OS command injection in the Git Remove MCP Tool of 0xshariq github-mcp-server (all revisions up to commit 52e764a7d66eac1726fce02ca7bb5a638571801a) lets an attacker who can influence the tool's 'File' argument inject shell metacharacters that are executed by child_process.exec in src/github.ts. Publicly available exploit code exists (reported via a GitHub issue on the project's own repository), but there is no evidence of confirmed active exploitation in CISA KEV, and the vendor has not responded to the report. The assessed CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) rates confidentiality, integrity and availability impact as high, although the practical exposure depends heavily on how the MCP server is deployed - a network-accessible MCP transport makes the AV:N path realistic, whereas a local stdio deployment limits reach to whatever can feed input into the connected LLM client.
Stack-based buffer overflow in Artifex Ghostscript up to 10.09.0 within the pdfwrite (vector output) device, reachable through Type1 charstring subroutine handling in devices/vector/gdevpsfx.c (type1_callsubr). Attackers can trigger the overflow remotely by supplying a crafted document/font that is processed through the pdfwrite path, unauthenticated but requiring the victim or an automated conversion pipeline to render the malicious input; publicly available exploit code exists, so exposure should be treated as urgent for any service or workstation that converts untrusted PostScript/PDF content. CVSS 4.0 base is 5.3 (E:P) and the independent assessment scores it CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L, with bounded impact that realistically skews toward denial of service or limited memory corruption rather than guaranteed code execution; EPSS, KEV and SSVC provide no signal of active exploitation at time of analysis.
SQL injection in OS4ED openSIS-Classic (up to and including version 9.3) lets an authenticated low-privileged user - a staff or teacher account is sufficient - manipulate the 'cust' argument handled by functions/CustomFieldsFnc.php in the Student Search component and read or partially modify the backend database, including student records. Publicly available exploit code exists, and the vendor was notified through a public GitHub issue but has not responded, so no vendor-released patch is identified at time of analysis. This is a high-CVSS-but-moderate-real-risk issue: the requirement for a valid authenticated session and the product's education-sector, small-scale deployments meaningfully narrow the exposed population.
An uncaught exception in the mailto: scheme handler of uri-js through 4.4.1 allows remote attackers to disrupt or crash applications that call URI.parse() on attacker-supplied mailto URIs. The flaw is remotely reachable and requires no authentication (CVSS 4.0 vector PR:N, AV:N), but its impact is limited to a low-severity availability hit - the crafted input triggers an unhandled exception rather than code execution, data disclosure, or integrity loss. Publicly available exploit code exists, referenced through the upstream GitHub issue tracker, though there is no indication of confirmed active exploitation; the upstream project has not responded to the report, so no fixed version is available.
Authorization bypass in AdithyaYelloju Restaurant-Management-System (commit 7f0e7e8) allows an authenticated low-privileged attacker to manipulate the ID argument in requests to the /admin/ Admin Area endpoint, thereby accessing or altering records belonging to other users. Publicly available exploit code exists, but no active exploitation in the wild has been confirmed. The impact is limited to Low-severity confidentiality and integrity effects, and exploitation requires a deployed instance and valid credentials.
Authenticated SQL injection in OS4ED openSIS-Classic 9.3 and earlier allows a low-privileged user to manipulate the LO_sort argument in the Student List Search endpoint, which reaches the DBQuery function and can expose or alter database contents. The issue is remotely exploitable, requires a valid session (CVSS PR:L), and publicly available exploit code exists; there is no confirmed CISA KEV active exploitation. The affected release is a niche open-source PHP student information system, so real-world priority is modest despite the SQL injection class.
SQL injection in OS4ED openSIS-Classic up to and including version 9.3 lets an authenticated attacker with any valid low-privileged account run arbitrary SQL against the backend database by manipulating the Tables argument passed to DBQuery_assignment in modules/grades/Assignments.php. The endpoint is reachable over the network with no user interaction and no special configuration, and publicly available exploit code exists; however, exploitation requires a valid session (CVSS vector PR:L, and the assessed vector confirms PR:L), so anonymous internet-wide attacks are not possible, and no confirmed active exploitation (CISA KEV) has been reported. Real-world priority is therefore low-to-moderate, driven mainly by the authentication prerequisite and openSIS-Classic's limited deployment footprint.
Cross-site scripting in the Guest Book component of gedelumbung HospitalManagement (PHP) allows remote, unauthenticated attackers to inject script payloads through the nama, email, and pesan fields handled by the kirim function in application/modules/web/controllers/buku_tamu.php, with the payload executing when a victim loads the affected guest-book page (publicly available exploit code exists; no confirmed active exploitation). The project ships as a rolling release, so no discrete affected or fixed version numbers exist - any deployment at or before commit c2d45543789a3887067d3915f69d44cfc2cf76a8 is presumed vulnerable. Impact is limited: the maintainer has not responded to the issue report and no vendor patch is available, but the required victim interaction, the low CVSS 2.1 base score, and a niche installation base keep this a low-priority finding.
Unrestricted file upload in gedelumbung HospitalManagement lets an authenticated low-privilege user abuse the ADMIN_RS_KCFINDER argument in the KCFinder File Manager to plant arbitrary files on the server, potentially escalating to remote code execution if the uploads land in a web-executable path. The project ships as a rolling release with no versioned tags, so all deployments tracking the repository up to commit c2d45543789a3887067d3915f69d44cfc2cf76a8 are assumed affected; publicly available exploit code exists and the maintainer has not responded to the upstream issue report. Note that severity signals conflict: the supplied CVSS 4.0 score is 5.3 (Medium, with exploit maturity E:P), while our internal 3.1 assessment scores 8.8 (High) given the high confidentiality, integrity, and availability impact once code execution is achieved.
SQL injection in OS4ED openSIS-Classic 9.0 through 9.3 allows a high-privilege authenticated user to manipulate the 'students' argument in the General Information Tab save action and inject data into backend SQL queries. Publicly available exploit code exists, but there is no CISA KEV confirmation, and the independent assessment treats this as a moderate, not urgent, priority because exploitation requires an authenticated high-privilege account. No vendor-released patch is identified, and the upstream project has not responded to the issue report.
Path traversal (CWE-22) in the open-source PHP hospital management application gedelumbung HospitalManagement lets an attacker who already holds an authenticated admin-level session manipulate the 'gbr' argument passed to the hapus (delete) action in application/modules/admin/controllers/data_galeri.php, reaching files outside the intended gallery directory. The issue is remotely reachable with low complexity and no user interaction, but it is gated behind high privileges (PR:H), so it is not exploitable by an unauthenticated default user; our independent assessment rates the real-world risk as low-to-moderate despite the mid-range CVSS 4.0 base score of 5.1. Publicly available exploit code exists, there is no confirmed in-the-wild exploitation and no CISA KEV listing, and the project has not shipped a fixed release - the repository uses rolling delivery, so no affected or updated version numbers can be pinned.
Improper authorization in the gedelumbung HospitalManagement configuration handler lets an authenticated high-privilege user write arbitrary configuration values through the sistem.php 'simpan' action without the application enforcing an adequate access-control check. Only deployments running the current rolling-release codebase are affected, since the project publishes no versioned releases and the CPE entry carries a wildcard version; the practical exposure is limited to Low confidentiality, integrity, and availability impact on configuration data rather than full host or data compromise. Publicly available exploit code exists via the project's GitHub issue tracker (issue #12), but there is no indication of confirmed active exploitation, and the EPSS-style risk signal remains modest; the attacker must already hold an administrative session (CVSS PR:H, assessed CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N), which keeps real-world risk low despite the nominally elevated severity.
SQL injection in OS4ED openSIS-Classic up to and including 9.3 lets an authenticated, highly privileged user manipulate the argument values reaching the db_properties function in functions/DatabaseInc.php, allowing crafted input to alter or extract database contents through the Save Data Handler code path. The flaw is network-reachable and needs no user interaction, but the CVSS vector requires PR:H, so anonymous or low-privilege accounts cannot reach it directly; publicly available exploit code exists via the project's public issue report. The vendor was notified through that issue and has not responded, so no vendor-released patch is identified at time of analysis, and the overall real-world risk is assessed as low despite the SQL injection class.
Authorization bypass (CWE-639, IDOR) in gedelumbung HospitalManagement lets an authenticated user of the admin application read patient-report records belonging to other users by tampering with the id_param argument passed to the detail function in application/modules/admin/controllers/laporan_data_pasien.php. The flaw is remote and needs no user interaction, but the attacker must first hold a valid admin session, and impact is limited to read-only disclosure of patient report data (no integrity or availability effect); our independent assessment rates this CVSS 3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N, broadly consistent with the published CVSS 4.0 base score of 5.1 (Medium). Publicly available exploit code exists (the vendor GitHub issue thread serves as the proof of concept), but there is no confirmed active exploitation (CISA KEV). The project is unversioned, the vendor was notified via an issue report and has not responded, so no fixed release is identified at time of analysis.
Uninitialized stack memory disclosure in apcupsd's optional CGI web interface (upsstats.cgi, multimon.cgi, upsfstats.cgi) allows remote attackers to read non-deterministic stack contents from HTTP responses when a matched STATUS line contains fewer than three whitespace-separated tokens. All versions through 3.14.14 are affected per the CPE range, but exposure requires that the non-default CGI component be built, deployed, and network-reachable; the core apcupsd daemon itself is not affected. The issue is rated low severity (CVSS 3.1 base 3.7, AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) both because the parsing condition is narrow and because the leaked bytes are uninitialized memory whose contents are unpredictable and frequently non-sensitive; no public exploit identified at time of analysis, and the vulnerability is not confirmed actively exploited (CISA KEV).
Stored cross-site scripting in the Schema & Structured Data for WP & AMP WordPress plugin (all versions before 1.67) lets an attacker holding the editor role or higher inject arbitrary JavaScript into schema fields that are saved without a capability check and rendered without output escaping. The injected script executes when a higher-privileged user, typically an administrator, opens the affected admin screen; exploitation is only possible on WordPress multisite installations, where editors do not hold the unfiltered_html capability, and the independent assessment additionally treats the scope as changed relative to the published CVSS 3.5 base score. There is no public exploit code identified at time of analysis, and CISA's SSVC evaluation records exploitation as none and automatable as no, which is consistent with the non-default multisite deployment, authenticated attacker position, and required victim interaction (CVSS:3.1/AV:N/AC:L/PR:H/UI:R, authenticated with high privileges).
Open redirect in the Safe Redirect Manager WordPress plugin before 2.3.0 lets unauthenticated attackers bounce a victim's browser to an arbitrary external site. Exploitation is not out-of-the-box: it requires a site administrator to have already configured a wildcard redirect rule whose destination is an absolute URL (the reason the assessed vector carries AC:H), and the victim must actively follow an attacker-crafted request path (UI:R). No authentication is needed by the attacker (PR:N) and impact is integrity-only (I:L), with no data disclosure or service disruption; no public exploit identified at time of analysis, and CISA's SSVC decision framework rates exploitation as 'none'.
Server-side request forgery in Kiteworks Core before 9.5.1 lets an authenticated administrator on a node with the separately licensed gateway role enabled supply a connector URL that the server fetches without adequately validating the URL scheme or destination, causing outbound requests to internal network services. Exploitation requires two prerequisites: a valid administrative session (CVSS PR:H) and an active optional gateway role, which is not a default configuration, and the resulting impact is constrained to limited confidentiality and integrity with no availability effect (CVSS 3.3, AC:H). No public exploit code has been identified at time of analysis and there is no evidence of active exploitation; the vendor has released a fixed version, 9.5.1, and the issue was reported through CISA's coordinated disclosure channel.
Authenticated project administrators in JetBrains YouTrack before 2026.2.19197 can read comments from projects they do not administer by exploiting a notification-template authorization bypass. This network-exploitable flaw requires an account with project-administrator privileges and no user interaction, resulting in a high-confidentiality impact with a scope change (CVSS 7.7). No public exploit or active exploitation has been identified at time of analysis.
JetBrains YouTrack before 2026.2.19197 contains a broken access control vulnerability (CWE-862) that allows authenticated users with low privileges to read information from projects they are not authorized to access via several endpoints lacking authorization checks. The flaw requires a valid account and impacts only confidentiality; no data modification or privilege escalation is possible. It is rated low severity (CVSS 2.7) and no public exploit has been identified at time of analysis.
Stored SMTP credentials in JetBrains YouTrack can be exposed to an already-authenticated administrator by changing the configured SMTP server host, affecting versions before 2026.2.18991. The issue is rated CVSS 2.7 (AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N), so confidentiality impact is limited and exploitation requires high-privilege access - in practice an insider or an attacker who has already compromised an admin account in an instance where outbound email/notification delivery is configured. A vendor patch is available, and no public exploit has been identified at time of analysis.
Authenticated users on Moodle instances with the AI image-generation web service enabled can bypass capability checks to invoke the feature without proper authorization, leading to unauthorized use of AI image generation. This low-severity authorization flaw (CWE-425) requires a valid Moodle account but not the specific capability normally required, and the AI subsystem must be configured; it enables quota/cost abuse but no data disclosure or code execution. No public exploit code or active exploitation is known at time of analysis, and the assessed CVSS is 2.7 with PR:L.
JetBrains YouTrack before 2026.2.19197 can disclose integration credentials to an authenticated user who holds the low-level Admin Read permission through import configurations, allowing that user to view secrets that should remain restricted. The flaw is CWE-863 incorrect authorization with a vendor CVSS score of 3.3 (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N), and the independent assessment further narrows impact to confidentiality only (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N). Exploitation requires high privileges, high attack complexity, and a vulnerable instance that has integrations with stored credentials; no public exploit identified at time of analysis, and vendor-released patch 2026.2.19197 is available, so real-world urgency is low.
Content injection in Astra WordPress Theme 4.13.12 and earlier allows an authenticated WooCommerce Shop Manager to insert untrusted markup or script content into affected pages. The flaw is network-reachable and low-complexity but requires high privileges and an active WooCommerce installation, yielding only limited integrity impact with no confidentiality or availability loss; CVSS is 2.7. No public exploit identified at time of analysis, and it is not confirmed actively exploited (CISA KEV).
Moodle user-list filters do not enforce the same profile-field visibility restrictions that are applied when a profile is viewed directly, so an authenticated user holding manager privileges can filter user listings on hidden profile attributes and infer their values from the results returned. The issue is low severity, assessed at CVSS 3.1 base score 2.7 (AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N), and is limited to information disclosure - there is no integrity or availability impact and no code execution path. The elevated manager role is the gating prerequisite, so the flaw is not reachable by anonymous visitors or ordinary authenticated users, and no public exploit code has been identified at time of analysis.
Missing authorization checks in the Media Library Organizer WordPress plugin versions 2.0.4 through 2.1.3 allow authenticated users holding a contributor-level account (or higher) to create publicly visible terms in any taxonomy registered on the site, including ones they have no management rights over. The flaw is a CWE-862 missing capability check that is exercised over the network without user interaction, but it requires a valid low-privileged WordPress account and produces only a limited integrity impact - no confidentiality or availability loss - so despite the 'Authentication Bypass' tag this is a low-severity finding (assessed CVSS 2.7) with no public exploit identified at time of analysis and no listing in CISA KEV; CISA SSVC rates exploitation as none and not automatable. Vendor-released patch: 2.1.4.
SQLCipher before 4.15.0 contains a local SQL injection in the sqlcipher_export() convenience function when a host application passes an attacker-influenced source database name. A crafted source name can bypass defensive restrictions, execute normally blocked statements, and modify the sqlite_schema table, leading to database corruption; confidentiality is not affected and decryption is not exposed. The independent assessment rates this as a low-real-risk issue despite being a genuine CWE-89 SQL injection, requiring the specific code path of sqlcipher_export with untrusted input; no public exploit identified at time of analysis and no CISA KEV active exploitation is present in the provided data, and SQLCipher 4.15.0 fixes the issue by validating the source database name.
Credential-precedence handling in Claude Code causes the CLI to request an organization's server-managed settings with a locally stored API key instead of the user's authenticated Claude Enterprise or Team session, so when that key is rejected the session starts without the organization's policy - permission deny rules, model restrictions and managed-only locks go unenforced - or keeps applying a stale cached policy while still operating as the organization account. Only organizations that use server-managed (cloud policy) settings are affected: Claude for Enterprise from version 2.0.68 and Claude for Work (Team) from version 2.1.38, and the issue requires local access to a device where an API key was previously persisted via /login or written directly into the configuration (PR:L), with the complete policy-loss case additionally requiring that no managed settings were ever cached on that machine. Severity is low (CVSS 4.0 base 2.0; local, integrity-only, no confidentiality or availability impact), endpoint-managed MDM or file-based settings are not affected, and no public exploit identified at time of analysis.
Authenticated SQL injection in SourceCodester Online Leave Management System 1.0 allows a user holding an administrator session to inject arbitrary SQL through the date_start and date_end parameters of the reporting page at /admin/?page=reports, enabling read and modification of backend database contents. Exploitation is remote over the network with no user interaction and no non-default configuration, but the CVSS 4.0 vector (PR:H) and the independent assessment (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) both confirm that the attacker must already hold high privileges, which caps the real-world severity at the low end (CVSS 4.0 base 2.0) despite SQL injection being a serious bug class in general. No CISA KEV entry exists; however, publicly available exploit code exists (the CVSS 4.0 vector carries E:P and the description states the exploit is public), so administrators of exposed instances should treat the flaw as practically exploitable by anyone who has already obtained admin credentials.
Cross-site scripting (XSS) in the MediaWiki MediaSearch extension (versions 1.46, 1.45, and 1.43) allows an authenticated user to inject script-related HTML into the media search interface, which executes in the browser of a victim who passively interacts with the crafted content. The vulnerability requires the MediaSearch extension to be installed and enabled, and impact is limited to low confidentiality and integrity with no server-side code execution. No public exploit code has been identified at the time of analysis, and the CVSS 4.0 score is 1.2; an upstream fix is available via Gerrit change I79e8200289bd120c3c971ba830776eaae779bb99.
Information disclosure in the MediaWiki PageTriage extension (versions 1.43, 1.45, and 1.46) allows an authenticated, low-privileged user to elicit restricted data through the extension's data-query interface. Exploitation requires a specific precondition (AT:P) and passive user interaction (UI:P), and the impact is limited to low confidentiality loss with no effect on integrity or availability; no public exploit identified at time of analysis. The Wikimedia Foundation has published an upstream fix via Gerrit, and this is a low-priority issue that does not warrant urgent action.
Stored cross-site scripting in the MediaWiki Page Forms extension (versions 1.43, 1.45, and 1.46) lets an authenticated user who can submit or edit Page Forms content plant script-related HTML that executes in the browser of any other user who later views the affected page. Exploitation is high-friction: the attacker must hold a valid MediaWiki account with form-edit privileges, stored payloads only fire when a second user opens the poisoned page, and the late-breaking CVSS 4.0 score is only 1.2 while our independent assessment rates confidentiality and integrity impact Low with no availability impact. No public exploit code has been identified at time of analysis and the flaw is not confirmed actively exploited (no CISA KEV listing); realistic harm depends on luring a higher-privileged user to view the tainted page.
Cross-site scripting in the MediaWiki CommonsMetadata extension (versions 1.43, 1.45 and 1.46) allows an authenticated editor who can write attacker-controlled content into file/media metadata to plant script-related HTML that executes when another user views the rendered page, giving low confidentiality and integrity impact confined to the victim's browser session. The root cause is CWE-80 (improper neutralization of script-related HTML tags), and the vendor's CVSS v4 score of 1.1 reflects high privileges (PR:H), an attack requirement (AT:P) and passive user interaction (UI:P), with a proof-of-concept-level exploit maturity metric (E:P) rather than any observed attacks. The independent assessment agrees this is a low-priority, low-real-risk issue that requires the optional extension to be installed and a victim to subsequently view the injected page; no CISA KEV listing or other confirmation of active exploitation appears in the available data, and Wikimedia has published both a tracking task and an associated Gerrit change addressing the flaw.
Reflected cross-site scripting in the MediaWiki ReadingLists extension (versions 1.45 and 1.46) lets an authenticated user with access to the extension inject script-related HTML into a page through a crafted URL parameter that is echoed back unsanitized. Because the flaw is reflected rather than stored, an attacker must lure a separate logged-in victim into following the malicious link, and any script executes only within that victim's browser session - there is no server-side compromise. This is a low-priority issue despite being network-reachable: no public exploit code has been identified at time of analysis, exploitation is blocked on wikis that do not have the extension or have applied the upstream fix, and the attack is further constrained by the requirement that the victim actively follow the crafted URL.
Stored cross-site scripting (XSS) in the MediaWiki WikiForum extension allows an authenticated attacker holding a privileged forum role to plant script-related HTML that executes in the browser of any user who later views the manipulated forum page. The flaw is rooted in improper neutralization of script-related HTML tags (CWE-80) within WikiForum-managed fields on the master branch, and successful exploitation demands both elevated WikiForum permissions and victim interaction, which is why the vendor assigns it a very low CVSS 4.0 score of 1.1 and the independent assessment treats it as a low-priority issue. No public exploit code has been identified at time of analysis and the vulnerability is not confirmed actively exploited (not in CISA KEV), so the practical risk is primarily limited to wiki instances that run this optional extension.
Cross-site scripting (XSS) in the MediaWiki Collection (Book) extension affects versions 1.43, 1.45, and 1.46 and allows an authenticated low-privilege editor to inject script-related HTML into collection/book fields, which then executes when a separate victim interacts with the rendered page. The flaw targets non-script HTML elements (CWE-80), and exploitation is constrained by the requirement that the extension be installed and enabled, by the attacker needing editing access, and by mandatory victim interaction; the vendor assigns CVSS v4 base score 1.1 (CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/E:P). The supplied CVSS v4 vector's E:P metric indicates that publicly available exploit code exists, but there is no CISA KEV listing, and our independent CVSS v3.1 assessment (AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N) agrees this is low priority.
Cross-site scripting in the MediaWiki Wikbase (Wikibase) extension lets a privileged, authenticated contributor inject script-related HTML into wiki content that is subsequently rendered to other users visiting the affected page. The flaw affects installations running the extension on MediaWiki 1.46, 1.45, and 1.43, and requires both an attacker account with elevated rights and a victim who views the crafted page; independent assessment confirms a low-risk, basic XSS (CWE-80) with Low confidentiality, integrity, and availability impact, matching the very low vendor CVSS 4.0 score of 0.3. No public exploit code has been identified at time of analysis, and the issue is not listed in CISA KEV.
Cross-site scripting in the optional MediaWiki Wikistories extension (versions 1.46, 1.45 and 1.43) allows an attacker who can supply story content to embed script-related HTML tags that the extension fails to neutralize, so the injected markup executes in the browser of a victim who views the crafted story. The flaw is reachable only on MediaWiki installations that have explicitly installed and enabled the Wikistories extension - it is not part of a default MediaWiki deployment - and the vendor's CVSS 4.0 vector describes exploitation requiring high privileges (PR:H), victim interaction (UI:P) and an active-attack condition (AT:P), which sharply limits realistic exposure; there is no public exploit identified at time of analysis and impact is confined to low confidentiality, integrity and availability. The vendor-published CVSS 4.0 score is 0.3, and our independent CVSS 3.1 assessment (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) rates this a low-real-risk issue despite being an XSS-class flaw.