Insufficient password-hashing work factor in the Cloak.Ecto PBKDF2 field module causes hashes to be derived with roughly 18,750 times less computational effort than the configured parameters imply, letting anyone who already holds both the stored hash values and the configured :secret brute-force low-entropy plaintexts (such as email addresses) far more cheaply than the library promises. The affected code is cloak_ecto from 1.0.0-alpha.0 onward and cloak from 0.7.0 before 1.0.0-alpha.0; the vulnerable dump/1 callback passes config[:size] (default 32) into PBKDF2's iteration-count position, so each hash runs 32 rounds instead of the default 600,000. This is a post-compromise amplifier rather than a standalone remote exploit: it requires prior disclosure of the hash column and the application secret, and remains impractical against high-entropy values. No public exploit code was identified at time of analysis, and CISA KEV does not list this CVE; the CNA assigned CVSS 4.0 base 6.3 (medium), while our independent assessment rates it CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N, reflecting the privileged prerequisites and confidentiality-only impact.
DOM-based cross-site scripting in the client interface of HPE Networking ClearPass Policy Manager lets an unauthenticated remote attacker execute arbitrary script in the browser context of a legitimate interface user, but only if that user is successfully induced to interact with attacker-supplied input (UI:R) - typically by opening a crafted link. The impact is session-scoped to the targeted victim's browser: the published CVSS 3.1 score is 6.3 (AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L), while our independent assessment scores it consistently at moderate severity and adjusts the availability sub-score to None, since the appliance and other users are not directly compromised. There is no CISA KEV entry and no public exploit code identified at time of analysis, and the attack cannot succeed without victim participation, which substantially limits practical risk. This is a moderate-severity, moderate-priority issue rather than a top-tier emergency, and the HPE security bulletin (hpesbnw05158en_us) is the authoritative source for affected builds and fixed releases.
Integer overflow leading to a heap-based buffer overflow in GIMP's DICOM export plug-in allows a local user to corrupt memory when exporting an image whose width and height are large enough that the 32-bit width × height × bytes-per-pixel product wraps and undersizes the heap allocation. Exploitation requires the victim to initiate the export and involves a crafted image with extremely large dimensions, so the attack is local (AV:L) and user-interaction dependent (UI:R), with high attack complexity (AC:H); the assessed CVSS is 6.3 with high integrity and availability impact but no confidentiality impact. No public exploit code has been identified and there is no indication of confirmed active exploitation (CISA KEV), and no vendor-released patch version is identified in the available data.
Authenticated command injection in reNgine up to 2.2.0 allows a low-privileged user to execute arbitrary OS commands on the server by supplying a crafted target Name, which is passed to a shell command during the subdomain_discovery task. Publicly available exploit code exists (GitHub issue #1561), and the upstream fix PR #1562 awaits acceptance, so no released patched version is confirmed. Independent assessment rates the impact as high (CVSS 3.1: 8.8), while the vendor's CVSS 4.0 score of 2.1 reflects limited scope and low impact ratings, creating a sharp conflict in severity signals; no CISA KEV confirmation was provided.
An out-of-bounds heap read in tftp-hpa's rewrite_string() function (tftpd/remap.c) lets an unauthenticated remote attacker send a TFTP read or write request whose filename matches a configured remap 'jump' rule, causing the forked in.tftpd request handler to read past the end of a heap buffer and crash. Only tftp-hpa 5.4 through versions before 6.0 are affected, and exploitation is not possible in a default deployment: the daemon must be started with the remap feature enabled (the tftpd '-m'/mapfile option) and the rule set must contain at least one jump rule. The vendor-supplied CVSS 4.0 vector scores this 6.3 (medium), but the impact is limited to a low availability effect - the crashed process is the per-request child, not the listening daemon, so the practical result is aborted individual transfers rather than full service loss; no public exploit code has been identified at time of analysis and there is no confirmed active exploitation (not in CISA KEV).
Memory exhaustion in the SSSD (System Security Services Daemon) can be triggered by an unauthenticated local attacker who repeatedly initiates Identity Provider (IdP) pre-authentication flows without completing them, causing uncleared in-memory state to accumulate until authentication services degrade or terminate (denial of service, CVSS 6.2). The flaw (CWE-770) affects SSSD on Red Hat Enterprise Linux 6, 7, 8, 9, and 10 as well as Red Hat OpenShift Container Platform 4, but only when IdP authentication is explicitly enabled, which is not the default configuration. No public exploit code or confirmed active exploitation (CISA KEV) was identified at time of analysis.
Denial of service in sssd passkey authentication handling allows any local user to crash the PAM responder by sending a crafted PAM request. The flaw, a missing state validation check leading to an uninitialized pointer dereference (CWE-476), affects sssd on Red Hat Enterprise Linux 6 through 10 and OpenShift Container Platform 4 when passkey authentication is enabled-a non-default configuration. With a CVSS score of 6.2 (AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), impact is limited to availability; no public exploit has been identified at time of analysis, and exploitation requires local access and the passkey feature to be active.
Denial of service in Elastic Endpoint on Windows can crash and repeatedly restart the endpoint protection process when it handles a specially crafted file name under Chinese, Japanese, or Korean system locales. The vendor advisory identifies fixes in Elastic Agent/Endpoint 8.19.22, 9.4.8, and 9.5.5 (ESA-2026-194), so Windows Elastic Defend deployments below those builds on the corresponding release lines should be treated as potentially affected. No public exploit code or CISA KEV entry was provided, and the independent assessment characterizes this as a moderate-priority, availability-only issue rather than a high-impact breach risk.
Stored cross-site scripting in Arista CloudVision CUE can let an authenticated, high-privilege administrator store malicious content in a configuration that later executes in another authenticated user's browser when that user views or compares the affected configuration. Successful exploitation could allow the attacker to act through the victim's authenticated session to access sensitive data, modify configurations, or disrupt managed wireless services. The issue is rated medium (6.2), requires high privileges and victim interaction, and no public exploit was identified at time of analysis.
Stored cross-site scripting in SourceCodester Simple Student Information System 1.0 lets remote, unauthenticated attackers inject arbitrary JavaScript through the firstname and lastname fields processed by /register.php, which executes in the browser of any victim who later views the affected profile page. Publicly available exploit code exists, and the vendor has not released a patch; this is a low-to-moderate priority issue despite the remote attack vector because successful exploitation requires the victim to view the tainted page (UI:P) and impact is limited to client-side script execution with no server-side code execution, no confidentiality loss of stored data, and no availability impact.
Denial of service in vLLM up to and including 0.31.0 lets a remote, authenticated user who can submit inference requests crash the serving engine by combining a prompt_embeds input with token penalty parameters (frequency, presence, or repetition), a combination that drives get_token_bin_counts_and_mask in vllm/model_executor/layers/utils.py into a fault. Publicly available exploit code exists in the form of a published reproduction script, and the vendor had not responded to the early issue report at the time of analysis, so unpatched, internet-exposed or multi-tenant deployments that accept such requests are exposed to availability loss. Impact is limited to availability of the serving process - no data disclosure or integrity compromise has been demonstrated.
An out-of-bounds read in vLLM up to and including version 0.31.0 lets a caller with low-privilege access to the completions API drive the SSM convolution path past the end of a buffer, degrading availability of the inference worker. The flaw is confined to deployments that serve Mamba/Mamba2-architecture models, because it lives in conv_ssm_forward of vllm/model_executor/layers/mamba/mamba_mixer2.py; instances running only standard transformer models are unlikely to reach the vulnerable code. Publicly available exploit code exists, but there is no confirmed active exploitation (not listed in CISA KEV); the independent assessment bounds impact to low availability loss with no confidentiality or integrity effect, making this a moderate rather than top-tier priority.
Cross-site scripting in imgproxy up to 4.0.17 allows remote, unauthenticated attackers to submit crafted SVG content that bypasses the sanitizeElement routine in the SVG handler, potentially executing client-side script when a victim renders the processed image in a browser. Publicly available exploit code exists for the flaw, though no confirmed active exploitation (CISA KEV) is indicated in the provided data. The issue is medium severity because exploitation requires the processed SVG to be rendered in a browser and the deployment to pass SVG through imgproxy's SVG processing path rather than blocking or rasterizing it.
Cross-site scripting (XSS) in SourceCodester Drug Recommendation System 1.0 allows remote attackers to inject malicious scripts via the Admin/add_drug.php endpoint, which execute in an authenticated administrator's browser when the drug data is rendered. The attack requires user interaction and typically administrator-level access to the vulnerable form, and while publicly available exploit code exists, the overall risk is assessed as low-to-moderate due to these prerequisites and the limited browser-context impact.
Improper authorization (CWE-285) in jshERP through version 3.5 allows an authenticated, low-privileged user to manipulate financial receipt records by invoking the updateAccountHeadAndDetail function in AccountHeadService.java, which fails to enforce proper permission checks. The flaw is remotely exploitable with low attack complexity and no user interaction (CVSS 4.0 base 5.3; assessed CVSS 3.1 AV:N/AC:L/PR:L/UI:N), but exploitation requires a valid low-privilege account, so the practical risk is insider abuse or misuse of any obtained credentials rather than unauthenticated external compromise. Impact is limited to integrity and availability of financial receipt data (VI:L/VA:L) with no confidentiality exposure, and publicly available exploit code exists (referenced in GitHub issue 167); the vendor was notified via an issue report but has not responded, and no vendor-released patch was identified at time of analysis.
Authenticated attackers can manipulate the goodsCount parameter in Newbee Mall's shopping cart quantity handler (endpoint /jshERP-boot/accountHead/updateAccountHeadAndDetail) to cause business logic errors, potentially leading to incorrect order totals or inventory records. The vulnerability affects all versions up to 2.7.5, and publicly available exploit code exists; however, active exploitation has not been confirmed (not in CISA KEV). With a CVSS score of 5.3 and impact limited to integrity (no confidentiality or availability loss), the overall risk is medium/low.
An authenticated authorization bypass in PickMall Lilishop 4.2.4 and earlier allows any buyer-level user to read other members' invoice/receipt data by manipulating the memberId parameter on the /buyer/trade/receipt endpoint. Publicly available exploit code exists, and the vendor has not responded to the reported issue, but the vulnerability only exposes limited invoice information (low confidentiality impact) and requires a valid buyer session, so it does not warrant emergency prioritization.
SQL injection in SourceCodester Performance Indicator System 1.0 allows low-privilege authenticated attackers to manipulate the 'Category' parameter in /opils/admin/view_product.php, leading to limited confidentiality, integrity, and availability impact. Publicly available exploit code exists, and the CVSS vector requires PR:L, meaning attackers must first obtain valid low-privilege credentials to the admin interface. There is no evidence of confirmed active exploitation (CISA KEV), and the EPSS score is not available.
SQL injection in girishsaraf's Online Appointment Booking System allows an authenticated low-privilege user to inject arbitrary SQL through the Doctor and appointment parameters handled by book.php, exposing or corrupting booking-related data. All commits up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5 are affected because the project ships as an unversioned rolling release, and the maintainer has not responded to the vendor notification, so no fixed release exists. Exploitation is remote and publicly available exploit code exists (no CISA KEV listing), but the assessed impact is partial rather than full database takeover, making this a genuine but low-to-moderate priority issue.
Open redirect in Google Chrome's AppManifest handling (all builds prior to 155.0.8059.39) lets a remote attacker abuse a crafted HTML page to bypass web origin policy, giving low-level confidentiality and integrity impact that crosses a security scope boundary. Exploitation is not automatic: the attacker must host the malicious page and socially engineer a victim into visiting and interacting with it - the assessed vector is AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N, so no authentication is needed but user interaction is mandatory, and the attacker cannot trigger the redirect without a lured, interacting victim. No public exploit identified at time of analysis: SSVC reports Exploitation: none, EPSS is 0.20% (9th percentile), and Google has released a vendor patch in Chrome 155.0.8059.39.
Missing authorization in a Chrome API allows an attacker-crafted extension to leak sensitive information from Google Chrome installations running versions prior to 155.0.8059.39. Exploitation requires the victim to install and run the malicious extension, so it depends on successful social engineering and mandatory user interaction (CVSS 6.1, AV:L/PR:N/UI:R) rather than direct network reachability, with confidentiality rated High and a limited integrity impact. No public exploit code or active exploitation has been identified at time of analysis, EPSS is low at 0.19% (8th percentile), and Google has released a patched build, so auto-updated browsers at 155.0.8059.39 or later are not affected.
Incorrect authorization in the WebAppInstalls component of Google Chrome for Android before 155.0.8059.39 lets a remote, unauthenticated attacker bypass Android system access restrictions when a victim loads a crafted HTML page. Rated CVSS v3.1 6.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) and Chromium security severity Medium, the issue is a genuine but moderate-priority logic flaw rather than an emergency: EPSS is only 0.19% (8th percentile), no public exploit identified at time of analysis, and it is not in CISA KEV, with the Android-specific WebAppInstalls code path and mandatory user interaction being the main factors limiting real-world exploitation. Vendor-released patch: Chrome 155.0.8059.39.
An incorrect authorization flaw in the Core component of Google Chrome allows a crafted HTML page to bypass system access restrictions - but only after the attacker has already compromised the Chrome renderer process. This makes it a chained, second-stage sandbox escape rather than a standalone remote compromise: a separate renderer-level exploit is a hard prerequisite, and the victim must still load attacker-controlled content, which is why the assessed vector raises attack complexity to High (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N, 6.1 base). No public exploit code has been identified at time of analysis and EPSS is low at 0.19% (8th percentile), but a vendor patch is available in Chrome 155.0.8059.39, so affected users should update without delay.
Incorrect authorization logic in Google Chrome for iOS versions prior to 155.0.8059.39 lets a remote, unauthenticated attacker bypass system access restrictions by convincing a victim to open a crafted HTML page in the browser. Exploitation is gated entirely by social engineering (UI:R), and the resulting impact is bounded to low confidentiality and low integrity with a scope change, so no availability loss is expected; there is no public exploit identified at time of analysis and EPSS is very low (0.18%, 7th percentile). Google has released a fixed build, making this a genuine-but-low-priority issue rather than an urgent threat.
Stored cross-site scripting in Gitea's raw media API endpoint (GET /api/v1/repos/{owner}/{repo}/media/{filepath}) lets an authenticated user with push access to a repository have HTML files of up to 1 KiB rendered by the browser on the Gitea origin, executing JavaScript in the session of any victim who opens the media URL and acting with that victim's permissions. The flaw affects Gitea versions up to and including 28.0.0 and arises because the handler in routers/api/v1/repo/file.go wrote non-LFS file content directly to the HTTP response without the content-type and content-disposition headers Gitea normally applies to user-supplied content. Exploitation requires prior repository write access and mandatory victim interaction (the target must open the crafted media URL while authenticated), and a vendor fix is available in Gitea 28.1.0. EPSS is low at 0.17% (6th percentile), CISA SSVC records no observed exploitation and no automatable exploitation path, and no public exploit code was identified at time of analysis.
Cross-site request forgery in SourceCodester Drug Recommendation System 1.0 allows a remote attacker to make an authenticated victim's browser submit unintended state-changing requests, because the application's forms do not validate anti-CSRF tokens (CWE-352). The attacker needs no credentials of their own (CVSS:3.1 AV:N/AC:L/PR:N/UI:R/S:U), but success requires luring a logged-in victim to attacker-controlled content while their session is active, and the resulting impact is limited to low integrity with no confidentiality or availability loss. Publicly available exploit code exists (published in the hackliu/Vulnerability-Reports repository as VULN-06-CSRF-Missing-Tokens.md), but there is no evidence of confirmed active exploitation (not listed in CISA KEV), so this should be treated as a low-to-moderate real-world risk rather than a mass-exploitation event.
SSSD configured with the Microsoft Entra ID identity provider fails to neutralize single quotes in lookup names before embedding them into Microsoft Graph OData queries, enabling an authenticated local attacker to inject filter syntax. This can broaden user or group searches, leading to information disclosure of unintended directory objects and a denial of service through excessive processing and cache population. The CVSS vector (AV:L/PR:L) confirms the attack is local and requires low privileges, and exploitation is only possible when the non-default Entra ID backend is enabled; no public exploit or active exploitation is reported, and no EPSS score was provided.
Local denial of service in the HPE Networking ClearPass Policy Manager OnGuard agent lets an authenticated low-privilege user on an affected endpoint interrupt the normal operation of the agent service. Exploitation requires an existing local session on the host running the agent and a valid low-privilege account (AV:L, PR:L, UI:N), and the impact is confined to the OnGuard agent on that single endpoint rather than the ClearPass Policy Manager server itself. There is no confirmation of active exploitation (not in CISA KEV) and no public exploit code identified at time of analysis, so this should be triaged as routine patching rather than an emergency; no EPSS score was supplied in the source data.
SQL injection in the school_year parameter handled by search_class.php allows an authenticated low-privileged user to alter database queries in the KusalkaSilva Learning-Management-System, a PHP-based application distributed on a rolling-release basis with no version identifiers. Publicly available exploit code exists, and the vendor has not responded to the issue report filed against the project repository, so no fixed release can be confirmed. Because exploitation requires a valid low-privileged session with access to the class-search functionality (CVSS 4.0 vector PR:L, UI:N, AV:N), anonymous attackers cannot reach the vulnerable parameter, which limits exposure; the assessed impact is low confidentiality, integrity, and availability loss.
Heap memory corruption in the lrzsz lrz ZMODEM receive utility (all versions before 0.13.0) allows a malicious or compromised ZMODEM sender to overflow the fixed-size Pathname buffer in procheader() by supplying an overlong filename of up to 8192 bytes, crashing lrz and potentially enabling limited heap manipulation. Exploitation is not passive: the victim must be actively running the lrz receive utility and accept an inbound transfer from the attacker-controlled sender (UI:P/AT:P), and the demonstrated primary impact is denial of service rather than confirmed remote code execution. No public exploit code has been identified at time of analysis, and the flaw is not listed in CISA KEV; the overall real-world risk is constrained by these preconditions, consistent with a moderate-severity rating.
Reflected cross-site scripting in Akıllı Ticaret Software Technologies Ltd. Co. E-Commerce Pack allows unauthenticated remote attackers to inject arbitrary script into pages generated by the application, which executes in the browser of any user who opens a crafted link. All versions up to and including 2026-10-06 are considered affected, and exploitation requires victim interaction (a click on the attacker-supplied URL), limiting the attack to session cookie theft, credential phishing, or DOM manipulation within the victim's browser rather than server compromise. CVE-2026-12380 is rated CVSS 6.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) and was reported by TR-CERT; the vendor was contacted but did not respond, so no vendor patch is available and no public exploit code was identified at time of analysis. Treat this as a low-to-moderate real-world priority rather than an urgent threat.
Repository collaborators with write access on self-hosted GitHub Enterprise Server 3.18 through 3.22 can delete a repository's current default branch through the GraphQL API and have an attacker-controlled branch become the new default, so that fresh clones and default-branch API requests receive unreviewed content. Exploitation is authenticated (a write-access collaborator is required, per CVSS PR:L) and additionally depends on the repository being configured to require pull-request review while not restricting branch deletion; repositories that restrict branch deletion are not exploitable. Impact is bounded to default-branch integrity with no confidentiality or availability loss, and no public exploit identified at time of analysis.
Malformed UTF-8 echoed back through an AMQP shortstr property can permanently disable RPC consumers built on the RabbitMQ Java client before 5.36.0, forcing the affected consumer to fail on every redelivery of a single poison message. An attacker with low-privileged broker access publishes a request whose property value (for example correlation-id) contains invalid UTF-8; ValueReader.readShortstr decodes those bytes into U+FFFD replacement characters, which re-encode to more than the 255-byte AMQP shortstr limit that ValueWriter.writeShortstr enforces, so reply publication throws an unchecked exception. In RpcServer.mainloop() and tutorial-style echo consumers that exception aborts the loop before acknowledgement, the broker requeues the message, and the consumer is stuck until the queue is purged. No public exploit identified at time of analysis; impact is confined to availability of the target consumer (reported CVSS 4.0 base 6.0; assessed CVSS 3.1 AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) with no code execution, authentication bypass, or data exposure.
Information disclosure in LiquidJS versions prior to 10.27.2 lets an attacker read prototype-inherited array elements that the ownPropertyOnly option is supposed to hide. When ownPropertyOnly is enabled and an attacker can influence prototype state (for example a polluted Array.prototype) or inherited array-index data on a scope array, rendering a template that uses negative indexing, the .first/.last accessors, the first/last/join/reverse/slice/compact filters, or {% for %} iteration can surface values that direct positive indexing and ordinary object-prototype reads continue to block. The flaw is confidentiality-only (CVSS 4.0 base 6.0, Medium; assessed CVSS 3.1 AV:N/AC:H/PR:L/UI:N/C:H/I:N/A:N), requires low-privileged access together with control over prototype/inherited data and the specific template operations, and no public exploit identified at time of analysis; it is inert on applications that do not enable ownPropertyOnly or are not already subject to prototype pollution.
Reflected cross-site scripting in SourceCodester Simple Student Information System 1.0 allows a low-privileged authenticated attacker to inject script through the 'searchbox' argument handled by the clean function in searchresults.php, which reflects the value into the results page without proper output encoding. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:P) shows the attacker needs low-level authentication to reach the search page, while successful execution requires a logged-in victim to view the attacker-influenced results page, so impact is confined to integrity within the victim's browser session (VC:N/VI:L/VA:N). Publicly available exploit code exists (referenced from a public GitHub issue), but there is no CISA KEV listing indicating confirmed active exploitation; combined with an assessed CVSS 3.1 of 5.1, this is a low-to-moderate priority issue rather than an urgent one.
Improper authorization in SpringBlade up to 5.0.1 allows an authenticated remote user to access role or user detail records they do not own by manipulating the ID parameter in the RoleController User Detail endpoint. The flaw is a CWE-285 improper authorization issue (insecure direct object reference) that affects only confidentiality, with no integrity or availability impact and no code execution; publicly available exploit code exists, and no CISA KEV listing is present. The independent assessment rates this as a moderate, not urgent, priority, and notes that while the CVSS vector indicates high privileges (PR:H), the practical privilege level may be lower because any logged-in user could likely exploit the IDOR.
Unauthorized password changes are possible in PHPGurukul User Registration & Login and User Management System 3.3 because the Change Password Handler at loginsystem/admin/change-password.php fails to properly validate the 'currentpassword' parameter, an incorrect authorization flaw (CWE-863) that lets a caller manipulate the request and bypass the intended current-password check. Per the supplied CVSS 4.0 vector (PR:H), the attacker must already hold an authenticated session with privileges, so this is not reachable by unauthenticated remote users, and the assessed impact is limited to low confidentiality, integrity, and availability within a single security scope. Publicly available exploit code exists (a GitHub proof-of-concept repository is referenced), making the technique easy to reproduce, but no CISA KEV entry or EPSS score was provided, so confirmed active exploitation is not established by the available data; overall this is a low-priority issue despite being network-reachable.
Web origin policy bypass in Google Chrome for Android (versions prior to 155.0.8059.39) lets a local attacker using a co-installed app escape the browser's same-origin restrictions by winning a race condition in the Custom Tabs component. Exploitation is not remote: per the assessed vector (AV:L/AC:H/PR:L/UI:R) the attacker must already have a malicious app installed on the same device (low privileges, PR:L) and must rely on victim user interaction, typically opening a link that launches a Custom Tab. There is no CISA KEV entry and no public exploit identified at time of analysis, and EPSS is negligible at 0.09% (percentile 0%), so this is a moderate-priority hardening issue rather than an urgent one.
CloudVision CUE versions 2021.2.0 through 2026.2.0 contain an insecure direct object reference (IDOR) in the file-serving interface that allows an authenticated, low-privileged network user to read another user's transient data. Exploitation is opportunistic because the victim's transient data must be present at the moment of attack, and the attacker cannot modify or delete data (confidentiality impact only, with low availability impact). No public exploit code or active exploitation has been identified at time of analysis; the vendor CVSS 4.0 base score is 6.0 (medium severity), and independent assessment concurs with a moderate triage priority.
NoSQL injection in the @langchain/mongodb provider (part of langchainjs) before version 1.3.1 lets an authenticated low-privilege user read, modify, or delete another user's stored conversation history when multiple users' chat histories live in a shared MongoDB collection and the application passes an untrusted, attacker-controllable structured sessionId into MongoDBChatMessageHistory. The root cause is that the documented string type for sessionId is only enforced by TypeScript at compile time and is erased at runtime, so a value such as {$regex: "^victim-"} is handed straight into the MongoDB query filter and interpreted as a query operator rather than a literal identifier. Impact is tightly gated: applications that derive sessionId from an authenticated, server-controlled string (the documented correct usage) or that isolate histories per user are not affected, and no public exploit code was identified at time of analysis, with no confirmed active exploitation (CISA KEV).
Improper authorization in the SpringBlade Java microservice framework (all versions up to 5.0.1) lets an authenticated user holding high privileges manipulate the initPassword argument exposed by the Parameter Submit Management controller (ParamController) and change system parameters they should not be able to control. The endpoint is remotely reachable, but exploitation requires an existing elevated session with no user interaction, and the assessed impact is LOW across confidentiality, integrity and availability (CVSS 3.1 AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L). Publicly available exploit code exists and the project has not responded to the issue report, so no vendor-released patch is available at time of analysis.
Information disclosure in Google Chrome on iOS before version 155.0.8059.39 allows a remote, unauthenticated attacker to obtain sensitive information by supplying crafted network traffic to the browser's mobile input-validation path. Exploitation requires no user interaction but is constrained by high attack complexity - success depends on specific memory or timing conditions rather than a deterministic request - and the impact is limited to confidentiality with no code execution, integrity, or availability effect. There is no public exploit identified at time of analysis, and no evidence of active exploitation. Google rates Chromium security severity Medium (CVSS 5.9), and a vendor patch is available.
Missing authorization in the Chromoting (Chrome Remote Desktop) component of Google Chrome on Windows prior to 155.0.8059.39 lets a remote, unauthenticated attacker obtain sensitive information by sending crafted network traffic to a remoting endpoint. The flaw carries a CVSS 3.1 base score of 5.9 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N), meaning no credentials or user interaction are needed but successful exploitation is gated by conditions the attacker cannot fully control; there is no public exploit identified at time of analysis. Exposure is limited to hosts that actually have the Chromoting/Chrome Remote Desktop functionality in use, and Google has shipped a fixed build rated Medium severity.
Denial of service in SSSD (the System Security Services Daemon) allows remote unauthenticated attackers to crash the daemon by presenting a certificate that is missing the expected Security Identifier (SID) extension during authentication or lookup operations. Only deployments explicitly configured with SID-based certificate mapping rules reach the vulnerable code path, since the certificate-to-user lookup logic dereferences the SID extension without first confirming it exists; standard installations that do not use SID-based certificate mapping are not affected. The flaw is rated CVSS 5.9 (AV:N/AC:H/PR:N/UI:N/C:N/I:N/A:H, availability-only) and, per available intelligence, no public exploit code exists and exploitation has not been confirmed as active - no public exploit identified at time of analysis.
Incorrect authorization in Google Chrome's Sync feature (all versions prior to 155.0.8059.39) allows a remote, unauthenticated attacker to obtain sensitive synced information via crafted network traffic, although the High attack complexity rating indicates the attacker must satisfy conditions outside their control rather than reliably triggering the flaw on demand. Only users with Chrome Sync enabled are meaningfully exposed, and impact is limited to confidentiality disclosure of synced data with no code execution, tampering, or denial of service. No public exploit code has been identified at time of analysis, CISA's SSVC framework records no known exploitation, and a vendor patch is available.
Incorrect authorization in Google Chrome's built-in PDF handling on Android (versions prior to 155.0.8059.39) allows a malicious application already co-installed on the same device to obtain sensitive information after the victim is socially engineered into interacting with a crafted PDF. The issue is unauthenticated from a credentials standpoint (CVSS PR:N) but is effectively local in nature: it cannot be triggered purely remotely, it depends on the attacker first getting a separate app onto the device, it requires victim interaction, and its impact is confined to confidentiality with no integrity or availability effect. No public exploit code has been identified at time of analysis, CISA SSVC records Exploitation=none and Automatable=no, and Chromium rates the issue Medium severity; the signals point to a genuine but low-urgency issue rather than a top priority, though a vendor patch is available and should be applied through normal update cycles.
Defense-in-depth bypass in Coraza WAF 3.4.0 through 3.7.0 causes the multipart body processor to silently swallow io.ErrUnexpectedEOF, so a truncated multipart/form-data request neither sets MULTIPART_STRICT_ERROR nor returns a request-body error, and the two canonical defensive rules shipped in coraza.conf-recommended (200003 MULTIPART_STRICT_ERROR and 200002 REQBODY_ERROR) fail open. Remote unauthenticated attackers (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N, 5.8) can send a body that omits the closing boundary or cuts off mid-part and have it processed as if well-formed, neutralizing the parser-disagreement catch-all and enabling multipart smuggling or CRS evasion chains against backends whose multipart parser disagrees with Go's mime/multipart reader. No active exploitation is confirmed (not in CISA KEV), though the vendor advisory publishes a working reproduction proof-of-concept and the vendor-released fix is v3.8.0.
Remote, unauthenticated log-injection in Coraza WAF's Native audit-log formatter (all releases 3.0.0 through 3.7.0) allows any client whose data lands in an audit-log field - most easily the request body - to embed CR and LF bytes that forge new section boundaries and complete fake log entries inside a defender's audit log. The impact is integrity-only (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N, score 5.8): an attacker can shift attribution to a spoofed client IP, split SIEM correlation by fabricating boundary lines, poison line-based grep/awk/tail pipelines, or bury a genuine rule match under attacker-controlled noise. No confirmed active exploitation (not listed in CISA KEV), but the upstream GHSA advisory publishes a reproducible proof-of-concept request, and the fix shipped in v3.8.0.
SSSD's NFS idmap plugin contains an out-of-bounds write (CWE-787): when a cached user or group name is larger than the destination buffer it is copied into, the size check fires but the copy proceeds anyway. An authenticated, low-privileged local attacker can request identity lookups that resolve to such oversized cached entries, crashing the identity-mapping service (denial of service) and potentially corrupting adjacent process memory; the attack is local-only and depends on the oversized-cache precondition, giving it high attack complexity (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H, 5.8). No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV.
Server-side request forgery in the agent import functionality of Amazon Bedrock AgentCore Starter Toolkit versions before 0.3.14 allows an authenticated actor within the same AWS account to make the environment of a user importing a Bedrock Agent issue arbitrary outbound requests and read arbitrary local files. The attacker must supply crafted external reference values in the OpenAPI content associated with a Bedrock Agent action group, and exploitation requires the victim to actively import that agent; this narrow interaction requirement and the same-account authentication prerequisite limit the practical exposure, consistent with the vendor's Medium (CVSS 4.0 5.7) rating and our assessed CVSS 3.1 score of AV:N/AC:L/PR:L/UI:R with high confidentiality impact only. No public exploit code has been identified at time of analysis, and no known active exploitation has been reported.