Memory exhaustion in the Elixir Mint HTTP/2 client (mint 0.1.0 through 1.10.x) lets a malicious or man-in-the-middle HTTP/2 server pin roughly 16 MiB of client buffer memory per open connection by declaring an oversized frame and withholding its final byte. The weakness is an unbounded resource allocation issue (CWE-770) in Mint.HTTP2.Frame.decode_next/2, which only checks a frame against the client's 16,384-byte max_frame_size after the entire declared payload has arrived, causing the connection buffer to keep accumulating bytes up to the 24-bit frame-length ceiling of 16,777,215 bytes. Impact is availability-only and low severity per the independent assessment: there is no amplification because the attacker must transmit every byte the client buffers, sustained denial of service requires many concurrently held connections plus matching attacker resources, and no public exploit identified at time of analysis, with no CISA KEV listing and no EPSS signal supplied. Attacker control of the server side is required (unauthenticated from the client's perspective, reflected as AT:P), and vendor patches are available in mint 1.11.0.
Privilege escalation in Apache Karaf versions before 4.4.12 allows any authenticated user of the shell or SSH console - including one holding only the low-privilege 'viewer' role - to abuse the config:install command and write attacker-controlled content into the sensitive ${karaf.etc} directory, escalating to full administrative control of the runtime. The flaw exists because config:install has no entry in the shipped etc/org.apache.karaf.command.acl.config.cfg ACL while unmatched commands fail open, and because karaf.secured.command.compulsory.roles ships commented out in etc/system.properties; with the -o/--override flag an existing file such as users.properties, keys.properties or host.key can be overwritten, and Felix FileInstall (felix.fileinstall.dir=${karaf.etc}) hot-reloads any dropped .cfg file without a restart. The vendor rates this 'moderate'; no EPSS score, no CISA KEV entry and no public POC were provided, and no public exploit has been identified at time of analysis. Authentication is required and the vendor-fixed version is Apache Karaf 4.4.12.
Canonical LXD before 5.0.10, 5.21.8, and 6.10 lets a project-restricted client read its own private images from other projects through local fingerprint reuse during image or instance import requests. The flaw is a missing-authorization condition (CWE-862) graded CVSS 6.3 (AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N), meaning an attacker needs a valid but low-privileged credential and a multi-tenant deployment where a private image is already cached locally by another project; impact is limited to confidentiality of other projects' image content, with no code execution, write, or denial-of-service effect. No public exploit code or confirmed active exploitation was identified at time of analysis, and vendor patches are available. This is a genuine but moderate-severity project-isolation weakness rather than a critical one, and single-project or non-shared LXD hosts are not exposed.
Man-in-the-middle attacks against F&F Filipowski mH-DEVELOPER smart home modules running firmware before 3.0.30 are possible because every unit ships with the same hard-coded SSH host keys and performs no per-device key generation, so an attacker who extracts those keys from a firmware image can stand up a rogue SSH server that clients accept without any warning. Exploitation is unauthenticated (PR:N) but requires two prerequisites in combination: possession of the static keys and an on-path position between an SSH client and the device (reflected in the CVSS 4.0 AT:P requirement, and in our assessed CVSS:3.1 AC:H), which keeps this a moderate, on-path-dependent flaw rather than a mass-exploitable one; no public exploit code or confirmed active exploitation was identified at time of analysis. Impact is limited to credential and data interception (VC:L/VI:L) with no availability effect, and devices updated to 3.0.30 are not vulnerable.
Information disclosure in Eleveo Quality Management 9.7.0 allows an authenticated low-privileged user with network access to retrieve sensitive data via the /qm/cz.zoom.scorecard.webui.Scorecard/cz.zoom.scorecard.webui.Scorecard/QMBODownload endpoint. Publicly available exploit code exists, but there is no CISA KEV confirmation of active exploitation, and the assessed CVSS 3.1 impact is limited to low confidentiality loss with no integrity or availability effect. The practical risk is low-to-medium, driven by the public exploit and the need for a valid account.
Path traversal in the Scorecard.jsp endpoint of Eleveo Quality Management 9.7.0 allows an authenticated remote attacker with a valid low-privilege session to escape the intended audio-upload directory of the Questionnaire Audio Upload component and read or write files within the web server's access rights. Publicly available exploit code exists, including a proof-of-concept archive linked from the disclosure, so the technique is reproducible by anyone who can first obtain application credentials; there is no CISA KEV listing or other confirmation of active exploitation. Impact is bounded to low confidentiality, integrity, and availability rather than remote code execution, and the vendor was contacted about the disclosure but did not respond.
SQL injection in the CloudClassroom PHP Project's updateguest.php endpoint lets an attacker manipulate the 'gname' argument to inject arbitrary SQL into the application's database queries, enabling unauthorized read and partial modification of classroom data. The project is distributed as a rolling-release repository rather than versioned builds, so no discrete affected version can be enumerated, and the vendor was contacted about the disclosure but did not respond, leaving no released fix. Publicly available exploit code exists via the JaconiasDev advisory; there is no CISA KEV entry, so the activity level is proof-of-concept rather than confirmed active exploitation, and the disclosed CVSS v4.0 score of 5.3 (vector CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/E:P) reflects a moderate-severity issue whose practical risk is tempered by the product's very small deployment footprint.
Information disclosure in Eleveo Quality Management 9.7.0 allows an authenticated low-privilege remote attacker to read sensitive data via the createAndSaveAudit function of the GWT RPC handler at /qm/cz.zoom.scorecard.webui.Scorecard/QMUtilsService. Publicly available exploit code exists, but exploitation requires a valid session and network access to the web tier, and the impact is limited to confidentiality with no integrity or availability effect. No vendor patch has been identified; the vendor did not respond to the disclosure.
LDAP injection in Eleveo Call Recording Software 9.7.0 lets an authenticated, low-privileged user manipulate the Username argument of the User Management endpoint /callrec/userAddAction.do so that unsanitized input is incorporated into an LDAP directory query, resulting in low-impact disclosure of directory information. The attack is reachable remotely and requires no user interaction, but it is gated behind a valid low-privilege account and a deployment whose user management is backed by an LDAP directory. Publicly available exploit code exists, including a proof-of-concept linked from the VulDB disclosure, and the vendor was contacted but did not respond; EPSS and CISA KEV do not indicate confirmed active exploitation. With a CVSS 5.3 base score and confidentiality-only impact (C:L, no integrity or availability effect), this is a high-CVSS-appearance-but-modest-real-risk issue.
Improper access control in Eleveo Call Recording Software 9.7.0 allows a low-privilege authenticated user to exercise functionality reachable through the Query Builder endpoint /callrec/searchAction.do that should require higher privileges, resulting in limited unauthorized read and manipulation of call-recording data. The flaw is remotely reachable over the web interface with low attack complexity and no user interaction, and the assessed vector (CVSS:3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N, CVSS 4.0 base 5.3) reflects bounded confidentiality and integrity impact with no scope change. Publicly available exploit code exists - including a publicly shared proof-of-concept file - but attackers must first hold a valid account on the affected system, and the vendor was contacted about the disclosure without responding, so no patch is currently available.
SQL injection in code-projects Matrimonial System 1.0 allows authenticated remote attackers to manipulate the fname parameter in the /create_profile endpoint, potentially leading to unauthorized data access or modification. The vulnerability requires a low-privilege account and network access; publicly available exploit code exists, though no active exploitation has been confirmed (CISA KEV not listed). Given the low technical impact (VC:L/VI:L/VA:L) and near-zero real-world deployment, overall risk is considered low.
Authenticated low-privileged attackers can upload arbitrary files to Acrel Electric's Unet Web Service (versions up to 20260814) via the /exchange/attachment/upload endpoint, potentially leading to remote code execution if uploaded files are stored in a web-accessible directory and executed. Publicly available exploit code exists, but valid credentials are required and no active exploitation has been confirmed (not in CISA KEV). This is a moderate-priority vulnerability with limited direct impact unless the unconfirmed RCE escalation condition is met.
Agentis versions 4.44 up to (but not including) 4.6 are vulnerable to a reflected cross-site scripting (XSS) flaw (CWE-79) that allows an attacker to inject script into HTML attribute contexts within generated web pages. Exploitation requires a victim to load attacker-controlled input, typically via a crafted link, and no authentication is required for the attacker; the impact is limited to the victim's browser session with low confidentiality and integrity impact. No public exploit code has been identified at time of analysis, and the vendor CVSS 3.1 base score is 6.1.
SQL injection in the Timesheet Dashboard of DevaslanPHP project-management (versions 1.2.1, 1.2.2, 1.2.3, 1.2.4 and v2.0.0-beta1) lets an authenticated remote attacker with a valid low-privileged account manipulate the 'filter' argument consumed by whereRaw() in app/Filament/Widgets/Timesheet/MonthlyReport.php and inject SQL against the application's backend database. Publicly available exploit code exists (a proof-of-concept write-up is published on GitHub), so the technique is within reach of moderately skilled attackers, although exploitation still requires a working session on the instance. The vendor was contacted about the disclosure and did not respond, so no vendor-released patch has been identified at time of analysis; the vendor-assigned CVSS 4.0 base score is 5.3 (Medium), while our independent assessment rates the confidentiality impact High with only limited integrity impact.
Authenticated SQL injection in the DevaslanPHP project-management Timesheet Dashboard (versions 1.2.1 through 1.2.4 and 2.0.0-beta1) allows a low-privilege logged-in user to inject arbitrary SQL through the `filter` argument consumed by the whereRaw() call in app/Filament/Widgets/Timesheet/ActivitiesReport.php, exposing or altering backend database data. Publicly available exploit code exists (a GitHub write-up demonstrating the Timesheet Dashboard Chart Filter injection, and the CVSS 4.0 vector carries E:P), and no CISA KEV entry indicates confirmed active exploitation. The vendor was contacted but did not respond, so no patched release has been confirmed and the disclosure is tracked via VulDB.
SQL injection in dayrui XunruiCMS up to version 4.7.2 lets an authenticated administrator inject arbitrary SQL through the groupid argument of the group_all_edit function in the backend Group Editing feature (dayrui/App/Member/Controllers/Admin/Home.php). Because the vulnerable code sits in an Admin controller and the assessed vector carries PR:H, exploitation requires a valid high-privilege backend session; once that is held, the attack is fully remote with no user interaction. Publicly available exploit code exists (a proof-of-concept is published on GitHub), which places real but contextual risk on deployments where administrator credentials are weak, shared, or already compromised, and the vendor did not respond to disclosure, so no fixed version is available.
Reflected cross-site scripting in Eleveo Call Recording Software 9.7.0 lets an attacker inject script through the viewRoleId or cfType parameter of the Play Audio Page endpoint /callrec/audio.jsp, executing in the browser of any user who opens a crafted link. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:P, base 5.1) shows the attack is network-reachable but constrained: a low-privilege authenticated account is required and a legitimate user must interact with the link, so it is neither unauthenticated nor zero-click, and the assessed impact is limited to integrity (VI:L) with no confidentiality or availability effect recorded. Publicly available exploit code exists and the vendor did not respond to disclosure, so no patched version is available and deployed 9.7.0 instances remain exposed.
Server-side request forgery in DevaslanPHP project-management affects versions 1.2.1 through 1.2.4 and v2.0.0-beta1 and allows an authenticated, low-privileged user to make the application issue requests to attacker-chosen destinations. The flaw sits in the updateJiraProjects function of the /jira-import endpoint, where host, username and token parameters are accepted without an adequate authorization check (per the independent assessment, a missing canAccess check), so any user who can reach the Jira Import feature can force outbound connections from the server while only obtaining limited read/write effect. Publicly available exploit code exists (also reflected by the E:P metric in the vendor-supplied CVSS 4.0 vector), but there is no indication of confirmed active exploitation, and the vendor was contacted early and did not respond. This is a genuine but low-priority issue: the assessed CVSS 3.1 vector is AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N, i.e. partial confidentiality and integrity impact only, gated behind authenticated access to the import feature.
Cleartext transmission of credentials, authentication tokens, and device commands in the mH-DEVELOPER smart home module (F&F Filipowski) exposes every web interface and API session to interception by anyone sharing the same local network segment. Every version prior to 3.0.30 is affected, and because no TLS is used, a passive sniffer or an attacker who establishes an interception position (for example via ARP spoofing or a rogue access point) can harvest passwords and session tokens and then hijack sessions to issue device commands. Exploitation requires only an adjacent-network position and no authentication on the module itself; there is no confirmed active exploitation (not listed in CISA KEV) and no public exploit identified at time of analysis, but the confidentiality impact is high and the flaw is trivially exploitable wherever untrusted clients, guest Wi-Fi, or shared VLANs can reach the device. Vendor-released patch: version 3.0.30.
SQL injection in aaPanel (BaoTa) 11.8.0 and earlier allows an authenticated attacker with high panel privileges to inject arbitrary SQL commands via the `get` argument in the get_domain_status function of the Domain Handler module. Exploitation requires network access to the control panel interface and a valid high-privilege session, and the flaw carries low confidentiality, integrity, and availability impact per the assessed vector. Publicly available exploit code exists, but the input data does not indicate CISA KEV status or confirmed active exploitation; the vendor did not respond to disclosure, so no official fix is available.
SQL injection in the aaPanel BaoTa server control panel (versions up to 11.8.0) lets a user who already holds a high-privilege panel administrator session inject arbitrary SQL via the log_type argument of the getData function in /www/server/panel/class/data.py, allowing reads or modifications of the panel database. The published CVSS:4.0 vector scores it 5.1 (medium) with PR:H and UI:N, meaning it is reachable over the network but only after authentication as a panel admin - it is not remotely exploitable without credentials, and the independent CVSS:3.1 assessment rates confidentiality impact high (C:H) with integrity and availability low. Publicly available exploit code exists (a gist published alongside the VulDB entry), the vendor did not respond to early disclosure, and there is no indication of confirmed active exploitation (CISA KEV).
Local sandbox escape in deepseek-ai deepseek-harness up to 0.1.7-rc.2 lets a low-privileged attacker who already has code execution inside the Landlock-backed local sandbox break the intended isolation boundary through crafted mount profiles in packages/sandbox/sandbox-local/src/profiles.ts (CWE-653). The impact is limited to confidentiality, integrity, and availability (all Low), scored 4.8 under CVSS 4.0, and it is only relevant where the harness local sandbox is actually used as a trust boundary for untrusted agent or tool code; it is not remotely reachable and requires no user interaction but does require local, low-privileged access (AV:L/PR:L/UI:N). Publicly available exploit code exists (a GitHub write-up demonstrates the mount-escape technique), the vendor was contacted early but did not respond, and no vendor-released patch has been identified, making this a genuine but low-to-moderate priority local sandbox-escape issue rather than a remote critical.
Denial of service in F&F Filipowski mH-DEVELOPER smart home modules running versions prior to 3.0.30, where the Node.js-based fh-node service accepts JSON and URL-encoded bodies up to 250 MB through the Express bodyParser, allowing a LAN-adjacent attacker to exhaust device RAM and crash the process with out-of-memory conditions. The vendor's CVSS 4.0 vector rates this 5.9 (medium, AV:A/AC:L/AT:P/PR:L) and is availability-only with no confidentiality or integrity impact; successfully triggering the crash is probabilistic because it depends on the device's instantaneous memory usage, which the attacker does not fully control, hence the AT:P rating. Although the vector nominally requires privileges (PR:L), the accompanying assessment notes that sibling flaw CVE-2026-82930 allows all endpoints to be queried without authentication, so any LAN user can reach the vulnerable body-parsing path in practice. No public exploit code was identified at time of analysis and the flaw is not in CISA KEV; exploitation is bounded to adjacent-network reach rather than the internet. Vendor-released patch: 3.0.30.
Path traversal in FLB-Music Player 1.1.8 through 1.2.1 allows a locally present, low-privileged and authenticated user to read and write files outside the intended music-library directory by supplying crafted track data (path or metadata) that reaches the unsanitised path.join call in /src/main/core/createParsedTrack.ts. Exploitation requires local access and low privileges (CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N and our assessed CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L), so the impact is bounded to Low confidentiality, integrity and availability within the application's own privilege level with no scope change. Publicly available exploit code exists, but this is not in CISA KEV and shows no sign of confirmed active exploitation; the vendor did not respond to the disclosure, so no vendor patch is available.
Arbitrary file and directory-tree writes on an LXD client host can be achieved through the recursive file pull feature of the LXD CLI in Canonical LXD 4.0.2 through 6.9 on Linux. An attacker who already holds root inside a guest VM (CVSS PR:L) substitutes a modified lxd-agent that returns inconsistent SFTP directory listings and Lstat results, then waits for the host operator to invoke a recursive pull against that VM (UI:R); the difficulty of forging those inconsistent responses is captured by AC:H, and the write lands on the host with the operator's privileges (S:C, I:H, C:N, A:N). This is CWE-59 improper link resolution, no public exploit code was identified at time of analysis, and vendor patches are available in 4.0.14, 5.0.10, and 5.21.8.
Sandboxed Flatpak applications can deliver signals to a process group that also contains a parent process outside the app's sandbox, letting a malicious or compromised app terminate the desktop environment or user session (denial of service) on Flatpak versions before 1.18.4. Exploitation is local and gated on the victim installing and executing attacker-controlled sandboxed code; the assessed CVSS v3.1 vector (AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) records a scope change with high availability impact and no confidentiality or integrity impact. No CISA KEV listing, EPSS score, or public exploit code was identified at time of analysis, and the issue is fixed in Flatpak 1.18.4, released alongside sibling fixes CVE-2026-97023 through CVE-2026-97027.
Path traversal in PMWeb 7.x, 8.x, and 2025.x lets unauthenticated remote attackers read files from the server filesystem by supplying traversal sequences in the FullFileName or FileName argument of downloader.aspx. The issue is rated CVSS v4.0 6.9 and independently assessed as CVSS v3.1 6.9 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), i.e. a network-reachable, no-authentication, read-only file disclosure with high confidentiality impact and no integrity or availability impact. Publicly available exploit code exists, but there is no confirmation of active exploitation (not in CISA KEV), and the vendor did not respond to the disclosure; practical risk is tempered by PMWeb's niche deployment in construction and capital-program organizations and the frequent internal or access-restricted placement of those instances.
Dell Live Optics Collector versions prior to 27.2.13.310 ship with a hard-coded password (CWE-259) that a locally present, low-privileged attacker can recover and abuse to expose sensitive information. Exploitation is constrained: it requires local access to a host where the Collector is installed, an existing low-privileged account (PR:L), and user interaction (UI:R), yielding high confidentiality impact but only limited integrity impact and no availability impact (CVSS 3.1 base 5.6). There is no confirmed active exploitation (not in CISA KEV) and no public exploit code identified at time of analysis; Dell has published fix version 27.2.13.310 in advisory DSA-2026-339.
Path traversal in ABB Protection and Control IED Manager (PCM600) through version 2.14 allows a local, low-privileged attacker to overwrite or corrupt files on an engineering workstation by supplying a crafted project, configuration, or import file with manipulated pathnames. Exploitation requires the attacker to already have local access with at least low-privilege credentials (PR:L) and depends on user interaction (UI:R) - an engineer must open or import the malicious file - and impact is limited to integrity (C:N/I:H/A:N) with no confidentiality or availability effect, making this a moderate, contained risk rather than a critical priority. No public exploit code has been identified at time of analysis, and there is no confirmed active exploitation (CISA KEV) or EPSS score provided for this CVE.
A stack-based buffer overflow in the Cesanta Mongoose MQTT broker tutorial (tutorials/mqtt/mqtt-server/main.c) allows remote, unauthenticated attackers to crash the broker process by sending a manipulated MQTT message to the example's `fn` handler. Only deployments that build and expose this specific tutorial server at version 7.21 or earlier are exposed - the flaw lives in example code shipped with the repository rather than the core embedded networking library, so applications that embed Mongoose without compiling this sample are not affected. Publicly available exploit code exists, and the assessed impact is limited to denial of service, with no code execution or data disclosure indicated.
Crashing of X11 client applications can be triggered by a malicious X server exploiting an out-of-bounds read in libX11's X Input Method (XIM) trigger-key registration parser in versions before 1.8.14. This is a medium-severity denial-of-service issue (CVSS 5.5) that requires the victim to connect to an attacker-controlled X server, with user interaction (UI:R) and no authentication required (PR:N), but impact is limited to availability (client crash). No public exploit identified at time of analysis, and it is not confirmed actively exploited (CISA KEV).
An unsigned integer underflow in libXpm's XPM write/save path (libXpm before 3.5.19) causes unbounded CPU consumption and memory exhaustion, resulting in denial of service. The flaw is reachable only when an application linked against the library is made to write or convert attacker-influenced data to the XPM format, so exploitation is local (AV:L) and requires the victim to actively process the crafted input (UI:R); no privileges are required (PR:N) and there is no path to data disclosure or code execution. No public exploit has been identified at time of analysis, and no confirmed active exploitation (CISA KEV) has been reported; the upstream fix is present in a libXpm merge-request commit, with libXpm 3.5.19 indicated as the corrected version. Given the local, interaction-dependent trigger and DoS-only impact (CVSS 5.5), this is a genuine but low-priority issue.
Local denial of service in Wind River VxWorks 7 (all releases prior to 26.09) lets a low-privileged local task exhaust kernel memory by invoking process-management system calls whose specific arguments cause the subsystem to skip freeing allocated kernel memory when the calling application terminates. Repeated invocation accumulates the leak until the kernel memory pool is depleted, producing a high availability impact (CVSS 5.5, AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). No public exploit code has been identified at time of analysis and the issue is not confirmed as actively exploited; Wind River has fixed it in VxWorks 7 version 26.09.
Memory pool exhaustion in Wind River VxWorks 7 releases 24.03 through 26.03 can terminate system operations when specific service routines are invoked while the device is in a non-default configuration state, because allocated memory pools are not released before the failure propagates. The weakness is local and availability-focused (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H per independent assessment): an attacker needs low-privileged local execution on the RTOS and the affected services must be reachable, and no user interaction or network path is required. Default installations are not affected, the configuration prerequisite plus the local-access requirement substantially narrow the realistic attacker population, and no public exploit identified at time of analysis; Wind River has fixed the issue in VxWorks 7 26.09. Overall this is a moderate-severity, low-real-world-priority issue rather than a broadly exploitable one.
Local resource exhaustion in Wind River VxWorks 7 (versions prior to 26.09) allows a low-privileged local application to leak kernel memory and system file descriptors by invoking system calls with specific argument values, causing the IPNET subsystem to fail to release those resources before the calling application terminates. Per the assessed vector (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, base 5.5), an attacker must already be executing code on the device, so this is an availability-only denial-of-service rather than a remote or unauthenticated attack, and there is no confidentiality or integrity impact. There is no public exploit identified at time of analysis and no confirmed active exploitation (CISA KEV); Wind River has released a fixed version, 26.09, so the primary remediation is a firmware upgrade.
In Trusted Domain Project OpenDMARC 1.4.2 and earlier, unauthenticated remote attackers can trigger improper handling of an exceptional condition in the strcasecmp-based subdomain-walk logic of libopendmarc/opendmarc_policy.c, degrading DMARC policy evaluation. A publicly available exploit (including a technical writeup) exists, and the vendor was contacted but did not respond, so no vendor-released patch is identified at time of analysis. Impact is limited to low integrity and low availability effects within DMARC processing - no confidentiality exposure and no code execution - meaning the practical risk is spoofing/phishing that evades DMARC enforcement at sites that rely on OpenDMARC as their anti-spoofing milter.
An off-by-one error in OpenDKIM's quoted-printable decoder (dkim_qp_decode in util.c) affects all releases up to and including 2.11.0 and is reachable by remote, unauthenticated attackers who can deliver mail to a host running OpenDKIM as a verifying milter. The flaw is triggered while decoding attacker-controlled message bodies, producing low-magnitude confidentiality, integrity and availability impact rather than reliable code execution, consistent with the assessed CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. Publicly available exploit code exists, and the vendor was contacted before disclosure but did not respond, so no vendor-released patch has been identified at time of analysis.
Rancher Fleet 0.16.0 and 0.16.1 accept requests to the gitjob webhook receiver without verification whenever no webhook secret is configured, allowing any party with network reach to that endpoint to alter the spec.pollingInterval field of matching GitRepo resources in any namespace - including namespaces where the caller holds no Kubernetes credentials or RBAC. The assessed vector is unauthenticated remote (AV:N/PR:N), and impact is deliberately narrow: only a single configuration field can be changed, with no arbitrary spec edits, secret exposure, or workload execution and no confidentiality loss. Only Fleet 0.16.0/0.16.1 are affected, Fleet 0.16.2 and all pre-0.16 releases are not, and no public exploit code has been identified at time of analysis.
PyJWT versions prior to 2.14.0 accept signature segments that are not canonical Base64URL, so a token whose compact JWS signature has non-alphabet characters appended still decodes to the same signature bytes and passes verification. The practical impact is limited: an attacker who already holds a valid-but-revoked token can craft an equivalent serialized string that bypasses revocation or blocklisting logic which matches on the raw token string rather than a claim such as jti. This is a low-severity defense-in-depth flaw (assessed CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) that requires the application to compare raw serialized tokens for revocation. No public exploit identified at time of analysis.
Local code execution in Google fuse-archive versions prior to 1.24 lets an attacker hijack the external decompression helpers that libarchive launches when an archive is mounted, by prepending a directory to the process PATH or by planting a malicious binary in an attacker-writable directory that already appears on PATH. The flaw is an untrusted search path issue (CWE-426) rated 5.4 under CVSS 4.0 (AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H); exploitation requires local access as an authenticated user (PR:L), that fuse-archive run without the '-o noexternal' option, and that a victim mount an archive whose format triggers an external filter such as base64 or gpg. No public exploit code or CISA KEV entry was identified at time of analysis; version 1.22 delivered only a partial mitigation and version 1.24 fully resolves the issue by restricting external helper lookups to a sanitized, fixed PATH.
Unbounded buffering in the Server-Sent Events parser of the AG-UI Community SDK (Kotlin/Java) lets a malicious or man-in-the-middle-positioned agent endpoint drive a client-side memory exhaustion condition, degrading or killing the consuming process. All ag-ui-protocol ag-ui builds up to 2026-09-23 are flagged by CPE, specifically the Kotlin Community SDK SseParser.kt and its Java counterpart SseEventParser, which had no per-line or per-event size caps before the fix. Impact is availability-only (no confidentiality or integrity effect), an upstream fix exists as PR #2657 but was still awaiting acceptance, and no public exploit was identified at time of analysis.
Stored cross-site scripting (XSS) in eBA Plus Document and Workflow Management System (versions 6.7.141 up to but not including 10.0.11) allows an authenticated low-privilege user to persist script payloads into document, form, or workflow content that other users later render in their browser, where the script executes in the victim's session context. The assessed vector confirms the practical constraints: a valid account is required (PR:L) and a separate user must open the tainted record for the payload to fire (UI:R), with the impact crossing a trust boundary (S:C) so the script can act as the viewing user - this is therefore not exploitable against unauthenticated or default anonymously accessible deployments. Reported through TR-CERT (TR-26-1197), the issue carries a moderate CVSS base score of 5.4, and no public exploit code or confirmed active exploitation (CISA KEV) was identified at time of analysis.
Path traversal in the DeepSeek deepseek-harness boot tooling (through 0.1.7-rc.2) lets an attacker who can influence the dsh.bundle.patch argument read files outside the intended bundle path via the loadProfile function in packages/boot/app-boot/src/profile.ts. The issue is remotely triggerable with no privileges required (PR:N), but CVSS 4.0 rates it AC:H with UI:P, meaning a victim must load or apply the attacker-controlled bundle patch input, and VulDB itself characterizes exploitability as 'difficult'. Publicly available exploit code exists, but impact is confined to low confidentiality (CVSS 4.0 score 2.3; independent assessment CVSS 3.1 2.0/2.3-class finding AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N), so this is a low-real-risk issue despite the public proof-of-concept.
Reflected cross-site scripting in the OrdaSoft Book Library (Free) extension for Joomla, affecting versions below 6.4.6, lets an unauthenticated remote attacker inject arbitrary HTML and JavaScript that executes in a victim's browser session. The flaw lives in the publicly reachable book-detail view (site/views/view_book/tmpl/default.php), where the 'title' request parameter is echoed raw inside a double-quoted HTML attribute, so a value containing a double quote breaks out of the attribute and everything after it is rendered as markup. Exploitation requires passive user interaction - the attacker must deliver a crafted link to a victim (UI:P) - and impact scales with the victim's privileges, so a lured logged-in administrator yields a far more serious outcome than an anonymous visitor; no confirmed active exploitation (not in CISA KEV) and no public exploit code identified at time of analysis, and the first-party assessment rates this a genuine but modest-severity reflected XSS.
Reflected cross-site scripting in the Vehicle Manager (Free) extension for Joomla before 6.5.8 allows an unauthenticated attacker to inject arbitrary markup and script into a page by crafting a malicious 'title' parameter on the public vehicle-detail page (task=view). The parameter is echoed straight into a double-quoted HTML attribute with no output encoding, so a double-quote character breaks out of the attribute and permits a <script> tag to be injected; exploitation requires the victim to follow a crafted link (CVSS 4.0 vector shows PR:N with UI:P, yielding a base score of 5.3). No public exploit code or confirmed in-the-wild exploitation has been identified at time of analysis, so this is a genuine but low-severity reflected XSS whose practical impact is limited to script execution in the context of a victim user's session.
Reflected cross-site scripting in the ordasoft.com Real Estate Manager (Free) extension for Joomla before version 6.7.9 lets remote attackers execute arbitrary script in a victim's browser by luring them to a crafted URL. The flaw lives in the 'leave a review' form on the public property-detail page, where the review title is echoed from the request straight into a double-quoted HTML attribute with no escaping or filtering at all - a double-quote character in the title parameter breaks out of the attribute and permits a following <script> element to run. No authentication is required and the CVSS 4.0 base score is 5.3 (assessed as CVSS 3.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N); exploitation depends on the victim loading the malicious link, so it is not self-triggering, and no public exploit code was identified at time of analysis. Impact is contained to the tricked user's browser session, with no server-side compromise; this is a genuine but low-severity issue.
Broken access control in ZoneMinder's Frames API lets an authenticated user who holds the 'Events' view permission but is explicitly denied access to one or more monitors enumerate frame and event metadata belonging to those restricted monitors. Affected are all ZoneMinder releases before 1.38.4 whenever per-monitor access restrictions are configured; the flaw is a single authenticated GET-style call to the FramesController index endpoint, requires no user interaction and no administrative rights, and is confirmed by the CVSS 3.1 vector AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N as a low-confidentiality-impact information disclosure only. No public exploit code and no confirmed active exploitation were identified at time of analysis, and the issue is largely irrelevant on single-tenant or fully trusted deployments where every user may already view every monitor.
An out-of-bounds read in the Zephyr RTOS CoAP link-format helper match_path_uri() (subsys/net/lib/coap/coap_link_format.c) allows an unauthenticated remote attacker to drive the URI comparison loop one or more bytes past the end of a Uri-Query href= option value by sending a GET /.well-known/core?href=/<prefix> request whose value is a strict prefix of a longer registered resource path. Only devices running the Zephyr CoAP server subsystem with CONFIG_COAP_SERVER_WELL_KNOWN_CORE enabled (the default) and at least one resource declaring struct coap_core_metadata attributes reach the vulnerable code path. The over-read is bounded - in practice a single byte, limited by the compared path length - reads only uninitialized stack tail rather than receive-buffer or attacker-controlled data, cannot influence the response, and yields undefined behaviour rather than information disclosure or a matching error; no public exploit code was identified at time of analysis, and the assessed severity is Low (CVSS 3.7).
Sandbox containment failure in the deepseek-ai deepseek-harness Code Mode Sandbox (up to and including 0.1.0-rc.7) allows remote, low-privileged attackers who can submit code through the run_code function to escape the worker's intended containment. The vendor's own SAFETY.md and design notes state the worker is "containment, not a security boundary," so the flaw primarily harms deployments that mistakenly rely on it for isolation; there is no public exploit identified at time of analysis and the pre-release, niche nature of the library keeps real-world risk low-to-moderate. Impact is limited to low confidentiality, integrity, and availability effects on the harness itself, with no downstream-scope compromise.
Stored cross-site scripting (XSS) in httpdbg before 2.2.1 allows an attacker who controls or influences a URL captured by the tool to inject a javascript: scheme link that executes script in the application origin when a user clicks it (CVSS:4.0 5.3, UI:P, PR:N, so unauthenticated but requiring user interaction). Successful exploitation exposes the recorded request and response data httpdbg displays - including headers and captured tokens - because the malicious script runs in the origin of the local debugging web interface. The issue is not reported as actively exploited and no public exploit code has been identified at time of analysis, and the practical exposure is narrowed by httpdbg's use as a developer-facing, typically local debugging tool that a victim must open and interact with; vendor-released patch: 2.2.1.