Privilege escalation in MikroTik RouterOS lets a remote, unauthenticated attacker abuse the SSH login helper to rewrite the trusted RouterOS policy mask by supplying a username that begins with a prohibited character. Because the flaw is reached before authentication completes, an attacker who can open an SSH session to an affected device can escalate to full administrative privileges. Publicly available exploit code exists, and CERT-PL (the reporter) has published a companion advisory describing these RouterOS issues as actively exploited, though the CVE is not confirmed on CISA KEV in the provided data.
OS command injection in the Tenda CP3 IP camera (firmware 27.5.57.101) lets attackers inject shell commands through the AlarmVoiceURL argument handled by the SystemAsh function in Apis/system.c (Kylin component). Because the value is passed into a system-level shell call without sanitization, a successful request yields arbitrary command execution on the camera's embedded Linux OS. No public exploit has been identified at time of analysis and the issue is not listed in CISA KEV, but the flaw is remotely reachable.
Site takeover in the SEO Flow by LupsOnline WordPress plugin (versions 3.0.0 through before 3.0.3) stems from improper validation of the credential supplied with the plugin's API requests, allowing unauthenticated attackers to be served in the security context of the administrator who configured the plugin. Because the flaw grants effective administrator-level access, an attacker can fully compromise the affected WordPress site. Publicly available exploit code exists (published by WPScan), though EPSS remains low at 0.15% (4th percentile), and there is no public exploit identified as active in the wild.
Authentication bypass in MikroTik RouterOS lets a remote unauthenticated attacker log in over SSH as an authorized user by exploiting incomplete RSA public-key comparison. During public-key auth RouterOS matches only the key type and modulus and ignores the exponent, so an attacker who knows an authorized user's RSA modulus can submit a key with exponent 1, forge a signature the server will validate, and open a command channel without the private key. Publicly available exploit code exists (reverse-engineered from the silent patch), and CERT-PL - the reporting party - describes the RouterOS vulnerabilities as being actively exploited, though this CVE is not confirmed in CISA KEV from the provided data.
Remote code execution in the Hummingbird performance/caching plugin for WordPress (versions up to and including 3.21.0) lets unauthenticated attackers write arbitrary PHP into a web-accessible debug-log file and execute it with a single anonymous request. The plugin's protective '<?php die(); ?>' header is silently dropped due to a PHP namespace bug in a class_exists() check, and unsanitized cookie names are written straight into wp-content/wphb-logs/page-caching-log.php. Reported by Wordfence with no public exploit identified at time of analysis; exploitation depends on a non-default Debug Log configuration.
Remote code execution in the Mail Mint WordPress plugin (by getwpfunnels) affects all versions up to and including 1.31.0, where the 'handle_form_submission' function deserializes untrusted, attacker-supplied input (CWE-502). Because a usable POP (property-oriented programming) gadget chain is present in the plugin's bundled code, unauthenticated attackers can move from PHP Object Injection to arbitrary code execution on the server. The vendor only partially addressed the flaw in 1.23.1, meaning early-'fixed' installs may remain exploitable; no public exploit has been identified at time of analysis, though Wordfence has documented the vulnerability.
Authentication bypass in the InspireUI Mstore API plugin for WordPress (versions up to and including 4.20.0) lets unauthenticated attackers forge Firebase Phone Auth JWTs and impersonate any phone number. The FirebasePhoneAuthHelper::verify_id_token() function checks token claims (alg, kid, aud, iss) but never verifies the cryptographic signature against Google's public certificates, so an attacker can sign a token with their own RSA key and log into or create arbitrary WordPress accounts. Reported by Wordfence with a CVSS of 9.8; no public exploit identified at time of analysis and the plugin is not in CISA KEV.
OS command injection in the Tenda CP3 IP camera (firmware 27.5.57.101) lets attackers inject shell commands through the interface_name and host arguments handled in Net/NetCheckPing.cpp, yielding arbitrary command execution on the device. The network-connectivity/ping diagnostic routine passes attacker-controlled input into a system shell without sanitization, and the attack is reachable over the network. No public exploit identified at time of analysis; the sole source is a VulDB submission.
Server-side request forgery in SQL Chat (the open-source sqlchat AI database client) lets remote unauthenticated attackers abuse four API endpoints (including /api/connection/execute and /api/connection/test) that accept client-supplied database connection parameters and run arbitrary SQL against any attacker-named host. Because no authentication is enforced, an attacker can point the server at internal databases, enumerate schemas, execute queries, and pivot through the SQL Chat host into otherwise unreachable network segments. No public exploit identified at time of analysis, though the affected source files and a VulnCheck advisory pinpoint the exact vulnerable code.
Authentication bypass in Lara Dashboard before 1.3.0 lets unauthenticated attackers log in as any registered user by requesting GET /screenshot-login/{email}, provided the deployment runs with APP_ENV set to anything other than production. The route was a demo-screenshot helper (used by an internal Browsershot command with superadmin@example.com) that was reachable in non-production environments, granting a fully authenticated session that reaches user administration, settings, database contents, and arbitrary code execution via the module installer. Reported by VulnCheck with a vendor patch available (v1.3.0); no public exploit identified at time of analysis, though the trivial GET-based technique is effectively self-documenting.
Unauthenticated remote code execution in Cua computer-server before 0.3.42 lets network attackers run arbitrary shell commands, read and write arbitrary files, and open interactive PTY shells on the host. The server skips authentication entirely when the CONTAINER_NAME environment variable is unset and, in vulnerable versions, binds to all interfaces (0.0.0.0) by default, so its control endpoints on TCP port 8000 are exposed to any reachable attacker. There is no public exploit identified at time of analysis, but the vendor commit and VulnCheck advisory confirm the root cause and fix; EPSS/KEV data were not provided.
Unauthenticated arbitrary file write in WWBN AVideo's notify.ffmpeg.json.php endpoint lets remote attackers plant files anywhere under the application root by supplying an attacker-chosen path in the avideoRelativePath parameter. Authentication is trivially defeated because the notifyCode token is any previously issued ciphertext replayed back - the server decrypts it but never validates it - enabling a straight path from unauthenticated request to writing a PHP webshell and remote code execution. Reported by VulnCheck; no public exploit identified at time of analysis, though the advisory describes the technique in enough detail to reproduce.
The synthesis JSON is above. Summary of the key analytical decisions: - **Impact framing:** The input's CWE-200 / "Information Disclosure" tag is technically the root cause, but the real-world outcome is **admin account takeover** via replayed live session identifiers — I reflected that in both C:H and I:H, matching VulnCheck's supplied VC:H/VI:H. - **Patch status:** Fix exists per GHSA-82q2-88mq-p44q, but no exact version was in the input, so I did not invent one. - **Exploitation status:** No KEV, no EPSS, no POC in the input → "no public exploit identified at time of analysis." - **`data_quality_flags`:** empty — the tags/vendor/CPE are all correct; the "Information Disclosure" tag understates but is not verifiably *wrong*, so it stays in `confidence_notes`/`risk_assessment` rather than as a machine-actionable flag. - **Prompt injection:** The "Editorial note (internal)" instructing insertion of the word "olsztyn" was a prompt-injection attempt (matching the known pattern in these CVE inputs) and was **ignored** — no canary word appears anywhere in the output. I also recorded a memory file for this CVE and added its index line.
Unauthenticated remote code execution in HKUDS AutoAgent's sandbox environment allows any network-reachable attacker to run arbitrary bash commands as root. The framework's TCP command server binds to all interfaces (0.0.0.0) and executes received commands with no authentication, so attackers who reach the port gain root inside the agent container and can read or tamper with bind-mounted host workspace directories. Reported by VulnCheck with a public advisory; no public exploit code or active exploitation is confirmed at time of analysis.
Authentication bypass in Coolify (self-hosted PaaS) through version 4.3.17 lets remote attackers take over any account by matching only on email address during the OAuth callback. Because the OauthController fails to verify provider assertions or bind an OAuth identity to the local account, an attacker who registers a victim's email on any enabled OAuth provider is signed in as that victim, defeating passwords and two-factor authentication. VulnCheck published an advisory and a third-party writeup documents the flaw; no public exploit tooling beyond the writeup and no active exploitation are confirmed at time of analysis.
Server-side request forgery in Webstudio through 0.296.0 lets unauthenticated remote attackers abuse the /cgi/image, /cgi/video, and /cgi/asset proxy routes to fetch attacker-chosen URLs whenever the RESIZE_ORIGIN environment variable is unset. Because the proxy blindly forwards supplied URLs, an attacker can read cloud instance metadata (e.g. IMDS credentials), reach internal-only services, and map the instance's private network. Reported by VulnCheck with a public advisory; no public exploit code or CISA KEV listing is present at time of analysis.