Business logic manipulation in HKUDS AI-Trader's unauthenticated selfRegister API endpoint allows remote attackers to supply an arbitrary initial_balance value, inflating their simulated starting cash in the trading competition platform. Critically, the description confirms that profit_percent_for_display() and challenge scoring's return_pct both normalize against the inflated starting capital, making percentage-based returns immune; exploitation achieves only cosmetic inflation of absolute cash and equity leaderboard columns, not artificial percent-return gains. A public proof-of-concept exploit exists per a GitHub security advisory and VulDB entry 398295, though no active exploitation (KEV) has been identified.
Authenticated OS command injection in CRMEB up to version 6.0.0 allows a backend administrator to execute arbitrary operating system commands by submitting malicious PHP code through the Custom Scheduled Task Feature's customCode parameter, which is passed directly to PHP's eval() function at /adminapi/system/crontab/save. The vendor characterizes this as intentional debug-only functionality, but the isSafePhpCode blacklist filter provides no meaningful containment against determined abuse. A public proof-of-concept exploit is available on GitHub, lowering the barrier to exploitation for any attacker who has obtained admin credentials.
Uncontrolled resource consumption in 2FastLabs agent-squad up to version 1.1.4 allows a low-privileged remote attacker to degrade or deny service by manipulating the streaming agent response workflow through the `AgentSquad.routeRequest` function in `orchestrator.ts`. A public proof-of-concept exploit is available on GitHub, and the project maintainers had not responded to the disclosure at time of analysis, meaning no patch exists. The impact is limited to availability - no confidentiality or integrity compromise is indicated.
Cross-site scripting in Dify 1.13.0 allows unauthenticated remote attackers to inject arbitrary client-side script via the redirect_url argument processed by the router.replace function in the Splash Layout component. Exploitation requires a single user interaction - the victim must follow a crafted link - but no account or prior access to the Dify instance is required. A public proof-of-concept exploit was disclosed on GitHub Gist on or around 2026-07-05; the vendor did not respond to the coordinated disclosure, and no confirmed patch is available at time of analysis.
Cross-site scripting in Dify 1.13.0's WebApp Sign-In component allows remote attackers to inject malicious JavaScript by manipulating the redirect_url parameter consumed by the router.replace() function. The attack requires passive victim interaction with a crafted sign-in URL and low attacker privileges, limiting the immediate impact to integrity modification within the browser context. A public proof-of-concept exploit exists, and the vendor did not respond to coordinated disclosure, leaving no official patch available at time of analysis.
Reflected cross-site scripting in itsourcecode Online Medicine Delivery System 1.0 allows an authenticated remote attacker to inject and execute arbitrary JavaScript in a victim's browser by manipulating the `location` parameter of the `/index.php?q=orderdetails` endpoint. The attacker must induce a logged-in user to follow a crafted URL, at which point the unsanitized parameter value is reflected directly into the page response. A public proof-of-concept writeup on GitHub confirms exploitability; no KEV designation applies.
Out-of-bounds memory read in Google Chrome's CrashReporting component (all versions prior to 152.0.7977.82) allows an attacker who has already compromised the renderer process to read memory beyond sandbox boundaries via a crafted HTML page, leaking limited cross-process memory contents. The exploitation chain is constrained by a hard prerequisite - renderer compromise must precede this step - placing the flaw in a post-exploitation context rather than as a standalone initial access vector. The vendor patch is available in stable channel 152.0.7977.82, and SSVC assessment confirms no known active exploitation at time of analysis.
Stack-based buffer overflow in OpenVPN's Windows service component (openvpnserv) affects versions 2.5.0 through 2.7.6, requiring high attack complexity and passive user interaction to trigger. The flaw produces limited integrity and availability impact on the vulnerable Windows system and marginally on downstream systems in the VPN path. Fixed in v2.7.7, released on GitHub and announced via the OpenVPN community security page, alongside several other Windows-specific CVEs addressed in the same release cycle. No public exploit or active exploitation has been identified at time of analysis.
Unrestricted file upload in itsourcecode Online Medicine Delivery System 1.0 allows an authenticated customer to upload arbitrary file types through the photo parameter of the Customer Controller endpoint (/customer/controller.php?action=photos), targeting the doupdateimage function. The absence of server-side file-type validation means a low-privileged customer account can upload PHP webshells or other malicious files, enabling remote code execution on the server. A public exploit writeup is available on GitHub demonstrating the RCE chain, making this immediately actionable by opportunistic attackers.
Divide-by-zero crash in Xpdf 4.06 and earlier is triggered when the PDF rendering engine encounters a Type 3 font glyph whose declared height is zero, causing an abnormal application termination. The CVSS 4.0 score of 2.1, with all confidentiality and integrity metrics at N and only VA:L, confirms this is a pure availability impact - no memory disclosure or code execution is achievable through this path. No public exploit code has been identified and the vulnerability has not been added to the CISA KEV catalog at time of analysis.
OpenVPN on Windows (versions 2.0.0-2.6.22 and 2.7_alpha1-2.7.6) creates the --service exit event and netsh.exe guard semaphore with a NULL Discretionary Access Control List, granting any local process unrestricted access to these named synchronization objects. A low-privileged local user can acquire and hold the world-accessible semaphore indefinitely or signal the exit event, disrupting or terminating all other users' OpenVPN sessions on the same Windows host. The issue is Windows-only, affects only deployments not using the Interactive Service (iservice), and has been resolved in v2.7.7; no public exploit code has been identified.