Local privilege escalation to kernel in PassMark PerformanceTest, BurnInTest, and OSForensics allows a low-privileged local user to achieve arbitrary physical memory bit-clearing via an exposed, unvalidated IOCTL in the shared DirectIo64.sys kernel driver. By supplying a crafted 64-bit physical address and bit index to the driver, an attacker can invoke MmMapIoSpace to map and modify kernel code pages or page table entries, yielding full system compromise. A public proof-of-concept is available and patches have been released by PassMark across all three affected product lines.
Privilege escalation and kernel DoS in PassMark's shared DirectIo64.sys kernel driver affect PerformanceTest (before 11.1 build 1012), BurnInTest (before 11.1 build 1000), and OSForensics (before 11.1 build 1016), allowing a local low-privileged attacker to read arbitrary Model-Specific Registers or write zero to any MSR via IOCTLs with an insufficient blocklist. Writing zero to the system call handler MSR (e.g., IA32_LSTAR) causes an immediate unrecoverable kernel panic on the next system call, while reading security-sensitive MSRs (such as those storing kernel base addresses) enables KASLR bypass to support privilege escalation chains. A public proof-of-concept is available via GitHub, and vendor patches have been released; no KEV listing at time of analysis.
Arbitrary file read in the Pods WordPress plugin before 3.3.9.2 allows users holding the Author role or higher to exfiltrate any file accessible to the web server process, including sensitive files outside the web root such as wp-config.php or system credentials. The flaw stems from the plugin's display callback resolver accepting unrestricted PHP callable targets without allowlisting. A publicly available proof-of-concept exists per WPScan, and a vendor patch is available. The attack surface is limited to installations operating in restricted display-callback mode, which is the automatic default for WordPress sites whose initial Pods installation predated version 3.1.
Cross-workspace data exfiltration in AppFlowy-Cloud through 0.9.64 allows authenticated users to read documents and databases from workspaces they are not members of. The `establish_ws_connection_v2` WebSocket handler in `src/api/ws.rs` omits workspace membership validation, permitting any valid session to bind to arbitrary workspace contexts. By subsequently transmitting sync Manifest messages containing victim object identifiers, an attacker retrieves full collaboration document and database state without any victim interaction required. No public exploit identified at time of analysis, though the VulnCheck advisory and referenced GitHub issue provide sufficient technical detail to reconstruct the attack.
Unauthenticated path traversal file deletion in the Frontend Admin by DynamiApps WordPress plugin before 3.29.13 allows remote attackers to delete index.php and .htaccess files from the WordPress root directory, rendering the site entirely inoperable. The flaw stems from insufficient validation of a user-controllable directory path parameter prior to file deletion operations, exploitable without any authentication credentials. A publicly available proof-of-concept exists; exploitation is constrained by a non-default form configuration requirement, reflected in the CVSS AC:H scoring.
Improper access control in Ninja Forms WordPress plugin (versions 3.14.0 through 3.15.1) allows any user holding a plugin-specific capability to exploit overly permissive REST API endpoints well beyond their intended scope. An attacker authenticated with that capability can read all stored form submissions and plugin settings, overwrite the plugin's configuration, and create or modify arbitrary WordPress posts and pages - operations ordinarily reserved for site administrators. A publicly available proof-of-concept exists per the WPScan advisory, though exploitation depends on a non-default administrative delegation step; no CISA KEV listing has been identified.
Sensitive database exposure in code-projects Vehicle Management System 1.0 allows unauthenticated remote attackers to download the raw SQL database backup file at /vehicle_management.sql directly over HTTP, leaking the full application database contents. The backup file is stored in or under the web root with no access controls, making it trivially accessible to any internet-connected attacker. A public proof-of-concept is available, and no vendor patch has been identified at time of analysis.
Out-of-bounds read in Valkey's cluster slot-migration RDB loader allows a network-positioned attacker to crash affected servers by supplying a crafted RDB file with a truncated `job_name` field in an `RDB_OPCODE_SLOT_IMPORT` record. Valkey versions up to 9.0.4 and 9.1.0 running in cluster mode are affected; the vulnerable `createSlotImportJob()` function in `src/cluster_migrateslots.c` performs a fixed 40-byte `memcpy` without first validating that the loaded `job_name` is exactly `CLUSTER_NAMELEN` bytes, triggering CWE-125 on undersized input. A public proof-of-concept is available via GitHub issue #4207, and patched releases 9.0.5 and 9.1.1 are confirmed available.
Missing authentication on the admin WebSocket endpoint in trape 1.0.0 and 2.0 exposes operator tracking sessions to unauthenticated remote attackers. The `join_room` function in `core/sockets.py` performs no credential check before admitting a caller to the admin room, meaning any network-reachable party can connect to the socket and observe victim tracking data intended solely for the trape operator. A public exploit exists via a GitHub issue report; the project maintainer has not responded to the disclosure.
Unauthenticated access to the Backend Conversation API in ramon-victor/freegpt-webui allows remote attackers to invoke the `_conversation` function without valid credentials by manipulating the `model` argument in HTTP requests to `server/backend.py`. The affected codebase is a rolling-release hobby project that has been abandoned by its maintainer, meaning no patch will be issued. A public proof-of-concept exploit exists on GitHub, lowering the bar for exploitation against any instance still running.
Missing authentication in freegpt-webui's ChatCompletion.create function (g4f/__init__.py, up to commit 098db3dfeb41555c2ca9269df0f13e10ec1c35dc) permits unauthenticated remote callers to invoke AI chat completion requests directly against the backend providers without credentials. A public proof-of-concept is available on GitHub. The product is abandoned and no longer maintained, meaning no vendor patch will be issued, and remediation requires decommissioning or layered compensating controls.
Authorization bypass in the light0011 CMS Chapter Controller (ChapterController.class.php) exposes chapter content to unauthenticated remote attackers through insecure direct object reference (IDOR). By manipulating the `content` argument in HTTP requests, an attacker can reference chapter objects they are not permitted to access, circumventing the controller's access control entirely. A public exploit was disclosed via GitHub issue #5; the maintainer has not yet responded to the responsible disclosure report.
Unthrottled resource allocation in freegpt-webui's getJailbreak function (server/backend.py) enables remote unauthenticated attackers to exhaust server resources via crafted Jailbreak Mode requests (CWE-770). The affected product is an unmaintained hobby GPT wrapper by ramon-victor, pinned to all commits through 098db3dfeb41555c2ca9269df0f13e10ec1c35dc with no patched release forthcoming. A public proof-of-concept exploit is available on GitHub, and no vendor fix will be issued as the maintainer has abandoned the project.
Authorization bypass via insecure direct object reference (IDOR) in jofpin trape 2.0 allows remote unauthenticated attackers to access or manipulate tracked-subject records by substituting arbitrary values for the vId/id parameters handled in core/user.py. The affected product is an open-source Python OSINT people-tracking framework; exploitation requires only network reachability to the trape instance with no credentials or user interaction. A public proof-of-concept exists via GitHub issue #407, and the vendor has not responded to the disclosure.
Server-side request forgery in light0011 CMS allows unauthenticated remote attackers to force the server to fetch arbitrary URLs by manipulating the `source[]` parameter in the bundled UEditor `catchimage` function at `Public/ueditor/php/controller.php`. Successful exploitation enables internal network reconnaissance, access to cloud metadata services (e.g., AWS IMDSv1), and pivoting to other HTTP endpoints not exposed externally. A public exploit exists via GitHub issue #6; the maintainer has not responded to disclosure and no patch has been released.
Unauthenticated SQL injection in code-projects Doctor Appointment System 1.0 exposes the `/patient/booking.php` endpoint to remote database manipulation via the unsanitized `doc_id` parameter. Attackers with network access can extract patient records, appointment data, and stored credentials, or modify database contents without any authentication. Public exploit code exists on GitHub, significantly lowering the bar for exploitation; no vendor patch has been identified at time of analysis.
SQL injection in code-projects Doctor Appointment System 1.0 permits unauthenticated remote attackers to manipulate backend database queries by supplying crafted input in the `firstname` parameter of `/contactus.php`. The flaw (CWE-89) stems from unsanitized user input concatenated directly into SQL statements, enabling data extraction or modification without any credentials. A public proof-of-concept exploit is available on GitHub, reducing the barrier for opportunistic attacks despite a moderate CVSS 4.0 score of 6.9.
SQL injection in code-projects Hospital Information System 1.0 allows unauthenticated remote attackers to manipulate database queries through the `ID` parameter of the `getSinglePresp` function in `includes/presp/PrespController.php`. A public exploit has been released via GitHub, lowering the barrier for opportunistic attacks. Successful exploitation could expose sensitive patient records and medical data stored in the backend database, or allow unauthorized data modification.
SQL injection in code-projects Hospital Information System 1.0 allows unauthenticated remote attackers to manipulate backend database queries by supplying a crafted value in the ID argument to the viewReq() function within viewReq.php. The attack requires no authentication or user interaction, and a proof-of-concept exploit is publicly available via a GitHub issue. No vendor patch has been identified at time of analysis, leaving deployments with no official remediation path.
SQL injection in code-projects Hospital Information System 1.0 allows unauthenticated remote attackers to manipulate database queries via the Search argument in the findBySearch() function of addReq.php. The CVSS 4.0 vector confirms network accessibility with no authentication, no complexity, and no user interaction required. Publicly available exploit code exists via a GitHub issue; no CISA KEV listing.
SQL injection in light0011 CMS exposes all deployments to unauthenticated remote database compromise through the ChapterModel::searchChapter function, where the `content` argument is passed unsanitized to the Query Builder in App/Home/Controller/ChapterController.class.php. Because the project uses no versioning, every deployed commit of this PHP CMS is affected with no vendor-patched baseline to target. A public proof-of-concept exploit is available via GitHub issue #7, and the project maintainer has not responded to disclosure, leaving no official remediation path.
Arbitrary file-write via path traversal in WPvivid - Backup, Migration & Staging WordPress plugin before 0.9.134 allows authenticated administrators to place files of permitted types at any writable server path, including locations outside the WordPress installation root. The vulnerability stems from unsanitized user-supplied filenames used directly in write-path construction (CWE-22), with scope change (S:C) confirmed by the vendor CVSS vector. A publicly available proof-of-concept exists, and a patched release (0.9.134) has been issued; no active exploitation (CISA KEV) has been reported at time of analysis.
Arbitrary file deletion in WPvivid - Backup, Migration & Staging WordPress plugin before 0.9.134 allows authenticated administrators to supply unsanitized path values to the plugin's file deletion routine, enabling deletion of files anywhere on the server filesystem including outside the web root. Exploitation requires WordPress administrator credentials but no other conditions, and a publicly available proof-of-concept has been published by WPScan. Patch version 0.9.134 is available from the vendor.
Missing authorization in SourceCodester Class and Exam Timetabling System 1.0 allows unauthenticated remote attackers to bypass access controls on the /admin/session.php endpoint by manipulating the ID parameter. The vulnerability, rooted in CWE-862, exposes administrative session logic to arbitrary external actors without requiring any credentials. A public proof-of-concept exploit has been released on GitHub, confirming active exploitability at low skill threshold.
Client-side price manipulation in the E-cab Taxi Booking Manager for WooCommerce WordPress plugin (before 2.0.5) allows unauthenticated attackers to submit taxi booking orders at an arbitrary price, including zero, by supplying fabricated trip-distance and base-price values that the server accepts without validation. The plugin trusts the pricing parameters delivered in the booking request rather than computing cost authoritatively on the backend, constituting a classic business-logic bypass. A publicly available exploit exists per WPScan; no public exploitation tracking (KEV) is recorded, but the trivial exploitation requirements make this a meaningful financial risk for any operator running the affected plugin.
Unauthenticated log file exposure in WPFunnels WordPress plugin (versions 2.6.0 through <3.13.0) enables any remote visitor to retrieve customer order details and opt-in form submission data by directly requesting a predictable log file URL within the public uploads directory. The flaw affects e-commerce funnel operators who may store customer PII - names, emails, purchase data - in these logs, with potential GDPR/privacy regulatory consequences beyond the C:L CVSS rating suggests. A publicly available proof-of-concept exists; no public exploit or CISA KEV listing indicates active mass exploitation at time of analysis.
Unauthenticated information disclosure in the Content Views WordPress plugin before 4.5.1.2 allows any remote visitor to read the title and full body of non-public posts - including drafts, pending, private, and scheduled posts - when a site administrator has configured a view to include them. The root cause is a missing authorization check: the plugin never verifies whether the requesting user holds the WordPress capability required to read posts in restricted statuses before serving them in view responses. A publicly available proof-of-concept exists via WPScan; the vendor has released a patched version (4.5.1.2).
Unauthenticated information disclosure in the Xpro Addons - 140+ Widgets for Elementor WordPress plugin (versions before 1.7.8) exposes non-public WooCommerce product data - including titles, prices, SKUs, descriptions, and stock levels - to any visitor without authentication. The plugin renders product summaries via a widget endpoint without performing any post-status or capability check, meaning products in draft, pending, private, or scheduled states are fully retrievable by arbitrary external requesters. A publicly available exploit has been documented by WPScan, though no active exploitation has been confirmed by CISA KEV.
Unauthenticated email relay abuse in WPFunnels WordPress plugin versions 3.1.0 through 3.12.x allows any remote visitor to send emails from the affected site to arbitrary recipients with arbitrary subjects. The opt-in submission handler accepts notification recipients and email subject lines directly from HTTP request parameters without performing authorization checks or WordPress nonce validation, turning the site's trusted mail infrastructure into an open relay. A publicly available exploit exists via WPScan; vendor-released patch 3.13.0 closes the gap.
Price manipulation in WPFunnels WordPress plugin before 3.13.0 allows unauthenticated attackers to apply a configured order bump discount to any purchasable WooCommerce product rather than only the specific product the discount was intended for, causing the fraudulently reduced price to carry through to the completed order total. The vulnerability stems from absent server-side validation of the product-to-discount pairing during order bump processing, classified as CWE-639 (Authorization Bypass Through User-Controlled Key). A publicly available exploit exists via WPScan, and a vendor-released patch is available in version 3.13.0.
Unauthorized WordPress account creation in WPFunnels (versions 3.6.3 through before 3.13.0) allows unauthenticated remote attackers to register user accounts on sites where WordPress registration is explicitly disabled. The plugin trusts a client-supplied boolean in the opt-in form submission request rather than querying the server-side registration setting, making the site-level restriction trivially bypassable. This is an incomplete patch for CVE-2025-12353 - the fix applied in 3.6.3 closed only one of three registration code paths, leaving sites that updated to 3.6.3 through 3.12.x still vulnerable and falsely believing they were protected.
SQL injection in WPLP Cookie Consent WordPress plugin (versions 3.0.0 through before 4.4.2) allows authenticated administrators to execute arbitrary SQL queries via an unvalidated pagination parameter passed directly into a database query without sanitization. The vendor CVSS includes a scope-change flag (S:C), indicating the injection may permit cross-schema database reads beyond the plugin's own tables. A publicly available proof-of-concept exists via WPScan, though exploitation is gated behind WordPress administrator credentials.
Path traversal in GFI Exinda AI before 7.6.5 allows an authenticated administrator to read arbitrary files from the underlying system as root. The vulnerability resides in the wcf_handle_download() function within the system maintenance configuration download handler, which fails to sanitize directory traversal sequences embedded in parameters prefixed with v_del_ before appending them to the base configuration directory path. No public exploit code or active exploitation has been identified at the time of analysis, and exploitation is constrained to Admin-privileged accounts.
Off-by-one buffer overflow in pjproject's SIP message serialization function allows a remote peer to trigger a single-byte out-of-bounds write by sending crafted SIP requests to a proxy, SBC, or B2BUA that parses and re-serializes messages using the PJSIP library. The vulnerable function `pjsip_generic_array_hdr_print()` in `sip_msg.c` omitted bounds checking before writing the colon and space characters that follow generic array header names (Allow, Require, Supported, Unsupported), resulting in CWE-193 off-by-one writes at exact buffer boundaries. No public exploit has been identified at time of analysis; the vendor explicitly states that code execution and information disclosure have not been demonstrated, and pool-based allocator slack typically absorbs the errant byte harmlessly.
CAPTCHA validation in phpMyFAQ before 4.1.8 is completely skipped when the `store` parameter is set to `now` in question submission requests, exposing any publicly accessible instance to unauthenticated spam automation. Attackers exploiting this bypass can flood the FAQ database with arbitrary question entries and force outbound email notifications to administrators for each submission. No public exploit code or active exploitation has been identified, but the bypass is trivially reproducible through a single parameter manipulation.
Zip-slip path traversal in Emlog versions 2.6.29 and prior allows authenticated administrators to overwrite arbitrary server-side files, including config.php, achieving remote code execution. The emUnZip() function passes attacker-supplied ZIP archives to ZipArchive::extractTo() without sanitizing path components across all entries - only the first entry's subdirectory is inspected, leaving all subsequent entries unchecked. No publicly known patch exists at time of publication, making this an unmitigated risk for all deployed instances.
Stored cross-site scripting in Emlog versions 2.6.29 and prior allows persistent JavaScript injection via crafted tag names rendered in the article editor. The underlying flaw is that PHP's addslashes() escapes backslash-sensitive characters but does not HTML-encode entities, so an attacker can store the HTML entity ' (representing a single quote) which the browser later decodes back to a literal quote at render time, breaking out of a JavaScript string literal and executing arbitrary code in the victim's session. No vendor-released patch was publicly available at time of publication, and no public exploit code beyond the security advisory proof-of-concept has been identified.
Unauthenticated full-read SSRF in Openpanel before 2.3.0 enables remote attackers to issue arbitrary server-side HTTP requests through the /tools/site-checker endpoint, with no authentication, IP allowlisting, or SSRF mitigation in place. The endpoint's url query parameter is passed directly to fetchWithRedirects() in apps/api/src/controllers/tools.controller.ts, allowing attackers to reach cloud instance metadata services (e.g., AWS IMDS at 169.254.169.254), enumerate internal ports, and retrieve response content including status codes, page sizes, and parsed HTML metadata. A secondary leakage path via getIPInfo() exfiltrates internal IP addresses to a third-party service, exposing network topology data beyond the attacker's direct channel. No public exploit code has been identified at time of analysis.
Server-side request forgery in Marqo ≤ 2.26.0 allows unauthenticated remote attackers to force the server to issue HTTP requests to arbitrary internal or external URLs by supplying attacker-controlled values in media fields of the add_documents API endpoint. The vulnerability originates in the inference orchestrator's image download component - specifically the download_image_from_url and fetch_content_sample functions in image_download.py - which perform no host validation or destination filtering before fetching user-supplied URLs. In cloud-hosted deployments, this enables access to instance metadata endpoints (e.g., AWS IMDSv1 at 169.254.169.254) that can yield IAM role credentials, substantially amplifying the practical impact beyond the moderate CVSS 4.0 base score of 6.9. No public exploit code has been identified and the vulnerability is not in the CISA KEV catalog.
Hard-coded SFTP credentials embedded in SmartIT Desktop Manager (by Lightstar) allow unauthenticated remote attackers to extract credentials from application source code and authenticate directly to the SmartIT Agent's SFTP service, enabling arbitrary file system browsing on the victim host. The vulnerability is CVSS 4.0-scored at 6.9 with no-privilege, network-accessible exploitation, though real-world impact is limited to read-only directory traversal rather than full compromise. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Webhook signature verification bypass in LobeChat 2.2.1 allows unauthenticated remote attackers to inject forged inbound messages into bot conversations by exploiting missing or skippable signature checks in the QQ and Feishu platform adapters. The QQ adapter performs no Ed25519 verification whatsoever, while the Feishu adapter's static-token check is entirely skipped in default deployments where no token is configured. An attacker who knows the webhook URL can spoof arbitrary sender identities and message content, causing the bot owner's agent to process fully attacker-controlled input as a trusted platform event. No public exploit code is identified at time of analysis; CVSS 4.0 scores the issue at 6.9, reflecting moderate confidentiality and integrity impact with no availability consequence.
Privilege escalation through the DirectIo64.sys kernel driver affects three PassMark products - PerformanceTest before build 1012, BurnInTest before build 1000, and OSForensics before build 1016 - allowing any local Windows user with low privileges to issue arbitrary x86 IN/OUT instructions to hardware I/O ports via exposed IOCTLs that lack allowlist or port-range validation. From a standard user account an attacker can write to PS/2 controller, CPU reset, CMOS configuration, and interrupt controller ports, triggering an immediate forced system reset or persistent hardware-level manipulation. A public technical disclosure repository (github.com/floppywiggler/directio64-disclosure) and accompanying blog post exist; no CISA KEV listing is present and no EPSS score was provided.
Missing authorization on image comment endpoints in Slink before 1.12.3 exposes comment threads to unauthenticated network callers. Any caller who can supply a valid image ID can issue GET /api/image/{imageId}/comments or open a server-sent-events subscription and receive the full comment thread and live updates without presenting any credentials. The patch (v1.12.3) retroactively adds a Symfony AuthorizationCheckerInterface voter to both the GetCommentsByImageHandler query handler and CreateCommentHandler, introducing owner, public-guest, and collection-share access checks that were entirely absent before. No public exploit has been identified at time of analysis.
Invitation links in SolidInvoice prior to version 3.0.1 never expire because UserInvitation entities carry no expiry timestamp, leaving any emailed invitation token permanently valid. An attacker who obtains a past invitation link - through email forwarding, archiving, or account compromise - can use it at any future point to join a company's SolidInvoice account or silently enroll a compromised email address as a member. No public exploit has been identified at time of analysis; vendor-released patch 3.0.1 addresses the issue.
Out-of-bounds read in Turso through 0.8.0-pre.8 crashes any application that opens a crafted database file, causing denial of service. The table-leaf page reader in `core/storage/pager.rs` accepts the cell-count field from a SQLite page header at face value without validating it against the actual page payload bounds; supplying an inflated count causes an index-out-of-bounds panic in Rust, aborting the host process. No public exploit has been identified and the vulnerability is not listed in CISA KEV; real-world exposure is limited to applications with a file-ingestion pathway that accepts externally supplied database files.
IBM QRadar SIEM 7.5.0 through 7.5.0 UP15 Interim Fix 005 embeds hard-coded credentials - passwords or cryptographic keys - used for internal authentication, outbound component communication, or internal data encryption. A high-privileged local attacker who discovers and extracts these static credentials could leverage them to access protected internal services, decrypt stored security event data, or authenticate to downstream components without per-user authorization. IBM has issued a patch via advisory 7285277; no public exploit code or CISA KEV listing exists at time of analysis.
Path traversal in IBM Langflow OSS 1.0.0 through 1.10.2 exposes arbitrary server-side files to authenticated remote attackers, yielding high confidentiality impact with no integrity or availability loss. The CWE-22 flaw stems from insufficient restriction of user-supplied pathnames, allowing traversal sequences to escape the intended directory boundary. IBM self-reported and patched this issue; no public exploit or active exploitation has been identified at time of analysis.
Path traversal in IBM Langflow OSS versions 1.0.0 through 1.11.2 enables authenticated remote attackers to read arbitrary files accessible to the Langflow process, potentially exposing configuration data, credentials, or other sensitive server-side content. The CVSS vector (PR:L) confirms that prior authentication is required, moderating real-world risk relative to unauthenticated flaws. IBM has released a patch, the vulnerability is vendor-reported, and no public exploit or active exploitation has been identified at time of analysis.
Sensitive file disclosure in IBM Langflow OSS 1.0.0 through 1.11.2 allows authenticated remote attackers to read arbitrary files on the server by exploiting improper validation of symbolic links. The flaw, classified under CWE-22 (Path Traversal), enables an attacker with valid credentials to escape intended directory boundaries by manipulating symlink resolution, potentially exposing configuration files, credentials, or other sensitive server-side content. IBM has released a patch via their support advisory; no public exploit code or active exploitation has been identified at time of analysis.
Arbitrary file read in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows any authenticated user holding only the low-privileged Standard role to retrieve arbitrary files from the device filesystem by manipulating the `file` query string parameter of `/cgi-bin/ugwdownload.cgi`. A public proof-of-concept exploit is available in SilviaMun's vulnerability-research repository on GitHub, significantly lowering the skill threshold for exploitation. No integrity or availability impact is established - this is a confidentiality-only vulnerability with high impact on device-resident sensitive data such as configuration files and credentials.