Missing authentication on the admin WebSocket endpoint in trape 1.0.0 and 2.0 exposes operator tracking sessions to unauthenticated remote attackers. The `join_room` function in `core/sockets.py` performs no credential check before admitting a caller to the admin room, meaning any network-reachable party can connect to the socket and observe victim tracking data intended solely for the trape operator. A public exploit exists via a GitHub issue report; the project maintainer has not responded to the disclosure.
Unauthenticated access to the Backend Conversation API in ramon-victor/freegpt-webui allows remote attackers to invoke the `_conversation` function without valid credentials by manipulating the `model` argument in HTTP requests to `server/backend.py`. The affected codebase is a rolling-release hobby project that has been abandoned by its maintainer, meaning no patch will be issued. A public proof-of-concept exploit exists on GitHub, lowering the bar for exploitation against any instance still running.
Missing authentication in freegpt-webui's ChatCompletion.create function (g4f/__init__.py, up to commit 098db3dfeb41555c2ca9269df0f13e10ec1c35dc) permits unauthenticated remote callers to invoke AI chat completion requests directly against the backend providers without credentials. A public proof-of-concept is available on GitHub. The product is abandoned and no longer maintained, meaning no vendor patch will be issued, and remediation requires decommissioning or layered compensating controls.
Authorization bypass in the light0011 CMS Chapter Controller (ChapterController.class.php) exposes chapter content to unauthenticated remote attackers through insecure direct object reference (IDOR). By manipulating the `content` argument in HTTP requests, an attacker can reference chapter objects they are not permitted to access, circumventing the controller's access control entirely. A public exploit was disclosed via GitHub issue #5; the maintainer has not yet responded to the responsible disclosure report.
Unthrottled resource allocation in freegpt-webui's getJailbreak function (server/backend.py) enables remote unauthenticated attackers to exhaust server resources via crafted Jailbreak Mode requests (CWE-770). The affected product is an unmaintained hobby GPT wrapper by ramon-victor, pinned to all commits through 098db3dfeb41555c2ca9269df0f13e10ec1c35dc with no patched release forthcoming. A public proof-of-concept exploit is available on GitHub, and no vendor fix will be issued as the maintainer has abandoned the project.
Authorization bypass via insecure direct object reference (IDOR) in jofpin trape 2.0 allows remote unauthenticated attackers to access or manipulate tracked-subject records by substituting arbitrary values for the vId/id parameters handled in core/user.py. The affected product is an open-source Python OSINT people-tracking framework; exploitation requires only network reachability to the trape instance with no credentials or user interaction. A public proof-of-concept exists via GitHub issue #407, and the vendor has not responded to the disclosure.
Server-side request forgery in light0011 CMS allows unauthenticated remote attackers to force the server to fetch arbitrary URLs by manipulating the `source[]` parameter in the bundled UEditor `catchimage` function at `Public/ueditor/php/controller.php`. Successful exploitation enables internal network reconnaissance, access to cloud metadata services (e.g., AWS IMDSv1), and pivoting to other HTTP endpoints not exposed externally. A public exploit exists via GitHub issue #6; the maintainer has not responded to disclosure and no patch has been released.
Unauthenticated SQL injection in code-projects Doctor Appointment System 1.0 exposes the `/patient/booking.php` endpoint to remote database manipulation via the unsanitized `doc_id` parameter. Attackers with network access can extract patient records, appointment data, and stored credentials, or modify database contents without any authentication. Public exploit code exists on GitHub, significantly lowering the bar for exploitation; no vendor patch has been identified at time of analysis.
SQL injection in code-projects Doctor Appointment System 1.0 permits unauthenticated remote attackers to manipulate backend database queries by supplying crafted input in the `firstname` parameter of `/contactus.php`. The flaw (CWE-89) stems from unsanitized user input concatenated directly into SQL statements, enabling data extraction or modification without any credentials. A public proof-of-concept exploit is available on GitHub, reducing the barrier for opportunistic attacks despite a moderate CVSS 4.0 score of 6.9.
SQL injection in code-projects Hospital Information System 1.0 allows unauthenticated remote attackers to manipulate database queries through the `ID` parameter of the `getSinglePresp` function in `includes/presp/PrespController.php`. A public exploit has been released via GitHub, lowering the barrier for opportunistic attacks. Successful exploitation could expose sensitive patient records and medical data stored in the backend database, or allow unauthorized data modification.
SQL injection in code-projects Hospital Information System 1.0 allows unauthenticated remote attackers to manipulate backend database queries by supplying a crafted value in the ID argument to the viewReq() function within viewReq.php. The attack requires no authentication or user interaction, and a proof-of-concept exploit is publicly available via a GitHub issue. No vendor patch has been identified at time of analysis, leaving deployments with no official remediation path.
SQL injection in code-projects Hospital Information System 1.0 allows unauthenticated remote attackers to manipulate database queries via the Search argument in the findBySearch() function of addReq.php. The CVSS 4.0 vector confirms network accessibility with no authentication, no complexity, and no user interaction required. Publicly available exploit code exists via a GitHub issue; no CISA KEV listing.
SQL injection in light0011 CMS exposes all deployments to unauthenticated remote database compromise through the ChapterModel::searchChapter function, where the `content` argument is passed unsanitized to the Query Builder in App/Home/Controller/ChapterController.class.php. Because the project uses no versioning, every deployed commit of this PHP CMS is affected with no vendor-patched baseline to target. A public proof-of-concept exploit is available via GitHub issue #7, and the project maintainer has not responded to disclosure, leaving no official remediation path.
Unauthenticated OS command injection in XING Inc.'s CPTrans-ME-X allows remote attackers to inject and execute arbitrary operating-system commands on the device without any credentials. The flaw (CWE-78) carries a CVSS 4.0 base score of 9.3 with full confidentiality, integrity, and availability impact, meaning a successful attacker gains complete control of the affected unit. No public exploit identified at time of analysis, and the device is not listed in CISA KEV.
Arbitrary file-write via path traversal in WPvivid - Backup, Migration & Staging WordPress plugin before 0.9.134 allows authenticated administrators to place files of permitted types at any writable server path, including locations outside the WordPress installation root. The vulnerability stems from unsanitized user-supplied filenames used directly in write-path construction (CWE-22), with scope change (S:C) confirmed by the vendor CVSS vector. A publicly available proof-of-concept exists, and a patched release (0.9.134) has been issued; no active exploitation (CISA KEV) has been reported at time of analysis.
Arbitrary file deletion in WPvivid - Backup, Migration & Staging WordPress plugin before 0.9.134 allows authenticated administrators to supply unsanitized path values to the plugin's file deletion routine, enabling deletion of files anywhere on the server filesystem including outside the web root. Exploitation requires WordPress administrator credentials but no other conditions, and a publicly available proof-of-concept has been published by WPScan. Patch version 0.9.134 is available from the vendor.
Missing authorization in SourceCodester Class and Exam Timetabling System 1.0 allows unauthenticated remote attackers to bypass access controls on the /admin/session.php endpoint by manipulating the ID parameter. The vulnerability, rooted in CWE-862, exposes administrative session logic to arbitrary external actors without requiring any credentials. A public proof-of-concept exploit has been released on GitHub, confirming active exploitability at low skill threshold.
Remote code execution in SonicWall Network Security Manager (NSM) On-Prem 4.3.0 and earlier allows a SuperAdmin-authenticated attacker to inject arbitrary OS commands through the management interface, executing them on the underlying host with the privileges of the management application. Because exploitation requires the highest-tier SuperAdmin role (CVSS PR:H), the real-world attack surface is narrower than the 9.1 score alone suggests. There is no public exploit identified at time of analysis and no KEV listing.
Unauthenticated remote method dispatch in the Aim 3.29.1 ML experiment-tracking server lets attackers reach the tracking RPC endpoint without any credentials and invoke arbitrary methods via an unguarded getattr call. Because there is no allowlist, an attacker can register a client, instantiate Repo resources, and call methods that read experiment data or delete runs; VulnCheck's advisory frames the same dispatch primitive as achieving full remote code execution. No public exploit is identified at time of analysis, though VulnCheck has published a detailed advisory describing the attack.
Arbitrary file read and write in excel-mcp-server 0.1.8 lets attackers escape the intended Excel workspace when the server runs in stdio mode with the EXCEL_FILES_PATH environment variable unset. Because path confinement is not enforced, unchecked absolute or traversal paths passed to the read and write tools reach any file the server process can access, enabling disclosure of secrets and overwrite of arbitrary files (CWE-22). Reported by VulnCheck; the issue is tracked upstream (issue #149) with no public exploit identified at time of analysis.
Authentication bypass in Traefik reverse proxy before v2.11.55 lets remote unauthenticated attackers defeat any route protected by the digestAuth middleware. The flaw stems from the middleware returning an empty secret for unknown usernames rather than rejecting them, so an attacker can craft a mathematically valid digest response from that empty secret and arbitrary credentials. Reported by VulnCheck with a fix in v2.11.55; no public exploit identified at time of analysis, though the trivial nature of the bypass makes weaponization straightforward.
Server-side request forgery and model spoofing in lm-sys FastChat let unauthenticated remote attackers register arbitrary workers via the controller's /register_worker endpoint, which performs no authentication. By registering a malicious worker address under a legitimate model's name, an attacker can silently intercept user prompts, uploaded images, and model responses, or coerce the controller into probing internal network ports across the worker mesh. No public exploit identified at time of analysis; the issue was reported by VulnCheck and CVSS 4.0 is scored 9.3.
Unauthenticated arbitrary file read and write in TEN Framework 0.11.71 lets remote attackers hit the TMAN Designer file-content API (POST/PUT to /api/designer/v1/file-content) with no credentials, reading any file the service can access and writing attacker-controlled content to arbitrary system paths. Because the write primitive can drop SSH authorized_keys, cron jobs, or executable graph files, it escalates directly to remote code execution. Reported by VulnCheck; no public exploit identified at time of analysis and it is not in CISA KEV.
Unauthenticated message injection and server-side request forgery in TeamWiseFlow xiaobei through 5.5.2 let remote attackers reach the agent pipeline without any credentials. The webhook endpoints implement neither authentication nor signature validation (CWE-306), so an attacker can POST crafted payloads to the /webhook_worktool handler to inject arbitrary messages, and abuse the handler's unvalidated media-URL fetching to make the server issue requests to internal services. No public exploit identified at time of analysis, but the flaw is remotely reachable against default deployments and was independently reported by VulnCheck.
Hard-coded credentials in Lightstar's SmartIT Desktop Manager allow unauthenticated remote attackers to authenticate with a fixed, built-in password and gain remote access to managed user hosts. Reported through TWCERT, the flaw affects all currently listed versions of the product with no version qualifier in the CPE. There is no public exploit identified at time of analysis and it is not in CISA KEV, but the trivial exploitation path (a static shared secret) makes weaponization straightforward once the credential is disclosed.
Credential disclosure in Lightstar's SmartIT Desktop Manager lets unauthenticated remote attackers extract the SSH service-account username and password for the SmartIT Agent directly from the shipped application source code (CWE-798). Because the same hard-coded SSH credentials are reused across deployments, recovering them once yields authenticated SSH access to managed agents, enabling remote command execution and full compromise of endpoints under management. No public exploit has been identified at time of analysis, but retrieval requires no more than reading the product's own code.
Unauthenticated device login in XING Inc.'s CPTrans-ME-X AV signal-transport appliance is possible via a hard-coded password (CWE-259): anyone who knows the built-in credential can authenticate over the network and gain full control of the device. The flaw was coordinated through JPCERT/CC (JVN JVN32505330) and carries a CVSS 4.0 base score of 9.3 with high confidentiality, integrity, and availability impact. No public exploit has been identified at time of analysis, and the product is niche, but the fixed credential makes exploitation trivial once the value is known.
Unauthenticated remote device takeover in XING (XING Inc./JOYSOUND) CPTrans-ME-X arises from a shipped default password (CWE-1393) that anyone aware of the credential can use to log in with full privileges. The flaw affects all firmware revisions of this Japanese commercial audio/video rack transmission accessory and grants complete control over confidentiality, integrity, and availability. No public exploit code has been identified, and it is not on CISA KEV, but the trivial nature of default-credential abuse makes exploitation straightforward once the credential is known.
reCAPTCHA v3 bot protection in the Grav Form plugin (getgrav/grav-plugin-form) 8.0.6 through 9.1.19 can be fully bypassed by an anonymous remote attacker who submits a token under the wrong field name. Because the plugin picks which reCAPTCHA validation branch to run based only on which response field key appears in the payload, sending a v3 token in the v2 field (g-recaptcha-response) forces the v2 code path, which never checks the risk score threshold or the expected action. There is publicly available advisory detail from VulnCheck but no public exploit identified at time of analysis and no evidence of active exploitation.
Client-side price manipulation in the E-cab Taxi Booking Manager for WooCommerce WordPress plugin (before 2.0.5) allows unauthenticated attackers to submit taxi booking orders at an arbitrary price, including zero, by supplying fabricated trip-distance and base-price values that the server accepts without validation. The plugin trusts the pricing parameters delivered in the booking request rather than computing cost authoritatively on the backend, constituting a classic business-logic bypass. A publicly available exploit exists per WPScan; no public exploitation tracking (KEV) is recorded, but the trivial exploitation requirements make this a meaningful financial risk for any operator running the affected plugin.
Remote code execution in Nango before 0.71.6 allows unauthenticated attackers to run arbitrary JavaScript inside the runner process by invoking the runner tRPC server's exposed 'start' procedure. The runner fails to enforce the RUNNER_SECRET_KEY environment variable, so any actor with network reach to the runner port can trigger code execution. Reported by VulnCheck; a vendor patch is available (v0.71.6) and publicly available exploit code exists via the VulnCheck advisory, though it is not listed in CISA KEV.
Unauthenticated log file exposure in WPFunnels WordPress plugin (versions 2.6.0 through <3.13.0) enables any remote visitor to retrieve customer order details and opt-in form submission data by directly requesting a predictable log file URL within the public uploads directory. The flaw affects e-commerce funnel operators who may store customer PII - names, emails, purchase data - in these logs, with potential GDPR/privacy regulatory consequences beyond the C:L CVSS rating suggests. A publicly available proof-of-concept exists; no public exploit or CISA KEV listing indicates active mass exploitation at time of analysis.
Unauthenticated information disclosure in the Content Views WordPress plugin before 4.5.1.2 allows any remote visitor to read the title and full body of non-public posts - including drafts, pending, private, and scheduled posts - when a site administrator has configured a view to include them. The root cause is a missing authorization check: the plugin never verifies whether the requesting user holds the WordPress capability required to read posts in restricted statuses before serving them in view responses. A publicly available proof-of-concept exists via WPScan; the vendor has released a patched version (4.5.1.2).
Unauthenticated information disclosure in the Xpro Addons - 140+ Widgets for Elementor WordPress plugin (versions before 1.7.8) exposes non-public WooCommerce product data - including titles, prices, SKUs, descriptions, and stock levels - to any visitor without authentication. The plugin renders product summaries via a widget endpoint without performing any post-status or capability check, meaning products in draft, pending, private, or scheduled states are fully retrievable by arbitrary external requesters. A publicly available exploit has been documented by WPScan, though no active exploitation has been confirmed by CISA KEV.
Unauthenticated email relay abuse in WPFunnels WordPress plugin versions 3.1.0 through 3.12.x allows any remote visitor to send emails from the affected site to arbitrary recipients with arbitrary subjects. The opt-in submission handler accepts notification recipients and email subject lines directly from HTTP request parameters without performing authorization checks or WordPress nonce validation, turning the site's trusted mail infrastructure into an open relay. A publicly available exploit exists via WPScan; vendor-released patch 3.13.0 closes the gap.
Price manipulation in WPFunnels WordPress plugin before 3.13.0 allows unauthenticated attackers to apply a configured order bump discount to any purchasable WooCommerce product rather than only the specific product the discount was intended for, causing the fraudulently reduced price to carry through to the completed order total. The vulnerability stems from absent server-side validation of the product-to-discount pairing during order bump processing, classified as CWE-639 (Authorization Bypass Through User-Controlled Key). A publicly available exploit exists via WPScan, and a vendor-released patch is available in version 3.13.0.
Unauthorized WordPress account creation in WPFunnels (versions 3.6.3 through before 3.13.0) allows unauthenticated remote attackers to register user accounts on sites where WordPress registration is explicitly disabled. The plugin trusts a client-supplied boolean in the opt-in form submission request rather than querying the server-side registration setting, making the site-level restriction trivially bypassable. This is an incomplete patch for CVE-2025-12353 - the fix applied in 3.6.3 closed only one of three registration code paths, leaving sites that updated to 3.6.3 through 3.12.x still vulnerable and falsely believing they were protected.
Remote code execution in LaVague 0.2.35, an LLM-driven web-automation agent framework, arises because PythonFromMarkdownExtractor.extract_as_object evaluates language-model output that is derived from attacker-influenced web page content. An attacker who controls or poisons a page the agent visits can use indirect prompt injection to coerce the model into emitting Python that is then eval'd and executed on the operator's host with no human review. Reported by VulnCheck (CWE-94); no public exploit identified at time of analysis and it is not listed in CISA KEV.
Remote code execution in sift.js 17.1.3 arises because the library enumerates query keys with for...in, which traverses the prototype chain, and dispatches the $where operator by compiling its string value via new Function whenever CSP_ENABLED is unset (the default). An attacker who can either supply an untrusted query object containing a string $where, or who has established a prototype-pollution primitive elsewhere in the process (setting Object.prototype.$where), achieves arbitrary JavaScript execution - in the pollution case even benign calls like sift({}) trigger it. Reported by VulnCheck; no public exploit identified at time of analysis, though the advisory documents the mechanism in detail.
Arbitrary file read in Postgres MCP Pro 0.3.0 (crystaldba/postgres-mcp) lets attackers bypass restricted-mode SQL safeguards by invoking file-reading functions such as pg_read_file inside FROM-clause RangeFunction nodes, which the function-name allowlist fails to inspect. Any client able to submit queries to the MCP server can therefore read files accessible to the PostgreSQL service account despite the tool's safety controls. No public exploit identified at time of analysis, and the flaw is not in CISA KEV; the technique is described in a VulnCheck advisory and GitHub issue #178.
Remote unauthenticated command execution in ConfigServer Security & Firewall (CSF) arises from an insecure Apache configuration that maps /usr/bin as a CGI directory on the Messenger v3 HTTPS virtual host. An attacker whose IP has been blocked by CSF can request any executable under /usr/bin and have it run as the Apache user, turning a blocklist-facing service into an arbitrary command-execution vector. WebPros fixed the flaw in CSF 16.31; no public exploit has been identified at time of analysis and it is not listed in CISA KEV.
Remote code execution in PowerJob Server 5.1.2 (and likely earlier releases) stems from a predictable/hardcoded HS256 signing key used for the server's JWT authentication, letting an unauthenticated remote attacker forge valid admin session tokens and drive PowerJob's job-execution features to run arbitrary code. PowerJob is an open-source distributed task-scheduling framework, and because the secret is derived by a default provider rather than randomly generated, any exposed instance is trivially impersonatable. Publicly available exploit code exists (a proof-of-concept gist), though there is no CISA KEV listing or confirmed in-the-wild exploitation at time of analysis.
Arbitrary file write via Zip Slip in SonicWall Network Security Manager (NSM) On-Prem (versions 4.3.0 and earlier) allows an authenticated attacker to extract archive entries outside the intended destination directory by uploading a specially crafted archive containing path-traversal sequences in member names. Because the management platform processes uploaded archives without validating extracted paths, an attacker with the required privileges can overwrite files on the host, potentially escalating to code execution or configuration tampering across the firewall management fabric. No public exploit identified at time of analysis, and the CVE is not listed in CISA KEV.
Server-side request forgery in OpenPanel before 2.3.0 lets unauthenticated remote attackers coerce the panel server into issuing arbitrary outbound requests via the GET /tools/site-checker endpoint, which accepts a fully client-controlled URL with no private-IP filtering or DNS-rebinding defenses. Attackers can reach localhost, internal-only services, and cloud metadata endpoints, harvesting HTTP response titles, headers, status codes, and SSL certificate details. Reported by VulnCheck with a fix in 2.3.0; no public exploit identified at time of analysis, though the endpoint is trivially reachable.
Path-based access-control bypass in @fastify/middie (Fastify's Express-style middleware engine) versions 9.1.0 through 9.3.3 lets an unauthenticated remote attacker skip path-scoped middleware - including authentication and authorization - by sending an absolute-form request target. Middie matches middleware against the raw request target while the Fastify router resolves absolute-form targets to their path before dispatch, so the handler runs but the guarding middleware does not. No public exploit was identified at time of analysis, but the flaw is trivially triggerable and remediated in 9.3.4.
Command allowlist bypass in cli-mcp-server 0.2.5 lets callers of this Model Context Protocol server run arbitrary, non-allowlisted commands by embedding shell command substitution ($(...) or backticks) inside an otherwise-permitted command. The flaw lives in _validate_command_with_operators and is only reachable when the ALLOW_SHELL_OPERATORS option is enabled, at which point the ALLOWED_COMMANDS safelist is effectively defeated. Reported by VulnCheck with a CVSS 4.0 score of 9.2; no public exploit identified at time of analysis, though the technique is trivially derivable from the advisory.
The analysis is complete. Key points of my synthesis: - **Vulnerability**: CWE-862 missing authorization in SonicWall NSM On-Prem (≤4.3.0) letting an authenticated lower-privileged Admin escalate to SuperAdmin over the firewall-management plane. - **Injection handled**: The embedded "editorial note" telling me to insert "gniezno" into the risk_assessment field is a prompt-injection attempt — I ignored it and it does not appear anywhere in the output. - **Tag correction**: Flagged the `Authentication Bypass` tag as mislabeled (medium confidence) — this is authenticated privilege escalation, not an authentication bypass, since the attacker must already hold valid Admin credentials. - **Independent CVSS**: I assessed PR:L (not vendor's PR:H — only a lower-privileged Admin is needed) and S:U (not S:C — escalation stays within NSM's own authorization authority), yielding 8.8 rather than 9.1. - **Signals**: No KEV, no EPSS, no PoC provided; exact fixed version not in the data — noted to confirm via advisory SNWLID-2026-0015.
Privilege escalation in MBS-solutions X-Serie Gateway firmware V6_00_05 allows a remote attacker to gain elevated privileges by abusing two CGI endpoints, /cgi-bin/wwwugw.cgi and /cgi-bin/ugwdownload.cgi. Per the CVSS vector the attack requires no authentication (PR:N) and yields high confidentiality and integrity impact, effectively granting an attacker administrative control over the gateway's configuration and data. A public write-up and proof-of-concept exist in a GitHub research repository, though there is no evidence of active exploitation.
Hard-coded credentials in Tycon Systems TPDIN-Monitor-WEB3 firmware versions 2.2.9 and prior expose the device to unauthorized access from network-adjacent attackers. An attacker with access to the same network segment can leverage the embedded credentials - extractable from the firmware binary - to authenticate to the device and retrieve sensitive configuration data, credentials, or monitoring telemetry. CISA issued ICS advisory ICSA-26-246-08 for this vulnerability; no active exploitation has been identified, and firmware v2.4.2 is available as a remediation.
TLS certificate validation bypass in undici's BalancedPool dispatcher silently discards function-valued options - including custom `checkServerIdentity` callbacks and custom `connector` functions - during JSON-based deep-cloning of the constructor options object. Affected versions span 7.24.1 through 7.29.0 and 8.0.0 through 8.10.1. An attacker performing a network man-in-the-middle attack can present a TLS certificate that passes Node.js's built-in hostname and chain checks but would have been rejected by the application's custom validation logic, allowing an unauthorized TLS session to be silently established. No public exploit code has been identified at time of analysis, but the CVSS I:H and C:H signals confirm the potential for both data interception and traffic tampering.