OpenBankProject OBP-API builds up to and including 1.10.1 deserialize attacker-controlled data through the KryoInjection.invert routine in the Redis cache handler (code/api/cache/Redis.scala), which can lead to code execution or data tampering by anyone able to plant a crafted Kryo-serialized object in the API's Redis cache. Exploitation is rated difficult: the supplied CVSS 4.0 vector requires high privileges (PR:H) and high attack complexity (AC:H), and the scored impact is limited (VC:L/VI:L/VA:L, score 1.2). Public exploit material exists via the referenced GitHub issue (GHSA-889g-wggr-jrrq / issue 2888), but there is no CISA KEV confirmation of active exploitation, and the upstream project had not responded to the issue report at the time of analysis.
A DOM-based cross-site scripting flaw in the Crawl4AI Playground UI (versions before 0.9.3) lets attacker-controlled crawled content — for example a malicious page title — be re-parsed as HTML inside the forceHighlightElement() routine, which writes textContent back into innerHTML. Because the Playground stores the operator's API token in sessionStorage, a successful payload can read that token and hand an attacker full control of the underlying Crawl4AI server. Exploitation requires the operator to load attacker-controlled page content in the Playground and trigger the highlight action; no public exploit code or CISA KEV entry is confirmed in the supplied intelligence, and the vendor has released a fix in 0.9.3.
Let me synthesize. CVE-2026-91942: crawl4ai before 0.9.3, DOM-based XSS in Docker Playground UI, innerHTML assignment of untrusted crawl results. Malicious PDFs with event-handler markup execute JS in Playground origin, steal API tokens from sessionStorage. CVSS 4.0 vector given: AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N — score 5.1. UI:A means user interaction active (user must open the PDF in the playground). Subsequent system impacts limited (SC:L/SI:L). PR:N unauthenticated. Wait — description says "steal API tokens from sessionStorage for authenticated API abuse" — the attacker themselves may be unauthenticated but the victim is an authenticated user. PR:N with UI:A. Let me construct fields. product_name: "Crawl4AI" (2 words? one token). Fine. prevalence: crawl4ai is a popular open-source LLM-friendly web crawler — medium? It's fairly widely used in AI/RAG pipelines. It's a Python library with ~40k GitHub stars. Deployment footprint: medium. Docker Playground UI is a specific deployment mode though — that reduces. I'd say "medium" with basis "popular open-source LLM crawler; Playground UI subset narrower". Hmm, but the specific vulnerable component (Docker Playground UI) is niche. But prevalence is about the product. crawl4ai is popular open-source library. Medium seems fair. assessed_cvss_vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N — scope changed because it impacts the Playground origin / API tokens (sessionStorage tokens, the script executes in the Playground origin). Actually the CVSS 4.0 vector shows SC:L/SI:L which implies subsequent system impacts → in 3.1 that maps to S:C with C:L/I:L. Hmm, but is scope change right? The vulnerable component is the Playground UI; the impacted component is... the API tokens / authenticated API. The XSS executes in the Playground origin — same origin. Stealing sessionStorage tokens then abusing the API — the API is arguably a different security authority. Given the CVSS 4.0 has subsequent-sys
Stored XSS in bizwell xClick groupware allows authenticated low-privileged users to inject malicious scripts that execute in the browsers of other users who view the affected content. The flaw stems from improper input validation (CWE-20) across xClick releases R2, R3, and R3.1. No public exploit code or active exploitation has been identified at time of analysis, and real-world impact is limited by the product's regional deployment footprint.
Stored cross-site scripting in Netcore NR255-V firmware 1.5.130703 allows an attacker positioned on the same LAN to inject script through DHCP client hostname fields and ARP bind entries; the router persists the payload and network_config.js and network_security.js render it unescaped in the web management interface. When an administrator opens the DHCP dynamic IP list or ARP bind list page, the injected script runs in their authenticated session, potentially exposing session tokens or enabling management actions as the admin. The issue is rated CVSS 5.1 (AV:A, PR:N, UI:P) and no public exploit was identified at time of analysis.
Reflected cross-site scripting in QloApps up to and including 1.7.0 lets an attacker inject JavaScript into the back-office Hotel Reservation System feature-management page by supplying a crafted child_features parameter that is echoed back unescaped inside a validation error message. Only authenticated back-office users are targeted, and they must follow an attacker-supplied link before the payload fires in their administrative session, which is why the CVSS 4.0 base score is a moderate 5.1 rather than critical. No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV, but an upstream fix exists in commit 54a3b30 / PR #1796.
Stored cross-site scripting in the Netcore NR255-V router (firmware 1.5.130703) lets a user with access to the web management interface persist malicious JavaScript into DHCP static IP reservations and IP ACL entries via the dhcp_add_staticip_cgi, dhcp_staticip_show_cgi, ip_acl_set_cgi and ip_acl_show_cgi handlers. The injected script is stored on the device and executes in the browser of any other user — typically a higher-privileged administrator — who opens the affected DHCP or ACL pages, enabling session theft or unauthorised configuration changes performed as that victim. The issue carries only a moderate CVSS 4.0 base score of 5.1 (AV:N/AC:L/AT:N/PR:L/UI:P), no CISA KEV listing and no confirmed public exploit code, so it is a real but comparatively narrow risk concentrated on this specific legacy SOHO router model.
Stored cross-site scripting in the web management interface of the Netcore NR255-V router (firmware 1.5.130703) allows an attacker who already holds a valid management session to plant persistent JavaScript on routing and NAT configuration pages; the payload then executes in the browser of any user who later opens those pages, including higher-privileged administrators. The flaw sits in four CGI handlers (routing_tab_add_cgi, routing_table_list_show_cgi, route_policy_add_cgi, route_policy_parame_show_cgi) that fail to sanitise or encode route/NAT parameters before rendering them. CVSS 4.0 is a moderate 5.1 (AV:N/AC:L/AT:N/PR:L/UI:P), reflecting the need for an authenticated foothold plus a victim viewing the page; at time of analysis there is no CISA KEV listing and no public exploit code identified.
Information disclosure in Google Chrome for Android before 153.0.8010.47 allows a locally installed app on the same device to retrieve sensitive browser data because an authorization check is missing on an Android-exposed Chrome component. The flaw is local-only and rated AC:H, giving a modest CVSS 3.1 base of 5.1 (AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) even though the confidentiality impact is complete; Google's Chromium team nevertheless classifies it as High severity. Google has shipped a fix in 153.0.8010.47, there is no CISA KEV listing, and no public exploit code has been identified at time of analysis.
Netcore NR255-V firmware 1.5.130703 stores attacker-supplied script in L7 content management fields - specifically the call board text and policy group handling components - and later renders that content through eval() sinks, so the payload executes in the browser of any user who views the affected page. Exploitation requires an authenticated management session (CVSS PR:L) plus a victim who opens the poisoned page (UI:P), which keeps the practical severity moderate (CVSS 5.1, low confidentiality and integrity impact). There is no public exploit identified at time of analysis and no CISA KEV listing; the issue is documented through a VulnCheck advisory and a GitHub proof-of-concept-style technical write-up rather than a vendor security bulletin.
Arbitrary image-file read in Newell Brands DYMO Connect Desktop allows a crafted file-path parameter sent to the local LoadImageAsPngBase64 web-service endpoint to pull image files from anywhere on the host filesystem rather than from the intended directory. Versions before 1.6.2 are affected; the shipped fix only whitelists file extensions and does not enforce a directory boundary, so out-of-scope reads of files with allowed image extensions remain possible by accepted design. No public exploit code has been identified at time of analysis, and impact is limited to confidentiality (CVSS 4.0 base 5.1, Medium, AV:L/PR:N/UI:N/VC:L).
Stored HTML injection in the 'Firma Circolare' (circular signing) feature of the Design Scuole Italia WordPress theme, affecting versions 1.0 through 2.17.3, allows an authenticated user who can edit the 'sign' parameter to persist arbitrary HTML that forces visiting users to an attacker-controlled URL. Exploitation requires a valid low-privileged account with access to the signing feature (PR:L) plus a victim subsequently viewing the affected page (UI:P/UI:R), and the impact is confined to integrity of the rendered page with no confidentiality or availability effect. No public exploit identified at time of analysis and CISA's SSVC assessment records Exploitation: none with Technical Impact: partial, so this is a low-to-moderate priority issue rather than an urgent one.
A reflected cross-site scripting (XSS) flaw in the Italian government school WordPress theme "Design Scuole Italia" lets an unauthenticated attacker run arbitrary JavaScript in a victim's browser by luring them to a crafted URL whose archive parameter is echoed unsanitized by filters-scheda-didattica.php. All versions from 1.0 through 2.18.2 are reported affected by ENISA/EUVD. No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV, but any site running the theme is exposed to session theft, credential phishing and drive-by redirects against visitors and logged-in administrators alike.
Failed authentication attempts against MISP 2.5.45 and earlier stop being written to the audit log whenever the Redis instance used for log throttling is unreachable, and they remain unwritten for the entire duration of the outage. The flaw is in AppController::_shouldLog(), which treats 'Redis returned false' as 'nothing to log' rather than degrading to verbose logging, so brute-force or credential-stuffing activity against the login endpoint silently disappears from the record. No public exploit code and no CISA KEV entry exist for this issue, and the vendor shipped a fix in MISP 2.5.46 via commit a39b25d2f.
Incomplete comparison logic in OpenClaw ClawScan's built-in static scanner (internal/runner/static_scanner.go) through version 0.1.6 lets packaged Python bytecode slip past the deterministic text scan, so malicious skills or OpenClaw plugins can pass inspection undetected. The vendor fix in v0.1.7 (commit 9f6a6fbb9f1137345566d0ab44c73893dfe112fa, PR #41) explicitly adds flagging of packaged Python bytecode as opaque executable content. A publicly available exploit (GitHub issue #40) demonstrates the bypass, but the flaw is local-only, requires a low-privileged local user plus passive user interaction, and yields only a low integrity impact (CVSS 4.0 base 0.9).
Stack exhaustion via unbounded recursion in GPAC's scenegraph node activation routine allows a local attacker to crash the application or corrupt memory when a malicious or malformed multimedia scene file is opened. Affected versions up to commit f1219cde lack a recursion depth guard in gf_node_activate_ex and gf_node_deactivate_ex, enabling crafted cyclic or deeply nested VRML/X3D/XMT scene graphs to exhaust the call stack. A publicly available proof-of-concept (poc_17_nstatx.zip) exists; however, no active exploitation has been confirmed and impact is limited to low integrity and availability consequences on the local system.
ClawScan 0.1.6 and earlier misclassifies NUL-obfuscated or otherwise ambiguous files as opaque binary content, so its built-in static scanner skips them and malicious OpenClaw skill or plugin code passes inspection undetected. Exploitation requires local access and the victim to run or act on a ClawScan report, giving the attacker a way to smuggle hostile code past the only automated gate. Public exploit code exists (GitHub issue #42), and the defect is resolved in 0.1.7 via commit 04401337b3adb9343bd338b21e5e258bf49ca9c8; CVSS 4.0 base score is 2.4, reflecting the limited integrity-only, local impact.
Stored cross-site scripting in Netcore NR255-V firmware 1.5.130703 lets an authenticated administrator plant malicious JavaScript through the router's DDNS configuration, which then executes persistently every time the DDNS WAN list page (ddns_wan_list_show.cgi) is opened. The flaw stems from unsafe eval() handling of DDNS-supplied data in that CGI endpoint, so the injected payload is saved with the device configuration and survives page reloads and reboots. Confidentiality and integrity impact are rated low and no public exploit code has been identified at time of analysis, though the VulnCheck advisory and a public reference write-up are available.
Cookie attribute injection in http4s's ResponseCookie.render allows any application that builds a response cookie from unvalidated input to emit attacker-controlled Domain, Path, or SameSite attributes — widening cookie scope or stripping protections — while embedded control characters can enable HTTP header splitting on permissive backends. All applications using http4s versions before 0.23.35 or 1.0.0-M47 that feed untrusted data into the name, content, domain, path, or extension fields of a ResponseCookie are in scope. No public exploit code and no active exploitation were identified at time of analysis, and the moderate CVSS base of 4.8 reflects the high-complexity precondition that the consuming application must itself pass unsanitized input into the cookie constructor.
Stored cross-site scripting in the Netcore NR255-V router (firmware 1.5.130703) lets an authenticated administrator persist malicious JavaScript inside a QoS rule name, which the qos_xianz_add_cgi, qos_xianz_show_cgi, qos_filter_add_cgi and qos_filter_show_cgi handlers later pass to eval() without sanitisation. The injected script runs in the browser of any administrator who subsequently opens the affected QoS pages, allowing session theft, credential capture, or silent reconfiguration of the device through the victim's authenticated session. No public exploit code or active exploitation has been confirmed from the available intelligence.
The mailto scheme parser added to fast-uri 4.1.3 (and still present in 4.1.4) compares query field names against the reserved names 'to', 'subject' and 'body' while they are still percent-encoded, then decodes them only when storing them as generic headers — so a percent-encoded spelling of a reserved field is invisible to that check but is written back out as the literal field name during serialization. Any application built on Fastify, ajv or similar Node.js stacks that parses a mailto URI, validates, logs or displays the recipient list, and then re-serializes it with fast-uri before sending can be tricked into delivering mail to an attacker-chosen address, with subject and body content smuggled across the same roundtrip. The flaw is rated 4.8 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N, CWE-172 Encoding Error) and is fixed in fast-uri 4.1.5.
Host allowlist and denylist bypass in fast-uri, the dependency-free RFC 3986 URI parser used by Fastify and ajv, affects releases before 2.4.7, 3.0.0 through 3.1.7, and 4.0.0 through 4.1.4. Because the library lowercases the host before percent-decoding it, an encoded uppercase octet such as %41 survives as a literal 'A', and in scheme-relative references like //host the canonicalization pass that would normally repair this never runs, so parse, normalize, and equal disagree about the same hostname. Any application that makes a case-sensitive host decision on fast-uri output — a host allowlist or denylist comparing the parsed host, or code relying on equal — can be steered past that check while the evading spelling still resolves to the gated host in DNS and HTTP. Exploitation status: no public exploit identified at time of analysis.
An uninitialized-resource flaw (CWE-908) in ANGLE, the graphics translation layer used by Chrome to render WebGL and accelerated 2D content, is present in Google Chrome builds prior to 153.0.8010.47. A remote attacker who convinces a user to open a crafted HTML page can cause ANGLE to return memory contents that were never initialized, disclosing data that is outside Chrome's sandbox boundary — an information-disclosure primitive rather than a code-execution bug. Google rates the issue High severity (Chromium) and has published a fixed build; the NVD CVSS score is 4.7 and there is no CISA KEV entry or identified public exploit code at time of analysis.
Google Chrome for Android versions prior to 153.0.8010.47 contain an out-of-bounds read in the WebGL rendering path that allows a remote attacker to leak memory from outside the browser sandbox by luring a victim into opening a crafted HTML page. Google labels the Chromium security severity as Critical, while the published CVSS 3.1 base score is a comparatively modest 4.7 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) because the flaw yields a limited confidentiality leak rather than code execution or data modification. A vendor patch is available, and no public exploit code or CISA KEV entry was identified at the time of analysis.
A locally exploitable flaw in the Core component of Oracle VM VirtualBox 7.2.16 lets an attacker who already holds a high-privileged logon on the host read a limited subset of VirtualBox-accessible data and trigger a partial denial of service against the hypervisor. The scope-change rating (S:C) indicates the impact can extend beyond VirtualBox itself to other products on or around the host, but exploitation requires local logon with elevated privileges and there is no indication of remote reach. No public exploit code has been identified at time of analysis and the flaw is not listed in CISA KEV, so real-world priority is driven by host-access hygiene rather than internet-facing exposure.
Symlink-based path traversal in the buildah/copier Go package allows a crafted tar archive to create files outside the intended extraction directory when the library is used outside of Buildah by a non-root caller. Buildah's own extraction path applies chroot hardening and is explicitly not affected, so real exposure sits with downstream consumers of the package - including Red Hat Ansible Automation Platform 2 and Red Hat Enterprise Linux 10 in the published CPE data, plus other tagged Red Hat products - that unpack untrusted archives with it. Impact is integrity-only (no confidentiality or availability component in the assessed vector), the victim application must actually process the malicious archive (UI:R), EPSS is low at 0.25% (16th percentile), CISA's SSVC records exploitation as none and automatable as no, and no public exploit code has been identified at time of analysis.
A path-handling flaw in the containers/storage Go library lets a crafted tar archive containing a malicious whiteout entry (for example 'victim/.wh.') cause UnpackLayer, ApplyLayer, or ApplyUncompressedLayer to replace the extraction destination directory with an arbitrary file. Systems that unpack container image layers with this library — notably Red Hat Enterprise Linux 10, Red Hat Ansible Automation Platform 2, OpenShift Container Platform 4, Quay 3, OpenShift Virtualization, Dev Spaces, and Red Hat Hardened Images — are in scope. Exploitation requires the operator or process to unpack an attacker-supplied archive, and the integrity impact is confined to the local extraction target; no public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV, consistent with the modest CVSS 3.1 base score of 4.4.
Denial of service in Oracle VM VirtualBox 7.2.16, where a local attacker who already holds a low-privileged logon session on the host can trigger a fault in the Core component that hangs or repeatedly crashes the VirtualBox process. Exploitation is difficult (AC:H) and requires active interaction from a different user on the same machine, and the impact is limited to availability — no confidentiality or integrity loss — giving a CVSS 3.1 base score of 4.4. No public exploit code has been identified and the issue is not listed in CISA KEV at time of analysis, so treat it as a local reliability/DoS nuisance rather than a remote compromise risk.
Rendering a crafted Lottie vector animation with Samsung's open-source rLottie library can overflow a fixed-size stack buffer during run-length-encoding of render spans, corrupting memory in the host application. The flaw affects rLottie builds at revision 480a2ad0c5d2e45458c545b8213279e9e8b71e39 and is rated only 4.4 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) because an attacker must induce the victim application to render a malicious animation; there is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV. An upstream fix exists in Samsung/rlottie pull request 607, which increases the span array capacity and adds explicit bounds checks.
A logic error in the Android kernel's ACFW FF-A (Firmware Framework for Arm A-profile) driver, implemented in acfw_ffa.c, allows a caller already holding System-level execution privileges to read memory that should remain secret, resulting in local information disclosure. Exploitation requires local access and high privileges, needs no user interaction, and affects Android devices carrying the affected kernel build per Google's Pixel security bulletin for September 2026. No public exploit code or active exploitation has been identified at time of analysis, and the CVSS 3.1 base score of 4.4 reflects limited confidentiality impact confined to already-privileged local actors.
A logic error in the Android kernel's VPU (Video Processing Unit) driver can disclose kernel memory contents to code that is already running with System-level privileges. The flaw is local-only: CVSS gives AV:L with PR:H, so an attacker must first obtain elevated (System) execution on the device before triggering the information leak, and no user interaction is required once that precondition is met. There is no public exploit code and no CISA KEV listing at time of analysis, and the associated EPSS data was not supplied, so this should be treated as a post-compromise information-disclosure primitive rather than a remotely exploitable issue.
Uninitialized memory use in multiple locations of the Android kernel allows a locally-positioned attacker who already holds System-level execution privileges to read stale kernel memory contents, resulting in information disclosure. The flaw is rated CVSS 4.4 (AV:L/PR:H) and affects Android builds covered by the September 2026 Pixel/Android Security Bulletin; user interaction is not required. No public exploit code and no CISA KEV listing were identified at time of analysis, and the exploitation prerequisite of pre-existing System privileges keeps the practical risk confined to post-compromise or privileged-local scenarios.
Improper input validation in the MBU class handler (validate_ns_buf in mbu_class.rs) of the Android kernel allows a component already running with System execution privileges to supply a malformed namespace buffer and read kernel memory beyond the intended bounds, disclosing sensitive data. Affected are Android devices built on the impacted kernel (CPE cpe:2.3:a:google:android) as addressed by the September 2026 Android/Pixel security bulletin. The CVSS 3.1 score of 4.4 is intentionally modest because exploitation demands local code execution at a high privilege level (PR:H) with no user interaction; no public exploit code has been identified and no EPSS score was supplied with this record.
An out-of-bounds read in the AES-GCM-256 crypto implementation of the Android kernel (function do_sss_aes_gcm_256_op in crypto-aes.c) allows disclosure of memory contents to code that is already running at System privilege on an affected device. The flaw is a missing bounds check on an input length or index (CWE-120 class buffer handling error), rated 4.4 (Medium) with the vector CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N, meaning exploitation is local and requires the attacker to already hold System (PR:H) execution privileges; no user interaction is needed once that position is held. There is no indication of confirmed active exploitation (not in CISA KEV) and no public exploit code identified at time of analysis, and because the entry point sits behind a high privilege boundary the practical risk is a post-compromise or chained privilege-escalation information leak rather than an independent remote threat.
Local information disclosure in Google Android's CPM component allows a caller holding System-level execution privileges to read protected data by abusing a confused deputy (CWE-441) that performs an action on behalf of a less privileged requester without re-validating the caller's authority. Only locally positioned code already running with System privileges on an affected Android build can trigger the flaw, and no user interaction is required. There is no CISA KEV listing and no public exploit code identified at time of analysis, so the practical risk is limited to post-compromise or privileged-app scenarios rather than remote attack.
A partial denial-of-service flaw in the Core component of Oracle Coherence lets a low-privileged, network-positioned attacker degrade availability of the distributed data grid by sending crafted HTTP requests. Versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 of the Oracle Fusion Middleware product are listed as affected by Oracle and mirrored by EUVD (EUVD-2026-79717). The CVSS 3.1 base score is only 4.3 because impact is limited to availability (A:L) with no confidentiality or integrity effect, and no public exploit code or CISA KEV entry was present in the supplied intelligence.
Uninitialized memory handling in the Skia graphics library shipped with Google Chrome before 153.0.8010.47 lets a remote attacker leak cross-origin data when a victim opens a crafted HTML page. Exploitation is unauthenticated but requires the user to visit attacker-controlled content (UI:R), and impact is limited to partial confidentiality loss with no integrity or availability effect (CVSS 4.3). Google has released a stable-channel fix; no public exploit code and no CISA KEV listing were identified at time of analysis.
An integer overflow in Google Chrome's Compositing component (fixed in 153.0.8010.47) lets a remote attacker leak cross-origin data by getting a victim to open a crafted HTML page. Exploitation requires user interaction (the victim must load the page) but no authentication or elevated privileges, and the impact is limited to confidentiality - integrity and availability are unaffected per the CVSS vector. There is no public exploit code or CISA KEV listing at time of analysis, and the CVSS base score is only 4.3, so this is a browser-patching hygiene issue rather than an emergency incident response trigger.
Unauthenticated memory disclosure in HPE Networking EdgeConnect SD-WAN Gateways lets an attacker on an adjacent network segment read portions of system memory, exposing internal service details and workflow information. All shipping 9.4.x, 9.5.x, 9.6.x and 9.7.0.0 branches are affected per the vendor-published version ranges. The CVSS score is only 4.3 (confidentiality-only, adjacent vector) and there is no public exploit code or CISA KEV listing, so this is best treated as a reconnaissance enabler rather than a standalone compromise — its value to an adversary is in chaining it with a separate privilege-escalation or authentication flaw.
Ingestion denial of service in Bugsink affects self-hosted instances running versions 2.2.1 and earlier, where any caller holding a valid project DSN can submit an event carrying an unusually large custom tag set and force the server to write excessive tag rows. Because Bugsink digests events through a single-writer database transaction, that oversized write blocks concurrent ingestion and temporarily starves the event pipeline of other projects and clients. Version 2.2.2 fixes this by enforcing a configurable MAX_EVENT_TAGS cap (default 100) before storage; the impact is strictly availability-limited, with no data exposure, event modification, or code execution, and no public exploit code or CISA KEV listing was identified at time of analysis.
The Bitnami Sealed Secrets controller (versions up to and including 0.38.4) turns its unauthenticated POST /v1/verify and /v1/rotate endpoints into a decryption oracle, letting an attacker with internal cluster network access — or a simple kubectl port-forward to port 8080 — recover the full plaintext of any sealed secret one character at a time. The flaw chains two weaknesses: spec.template.data is excluded from the AEAD authenticated-data label binding, so an attacker can replay a victim's metadata and encryptedData verbatim and substitute arbitrary Go template logic, and template execution errors are reflected directly in HTTP status codes (200 = success, 409 = failure), producing a reliable equality oracle. No public exploit code and no CISA KEV entry were associated with this CVE at the time of analysis, though the vendor has published a GitHub security advisory.
UI spoofing in Google Chrome's Transactions Platform component lets a remote attacker who has already compromised the browser's renderer process render crafted HTML as trusted interface elements, deceiving the user. The flaw is a missing authorization check (CWE-862) affecting Chrome versions prior to 153.0.8010.47, and it is not reachable on its own: exploitation requires a separate, earlier renderer compromise plus the victim loading and interacting with the attacker's page (UI:R, AC:H). Impact is limited to low-severity confidentiality and availability effects rather than code execution or sandbox escape, no public exploit code was identified at time of analysis, and the issue is fully resolved by Chrome 153.0.8010.47.
UI spoofing in Google Chrome versions prior to 153.0.8010.47 allows an attacker who has already compromised the browser's renderer process to draw convincing but fake interface elements in front of the user via a crafted HTML page. The flaw is a missing authorization check (CWE-862) on a browser-side privileged capability, rated Medium by the Chromium team and scored 4.2 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L), with impact limited to Low confidentiality and Low availability and no integrity effect. Exploitation is not possible as a standalone initial-access vector - renderer compromise is a mandatory precondition, user interaction is required, and attack complexity is High; no CISA KEV listing and no public exploit code were identified at time of analysis. A vendor-released patch exists in Chrome 153.0.8010.47.
Oracle VM VirtualBox 7.2.16 can be hung or repeatedly crashed by a high-privileged attacker who already has an interactive logon on the host where the hypervisor runs, provided another person on the system performs an interaction such as opening or starting a crafted VM. The flaw sits in VirtualBox Core and yields availability-only impact: any hosted guest and the VirtualBox process itself can be taken down. It is scored 4.2 and the local-plus-privileged access requirement makes mass exploitation unlikely; no public exploit code or CISA KEV listing was present in the supplied intelligence at time of analysis.
Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance <= V6.0104 allows a remote attacker to execute arbitrary code via the size parameter in ptzpreset.pml component and the showmovies.pml component
Server-side request forgery in the Fabric.js `loadFromJSON` method lets an attacker who can supply canvas JSON to a server-side Fabric.js implementation coerce the host into fetching arbitrary URIs, including internal network resources. The flaw is a missing URI validation step (CWE-918) that is triggered only when the library is used to render or parse untrusted JSON in a server context; browser-only usage of the canvas library is not exposed. ZDI rates it CVSS 4.0 (AV:L/AC:H), no public exploit code has been identified at time of analysis, and the library is not listed in CISA KEV; EPSS data was not available in the supplied intelligence.
WSO2 Identity Server exposes a user-enumeration weakness in its SMS OTP login flow: the error messages returned when the OTP challenge is initiated differ depending on whether the supplied account exists, giving unauthenticated remote attackers a way to confirm valid usernames. The signal is strongest for accounts that have no mobile number registered, which produce a distinct response. No public exploit code or CISA KEV entry was identified at time of analysis, and the CVSS 3.1 score is only 3.7 — the practical value to an attacker is the harvested username list, which feeds later brute-force and social-engineering campaigns rather than yielding direct compromise.
A memory leak in the gss-ntlmssp NTLM target-info parser allows a malicious or man-in-the-middle NTLM server to gradually exhaust memory on the client by sending a crafted NTLM CHALLENGE message containing duplicated string-valued AV_PAIR entries. Each duplicate causes the parser to allocate a new string buffer without freeing the previous one, so repeated authentications accumulate leaked allocations and eventually degrade or crash the client, producing a denial of service. The impact is availability-only and low severity (CVSS 3.7, A:L), exploitation requires an attacker to control the NTLM challenge, and no public exploit code or CISA KEV listing was identified at time of analysis.
Oracle VM VirtualBox 7.2.16 (Core component) contains a low-severity information disclosure flaw that requires an attacker to already hold a high-privileged logon on the host where VirtualBox runs. A successful attack yields read access to a limited subset of VirtualBox-accessible data (C:L) and, per Oracle's scope-change rating, may affect components beyond the hypervisor boundary. No public exploit code and no CISA KEV listing were identified at time of analysis, and the CVSS 3.1 base score is only 3.2, so real-world prioritization should be low relative to other virtualization issues.
Oracle VM VirtualBox 7.2.16 contains a flaw in the Core component that lets a high-privileged attacker who already has a logon on the host trigger a partial denial of service against the VirtualBox process itself. The attack is local (AV:L) and requires elevated privileges (PR:H), but carries a scope change (S:C), meaning the successful exploit can significantly affect additional products layered on the same infrastructure. CVSS 3.1 scores this 3.2 with availability-only impact; there is no public exploit identified at time of analysis and no CISA KEV listing, so real-world urgency is low for most deployments.