Unauthenticated denial of service in vLLM 0.24.0 through 0.29.x allows a remote caller to force excessive video frame decoding by supplying uncapped media_io_kwargs.video.max_frames and media_io_kwargs.video.fps values to the /tokenize endpoint, exhausting Python-frontend memory and potentially terminating the API process before scheduling or admission control. Only deployments using the Python frontend and serving Qwen2-VL or Qwen3-VL video-capable multimodal models via Qwen2VLVideoBackend or Qwen3VLVideoBackend are affected; the Rust frontend rejects the media_io_kwargs field. No public exploit has been identified at time of analysis, and the vendor has released a fix in vLLM 0.30.0.
Denial of service in vLLM versions prior to 0.30.0 lets unauthenticated remote callers exhaust shared media-loading CPU and memory. A caller can set the request-level media_io_kwargs field to select the GLMGA video backend and pass oversized fps and max_frames values, causing GLMGA to build and deduplicate an attacker-sized pre-decode frame-index list from a tiny, valid video file. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) confirms no authentication is required and impact is limited to availability, yielding a moderate 5.3 score; no public exploit code has been identified at time of analysis and the issue is not in CISA KEV. The flaw is fixed in vLLM 0.30.0.
Reflected cross-site scripting (XSS) in the Dynamic Content Filter addon of the SP Page Builder Pro extension for Joomla (versions 3.0.0 through 5.6.1p2) allows unauthenticated attackers to inject arbitrary HTML or JavaScript into a victim's browser by crafting a URL with a malicious dc_filter_<fieldId> parameter, provided the addon is used with a slider field. The flaw is rated medium severity (CVSS 4.0 base 5.3; independent assessment CVSS 3.1 base 5.3) and requires user interaction-the victim must load the crafted link. No public exploit code has been identified at time of analysis, and CISA KEV does not list active exploitation.
Information disclosure in the WordPress plugin Video Conferencing with Zoom (video-conferencing-with-zoom-api, all versions through 4.6.10) allows any authenticated low-privilege account to retrieve sensitive data that the plugin embeds in the responses it sends to users. Both the CVSS 4.0 vector and the independently assessed CVSS 3.1 vector require a valid account (PR:L) with no user interaction (UI:N) and no administrative access, so exposure is greatest on sites that permit public or subscriber-level registration. There is no confirmed active exploitation (CISA KEV) and no public exploit code identified at time of analysis, giving a CVSS 4.0 base score of 5.3 that places this in moderate-severity, real-but-limited confidentiality risk rather than urgent-emergency territory.
Authenticated users of Penpot prior to 2.18.0 can exhaust server-side temporary storage by repeatedly re-uploading a valid chunk index through the chunked media upload RPC, because the backend validated only that the index was in range and never rejected an index that had already been stored. Each duplicate request allocates a new temporary storage object without replacing the previous one, so the session's actual stored bytes grow unbounded relative to its declared logical size, and the mismatch is only detected at assembly time. The vulnerability requires a valid account and an active upload session, is rated 5.3 (CVSS 4.0) with availability impact only, and is addressed in Penpot 2.18.0; no public exploit code identified at time of analysis.
An out-of-bounds read in vgmstream up to revision r2117 is triggered when a victim opens or plays an attacker-crafted PlayStation VAG audio file through any application that embeds the library; the flaw sits in ps_find_padding() in src/coding/psx_decoder.c, which scans for padding at the end of a stream and reads past the input buffer when fewer bytes remain than a full ADPCM frame. Exploitation requires user interaction (CVSS 4.0 UI:P, PR:N - no authentication needed) and impact is limited to minor memory disclosure or a decoder crash, with no code execution or system compromise demonstrated. The vendor has published an upstream fix (PR #2001, commit 4b8316652a30d40f99ad43310bed273fd1f8a7a3) with a straightforward bounds check; no public exploit identified at time of analysis, and the associated reference issue (#2000) is a bug report rather than weaponized code.
Out-of-bounds write in vgmstream up to r2117 lets a crafted TXTP playlist (or a related TXTH/VAB config or name-table file) overflow fixed-size stack buffers when parsed, corrupting memory in any vgmstream-based player, plugin, or library build that loads the file. The flaw sits in the parse_params/txtp_parse routines of src/meta/txtp_parser.c, where sscanf conversions used unbounded '%[^...]' scans without field-width limits; the trigger is an over-length key, value, or command token. Exploitation is unauthenticated but requires the victim to deliberately open the malicious file (UI:P per CVSS 4.0, UI:R per the assessed CVSS 3.1 vector), and no public exploit code has been identified at time of analysis; the issue is rated 5.3 (CVSS 4.0) and low-to-moderate priority, consistent with a client-side parsing fault that exposes no network service.
Unauthenticated information disclosure in the Blubrry PowerPress Podcasting WordPress plugin (versions up to and including 11.17.9) let's remote attackers retrieve embedded sensitive data from an affected site because a function handling that data lacks a proper authorization check (CWE-862). Per the assessed vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N (5.3), no credentials or user interaction are required, but the impact is confined to confidentiality only, limited to specific embedded data rather than arbitrary site data, credentials, or any write capability. No confirmed active exploitation (CISA KEV) or publicly available exploit code has been identified at time of analysis, making this a genuine but low-to-moderate priority issue rather than an emergency; the exact vulnerable route is not specified in the source advisory, which constrains precise detection.
Missing authorization in the WordPress Name Directory plugin (through version 1.34.2) lets remote, unauthenticated attackers reach functionality and directory data that should require higher privileges or proper access-control checks. The CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N reflects low-complexity, unauthenticated exploitation against default installs, with impact confined to low confidentiality loss and no integrity or availability effect, so the realistic outcome is unauthorized disclosure of directory entries rather than site takeover. No public exploit code has been identified at time of analysis and there is no CISA KEV listing; the primary practical exposure is limited to sites running the vulnerable plugin.
SNMP trap injection against Zabbix's bundled Perl trap receiver script allows a party that can deliver traps accepted by that receiver to forge a record against a different host, corrupting the integrity of collected monitoring data with no confidentiality or availability impact. The root cause is a failure to neutralize the ZBXTRAP record delimiter in CWE-143 terms, and only deployments that ingest traps through the shipped Perl script (typically wired into snmptrapd) are exposed. No public exploit code or confirmed active exploitation has been identified at time of analysis, and the independent assessment rates this as a moderate, low-priority integrity issue (CVSS 3.1 5.3) rather than an urgent threat.
Input data manipulation in Magepeople Inc.'s Taxi Booking Manager for WooCommerce plugin (all versions through 2.1.1) lets unauthenticated remote attackers tamper with a quantity-style input field that the plugin fails to validate properly, with the impact limited to integrity of that constrained booking/order value (C:N/I:L/A:N). The flaw carries a moderate CVSS 3.1 base score of 5.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N), meaning no authentication, user interaction, or special configuration is needed to reach the vulnerable code path on a default WordPress plus WooCommerce installation. There is no CISA KEV entry and no public exploit identified at time of analysis, so real-world priority is low-to-moderate; no EPSS score was supplied with the available intelligence.
Docling 2.83.0 through 2.130.x ignores the enable_remote_services=False policy when OCR is configured with KserveV2OcrOptions, so page-image crops are still transmitted to the caller-configured KServe v2/Triton inference endpoint during PDF processing. The defect is a security-control bypass rather than attacker-driven exfiltration: the remote destination is chosen by the operator, the vulnerable code path is inert unless a second, non-default remote OCR engine is explicitly configured, and satisfying the assessed vector (AV:L/AC:H/PR:H) requires local access with high privileges. The assessed impact is confined to low-severity confidentiality exposure of processed page images, with no integrity, availability, or code-execution effect; no public exploit code and no CISA KEV entry were identified at time of analysis, and the flaw is fixed in 2.131.0.
Docling's HTML backend forwards operator-configured HTTP headers - bearer tokens, API keys, cookies set via HTMLBackendOptions.headers - to every remote image URL named by an untrusted HTML document, including after a cross-origin redirect, leaking the caller's credentials to whoever authored the document. The flaw lives in docling/backend/utils/image_resource_loader.py in versions 2.95.0 through 2.131.x and is only reachable in a deliberately non-default configuration where both enable_remote_fetch and fetch_images are enabled and sensitive headers have been configured; the default configuration carries no exposure. Upstream scored it CVSS 3.7, while independent assessment rates the confidentiality impact as High given that live credentials are disclosed; no public exploit code has been identified at time of analysis, and the issue is fixed in 2.132.0.
Denial of service in MediaTek cellular modem firmware lets an attacker running a rogue base station crash the modem of an attached device by delivering a malformed message that triggers a missing bounds check, severing cellular connectivity until the modem restarts. The flaw is availability-only (CVSS 5.3, AV:A/AC:H/PR:N/UI:N/C:N/I:N/A:H) and is gated by radio proximity plus the victim UE actually attaching to the attacker-controlled cell, so it is not reachable over the internet and carries no confidentiality or integrity impact. No public exploit code and no confirmed active exploitation were identified at time of analysis, and MediaTek has shipped fixes (patch IDs MOLY01864925 / MOLY01210562) covering more than 50 chipsets across the October 2026 product security bulletin.
Denial of service in MediaTek's cellular modem firmware can crash the baseband on a broad set of MediaTek chipsets - including MT6991, MT6988, MT6897, MT8755, MT6835, MT8792 and others - causing the device to drop connectivity or reset. Exploitation is unauthenticated (PR:N, UI:N) but requires the attacker to operate a rogue, attacker-controlled base station and to get the target user equipment to attach to it over the radio interface, which is why attack complexity is rated high (AV:A/AC:H) and impact is limited to availability (A:H; no confidentiality or integrity effect). MediaTek publishes fix identifiers MOLY01870473 / MOLY00814393 (issue MSV-9041) in its October 2026 product security bulletin; no public exploit code and no confirmed active exploitation have been identified at time of analysis, and CISA's SSVC assessment rates exploitation as 'none' with partial technical impact, keeping real-world priority moderate-to-low despite the large number of affected chipsets.
Unauthenticated sensitive information disclosure in the Arraytics WP Event Solution WordPress plugin (all versions through 4.1.25) allows any remote attacker to retrieve embedded sensitive data from the plugin's exposed endpoint. Per the CVSS vector AV:N/AC:L/PR:N/UI:N, exploitation requires no credentials, no user interaction, and no non-default configuration - only that the plugin is installed and active and the affected endpoint is network-reachable. Impact is limited to partial confidentiality loss (C:L, CVSS 5.3) with no integrity or availability effect; no public exploit code has been identified at time of analysis and the issue is not in CISA KEV.
Information disclosure in the Pixelite Events Manager WordPress plugin through version 7.4.5 allows unauthenticated remote attackers to retrieve embedded sensitive data from outbound responses. No public exploit code has been identified at time of analysis, and the CVSS 3.1 score of 5.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) reflects a confidentiality-only impact rated Low. This is a moderate, low-priority vulnerability rather than a critical threat.
Unauthenticated remote attackers can manipulate the quantity input handled by VillaTheme's BuildKit - Product Builder for WooCommerce - Custom PC Builder (all versions through 1.0.28), altering builder-supplied configuration data on affected stores. The defect is an improper-validation-of-specified-quantity flaw (CWE-1284): the plugin accepts a caller-supplied quantity without adequately checking its type, bounds, or consistency, so a crafted request can subvert the value the builder relies on. Impact is confined to integrity per the assessed vector (CVSS 5.3, I:L with C:N/A:N), and no public exploit code or confirmed active exploitation was identified at time of analysis; the narrow deployment base of this niche PC-builder plugin further limits real-world exposure.
WP Mailster, a WordPress newsletter and mailing-list plugin, contains a missing authorization flaw (CWE-862) affecting all versions through 1.9.0.0, allowing remote attackers to reach plugin functionality or data that should be gated behind an access-control check. According to the CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N (score 5.3), exploitation requires no authentication and no user interaction against a default installation, but the resulting impact is limited to low-level confidentiality loss - unauthorized read access to data or functionality rather than modification, deletion, or site takeover. No public exploit code and no confirmed active exploitation were identified in the provided intelligence at time of analysis, and the flaw was reported through Patchstack as a broken access control issue in the WordPress plugin ecosystem.
Incorrect currency-calculation logic in the VillaTheme CURCY (woo-multi-currency) WordPress plugin, present in every release up to and including 2.2.17, allows remote attackers to trigger a bounded security impact against an affected site - the supplied vector requires no authentication, no user interaction, and no special configuration (CVSS:3.1/AV:N/AC:L/PR:N/UI:N). At CVSS 5.3 this is a moderate-severity, low-priority issue rather than an urgent threat: only a single low-severity outcome is realistic, with the public scoring signals disagreeing on whether that outcome is limited data disclosure (our assessed vector C:L/I:N) or limited data manipulation (the CNA vector I:L). There is no CISA KEV listing and no public exploit code identified at time of analysis, and the only public record is a Patchstack advisory entry, so exploitation in the field has not been observed.
Unauthenticated attackers can mark arbitrary orders as paid in the UPI QR Code Payment Gateway WordPress plugin through version 1.4.3, because the plugin's payment-confirmation handler does not verify that the confirmation request belongs to the order and customer it references (CWE-639, authorization bypass through a user-controlled key). The flaw is remotely reachable without authentication or user interaction (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N, score 5.3), but the impact is limited to falsifying payment status with no data disclosure or denial of service, and exploitation requires the plugin to be installed and enabled as an active checkout payment method plus attacker knowledge or enumeration of a valid order ID. No public exploit code or CISA KEV entry was identified at time of analysis, making this a genuine but moderate-priority issue rather than a critical one, consistent with the independent assessment.
A missing permission check in MediaTek modem firmware permits an out-of-bounds read that can crash the baseband, producing a remote denial of service on affected handsets. The attack is unauthenticated (CVSS PR:N) and requires no user interaction (UI:N), but it only succeeds if the victim UE is already camped on a rogue base station the attacker controls, which is why the vector is scored AV:A/AC:H and the issue is assessed as moderate severity and low real-world priority. No public exploit code has been identified at the time of analysis, and impact is limited to availability of the modem - no confidentiality or integrity loss, and no code execution. MediaTek has issued a fix under Patch ID MOLY01774038 / Issue ID MSV-8911.
Remote denial of service against MediaTek modem (baseband) firmware affects more than 80 chipsets - including MT6765, MT6785, MT6833, MT6883, MT6985, MT6991 and MT8798 - where a missing bounds check during cellular message parsing produces an out-of-bounds read (CWE-126) that can crash the baseband. An attacker who operates a rogue base station and gets a victim UE to attach can trigger the fault with no authentication (PR:N) and no user interaction (UI:N), though the adjacent-network position and specialized radio hardware required drive the high attack complexity (AC:H) and the CVSS 3.1 score of 5.3, with impact limited to availability. Neither our independent assessment nor CISA's SSVC framework records known exploitation (Exploitation: none, Automatable: no), so no public exploit is identified at time of analysis.
Out-of-bounds read in MediaTek modem firmware (CWE-126) allows an attacker operating a rogue base station to trigger a memory over-read in the modem stack of any UE that connects to it, resulting in a remote denial of service (availability only; no data exposure or code execution). The issue affects a very wide set of MediaTek chipsets (MT6989, MT6990, MT6983, MT6768, MT6765 and dozens more) enumerated in MediaTek's October 2026 product security bulletin. No authentication or user interaction is required (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H, base 5.3), but practical exploitation demands radio proximity, rogue base-station infrastructure, and the ability to coerce device attachment - CISA SSVC rates exploitation 'none' and automatable 'no', and no public exploit code or confirmed active exploitation was identified at time of analysis, making this a genuine but moderate-priority issue rather than a critical one.
Denial of service against the cellular modem firmware shipped in a very broad range of MediaTek chipsets (MT6739 through MT6993/MT8893 families) arises from an out-of-bounds read caused by a missing permission check. The precondition is that the victim user equipment has already attached to a rogue base station under the attacker's control, meaning the adversary must operate radio infrastructure within range and successfully induce attachment (downgrade or stronger-signal lure) - hence the AV:A/AC:H scoring and the LOW real-world priority despite the enormous chipset footprint. Once attached, exploiting the flaw requires no authentication (PR:N) and no user interaction (UI:N), but the outcome is availability-only (A:H, with no confidentiality or integrity impact); there is confirmed no active exploitation (CISA KEV absent), no public exploit code identified at time of analysis, and no EPSS signal was provided in the source data.
Modem denial of service in MediaTek baseband firmware allows an attacker operating a rogue base station within radio range to crash or reset a victim handset's modem through an out-of-bounds read (CWE-125) caused by an incorrect bounds check on attacker-influenced over-the-air data. The attacker must first get the target UE to camp on the malicious cell (CVSS 3.1 AV:A/AC:H), after which no privileges and no user interaction are required, and the only impact is loss of availability of the modem (A:H, C:N/I:N), yielding a 5.3 base score. There is no public exploit identified at time of analysis, CISA's SSVC assessment records Exploitation=none and Automatable=no, and applicability is limited to devices built on the enumerated MediaTek chipset models with vulnerable modem firmware, so this is a genuine but bounded, proximity-dependent availability risk rather than a mass-exploitation emergency.
Unauthenticated remote attackers can tamper with limited plugin-controlled data in Kit (formerly ConvertKit) for WooCommerce versions up to 2.2.0 due to a missing authorization flaw, enabling unauthorized modification of certain settings or data. The vulnerability has a CVSS score of 5.3 with low integrity impact and does not require authentication or user interaction, though it cannot exfiltrate confidential data or cause denial of service. No public exploit identified at time of analysis, and patch availability is not confirmed.
Missing authorization in the Arraytics WP Event Solution WordPress plugin (all versions through 4.1.25) allows remote attackers to invoke functionality that should be restricted to privileged users, with the CVSS vector AV:N/AC:L/PR:N/UI:N indicating no authentication, no user interaction, and no non-default configuration are needed against a site that has the plugin installed and active. Impact is limited to integrity (C:N/I:L/A:N), so affected installations face unauthorized modification or creation of plugin-managed content rather than data disclosure or denial of service. The issue is rated moderate (CVSS 5.3) and no public exploit code has been identified at time of analysis.
Missing authorization checks in the Fluent Forms Pro Add On Pack for WordPress, affecting versions up to and including 6.2.13, allow unauthenticated remote attackers to reach functionality that should require elevated permissions, yielding a low-integrity impact (vendor/NVD CVSS 3.1 base score 5.3, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N). Because the vector is PR:N/UI:N, no login and no victim interaction are required; the practical exposure is limited to incorrect modification of plugin-controlled data, with no confidentiality or availability impact assessed. Only sites that have purchased and activated this paid add-on are affected - installations running the free Fluent Forms base plugin alone are not vulnerable. At time of analysis there is no CISA KEV entry and no public exploit identified, and no EPSS score was supplied.
Reflected cross-site scripting and an open redirect in the front-end "share mini page" of the Joomla Event Gallery extension (svenbluege.de) affect all versions below 6.6.0. When the "Share article links" option is enabled, the article address carried in a crafted share link is rendered into the page without validation or output encoding, and when the link type is set to "Image Page with Redirect" the address is followed immediately, allowing an attacker to execute script in the browser session of any visitor who opens the prepared link or to silently redirect that visitor to an attacker-controlled site. The vulnerability is unauthenticated remote (CVSS 4.0 base 5.3; independently assessed as CVSS 3.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N), requires a victim to click the malicious link, and no public exploit code has been identified at time of analysis; there is no server-side read or write, so impact is confined to the victim's browser session.
Information disclosure and broken authorization in Penpot before 2.18.0 allow an unauthenticated caller who holds any valid share link to the get-view-only-bundle RPC to retrieve all share-link rows for the same file, including secret IDs and page, comment, and inspect scopes. The issue is rated CVSS 5.3 (CWE-862) and is fixed in 2.18.0; no public exploit code was identified at time of analysis, and exploitation requires possession of a share-link URL plus multiple differently scoped links on the same file to yield additional access.
Improper handling of grouping query fields in Plane (the open-source project management tool) versions prior to 1.4.0 allows an unauthenticated remote attacker to send arbitrary ORM field names through the public issues endpoint's group_by and sub_group_by parameters, producing unhandled FieldError/KeyError conditions and repeated HTTP 500 responses, or using the resulting error behaviour as a blind relational-traversal oracle. The vulnerable path is the publicly published Spaces endpoint, so only deployments that expose that endpoint over the network are reachable; no credentials or user interaction are required (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L, 5.3, CWE-943), and the confirmed impact is limited to availability/error-oracle exposure rather than direct column-value disclosure. The flaw is not listed in CISA KEV and no EPSS score was provided; the vendor advisory contains a proof-of-concept request (group_by=state_id&sub_group_by=created_by__password) demonstrating the parameter combination, so publicly available exploit demonstration code exists, and the issue is fixed in Plane 1.4.0.
HeYm (heymrun/heym) deployments prior to v0.0.112 can be tricked into emailing human-in-the-loop (HITL) review links that point to an attacker-controlled domain, leaking the capability tokens embedded in those links. An unauthenticated attacker who can trigger anonymous workflows and who supplies a forged Origin or X-Forwarded-Host header causes build_public_base_url() to derive the notification base URL from attacker input; if a legitimate reviewer then clicks the link, the token is captured and can be replayed to submit review decisions that the platform executes with the workflow owner's credentials. Rated medium severity (CVSS 4.0 base 5.3; independently assessed as CVSS 3.1 AV:N/AC:L/PR:N/UI:R with low confidentiality and integrity impact), the flaw is conditional - it requires an anonymously triggerable workflow, the HITL feature, and reviewer interaction - and no public exploit code or confirmed active exploitation was identified at time of analysis. The vendor-released fix is Heym v0.0.112.
Arbitrary file write in Perforce P4 Search versions prior to 2026.4.2 allows an attacker who already holds super-user or service-token privileges to write files with attacker-controlled content into the P4 Search installation directory via the extension installation feature, which fails to validate supplied file names (CWE-73). The vulnerability is authenticated and gated by a PR:H requirement, so exploitation is not possible for unauthenticated or low-privileged users; the realistic risk is confined to malicious insiders, abused service tokens, or an attacker who has already compromised a privileged account. The vendor rates it CVSS 4.0 base 5.1 (VC:N/VI:L/VA:L), and no public exploit code or confirmed active exploitation (CISA KEV) has been identified at time of analysis.
Server-side request forgery (SSRF) in Shaarli up to 0.16.3 allows an attacker who can reach the admin-only MetadataController endpoint to make the server fetch arbitrary HTTP(S) URLs, including those resolving to private, loopback, link-local, or reserved addresses. Exploitation requires either an authenticated administrator session (PR:H) or tricking a logged-in admin into triggering the request, which was feasible before the fix because the endpoint did not validate a CSRF token; the pre-patch code also only checked that the URL scheme contained the substring 'http' and performed no IP validation. There is no confirmed active exploitation (not listed in CISA KEV) and no public exploit code identified at time of analysis; a vendor patch is available in version 0.16.4.
Stored cross-site scripting in the LearnPress WordPress plugin through version 4.4.9.1 allows authenticated users holding the Instructor role to inject JavaScript into quiz question hint and explanation fields through the update_question AJAX handler, where the payload is persisted and later rendered in the browser session of every student who opens the affected quiz. The root cause is missing sanitization (CWE-79) of those two fields before storage and output, which the upstream commit addresses with Template::sanitize_html_content. Exploitation is limited: it requires an Instructor-level account plus a student actually viewing the quiz, yields only script execution in the student's browser (no server compromise, no privilege escalation), and no public exploit code was identified at time of analysis; this is a genuine but moderate-severity issue rather than a drop-everything priority.
The Host search feature in the Zabbix Frontend allows filtering on fields that are never displayed in search results, including stored IPMI credentials and PSK values, so an authenticated user with read access to hosts can submit a guessed secret and infer from whether results are returned whether the guess was correct. This is a guess-confirmation oracle rather than a direct credential readout: each request leaks only one bit of information, so short or weak IPMI passwords are realistically recoverable through repeated queries, while high-entropy PSK secrets may be impractical to brute-force. Successful abuse yields low-confidentiality impact and requires the attacker to already hold a valid low-privileged frontend account (PR:L, authenticated per the CVSS vectors); no public exploit code or confirmed active exploitation has been identified at time of analysis.
DYMO ID 1.5.1.71 and earlier automatically parse job files with DTD processing enabled, allowing a crafted file placed on a browsed network share to trigger XML external entity (XXE) processing. This can lead to SSRF, NTLMv2 credential capture, local file disclosure, or process crash, though the independent assessment notes impact is bounded and does not include arbitrary code execution. No public exploit code has been identified at time of analysis, and the vendor released a fix in version 1.6.0.
Cross-site request forgery in the Event Gallery extension for Joomla (all versions before 6.6.0) allows an attacker-controlled external page to silently flip back-end configuration flags - default payment method, shipping method, image type set, order status, watermark, putting an event in or out of the shop, selecting an event's main image, toggling the main-image-only flag, and sorting event images - in the name of an administrator. The eight affected back-end list buttons never validate the Joomla form token, so the forged requests execute with the privileges of a victim who has an active administrator session and visits the malicious page (user interaction required, per the assessed vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N). Impact is deliberately narrow - no data can be read or deleted and orders are unaffected - so this is a medium/low-priority issue rather than a high-CVSS alarm; no public exploit code or confirmed active exploitation was identified at time of analysis, and the flaw is fixed in version 6.6.0.
Theme translation-file path traversal in Ghost CMS lets an authenticated Administrator read JSON files outside the active theme's directory, potentially exposing server configuration secrets such as database credentials or API keys stored in JSON. All Ghost releases from 1.20.0 up to but not including 6.64.0 are affected, with the fix shipped in 6.64.0; because exploitation requires the highest-privilege Administrator role (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N, base 4.9) and yields confidentiality-only impact, this is a low-to-moderate priority issue rather than an anonymous remote attack. No public exploit code has been identified at time of analysis.
A denial-of-service condition in Ghost CMS affects versions 4.0.0 through 6.66.x, where a crafted content import file can drive catastrophic regular-expression backtracking and pin the Node.js event loop, leaving the server unresponsive. The vulnerability is only reachable by an authenticated Ghost Administrator (CVSS PR:H) who submits a malicious import through the built-in content import feature, so the practical risk is limited to environments where admin credentials are already compromised or misused. No public exploit code has been identified at time of analysis and there is no confirmed active exploitation (no CISA KEV listing); vendor-released patch: 6.67.0.
Denial of service in Ghost CMS 5.37.0 through 6.66.x allows an authenticated administrator to pin server CPU and render the Ghost instance unresponsive by sending a crafted request to the external media inliner, which compiles attacker-influenced domain strings into unescaped regular expressions (CWE-1333, inefficient regular expression complexity / catastrophic backtracking). Exploitation requires a Ghost Administrator account (CVSS PR:H, AV:N/AC:L/UI:N/S:U/C:N/I:N/A:H, base score 4.9), so realistic risk is confined to malicious or compromised admin accounts rather than anonymous visitors or the read-only front end. No public exploit identified at time of analysis; the vendor fix is contained in Ghost 6.67.0.
Penpot versions prior to 2.18.0 fail to protect a team owner from removal by another administrator: a non-owner team admin can call the delete-team-member RPC to strip the owner's team-profile membership, locking the owner out of the team and its projects, files, fonts, and media. The flaw is an authenticated, high-privilege availability issue (CVSS 4.9, AV:N/PR:H, availability-only), not a remotely exploitable unauthenticated attack, and no public exploit code was identified at time of analysis. The issue is fixed in 2.18.0.
Cross-tenant event-stream disclosure in Rapid7 Velociraptor lets an authenticated API user who holds event-watching privileges in one organization read WatchEvent gRPC streams belonging to a different organization they are not authorized for, because the server validates permissions against the caller's own OrgId instead of the OrgId supplied in the request. Only multi-org (multi-tenant) deployments with more than one Org defined are meaningfully exposed; single-org installs have no other tenant to pivot to, and the impact is confidentiality-only with no write or denial-of-service effect. Exploitation requires valid low-privileged API credentials (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N), and no public exploit code was identified at time of analysis.
Joplin Server releases prior to 3.7.2 store CSRF, account-confirmation, email-change and password-reset tokens in a single purpose-less pool, so an unauthenticated remote attacker who already holds any one of a victim's tokens can submit it to the public password-reset endpoint and set a new password for that account, simultaneously deleting the victim's existing sessions and API applications. The CVSS vector (AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N, 4.8; independent assessment also credits A:L) reflects that exploitation is remote and needs no authentication, but is gated on a hard prerequisite: the attacker must obtain the victim's token through an entirely separate disclosure channel, because the vulnerability itself does not leak it. This is a CWE-620 unverified password change (token-purpose confusion) rather than a self-contained takeover path, it is not listed in CISA KEV, and no public exploit code was identified at time of analysis; the vendor has released an exact fix in Joplin Server 3.7.2.
CSS injection in Joplin Desktop versions prior to 3.7.13 allows a malicious note containing a jsoncanvas fence to inject styles and remote CSS imports into the application chrome when the victim selects the note in the Whiteboard editor, enabling UI redressing, open-signaling, and possible disclosure of exposed attribute values. Content Security Policy blocks inline script execution, so the supported impact is not code execution, and no public exploit has been identified at time of analysis. Vendor-released patch: 3.7.13.
Processing a crafted document with Docling (or the docling-slim distribution) versions 2.45.0 through 2.130.x can exhaust process memory: a small gzip-compressed tar archive that declares a very large number of empty members causes the full archive member list to be materialised before the configured max_member_count limit can stop processing. The flaw sits in METS-GBS format detection (docling/datamodel/document.py) and the METS-GBS backend (docling/backend/mets_gbs_backend.py), and because detection runs before the allowed_formats restriction is applied, an attacker does not need METS-GBS to be an enabled format - remote, unauthenticated delivery is possible per the CVSS vector (AV:N/PR:N), though a user or automated pipeline must actually submit the file (UI:R), and the resulting impact is limited to availability (A:L, CVSS 4.3) with no code execution or data disclosure. No public exploit code was identified at time of analysis and the issue is not recorded as actively exploited; a vendor fix is available in 2.131.0.
Information disclosure in Docling (and the docling-slim distribution) versions 2.16.0 through 2.130.x lets an attacker embed local file paths or file: URIs inside a crafted DoclingDocument JSON that, when re-converted and enriched or exported with ImageRefMode.EMBEDDED, causes Docling to open and embed the referenced file's bytes into Markdown or HTML output. Per the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N, score 4.3), no privileges are needed but the victim must actively load the malicious JSON, and exposure is constrained to files Pillow can decode as images, with differing decode behavior potentially revealing whether a path exists. There is no public exploit code identified at time of analysis and the issue is not listed in CISA KEV; the flaw is fixed in Docling 2.131.0.
WordPress sites running the Memberful - Membership Plugin (memberful-wp) through version 1.81.2 can expose sensitive system information to any authenticated user holding a low-privilege account, such as a subscriber or registered member. The flaw is reachable over the network with low attack complexity and requires no user interaction, but the impact is confidentiality-only and limited in scope (CVSS 4.3, C:L), making this a low-to-moderate priority hardening item rather than an emergency patch. No public exploit code was identified at time of analysis, and the vulnerability is not known to be actively exploited.
Authenticated low-privileged users can read support tickets belonging to other users in the Ahmad JS Help Desk WordPress plugin through version 4.0.0 by manipulating user-controlled object references. This is a classic insecure direct object reference (IDOR, CWE-639) limited to confidentiality impact; authentication is required per the CVSS vector (PR:L), and no public exploit code has been identified at time of analysis. With a CVSS score of 4.3 and no active exploitation reported, this is a moderate-severity, low-priority issue.