DOM-based cross-site scripting in Laravel's built-in exception debug renderer (Laravel framework before 12.69.0 and 13.30.0) lets attacker-influenced data be rendered as HTML inside a Tippy.js tooltip on the debug page, so script executes in the browser of anyone who views that page and hovers the affected tooltip. The issue is reachable unauthenticated over the network (CVSS vector PR:N) but requires user interaction (UI:R) and only manifests when the application is running with APP_DEBUG=true - a configuration Laravel does not recommend for production - which is the principal limiting factor and keeps the overall severity at Low (CVSS 3.1). No public exploit code has been identified at time of analysis, and vendor-released patches exist in 12.69.0 and 13.30.0.
Information disclosure in Eleveo Quality Management 9.7.0 allows an authenticated low-privileged user with network access to retrieve sensitive data via the /qm/cz.zoom.scorecard.webui.Scorecard/cz.zoom.scorecard.webui.Scorecard/QMBODownload endpoint. Publicly available exploit code exists, but there is no CISA KEV confirmation of active exploitation, and the assessed CVSS 3.1 impact is limited to low confidentiality loss with no integrity or availability effect. The practical risk is low-to-medium, driven by the public exploit and the need for a valid account.
Path traversal in the Scorecard.jsp endpoint of Eleveo Quality Management 9.7.0 allows an authenticated remote attacker with a valid low-privilege session to escape the intended audio-upload directory of the Questionnaire Audio Upload component and read or write files within the web server's access rights. Publicly available exploit code exists, including a proof-of-concept archive linked from the disclosure, so the technique is reproducible by anyone who can first obtain application credentials; there is no CISA KEV listing or other confirmation of active exploitation. Impact is bounded to low confidentiality, integrity, and availability rather than remote code execution, and the vendor was contacted about the disclosure but did not respond.
SQL injection in the CloudClassroom PHP Project's updateguest.php endpoint lets an attacker manipulate the 'gname' argument to inject arbitrary SQL into the application's database queries, enabling unauthorized read and partial modification of classroom data. The project is distributed as a rolling-release repository rather than versioned builds, so no discrete affected version can be enumerated, and the vendor was contacted about the disclosure but did not respond, leaving no released fix. Publicly available exploit code exists via the JaconiasDev advisory; there is no CISA KEV entry, so the activity level is proof-of-concept rather than confirmed active exploitation, and the disclosed CVSS v4.0 score of 5.3 (vector CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/E:P) reflects a moderate-severity issue whose practical risk is tempered by the product's very small deployment footprint.
Information disclosure in Eleveo Quality Management 9.7.0 allows an authenticated low-privilege remote attacker to read sensitive data via the createAndSaveAudit function of the GWT RPC handler at /qm/cz.zoom.scorecard.webui.Scorecard/QMUtilsService. Publicly available exploit code exists, but exploitation requires a valid session and network access to the web tier, and the impact is limited to confidentiality with no integrity or availability effect. No vendor patch has been identified; the vendor did not respond to the disclosure.
LDAP injection in Eleveo Call Recording Software 9.7.0 lets an authenticated, low-privileged user manipulate the Username argument of the User Management endpoint /callrec/userAddAction.do so that unsanitized input is incorporated into an LDAP directory query, resulting in low-impact disclosure of directory information. The attack is reachable remotely and requires no user interaction, but it is gated behind a valid low-privilege account and a deployment whose user management is backed by an LDAP directory. Publicly available exploit code exists, including a proof-of-concept linked from the VulDB disclosure, and the vendor was contacted but did not respond; EPSS and CISA KEV do not indicate confirmed active exploitation. With a CVSS 5.3 base score and confidentiality-only impact (C:L, no integrity or availability effect), this is a high-CVSS-appearance-but-modest-real-risk issue.
Improper access control in Eleveo Call Recording Software 9.7.0 allows a low-privilege authenticated user to exercise functionality reachable through the Query Builder endpoint /callrec/searchAction.do that should require higher privileges, resulting in limited unauthorized read and manipulation of call-recording data. The flaw is remotely reachable over the web interface with low attack complexity and no user interaction, and the assessed vector (CVSS:3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N, CVSS 4.0 base 5.3) reflects bounded confidentiality and integrity impact with no scope change. Publicly available exploit code exists - including a publicly shared proof-of-concept file - but attackers must first hold a valid account on the affected system, and the vendor was contacted about the disclosure without responding, so no patch is currently available.
SQL injection in code-projects Matrimonial System 1.0 allows authenticated remote attackers to manipulate the fname parameter in the /create_profile endpoint, potentially leading to unauthorized data access or modification. The vulnerability requires a low-privilege account and network access; publicly available exploit code exists, though no active exploitation has been confirmed (CISA KEV not listed). Given the low technical impact (VC:L/VI:L/VA:L) and near-zero real-world deployment, overall risk is considered low.
Authenticated low-privileged attackers can upload arbitrary files to Acrel Electric's Unet Web Service (versions up to 20260814) via the /exchange/attachment/upload endpoint, potentially leading to remote code execution if uploaded files are stored in a web-accessible directory and executed. Publicly available exploit code exists, but valid credentials are required and no active exploitation has been confirmed (not in CISA KEV). This is a moderate-priority vulnerability with limited direct impact unless the unconfirmed RCE escalation condition is met.
SQL injection in the Timesheet Dashboard of DevaslanPHP project-management (versions 1.2.1, 1.2.2, 1.2.3, 1.2.4 and v2.0.0-beta1) lets an authenticated remote attacker with a valid low-privileged account manipulate the 'filter' argument consumed by whereRaw() in app/Filament/Widgets/Timesheet/MonthlyReport.php and inject SQL against the application's backend database. Publicly available exploit code exists (a proof-of-concept write-up is published on GitHub), so the technique is within reach of moderately skilled attackers, although exploitation still requires a working session on the instance. The vendor was contacted about the disclosure and did not respond, so no vendor-released patch has been identified at time of analysis; the vendor-assigned CVSS 4.0 base score is 5.3 (Medium), while our independent assessment rates the confidentiality impact High with only limited integrity impact.
Authenticated SQL injection in the DevaslanPHP project-management Timesheet Dashboard (versions 1.2.1 through 1.2.4 and 2.0.0-beta1) allows a low-privilege logged-in user to inject arbitrary SQL through the `filter` argument consumed by the whereRaw() call in app/Filament/Widgets/Timesheet/ActivitiesReport.php, exposing or altering backend database data. Publicly available exploit code exists (a GitHub write-up demonstrating the Timesheet Dashboard Chart Filter injection, and the CVSS 4.0 vector carries E:P), and no CISA KEV entry indicates confirmed active exploitation. The vendor was contacted but did not respond, so no patched release has been confirmed and the disclosure is tracked via VulDB.
SQL injection in dayrui XunruiCMS up to version 4.7.2 lets an authenticated administrator inject arbitrary SQL through the groupid argument of the group_all_edit function in the backend Group Editing feature (dayrui/App/Member/Controllers/Admin/Home.php). Because the vulnerable code sits in an Admin controller and the assessed vector carries PR:H, exploitation requires a valid high-privilege backend session; once that is held, the attack is fully remote with no user interaction. Publicly available exploit code exists (a proof-of-concept is published on GitHub), which places real but contextual risk on deployments where administrator credentials are weak, shared, or already compromised, and the vendor did not respond to disclosure, so no fixed version is available.
Reflected cross-site scripting in Eleveo Call Recording Software 9.7.0 lets an attacker inject script through the viewRoleId or cfType parameter of the Play Audio Page endpoint /callrec/audio.jsp, executing in the browser of any user who opens a crafted link. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:P, base 5.1) shows the attack is network-reachable but constrained: a low-privilege authenticated account is required and a legitimate user must interact with the link, so it is neither unauthenticated nor zero-click, and the assessed impact is limited to integrity (VI:L) with no confidentiality or availability effect recorded. Publicly available exploit code exists and the vendor did not respond to disclosure, so no patched version is available and deployed 9.7.0 instances remain exposed.
Server-side request forgery in DevaslanPHP project-management affects versions 1.2.1 through 1.2.4 and v2.0.0-beta1 and allows an authenticated, low-privileged user to make the application issue requests to attacker-chosen destinations. The flaw sits in the updateJiraProjects function of the /jira-import endpoint, where host, username and token parameters are accepted without an adequate authorization check (per the independent assessment, a missing canAccess check), so any user who can reach the Jira Import feature can force outbound connections from the server while only obtaining limited read/write effect. Publicly available exploit code exists (also reflected by the E:P metric in the vendor-supplied CVSS 4.0 vector), but there is no indication of confirmed active exploitation, and the vendor was contacted early and did not respond. This is a genuine but low-priority issue: the assessed CVSS 3.1 vector is AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N, i.e. partial confidentiality and integrity impact only, gated behind authenticated access to the import feature.
SQL injection in aaPanel (BaoTa) 11.8.0 and earlier allows an authenticated attacker with high panel privileges to inject arbitrary SQL commands via the `get` argument in the get_domain_status function of the Domain Handler module. Exploitation requires network access to the control panel interface and a valid high-privilege session, and the flaw carries low confidentiality, integrity, and availability impact per the assessed vector. Publicly available exploit code exists, but the input data does not indicate CISA KEV status or confirmed active exploitation; the vendor did not respond to disclosure, so no official fix is available.
SQL injection in the aaPanel BaoTa server control panel (versions up to 11.8.0) lets a user who already holds a high-privilege panel administrator session inject arbitrary SQL via the log_type argument of the getData function in /www/server/panel/class/data.py, allowing reads or modifications of the panel database. The published CVSS:4.0 vector scores it 5.1 (medium) with PR:H and UI:N, meaning it is reachable over the network but only after authentication as a panel admin - it is not remotely exploitable without credentials, and the independent CVSS:3.1 assessment rates confidentiality impact high (C:H) with integrity and availability low. Publicly available exploit code exists (a gist published alongside the VulDB entry), the vendor did not respond to early disclosure, and there is no indication of confirmed active exploitation (CISA KEV).
Local sandbox escape in deepseek-ai deepseek-harness up to 0.1.7-rc.2 lets a low-privileged attacker who already has code execution inside the Landlock-backed local sandbox break the intended isolation boundary through crafted mount profiles in packages/sandbox/sandbox-local/src/profiles.ts (CWE-653). The impact is limited to confidentiality, integrity, and availability (all Low), scored 4.8 under CVSS 4.0, and it is only relevant where the harness local sandbox is actually used as a trust boundary for untrusted agent or tool code; it is not remotely reachable and requires no user interaction but does require local, low-privileged access (AV:L/PR:L/UI:N). Publicly available exploit code exists (a GitHub write-up demonstrates the mount-escape technique), the vendor was contacted early but did not respond, and no vendor-released patch has been identified, making this a genuine but low-to-moderate priority local sandbox-escape issue rather than a remote critical.
Path traversal in FLB-Music Player 1.1.8 through 1.2.1 allows a locally present, low-privileged and authenticated user to read and write files outside the intended music-library directory by supplying crafted track data (path or metadata) that reaches the unsanitised path.join call in /src/main/core/createParsedTrack.ts. Exploitation requires local access and low privileges (CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N and our assessed CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L), so the impact is bounded to Low confidentiality, integrity and availability within the application's own privilege level with no scope change. Publicly available exploit code exists, but this is not in CISA KEV and shows no sign of confirmed active exploitation; the vendor did not respond to the disclosure, so no vendor patch is available.
Path traversal in the DeepSeek deepseek-harness boot tooling (through 0.1.7-rc.2) lets an attacker who can influence the dsh.bundle.patch argument read files outside the intended bundle path via the loadProfile function in packages/boot/app-boot/src/profile.ts. The issue is remotely triggerable with no privileges required (PR:N), but CVSS 4.0 rates it AC:H with UI:P, meaning a victim must load or apply the attacker-controlled bundle patch input, and VulDB itself characterizes exploitability as 'difficult'. Publicly available exploit code exists, but impact is confined to low confidentiality (CVSS 4.0 score 2.3; independent assessment CVSS 3.1 2.0/2.3-class finding AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N), so this is a low-real-risk issue despite the public proof-of-concept.
Untrusted input routed into agentverus-scanner's security-defense-skill analyzer can override the classification decision made by isSecurityDefenseSkill in dist/scanner/analyzers/context.js, allowing an attacker to weaken or falsify the scanner's own detection results for versions up to 0.8.1. Exploitation requires an authenticated local foothold and passive user interaction, and the impact is limited to low integrity loss with no confidentiality or availability effect; the CVSS 4.0 score of 2.4 reflects that narrow scope and is appropriately calibrated rather than deflated. Publicly available exploit code exists, and the project was notified via an issue report but has not responded, so no vendor-released patch has been identified at time of analysis.
Local path traversal in Tencent AI-Infra-Guard (versions up to 4.5.2 and the 4.6.2 line referenced by the vendor report) lets an attacker who can influence the file or directory path arguments processed by the scanner's skill-scan and mcp-scan file tools escape the configured working directory, reading or writing files outside the intended root. The defect is a directory-containment check that used a plain string prefix comparison rather than a canonical-path comparison, so both traversal sequences and sibling directories with a shared name prefix bypass it; exploitation requires local access with low privileges plus passive user interaction, since an operator must run a scan over attacker-influenced paths or content. Publicly available exploit code exists (referenced through the vendor's GitHub issue tracker), and the vendor has shipped a fix in the v4.6.0 release; the CVSS 4.0 score of 0.9 reflects the heavily constrained local attack path, and this analysis agrees with the independent assessment that the practical risk is low.
Incorrect permissions on temporary repository cache directories in Flatpak before 1.18.4 allow a local, unprivileged user to read data left behind in /var/tmp/flatpak-cache-* while another user's app or runtime is being downloaded from an OCI repository. Exploitation requires a pre-existing local account on a multi-user host and the transient cache directory to still exist before Flatpak cleans it up, and the result is low-confidentiality information disclosure only - no privilege escalation, code execution, or file modification is possible, and no public exploit identified at time of analysis. The same 1.18.4 release addresses several more serious sibling issues (CVE-2026-97023, CVE-2026-97024, CVE-2026-97025, CVE-2026-97027, CVE-2026-97029), so a single upgrade remediates all of them.
Power8-optimized strncasecmp in the GNU C Library (glibc) 2.24 and later can read one byte past the caller-supplied length limit, faulting only when the compared strings match up to the final byte of a memory page and the adjacent page is unmapped or non-readable, which crashes the calling process. Per the assessed vector (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L), the flaw is reachable by unauthenticated remote attackers only in applications that pass attacker-controlled strings into strncasecmp, and impact is confined to a low-availability denial of service of that process - no code execution, data disclosure, or modification. Exploitation additionally requires the specific IBM POWER8 CPU family and precise page-boundary alignment, making triggering non-deterministic; no public exploit has been identified at time of analysis and there is no evidence of confirmed active exploitation (CISA KEV). Overall this is a low-severity availability-only bug that is not a priority for most environments.
Uncaught exceptions raised inside server method handlers in @grpc/grpc-js leak their error message text back to the calling client, exposing internal details such as file paths, SQL fragments, or connection strings. The flaw affects the pure-JavaScript gRPC implementation for Node.js in versions before 1.13.6 and before 1.14.5, and remote clients can trigger it without authentication (CVSS 3.7, AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N), though disclosure is opportunistic because the attacker cannot control what the handler throws. No public exploit code has been identified and the issue is not reported as actively exploited, but it is a straightforward logic flaw with a trivially reachable trigger for any server whose handlers throw unguarded errors.
Keycloak's Micrometer user-event metrics listener can be forced to create unbounded metric time series by unauthenticated remote requests to the identity broker login endpoint with arbitrary provider aliases, leading to memory exhaustion and performance degradation. This is a low-priority issue because exploitation requires the non-default configuration of including the 'idp' tag in the listener, and the impact is limited to a gradual availability degradation (A:L). No public exploit code has been identified at the time of analysis.
Flatpak versions prior to 1.18.4 export .desktop and D-Bus .service files from installed applications to the host without filtering their fields against an allowlist, enabling a malicious Flatpak app to cause denial of service or unintended interactions with host services. Exploitation is local and requires the victim to install a malicious app (from a Flatpak remote or sideloaded bundle); no public exploit code or active exploitation is identified in the available data. The vendor-released patch is Flatpak 1.18.4.
Flatpak before 1.18.4 exposes OCI authentication tokens to other local users when a victim performs an authenticated download of an app or runtime from an OCI repository, allowing a co-located attacker to capture the token and potentially misuse it. The flaw affects multi-user Linux systems and was fixed in Flatpak 1.18.4; no public exploit code or active exploitation is known at this time, and the assessed impact is limited to information disclosure (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
Opening a specially crafted PCX image in FastStone Image Viewer 8.3 or earlier triggers an out-of-bounds read in the PCX decoder, causing a crash or limited memory disclosure. The vulnerability requires user interaction and affects only the client-side application; an attacker can exploit it remotely by delivering a malicious file. No public exploit identified at time of analysis, and the vendor has not released a patch.
Opening a maliciously crafted TGA image in FastStone Image Viewer 8.3 or earlier triggers an out-of-bounds read in the TGA Image Handler implemented in FSViewer.exe, allowing a remote attacker to disclose process memory or crash the application. The CVSS 4.0 vector rates this 5.3 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L) and carries E:P, indicating proof-of-concept exploit maturity; there is no CISA KEV entry, so confirmed active exploitation is not established. The vendor was contacted about the disclosure but did not respond, so no fixed version is available and the practical risk is a low-priority, client-side memory-safety issue that depends on the victim opening the crafted file (UI:P).
Out-of-bounds write in FastStone Image Viewer through 8.3 lets an attacker corrupt memory - and potentially achieve code execution - when a victim opens or previews a crafted 1bpp RLE image, with impact rated Low across confidentiality, integrity, and availability (CVSS v3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L). The vulnerable component is the viewer's 1bpp RLE decoder, reachable remotely only through user-initiated file opening, so exploitation requires social engineering or a drive-by download against Windows desktop users rather than any server-side reach; the CVSS v4.0 vector carries an exploit-maturity metric of Proof-of-Concept (E:P), meaning publicly available exploit code exists per that metric, although the independent assessment found no linked working exploit and the issue is not listed in CISA KEV. The vendor was contacted early but did not respond and no patch is available, so priority is LOW-to-MEDIUM with risk mitigated primarily by user-interaction requirements, client-side-only triggering, and consumer desktop deployment.
Out-of-bounds write in FastStone Image Viewer up to version 8.3 allows remote attackers to corrupt memory when a user opens or previews a crafted TGA image file. The vulnerability requires user interaction (UI:P/UI:R) and is rated CVSS 4.0 5.3 (moderate severity). Publicly available exploit code exists (indicated by E:P in the CVSS vector), but no evidence of active exploitation in the wild; the vendor was contacted but did not respond, and no patch is available.
Authenticated attackers can read other employees' expense claims, shift requests, and attendance records in Frappe HR up to 16.15.0 by exploiting an incorrect authorization flaw in the get_expense_claims, get_shift_requests, and get_attendance_requests API endpoints. The vulnerability requires a valid low-privilege session but no special permissions, and the vendor has confirmed the issue is fixed. No public exploit identified at time of analysis; the impact is limited to information disclosure (CVSS 5.3, MEDIUM).
Authenticated users of Langflow instances prior to 1.12.0 can convert crafted component input options into arbitrary Python code execution because schema.py interpolates those options into a Literal type string that is handed directly to eval() without safe-evaluation controls (CWE-95). The sink fires when an affected component is turned into a LangChain tool via ComponentToolkit.get_tools(), which also occurs during custom-component saves through the API, so an attacker must already hold a valid account able to create or save components (PR:L in the assessed CVSS 3.1 vector; PR:H in the vendor's CVSS 4.0 vector) and must satisfy the high-complexity object-crafting and interpolation path (AC:H/AT:P). No public exploit code has been identified at time of analysis and the issue is not in CISA KEV; practical marginal risk is limited because the privileges required to reach the sink typically already allow legitimate Python execution through Langflow's custom-component feature.
Bagisto up to 2.4.6 fails to enforce authorization on the invoice mass status update endpoint, allowing an authenticated admin-panel user to alter invoice states. The impact is limited to integrity changes (CVSS 2.0 / 3.1 3.9), and although publicly available exploit code exists, the need for valid admin-context credentials reduces the overall risk to low. The vendor was contacted early about the disclosure, but no patched version has been identified.
Local information disclosure in deepseek-ai DeepSeek Harness through 0.1.5-rc.3 allows an authenticated local attacker with low privileges to manipulate the E2B_API_KEY argument in packages/e2b/e2b/src/index.ts (dsh component), causing the application to rely on untrusted input in a security decision. Publicly available exploit code exists, and the vendor was contacted early but did not respond; the issue is assessed as low severity with only limited confidentiality impact and no integrity or availability effect.