's AJY IPC camera firmware (jdbhttpd web service, port 80) allows unauthenticated remote attackers to read arbitrary files with root privileges on devices running firmware prior to 01.10715.11.37. Sensitive data directly accessible includes cleartext RTSP credentials, Wi-Fi SSID and pre-shared key, device serial numbers, and cloud binding parameters, enabling material follow-on attacks beyond the device itself. No public exploit code has been identified at time of analysis, but the attack primitive requires no authentication and no special conditions beyond network reachability.
AshGraphql's Absinthe complexity calculator undercounts nested Relay connection and keyset pagination queries, allowing unauthenticated clients to bypass any configured `max_complexity` cap and force unbounded database reads. Versions 0.16.23 through 1.10.x expose this flaw whenever a schema uses `first`/`last`-based pagination: a single crafted query such as `posts(first: 500) { edges { node { comments(first: 500) { ... } } } }` scores near-zero in Absinthe's guard while materializing up to 250,000 records per request. No active exploitation is confirmed (no CISA KEV listing), but the attack requires no authentication and is trivially constructable from the public advisory description alone.
Blind SQL injection in Admidio before 5.0.12 allows unauthenticated remote attackers to extract full database contents - including password hashes and user credentials - via the `relation_type_list` parameter of `lists_show.php`. Authentication is circumvented by supplying a dummy UUID in the `role_list` parameter, requiring no valid session or credentials against a default installation. No public exploit code or CISA KEV entry has been identified at time of analysis, but the low-complexity, zero-authentication nature of this flaw makes exploitation straightforward once the attack pattern is known.
Server-side request forgery in jina-ai reader allows unauthenticated remote attackers to reach cloud metadata services and internal HTTP endpoints by supplying publicly resolvable hostnames that map to private IP addresses. The private-address guard - intended to block RFC 1918 and metadata service IPs - is only enforced when the service runs inside Google Cloud, leaving all other deployment environments (AWS, Azure, on-premises) completely unprotected by this control. Successful exploitation in cloud-hosted deployments can yield instance metadata including IAM credentials and access tokens. No public exploit code has been identified at time of analysis, and this CVE is not currently listed in CISA KEV.
Credential exfiltration in NextChat 2.15.8-2.16.1 allows unauthenticated network attackers to steal the server's OpenAI API key by exploiting flawed URL validation in the proxy endpoint. The x-base-url header is checked using substring matching rather than hostname parsing, so any URL containing the string 'api.openai.com' - including attacker-controlled domains like 'evil.attacker.com/api.openai.com' - passes validation and causes NextChat to forward the OpenAI API key in the Authorization header to the attacker's server. No public exploit identified at time of analysis, though a GitHub issue documenting the flaw is publicly accessible.
Unauthenticated information disclosure in Admidio before 5.0.12 exposes private forum and announcement content through unprotected RSS feed endpoints. Remote attackers with no credentials can retrieve full post text, titles, author names, and timestamps from modules explicitly configured as login-only, bypassing the intended access restriction entirely. No public exploit code has been identified and the CVE is not in CISA KEV, but the attack requires nothing more than a standard HTTP GET request, making it trivially executable against any reachable instance.
Stack-based buffer overflow in D-Link DIR-825M firmware 1.1.8 enables remote code execution via the web management interface's disk formatting endpoint. The `partition` argument to the `sub_46725C` function at `/boafrm/formDiskFormat` is not bounds-checked (CWE-119), allowing a low-privileged authenticated attacker to overwrite the stack and achieve arbitrary code execution on the router. A public proof-of-concept exploit exists, substantially elevating practical risk; no CISA KEV listing has been confirmed at time of analysis.
Rate-limiting bypass in WWBN AVideo (through commit e01e41ecc) allows unauthenticated remote attackers to conduct unlimited brute-force attacks against login.json.php and 13 other protected endpoints by exploiting a logic flaw in enforceRateLimit(). The function relies on ObjectYPT::setCacheGlobal to persist per-client attempt counters, but silently discards those writes whenever isBot() classifies the client as a bot - which occurs by default for any request omitting a User-Agent header or using agent strings matching 'curl', 'bot', 'crawler', or 'spider'. No active exploitation has been confirmed at time of analysis, but the trivial bypass mechanism makes this immediately usable for credential stuffing without any specialized tooling.
OS command injection in Qubes OS (qubes-core-dom0-linux before 4.3.22) allows an attacker who controls any qube to execute arbitrary commands in dom0 - the privileged hypervisor control domain - when a dom0 operator runs qvm-copy-to-vm targeting that attacker-controlled qube. The root cause (CWE-78) is qfile-dom0-agent.c passing unsanitized, attacker-crafted error messages to the C system() function, where embedded shell metacharacters are interpreted as commands in the dom0 shell context. No public exploit or CISA KEV listing has been identified; however, successful exploitation yields complete Qubes OS compromise because dom0 governs all other virtual machines on the system.
Authentication bypass in oidcc (Erlang/Elixir OpenID Connect library) versions 3.2.0-beta.1 through before 3.9.0 allows unauthenticated attackers to impersonate arbitrary users by presenting a JWE-encrypted ID token or JARM response that wraps unsigned claims, which the library incorrectly accepted as fully validated. The relying party's public encryption key - typically published at a well-known JWKS endpoint - is all an attacker needs to forge tokens with arbitrary sub, iss, and aud values, bypassing provider signing-key possession entirely. No public exploit has been identified at time of analysis, and this CVE is not listed in CISA KEV; however, the impact for affected deployments using encrypted ID tokens or JARM is complete authentication bypass.
Per-file size and file-count upload limit enforcement in Apache Wicket 8.x through 10.x can be bypassed when a co-deployed servlet component pre-consumes the multipart request body before Wicket processes it. Affected deployments fall back to HttpServletRequest#getParts(), which silently skips Wicket's configured Form#setFileMaxSize and Form#setFileCountMax constraints, allowing remote unauthenticated submitters to upload files larger or more numerous than the application intends to permit. Parts omitting a Content-Type header are additionally loaded entirely into JVM heap during parsing, creating a secondary denial-of-service path limited only by external container allocation bounds. No public exploit or CISA KEV listing exists; EPSS stands at 0.20% (10th percentile), consistent with a conditional, architecturally specific flaw.
Silent schema cross-contamination in ash_postgres multi-tenancy allows a low-privileged user who can trigger a tenant rename to gain unauthorized read and write access to a different tenant's PostgreSQL schema. Affected versions span 0.25.0 through 2.13.0 of the ash-project/ash_postgres Elixir library. When PostgreSQL rejects the ALTER SCHEMA rename due to a name collision, the library silently reports success, causing the tenant metadata row to be committed pointing at the victim's live schema - routing all subsequent reads and writes for the attacker's tenant against the victim's data. No public exploit code or CISA KEV listing has been identified at time of analysis.
Cross-tenant data disclosure in ash_graphql affects authenticated subscribers in multi-tenant deployments running versions 1.4.0 through 1.10.x. The subscription resolver's in-memory authorization fast path evaluates read policy filters without any tenant condition, allowing a subscriber scoped to tenant A to receive GraphQL subscription notifications carrying tenant B's records. The single-notification code path had no tenant guard at all, and the batched path checked tenant only on the list head, leaving all subsequent entries to authorize purely in memory without tenancy enforcement. No public exploit code exists and the vulnerability is not listed in CISA KEV, but the impact is high confidentiality loss for any multi-tenant SaaS product built on this stack.
Incorrect authorization in Frappe Framework development builds allows any authenticated low-privileged user holding print permission on a document to supply raw Jinja template strings to the render_jinja_template endpoint, bypassing the intended System Manager restriction. The template engine executes these strings server-side, enabling arbitrary SELECT queries across unrelated database tables - critically including extraction of password hashes from the __Auth table. No public exploit has been identified at the time of analysis, but the attack is mechanically straightforward for any user with a valid Frappe account and default print permissions, making credential theft the primary real-world risk.
SSRF filter bypass in WWBN AVideo exposes cloud metadata services and loopback interfaces to authenticated low-privilege attackers. The isSSRFSafeURL function fails to normalize IPv6 NAT64 addresses rendered in hexadecimal notation, allowing crafted URLs such as 64:ff9b::a9fe:a9fe to resolve to protected addresses like 169.254.169.254 while evading the SSRF blocklist. Exploitation could yield cloud instance credentials or access to internal services; no public exploit or KEV listing is confirmed at time of analysis.
Local privilege escalation in SiYuan's Windows NSIS installer affects versions 2.0.14 through 3.8.0, allowing a local attacker with write access to a directory to execute arbitrary code with elevated privileges by planting a malicious binary that the NSIS installer resolves ahead of System32 during an all-users installation. The root cause is electron-builder's preInit hook invoking system utilities such as TASKKILL by short name via nsExec::Exec, causing the installer's launch directory to take search-path precedence over System32 before the license page is even displayed. No public exploit code has been identified at time of analysis, though the binary-planting technique is well-documented in Windows installer security research.
Out-of-bounds read in Exiv2's CrwMap::decodeBasic() function affects versions prior to 0.28.9, impacting applications that use the library to parse Canon CRW image metadata. Classified as low severity by the Exiv2 maintainers, this flaw has only been reproduced using a dedicated fuzz target - the standard exiv2 command-line tool cannot trigger it under normal operation. No public exploit exists and no active exploitation has been identified, making real-world impact minimal despite the memory safety class of defect.