Cross-site scripting in the Drupal Screenshot contributed module allows a high-privileged authenticated attacker to inject malicious script content that executes in the browser context of other users who view the affected page. The scope-changing CVSS vector (S:C) confirms that the injected payload can compromise sessions or data belonging to users other than the attacker, enabling session hijacking, credential theft, or unauthorized actions on behalf of victims. No public exploit code has been identified at time of analysis, and no KEV listing is present.
Stored XSS in the Broken Link Checker WordPress plugin (versions ≤ 2.4.13) allows unauthenticated attackers to inject persistent JavaScript into the WordPress admin link log via a multi-hop redirect-based payload delivery mechanism. The plugin's HTTP checker follows attacker-controlled redirects and stores the redirect destination URL verbatim in the link log without sanitization; the admin table printer then renders this unsanitized content to any administrator who views the link log. No public exploit has been identified at time of analysis, and a vendor-released patch is confirmed available as version 2.4.13.1.
Shell command injection in Nuclio's Dashboard build pipeline (versions 1.6.19–1.17.1) allows an authenticated user with function-create permission to execute arbitrary commands inside the Dashboard container by embedding shell metacharacters in the `spec.build.tempDir` field. The post-exploitation impact is substantially amplified because the Dashboard container's Kubernetes service account holds wildcard access to Secrets, Pods, Jobs, and Deployments within its namespace, enabling full namespace-level privilege escalation from a single low-privileged API call. No public exploit identified at time of analysis, but the fix commit (PR #4190) includes working proof-of-concept test cases demonstrating semicolon, pipe, subshell, and backtick injection payloads.
Tencent AI-Infra-Guard's skill-scan component allows scanner bypass via hardcoded exclusion of Python compiled bytecode, enabling malicious skill packages to pass a false SAFE verdict and execute arbitrary code on operator hosts. Attackers supply a skill with benign `.py` source decoys alongside malicious `.pyc/.pyo/.pyd` bytecode in `__pycache__` directories; because three separate scanning surfaces in versions through v4.6.0 unconditionally skip these artifacts, the auditing LLM never sees the malicious payload. CPython's PEP 552 UNCHECKED_HASH behavior executes `.pyc` at import time regardless of source presence, triggering code execution when an operator installs the skill. No public exploit identified at time of analysis, but the upstream fix commit and GitHub Issue #531 confirm the flaw.
GraphQL mutation resolvers in Craft CMS allow authenticated users to create, modify, or delete content entries in sites they are not authorized to access. The `saveEntry` and `deleteEntry` resolvers read `siteId` directly from raw `$arguments` without invoking `ArgumentManager::prepareArguments()`, which is the function that enforces per-site scope filtering via `array_intersect`. Because query resolvers invoke this guard but mutation resolvers do not, the multi-site authorization boundary is structurally absent for all write operations. Vendor-released patch is available in version 5.10.13, and no public exploit has been identified at time of analysis.
Python bytecode scanning gap in agentverus-scanner allows supply-chain attackers to smuggle malicious __pycache__ .pyc files past the tool's static and semantic analysis engines, which only inspect source .py files in companion code directories. Packages carrying malicious bytecode alongside benign source receive a CERTIFIED verdict with elevated trust scores, causing downstream environments that trust the scanner to silently execute attacker-controlled code on import. No public exploit code has been identified at time of analysis, but the VulnCheck advisory and GitHub issue #27 document the bypass technique in sufficient detail for reproduction.
Heap buffer overflow in PX4 Autopilot's sd_bench command allows adjacent unauthenticated attackers to crash the flight controller or potentially execute arbitrary code by supplying a block size parameter smaller than four bytes. The overflow occurs because a fixed four-byte block number is written into a heap allocation sized by the user-supplied block_size value - when that value is 1, 2, or 3 bytes, the write extends beyond the allocated region. No active exploitation has been confirmed (not in CISA KEV) and no EPSS score is available, but the adjacent network attack vector means exploitation is constrained to operators with direct access to the drone's MAVLink control network.
Path traversal via Stapler data binding in Jenkins ThinBackup Plugin 2.1.4 and earlier allows authenticated low-privileged attackers to overwrite the plugin's backup configuration, redirecting backup output to an attacker-specified directory and injecting arbitrary Jenkins controller filesystem files into backup archives. The primary risk is exfiltration of high-value Jenkins controller secrets - credentials.xml, SSH keys, API tokens, master.key - via the backup mechanism. SSVC rates exploitation as none with no public exploit identified; however, the C:H impact makes this a significant post-initial-access escalation path on CI/CD infrastructure.
BEAM atom table exhaustion in Boruta Server prior to 0.10.0 allows any authenticated end user to crash the entire OAuth 2.0/OpenID Connect umbrella application by repeatedly submitting PUT /users/settings requests with arbitrary novel body keys. The UserSettingsController calls String.to_atom/1 on all user-supplied map keys before any validation, permanently interning them in the Erlang VM's global atom table (hard cap: 1,048,576 entries). Once exhausted, the BEAM runtime aborts with 'no more index entries in atom_tab', taking down the auth, admin, and gateway components simultaneously. No public exploit identified at time of analysis, and the issue has been patched in version 0.10.0.
Incorrect authorization in Sonatype Nexus Repository 3 allows a low-privileged user holding the `nexus:blobstores:create` permission to invoke two blobstore group management REST API endpoints that should instead require `nexus:blobstores:update`. By calling these endpoints, the user can convert any existing blobstore into a group blobstore - a structural configuration change - without administrator approval. No public exploit has been identified, but the issue is self-reported by Sonatype and a patch is available in version 3.96.0.
Missing authorization enforcement in Craft CMS's assets/move-asset endpoint allows authenticated low-privilege users to move assets into other users' folders and force-delete conflicting files by supplying the force=1 parameter. Versions 5.0.0 through 5.10.10 are affected; version 5.10.11 resolves the flaw. No public exploit code or active exploitation has been identified at this time, but the low attack complexity and absence of special prerequisites beyond a valid account make exploitation straightforward for any authenticated user.
Unauthenticated cross-site scripting in the Estatik real estate WordPress plugin affects all versions up to and including 4.3.4, allowing remote unauthenticated attackers to inject arbitrary JavaScript into pages viewed by other users. The CVSS scope-change flag (S:C) indicates the injected script can affect browser sessions beyond the vulnerable component itself - typically enabling session hijacking, credential theft, or unauthorized actions performed on behalf of logged-in administrators. No public exploit code or active exploitation via CISA KEV has been identified at time of analysis.
Reflected cross-site scripting in the Login With Ajax WordPress plugin (versions through 4.5.1) allows unauthenticated remote attackers to inject and execute arbitrary JavaScript in a victim's browser by tricking them into clicking a crafted URL. The scope change in the CVSS vector (S:C) reflects the XSS payload executing outside the origin context, enabling session theft, credential harvesting, or DOM manipulation against authenticated WordPress users. No public exploit code or active exploitation has been identified at time of analysis.
Cross-site request forgery in the Activity Log WordPress plugin (versions <= 2.13.1) allows unauthenticated remote attackers to perform unauthorized state-changing actions against the plugin by tricking an authenticated administrator into visiting a malicious page. The vulnerability stems from missing or insufficient nonce validation on plugin requests (CWE-352), and the changed scope (S:C) in the CVSS vector indicates the forged request can affect components beyond the plugin itself - typically the broader WordPress installation. No public exploit code or active exploitation has been identified at time of analysis.
Incomplete file coverage in claude-skill-antivirus v2.1.3 allows malicious Claude skill packages to bypass security scanning entirely when installed from local directories. The scanner reads only the SKILL.md manifest file, leaving Python source (.py), bytecode (.pyc), and all other executable artifacts in the scripts/ subdirectory completely unanalyzed. Skill authors can embed arbitrary malicious payloads in non-manifest files and receive a SAFE verdict with a perfect 100/100 trust score, providing users with false assurance before installation.
Unauthenticated cross-site scripting in the TrustedSite WordPress plugin (versions <=1.2.5) allows remote attackers without any credentials to inject arbitrary JavaScript into pages served to site visitors or administrators. The CVSS vector designates a scope change (S:C), meaning the injected script executes in the victim's browser context and can affect resources beyond the vulnerable WordPress installation itself - including session cookies and browser-stored credentials. No public exploit code or CISA KEV listing has been identified at time of analysis, but the unauthenticated entry point and low attack complexity make this a realistic risk on any unpatched deployment.
Reflected Cross-Site Scripting in the Interactive Geo Maps WordPress plugin (versions <= 1.6.30) allows unauthenticated remote attackers to inject and execute arbitrary JavaScript in a victim's browser by luring them to click a crafted URL. The vulnerability carries a CVSS 7.1 with scope change, meaning the injected script executes in the context of the victim's authenticated WordPress session rather than the plugin's own origin. No public exploit or active CISA KEV listing has been identified at time of analysis, though Patchstack has published a vulnerability entry.
Unauthenticated stored or reflected Cross-Site Scripting in the MP3 Audio Player for Music, Radio & Podcast by Sonaar WordPress plugin (versions <= 5.13.1) allows remote attackers to inject arbitrary JavaScript that executes in a victim's browser when they visit an affected page. The CVSS vector (PR:N, S:C) confirms exploitation requires no authentication and crosses into the browser security context, making this a meaningful risk on any WordPress site running the affected plugin. No public exploit code or CISA KEV listing has been identified at time of analysis, though Patchstack has documented the issue.
Unauthenticated cross-site scripting in the Upsell Order Bump Offer for WooCommerce plugin (WP Swings) allows remote attackers to inject malicious scripts into victim browsers by tricking authenticated users into visiting a crafted URL. All versions through 3.1.5 are confirmed affected per CPE data published by Patchstack. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Missing authorization in Craft CMS 5.0.0-RC1 through 5.10.10 allows an authenticated low-privilege author to overwrite another user's asset files in shared folders. The flaw in AssetsController::actionReplaceFile occurs because the target asset is resolved by folder and filename after the replacePeerFiles permission check has already executed - omitting the assetId parameter in the request causes the application to silently bypass the peer-replacement gate. The vendor released a fix in version 5.10.11; no public exploit code has been identified at time of analysis.
Craft CMS versions 5.0.0-RC1 through 5.10.10 allow an authenticated low-privileged contributor to permanently delete canonical entry content by exploiting a broken authorization chain in ElementsController::actionDeleteForSite(). The method authorizes deletion against the user's provisional draft rather than the canonical element, then propagates the destructive action to the canonical record without re-verifying deleteEntriesForSite permission. Deleted content bypasses the recycle bin and is unrecoverable, making this an integrity-destroying flaw despite its mid-range CVSS score. No public exploit code is identified at time of analysis.
Symlink traversal in util-linux's X-mount.subdir mount option allows a local unprivileged user with an fstab-authorized entry to redirect mount resolution to arbitrary host paths, achieving privilege escalation or container escape on Linux 6.15+ kernels. The root cause is that AT_SYMLINK_NOFOLLOW, passed to open_tree() in the detached-tree fast path, only blocks final-component symlinks - not intermediate path components - leaving an attacker who can plant a symlink in a middle directory able to substitute the intended subdirectory with any host path. Affected platforms include Red Hat Enterprise Linux 7-10, Red Hat Hardened Images, and Red Hat OpenShift Container Platform 4; no public exploit has been identified at time of analysis.