Command injection in the D-Link DIR-895L router's DHCP server daemon allows a network-adjacent attacker to execute arbitrary OS commands by crafting a malicious Hostname option in a DHCP request. The vulnerable code path is in the `sendACK` function of `udhcpcd/serverpacket.c`, where the client-supplied Hostname field is processed without sanitization, leading to shell injection. A public proof-of-concept exploit exists targeting firmware version A1_102b07, and no vendor patch has been identified at time of analysis.
Server-side request forgery in openagents up to 0.8.19 and 0.9.3.post20 allows unauthenticated remote attackers to manipulate the base_url argument of the test_default_model function in sdk/src/openagents/sdk/transports/http.py, causing the server to issue arbitrary outbound HTTP requests and disclose internal network responses. The vulnerability was publicly disclosed via GitHub issue #566 with a proof-of-concept. Critically, the maintainer closed the issue as inapplicable despite the identical unguarded code shipping in 0.9.3.post20 - the endpoint and both code sinks remain unchanged; only the file path was relocated in commit e277dd1a.
Unrestricted file upload in FeehiCMS up to version 2.1.1 allows unauthenticated remote attackers to upload arbitrary files through the UEditor widget endpoint (UeditorAction::init in backend/widgets/ueditor/UeditorAction.php). A named public proof-of-concept (FEHI-001-UEditor-Unauthorized-File-Upload) is available on GitHub, enabling straightforward exploitation. The vendor has not responded to the coordinated disclosure issue filed at GitHub, and no patch exists at time of analysis.
Missing authentication in SourceCodester Simple Traffic Offense System 1.0 allows unauthenticated remote attackers to create arbitrary user accounts by manipulating the `position` argument in `saveuser.php`. The user-creation endpoint fails to enforce any authentication gate (CWE-306), exposing it to direct network exploitation with no prerequisites. A public proof-of-concept exploit exists, raising the practical risk beyond what the moderate CVSS 4.0 score of 6.9 might suggest.
Authentication bypass in Tenda AC9 firmware 15.03.05.14 allows unauthenticated remote attackers to circumvent the web management interface's R7WebsSecurityHandler authentication gating. Published PoC files demonstrate two concrete attack paths: unauthenticated product information disclosure via the getProduct endpoint and unauthenticated WiFi credential modification via the fast_setting_wifi_set endpoint. No public vendor patch has been identified, and exploit code is publicly available (CVSS 4.0 E:P).
Missing authorization in projeto-siga Siga's authentication controller allows unauthenticated remote attackers to bypass access controls by manipulating the `cod` or `jwt` parameters submitted to the `ExAutenticacaoController.autenticar` function. Versions up to 11.0.2.10, 11.0.2.13, and 11.1.1 of this Brazilian judicial document management platform are affected. A proof-of-concept exploit has been publicly disclosed via a GitHub issue report, and the vendor has not responded to the responsible disclosure at time of analysis.
Unverified password change in sfturing hosp_order allows unauthenticated remote attackers to arbitrarily modify any user's password through the `modifyPassWord` function in `CommonUserController.java`. The Password Recovery component fails to validate the requester's identity or current credentials before accepting a new password, enabling full account takeover without prior authentication. A public exploit has been released via the project's GitHub issue tracker, and the vendor has not responded to the disclosure.
Authorization bypass in sfturing hosp_order exposes its order cancellation endpoint to manipulation of the ID parameter, allowing an attacker to cancel medical orders belonging to any patient without owning those records (CWE-639 IDOR). The vulnerable function is orderRecordsService.cancelOrder in OrderController.java within this Java/SSM-stack hospital management application. A public exploit is documented in GitHub issue #116; the project maintainer has not responded to the disclosure, leaving no remediated version available.
Authorization bypass in sfturing hosp_order allows unauthenticated remote attackers to modify hospital order records belonging to arbitrary users by supplying attacker-controlled `userID` or `id` parameters to the `updateOrderSta1` and `updateOrderdiseaseInfo` endpoints in OrderController.java. A public proof-of-concept exploit was disclosed via GitHub issue #115; the maintainer has not responded to the report. The project follows a rolling release strategy, making version-pinned remediation guidance impossible - all commits through 627f426331da8086ce8fff2017d65b1ddef384f8 are confirmed affected.
Authorization bypass through user-controlled key (IDOR, CWE-639) in sfturing hosp_order's OrderController allows unauthenticated remote attackers to access or manipulate hospital order records belonging to arbitrary users by supplying a crafted `userIdenf` parameter. The affected codebase is a Java Spring-based hospital order management system, and the vulnerability is exposed via the `/ssm_pro` web application endpoint. A public proof-of-concept exists via GitHub issue #114; the maintainer has not responded to the disclosure, and no patch has been released.
Uncontrolled resource consumption in java-json-tools json-patch up to version 1.13 allows remote unauthenticated attackers to trigger service degradation by sending crafted JSON Patch documents to the JsonPatch.apply() handler. The vulnerability resides in the Patch Operation Handler component and carries no confidentiality or integrity impact - purely availability. A public proof-of-concept has been disclosed via a GitHub issue report, though no KEV listing indicates active exploitation at this time.
Unrestricted file upload in Beijing Meite Software Technology U+Smart Enjoyment WebSite 18.6001.1096.1000 exposes the /Report/Upload/UploadFormImg.ashx endpoint to unauthenticated remote file submission without file-type validation. An unauthenticated network attacker can upload arbitrary file types - including ASP.NET script files such as .aspx webshells - potentially chaining the upload into remote code execution on the underlying IIS server if the upload directory permits script execution. A public proof-of-concept exploit has been disclosed via a Feishu document, and no CISA KEV listing has been identified at time of analysis.
Unrestricted file upload in light0011 CMS allows unauthenticated remote attackers to upload arbitrary file types - including PHP webshells - via the Upload::upload function in the ThinkPHP-based CMS. The affected code is confirmed at commits c774dce and f72cf46 in the light0011/cms GitHub repository. A public proof-of-concept exploit has been released via a GitHub issue report; the vendor has not responded and no patched version exists.
Information disclosure in light0011 CMS exposes database debug output to unauthenticated remote attackers by manipulating the DB_DEBUG argument processed by the Debug Mode component in App/Common/Conf/config.php. The flaw allows network-accessible attackers to retrieve database diagnostic data - potentially including SQL query traces, schema details, or connection metadata - with no authentication and no user interaction required. A public proof-of-concept exploit exists via GitHub issue #17, and the vendor has not yet responded to the coordinated disclosure report, leaving all deployed instances unpatched.
Hospital Information System 1.0 by code-projects exposes its raw SQL database backup file at the web-accessible path `/HIS/his.sql`, allowing unauthenticated remote attackers to download the full database dump over HTTP with no prerequisites. The vulnerability (CWE-200) stems from placing the database export file inside the application's web root without access controls. A public proof-of-concept exploit document is available on GitHub, confirming practical exploitability; no KEV listing has been issued at time of analysis.
Unauthenticated IDOR (Insecure Direct Object Reference) in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 allows remote attackers to delete arbitrary exam records by manipulating the `ID` parameter in `delete_exam.php` without any authorization check. Any network-accessible attacker can iterate over exam IDs to destroy examination data belonging to other users or system administrators. A public proof-of-concept exploit has been disclosed on GitHub, lowering the bar for opportunistic abuse.
Hard-coded database credentials embedded in db.php of SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 allow unauthenticated remote attackers to obtain and reuse valid database credentials without any prior authentication. The credentials, baked directly into the PHP source file, are exposed to any party who can read or retrieve that file over the network. Publicly available exploit code has been published per the VulDB submission and a GitHub vulnerability report covering the same product, elevating this beyond a theoretical risk.
Server-side request forgery in projeto-siga SIGA up to version 11.1.1 allows unauthenticated remote attackers to cause the application server to issue arbitrary HTTP requests by supplying a crafted value to the html parameter of the HTML-to-PDF conversion endpoint (ExUtilController.java, DownloadExterno.getUrl). This enables attackers to probe internal network services, exfiltrate cloud metadata, or reach otherwise-inaccessible infrastructure through the server's outbound network position. A public exploit exists and the maintainer has not responded to the responsible disclosure issue (#2492), leaving all deployments on 11.1.1 and earlier unpatched.
Unauthenticated privilege escalation in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 allows remote attackers to register as privileged users - including administrator - by manipulating the `role` parameter in the `register` function of `auth.php`. Because the application fails to enforce server-side role validation during self-registration, any unauthenticated user can tamper the role field to claim elevated privileges at account creation time. A public proof-of-concept exploit is available on GitHub, lowering the bar for opportunistic exploitation.
SQL injection in jaychouchannel's Tourism-Management-System (Java Spring Boot, up to commit 8122bf02) allows unauthenticated remote attackers to manipulate SQL queries by injecting payloads into table, column, xColumn, or yColumn path variables accepted by multiple CommonController endpoints backed by CommonDao. Successful exploitation yields limited data disclosure and modification across the application database. A public proof-of-concept is available via GitHub issue #7, and a patch has been merged as commit d44ec3aa via PR #14.
SQL injection in SourceCodester Online Voting System 1.0 allows unauthenticated remote attackers to read and manipulate the application database through the /voting/ajax.php?action=save_category endpoint. The Category parameter is passed directly into a backend SQL query without sanitization or parameterization, enabling classic error-based or UNION-based injection. A public proof-of-concept exploit is available on GitHub, making opportunistic exploitation trivially reproducible with no authentication required.
SQL injection in itsourcecode School Management System 1.0 allows unauthenticated remote attackers to manipulate the email parameter in User_Login.php, injecting arbitrary SQL into backend database queries at the pre-authentication login endpoint. With a public exploit available on GitHub, exploitation requires minimal skill and no credentials. The CVSS 4.0 vector confirms network-accessible, no-privilege exploitation with partial confidentiality, integrity, and availability impact against the underlying database.
Cleartext storage of sensitive database credentials and user data in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 exposes plaintext secrets via the `cict_portal.sql` file. The SQL dump file, commonly placed within the web-accessible directory in SourceCodester PHP projects, can be retrieved directly over the network without authentication, leaking whatever credentials or personal data it contains. A public proof-of-concept exploit is available on GitHub, confirmed by VulDB and the referenced researcher report, raising the practical exploitation risk above what the moderate CVSS 4.0 score of 6.9 might suggest at first glance.
Server-side request forgery in jackson-coreutils 2.0 allows remote unauthenticated attackers to manipulate the server into issuing arbitrary outbound HTTP requests by supplying a crafted URL to the JsonLoader.fromURL function. The vulnerability originates from insufficient URL validation in the library's JSON loading component, enabling internal network probing, access to cloud metadata endpoints, or interaction with internal services not otherwise reachable. A public proof-of-concept exists via the project's GitHub issue tracker, and the maintainer has not responded to the disclosure; no patch is available at time of analysis.
Stack exhaustion in java-json-tools json-patch ≤1.13 enables remote unauthenticated denial of service by submitting a crafted deeply-nested JSON Merge Patch document to any application endpoint that invokes JsonMergePatch.fromJson. The vulnerability triggers an uncontrolled recursive deserialization path in JsonMergePatchDeserializer.java, causing JVM thread stack exhaustion. The CVSS 4.0 vector (VC:N/VI:N/VA:L) confirms the impact is limited to availability; no confidentiality or integrity impact has been identified. A public exploit/proof-of-concept exists in the GitHub issue tracker, and no patched release version has been independently confirmed.
Unauthenticated remote user deletion is possible in SourceCodester Simple Traffic Offense System 1.0 via the delete-user.php endpoint, which processes a user-supplied ID parameter without any session or privilege check. An attacker with HTTP access to the application can delete arbitrary user accounts without logging in, impacting data integrity and application availability. A publicly available proof-of-concept exploit exists on GitHub (no public exploit identified at time of analysis applies to KEV only - PoC is confirmed); the vulnerability is not listed in CISA KEV.
OS Command Injection (CWE-78) in Dell Secure Connect Gateway 5.0 permits low-privileged remote attackers to execute arbitrary operating system commands against both the Appliance and Application deployment variants. Affected versions are SCG 5.0 Appliance prior to 5.36.00.16 and SCG 5.0 Application prior to 5.36.00.00; Dell has released fixes under advisory DSA-2026-382. No public exploit code or CISA KEV listing has been identified at time of analysis.
Unauthenticated remote denial-of-service in llama.cpp's RPC server allows a remote attacker to crash the server process by sending a crafted tensor descriptor with a manipulated `ne` (number-of-elements) argument to `rpc_server::deserialize_tensor`, triggering a reachable assertion (CWE-617) and aborting the process. Affected versions span llama.cpp up to 0.4.0 when the optional RPC server component is compiled and active. No patch has been released; the upstream GitHub issue was closed automatically due to inactivity, and no public exploit or CISA KEV listing exists at time of analysis.
IP address spoofing via X-Forwarded-For header manipulation in PrestaShop's Tools::getRemoteAddr() function allows unauthenticated remote attackers to impersonate arbitrary IP addresses when the application runs behind a reverse proxy, load balancer, or CDN. Affected versions include PrestaShop branches prior to 9.1.5 and prior to 8.2.8. Exploitation enables bypassing IP-based access controls such as maintenance mode allowlists, forging security and audit log entries, and evading third-party mechanisms like geolocation restrictions, fraud detection systems, and request throttling. No public exploit code or active exploitation has been identified at time of analysis.
Quadratic memory and output amplification in league/commonmark's XmlRenderer affects all 2.x releases from 2.0.0 through at least 2.8.x, enabling remote unauthenticated denial of service against PHP applications that convert untrusted Markdown to XML. The renderer emits depth-proportional indentation for every XML tag, causing O(n²) byte growth in both output size and memory allocation for deeply nested structures - reachable with as little as a single line of nested blockquotes. No public exploit has been identified at time of analysis, and exploitation is limited to applications using the opt-in XmlRenderer or MarkdownToXmlConverter code path.
Cross-site scripting in league/commonmark 2.7.0-2.9.0 allows unauthenticated attackers to inject arbitrary JavaScript into rendered HTML output by prefixing an attribute name with a U+000C form feed byte, bypassing the AttributesExtension's event-handler filter and the allow_unsafe_links safeguard. The bypass exploits a mismatch between what PHP's built-in trim() considers whitespace (excluding U+000C) and what PCRE \s matches (including U+000C), leaving the byte embedded in the attribute name where PHP's string comparison logic fails to recognize it but browsers' HTML parsers strip it and treat the remainder as a genuine event handler. Exploitation requires the AttributesExtension to be enabled and untrusted Markdown to be fed to the converter; no public exploit has been identified at time of analysis, though the GHSA advisory provides a precise technical breakdown sufficient to reproduce the issue.
Server-side request forgery in Knowns ≤0.33.0 enables unauthenticated remote attackers to make the server issue outbound HTTP requests to arbitrary caller-supplied destinations via the POST /api/embedding-models/test endpoint. The application leaks network reachability information through transport-layer error messages, allowing attackers to enumerate internal hosts, cloud metadata services (e.g., AWS IMDSv1 at 169.254.169.254), and adjacent services. No public exploit or CISA KEV listing exists at time of analysis, and the CVSS 4.0 score is 6.9 (Medium), reflecting real but bounded impact.
Cross-site scripting in Standard Notes for Android's Evernote (.enex) and Google Keep HTML note importers allows an attacker who socially engineers a victim into importing a crafted file to execute arbitrary JavaScript inside the app's WebView, stealing in-memory encryption keys and plaintext note data and invoking native Android device APIs. The impact is especially severe given Standard Notes' core value proposition is end-to-end encrypted note storage - key theft directly undermines that guarantee. Proof-of-concept exploit code exists per CVSS 4.0 E:P supplemental metric; no active exploitation (CISA KEV) identified at time of analysis.
Out-of-bounds read in the 92181 markdown C library's lds() function allows remote unauthenticated attackers to read memory beyond the intended buffer by supplying crafted markdown input. The flaw exists in md.c prior to commit c000d2f9cf390c315378d3717cf20911cf3e80a6, where the lds() function iterated over space characters without enforcing an end-of-buffer boundary. The CVSS 4.0 vector (6.9) reflects low confidentiality, integrity, and availability impact; no public exploit or CISA KEV listing exists at time of analysis.
Credential exfiltration in JetBrains YouTrack before 2026.2.18769 allows a project administrator to redirect stored mailbox credentials to an attacker-controlled server by modifying the mailbox host setting without triggering re-authentication. The missing re-authentication gate means any project admin who has been compromised, is malicious, or has temporarily elevated access can silently capture email account credentials (username and password) already stored in YouTrack. No public exploit has been identified at time of analysis, and CISA has not added this to the Known Exploited Vulnerabilities catalog.
Uncontrolled memory allocation in Eclipse Ankaios 0.1.0-1.0.1 allows a workload with granted Control Interface access to abort the agent process by declaring an arbitrarily large protobuf message length over the Control Interface FIFO, causing unbounded heap allocation and an OOM-triggered process crash. The impact is complete loss of orchestration services for all workloads managed by the affected agent instance. No public exploit has been identified and no active exploitation is confirmed; patch v1.0.2 is available.
Use-after-free (CWE-415/416) in the OpenVPN ovpn-dco-win Windows kernel Data Channel Offload driver versions 2.5.0 through 2.8.6 enables a local authenticated user to trigger a system crash by sending crafted control messages to the driver. Because the flaw resides in a kernel-mode driver, successful exploitation causes a full system crash (BSOD), affecting availability of the entire host. No public exploit code or active exploitation has been identified at time of analysis.
The nRF5340 SoC's on-the-fly QSPI flash decryption scheme for Execute-in-Place (XIP) contains a cryptographic architectural weakness that allows a physically-present attacker to undermine the confidentiality and integrity of externally stored encrypted firmware. Applications built on the nRF5340 that use external QSPI flash for encrypted XIP and rely on that encryption for firmware IP protection or tamper resistance are affected regardless of nRF Connect SDK version, as the root cause is in the SoC's hardware decryption block. No public exploit is identified at time of analysis; the weakness is intrinsic to the hardware architecture and cannot be fully resolved through a software-only patch.
Privilege escalation via a double-free memory corruption bug in camera middleware affects 17 MediaTek chipset variants, allowing an attacker who has already gained System-level privilege to escalate further to higher privilege tiers without any user interaction. The flaw is confirmed by MediaTek in their September 2026 Product Security Bulletin under Patch ID ALPS11134622 and Issue ID MSV-8894. No public exploit code or active exploitation is confirmed; SSVC designates this as non-automatable with no current exploitation activity.
Local privilege escalation in MediaTek's Power HAL component allows a process operating with System-level privileges to escalate further - potentially to root or kernel - via a stack-based out-of-bounds write caused by a missing bounds check. The vulnerability affects approximately 40 distinct MediaTek SoC models spanning multiple Android device generations. No public exploit has been identified at time of analysis, and SSVC assessment indicates exploitation is currently none, though technical impact is rated total given full C/I/A compromise post-exploitation.
Local privilege escalation in MediaTek's geniezone Trusted Execution Environment component affects 17 Android chipsets through a use-after-free memory corruption flaw. Exploitation requires an attacker who has already obtained System-level privilege on the device, allowing them to escalate further - potentially to kernel or TEE privilege - with full confidentiality, integrity, and availability impact. No public exploit code or active exploitation has been identified at time of analysis; the September 2026 MediaTek security bulletin addresses this with Patch ID ALPS10900510.
Memory corruption via use-after-free in the Android SurfaceFlinger graphics compositor, present on specific MediaTek chipsets (MT6881, MT6993, MT6858, MT8668), enables a local attacker who has already obtained System-level privilege to escalate to higher privileges - potentially root or kernel - without any user interaction. Reported by MediaTek in the September 2026 Security Bulletin under Patch ID ALPS11123860 and Issue ID MSV-8890. No public exploit has been identified at time of analysis, and CISA SSVC rates exploitation status as none and automatable as no, consistent with the high-privilege prerequisite.
Privilege escalation in MediaTek's Power Hardware Abstraction Layer (Power HAL) allows an attacker who has already obtained System-level privilege on an Android device to further escalate to higher privilege through a type confusion vulnerability (CWE-843). The flaw spans a broad range of MediaTek chipsets - over 40 SoC variants - meaning it affects a wide swath of Android smartphones, tablets, and embedded devices. No public exploit has been identified and SSVC exploitation status is confirmed as 'none' at time of analysis, though the technical impact is rated 'total' by CISA's decision framework.
Local privilege escalation in the MediaTek Audio Hardware Abstraction Layer (HAL) allows an attacker who has already obtained System-level privilege to further escalate to higher privileges via a use-after-free condition (CWE-416). The vulnerability affects over 65 MediaTek chipset models spanning Android smartphones, tablets, IoT, and connected-device SoCs. No public exploit code or CISA KEV listing exists at time of analysis; however, the broad chipset surface across Android device families makes this relevant for any organization managing large Android fleets.
Privilege escalation via use-after-free in MediaTek's Android Audio Hardware Abstraction Layer (Audio HAL) affects over 65 distinct chipset families spanning mobile, tablet, and IoT SoCs. An attacker who has already obtained System-level privilege on a device running an affected MediaTek chipset can trigger the UAF condition to escalate further - gaining full control over confidentiality, integrity, and availability without any user interaction. No public exploit or active exploitation has been identified at time of analysis; the patch is available through MediaTek's September 2026 product security bulletin.
Local privilege escalation in MediaTek's Audio Hardware Abstraction Layer (HAL) on Android devices allows an attacker who already holds System-level privilege to further escalate access through improper input validation, achieving full confidentiality, integrity, and availability compromise of the affected device. The vulnerability spans 57 distinct MediaTek chipsets across the MT6xxx and MT8xxx families and is addressed in MediaTek's September 2026 security bulletin under Patch ID ALPS11087540 (Issue ID: MSV-8246). No public exploit code or active exploitation has been identified at time of analysis, and EPSS places exploitation probability at 0.13%.
Hard-coded credentials in Dell Secure Connect Gateway (SCG) 5.0 enable remote attackers to bypass authentication and access protected system functions. Both the Appliance variant (versions prior to 5.36.00.16) and the Application variant (versions prior to 5.36.00.00) are confirmed affected per Dell advisory DSA-2026-382. Exploitation exposes sensitive information with high confidentiality impact, and no active exploitation or public proof-of-concept has been identified at time of analysis.
Unauthenticated-read path exposure in the odh-dashboard component of Red Hat OpenShift AI allows any valid dashboard user to retrieve full Kubernetes Secret objects - including the cluster NVIDIA NGC API key (apiKeySecret) and NIM image pull secret (nimPullSecret) - via GET /api/nim-serving/:nimResource without an authorization check. The route uses the dashboard's elevated service account to proxy Kubernetes API calls, bypassing the admin-gating that protects the equivalent create and delete operations on the same NIM credentials. Affected organizations risk unauthorized access to NVIDIA NGC cloud services and private container registries under their accounts. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Insecure Direct Object Reference (IDOR) in JetBrains YouTrack before 2026.2.18634 allows authenticated low-privileged users to enumerate and read private issues and starred folder contents belonging to other users across organizational boundaries by manipulating user profile API identifiers. The CVSS 6.5 score (AV:N/AC:L/PR:L/UI:N/C:H) reflects straightforward network exploitation requiring only a valid session. No public exploit or KEV listing is present, but the low attack complexity and high confidentiality impact make this a meaningful data-exposure risk in multi-tenant or multi-organization YouTrack deployments.
Insecure Direct Object Reference in JetBrains YouTrack before version 2026.2.18634 permits authenticated users to access other users' private saved searches through the watchRules and issueListConfig API endpoints. The endpoints fail to enforce authorization checks on user-controlled object identifiers, allowing horizontal privilege escalation without elevated permissions. No active exploitation or public proof-of-concept code has been identified at time of analysis.