Command injection in the nexus_reauth MCP tool of 0-Gaurav-0/nexus-mcp lets an attacker who can invoke that tool and control its 'url' argument run arbitrary operating-system commands through the unsanitized child_process.exec call in src/auth/browser.ts. Publicly available exploit code exists (the CVSS 4.0 vector carries E:P), the project was notified via an issue report but has not responded, and because the project uses a rolling release model no fixed version is identified; the CNA scores the issue 2.1 under CVSS 4.0 while our independent assessment rates it 8.8 under CVSS 3.1, reflecting high confidentiality, integrity and availability impact on successful injection. Exploitation requires the nexus_reauth tool to be reachable and invokable and, per the PR:L vector, some low-level tool-invocation privilege rather than fully unauthenticated access, and the practical remote (AV:N) reach depends on whether the MCP server is actually network-exposed instead of local stdio only.
Unsafe pickle deserialization in the core load APIs of DLR-RM stable-baselines3 up to 2.9.0 lets an attacker who supplies a crafted model, replay buffer, or VecNormalize artifact achieve arbitrary code execution when a victim loads it via PPO.load, load_replay_buffer, or VecNormalize.load. The flaw is a CWE-502 pickle deserialization issue with no safe-mode gate or opt-in guard in these functions, and publicly available exploit code exists; the practical attack path is sharing or publishing a poisoned reinforcement-learning checkpoint that the victim is induced to load. Our assessment scores it CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - remote delivery is possible but exploitation still hinges on a victim choosing to load the malicious file, and successful loading grants full confidentiality, integrity, and availability impact in the victim's process.
Self-cross-site scripting (XSS) in SourceCodester Drug Recommendation System 1.0 allows an authenticated admin to inject arbitrary script via the txtoldpassword and txtnewpassword parameters in the Password Change form, but the impact is limited to the user's own browser session (self-XSS) with no path to attack other users. The vulnerability requires user interaction to submit the crafted form and has a CVSS 4.0 base score of 2.0 (Low). Publicly available exploit code exists, though no confirmed active exploitation (not in CISA KEV).
Cross-site scripting in code-projects Assessment Management 1.0 allows an attacker who already holds an authenticated administrator session to inject script into the admin/add-user.php endpoint via the 'level' parameter, which is rendered back into the page without adequate output encoding. Exploitation requires user interaction - a privileged user must load the manipulated page - and the independent assessment rates the practical impact as low (integrity-limited script execution in the browser, no direct loss of confidentiality or availability). Public exploit code is available (a proof-of-concept writeup is linked from the NVD/VulDB references), but there is no indication of confirmed active exploitation in the wild.