Remote code execution in AnyDesk before 8.0.3 allows unauthenticated attackers to execute arbitrary code as root on Linux by sending a specially crafted packet to the session protocol's stream packet handler for mode 5. The victim does not need to approve desktop control, and publicly available exploit code exists. This is a critical heap-based buffer overflow (CWE-130) with a CVSS score of 9.8, though the assessed root-level impact is specifically demonstrated on Linux and other platforms are not confirmed.
Unauthenticated OS command injection in the Web Management Backend of TRENDnet TEW-751DR, TEW-752DRU, and TEW733GR routers (firmware 1.03B01/1.03B03) allows remote attackers to execute arbitrary shell commands on the device by sending crafted input in the 'service' argument handled by the fwrite function of pigwidgeon.cgi. Per the CVSS vector (PR:N/UI:N/AC:L) no authentication, user interaction, or non-default configuration is required; the principal limiting factor is reachability of the management interface, which is LAN-side by default and only exposed over WAN where remote administration is enabled or the router is internet-facing. Publicly available exploit code exists (a GitHub Proof-of-Concept targeting these models), so exposed units should be treated as compromisable with minimal attacker effort; EPSS and CISA KEV data were not provided, so confirmed active exploitation cannot be asserted. Vendor has confirmed the affected models reached end-of-life in 2011 and will not be remediated by a firmware fix.
Unauthenticated command injection in Edimax BR-6208AC firmware version 1.32 lets remote attackers execute arbitrary shell commands on the router by submitting crafted input to the tftpsIP parameter of the /goform/formAutoFWupgrade handler, which normally accepts a TFTP server address for firmware fetch operations. The vendor was contacted about the disclosure but did not respond, and the device is an end-of-life product no longer supported by the maintainer, so no vendor-released patch is expected; publicly available exploit code exists (a GitHub proof-of-concept under an IoT vulnerability repository) and the CVSS 4.0 score of 9.3 reflects a full confidentiality, integrity, and availability impact. The vulnerability is not listed in CISA KEV (no confirmed active exploitation reported), but pre-auth reachability of the HTTP management interface - particularly if WAN administration is enabled - makes this a high-priority exposure for anyone still running the device.
Improper authentication in the CGI handling of Netcore NR268 firmware 1.7.121109 allows remote, unauthenticated attackers to bypass authentication on the device's Boa-based web management interface via the user_ok function, which fails open rather than denying the request. Publicly available exploit code exists (a detailed report is published on GitHub), and the vendor was contacted but did not respond or release a fix. Exposure is the practical risk driver: devices whose HTTP management/CGI interface is reachable from the WAN or an untrusted LAN segment are at high risk, while deployments restricting management to a trusted internal interface are substantially lower risk.
A stack-based buffer overflow in the Mac Filter configuration handler of Linksys E1700 firmware 1.0.0.4.003 allows an attacker who can reach the router's administrative web interface to send an overlong newap_text_%d value to /goform/ssid1MACFilter and corrupt the stack, resulting in a crash and potentially code execution with the privileges of the device's web server. Publicly available exploit code exists (a detailed PoC is published on GitHub), but there is no CISA KEV listing and active exploitation has not been confirmed, so this should be treated as a credible but not yet observed attack. The vendor was contacted early about the disclosure and did not respond, so no patched firmware has been confirmed; the provided CVSS 4.0 vector rates it 9.3 with PR:N, while our independent assessment maps the same flaw to CVSS 3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, because the /goform endpoint sits behind the admin UI and is normally reachable only after authenticating - resolving that pre-auth vs. post-auth question is the single biggest factor in real-world risk.
Unauthenticated remote code execution is achievable in Square Squash (all versions through commit e73f280) through a two-stage YAML deserialization path in the symbolication API. An attacker first stores crafted YAML under a chosen symbolication UUID using the unauthenticated POST /api/1.0/symbolication endpoint; the payload only detonates when occurrences referencing that UUID are later processed by the symbolication worker, at which point the stored value is passed to YAML.load with SafeYAML running in unsafe mode, permitting arbitrary Ruby object instantiation and code execution. Publicly available exploit code exists, and no CISA KEV listing confirms active exploitation; exploitation is deferred rather than immediate, which is why the assessed complexity is high (AC:H) despite requiring no authentication or user interaction.
Authenticated OS command injection in the Linksys E1700 router's embedded web management interface (firmware 1.0.0.4.003) lets a remote attacker with low-privilege credentials execute arbitrary operating-system commands on the device by manipulating the _6rd_prefix and _6rd_prefix_len parameters handled by setLinksysIpv6 at /goform/setLinksysIpv6. The flaw scores 8.6 under CVSS 4.0 (AV:N/AC:L/AT:N/PR:L/UI:N, E:P) and 8.8 under CVSS 3.1 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), reflecting full confidentiality, integrity and availability impact on the router. Publicly available exploit code exists - including a published proof-of-concept write-up referenced from the CVE record - but there is no confirmed actively exploited (CISA KEV) status, and no vendor patch has been released because Linksys did not respond to the disclosure; practical exploitation requires reachability of the HTTP management interface plus valid (or default/weak) credentials, which on default deployments is typically LAN-side.
OS command injection in the Linksys E1700 router running firmware 1.0.0.4.003 lets an attacker execute arbitrary shell commands on the device by sending a crafted request to the /goform/setDMZ endpoint with a manipulated MAC_addr parameter. Exploitation requires network reachability to the web management interface (LAN-side by default, or internet-facing if remote administration is enabled) plus at least low-privilege authenticated access, and needs no user interaction; the vendor did not respond to the disclosure, so no patch is available. Publicly available exploit code exists (a proof-of-concept is published on GitHub), which raises the likelihood of opportunistic attacks against exposed devices.
OS command injection in Linksys E1700 firmware 1.0.0.4.003 allows authenticated low-privilege attackers to execute arbitrary OS commands on the device via crafted input to the static route parameters in /goform/addStaticRoute. Publicly available exploit code exists, increasing the risk of exploitation; no vendor patch has been released as Linksys did not respond to the disclosure. The vulnerability requires network access to the management interface and valid credentials, but successful exploitation grants full control of the router.
Authenticated mass assignment in jshERP through 3.6 lets any user holding a valid low-privilege account overwrite protected fields on a user record - including tenant_id and password - by submitting a crafted PUT /user/update body, enabling silent cross-tenant identity switching on the next login or takeover of other accounts via password-hash overwrite. The vulnerable code path is the default UserController update handler and exploitation requires only an authenticated session (CVSS v3.1 base 8.7, PR:L, no user interaction or non-default configuration). Publicly available exploit code exists and no confirmed active exploitation (CISA KEV) has been reported at time of analysis.
Privilege escalation in jshERP through 3.6 allows any authenticated user, including one holding only minimal privileges, to assign themselves or any other user within the tenant the administrator role through the UserController updateUser (PUT user) handler, which performs no authorization check tying the role change to the caller's own privileges. An attacker sends their own user id together with a tenant administrator roleId (or rebinds another tenant user's role) and obtains full administrative control over business, financial, and user data managed by the platform. Publicly available exploit code exists as a Python proof-of-concept, and with a CVSS 4.0 base score of 8.7 (independently scored 8.7 under CVSS 3.1) the only meaningful precondition is possession of a valid low-privilege jshERP account; no user interaction or non-default configuration is required.
An authenticated remote stack-based buffer overflow in the Linksys E1700 router (firmware through 1.0.0.4.003) lets an attacker who can reach the device's HTTP management interface and hold a low-privilege session crash or potentially execute code on the device by sending an oversized vlan_set argument to the /goform/setVlan endpoint. Publicly available exploit code exists, including a GitHub proof-of-concept writeup, and the vendor was contacted early but did not respond, so no official fix is currently available. The vulnerability is rated CVSS 4.0 8.6 (independent assessment CVSS 3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H); exploitation requires prior credentials or a hijacked authenticated session, and the management interface must be reachable from the attacker's position, giving this a targeted rather than mass-exploitation profile.
Stack-based buffer overflow in the Edimax BR-6208AC router running firmware 1.32 allows remote authenticated attackers to corrupt memory via the ateBW argument of the /goform/formWlanMP endpoint, potentially leading to code execution or denial of service. The product is end-of-life and the vendor did not respond, so no vendor patch exists; publicly available exploit code exists, but there is no evidence of confirmed widespread exploitation. Exploitation requires network access to the device's management interface and low-privilege authentication per the CVSS vector (PR:L), which limits anonymous internet-wide attacks; the realistic threat is highest where the admin interface is reachable by untrusted or semi-trusted users.
Permanent deletion of other users' survey submissions is possible in TDuck survey form through version 6.0 because the delete handler does not verify that the submission IDs in the request body belong to the caller. Authenticated users (CVSS vector PR:L) who can reach the POST user-form-data-delete endpoint can supply their own formKey in the path while iterating arbitrary, sequential submission IDs, allowing platform-wide erasure of form responses. Publicly available exploit code exists (a Python proof-of-concept is linked in the advisory), but there is no confirmed active exploitation (CISA KEV), so this is best treated as a bounded data-integrity and availability risk with an assessed CVSS of 7.1 (I:L/A:H, no confidentiality or code-execution impact). Instances exposed only to trusted internal users are substantially lower risk given the authentication prerequisite.
Authenticated information disclosure in jshERP through 3.6 exposes platform-wide configuration secrets, including SMTP authorization codes (email_auth_code) and activation codes (activation_code), to any logged-in user of any tenant at any privilege level via the getInfoByKey handler of PlatformConfigController. The endpoint applies a denylist that blocks only aliOss and weixin keys, so every other platformKey value is returned unredacted; no admin rights and no user interaction are required, though a valid low-privilege account is a prerequisite (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N; NVD score 7.1). Publicly available exploit code exists - a proof-of-concept script that performs global configuration retrieval and enumeration is hosted on GitHub - but no CISA KEV entry confirms active exploitation, and impact is confined to confidentiality with no integrity or availability effect.
Authenticated users of dromara lamp-cloud through 5.10.1 can obtain storage access URLs for files owned by other users by sending arbitrary file ids to the findUrlById handler of FileAnyoneController, which performs no ownership check (CWE-639) and exposes uploaded attachments to unauthorized reading. Exploitation requires only a valid low-privilege account and knowledge or enumeration of victim file ids; publicly available exploit code exists, but the issue is not in CISA KEV and impact is confidentiality-only per the independent assessment (CVSS 4.0 base 7.1; assessed CVSS 3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). This is a genuine but bounded access-control weakness rather than a top-tier emergency.
Information disclosure in MoguBlog through 6.2 lets any holder of an ordinary front-end reader session token retrieve unfiltered SystemConfig data - including Qiniu and MinIO secret keys and SMTP mailbox passwords - from the getSystemConfig endpoint over the network. The CVSS 4.0 base score is 7.1 (assessed as CVSS 3.1 AV:N/AC:L/PR:L/UI:N with high confidentiality impact and no integrity or availability impact), and the prerequisite is only a low-privileged authenticated reader account, which many public blogs allow users to self-register. Exploitation status: publicly available exploit code exists (a PoC script targeting the OAuth getSystemConfig path is published), but there is no confirmed active exploitation (no CISA KEV listing), and real-world impact is bounded by whether the deployment has actually configured Qiniu/MinIO storage or SMTP mail, since those are the credentials exposed.
Insecure direct object reference in lamp-cloud through 5.10.1 lets any authenticated user, regardless of privilege level, list and retrieve file attachments that belong to other business objects or tenants by supplying an arbitrary bizId to the listFileByBizId endpoint exposed by AppendixController. The response leaks file names, storage paths, MD5 hashes and stored URLs, and because the default LOCAL storage mode serves those attachments without login under /anyTenant/file, the referenced file contents themselves can be downloaded anonymously once the metadata has been harvested. Publicly available exploit code exists, but the impact is confined to confidentiality (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N), making this a genuine but moderate-priority access-control issue rather than a critical remote-code-execution threat.
Unauthenticated file disclosure in Open Source Social Network (OSSN) through version 10.1 lets remote attackers download stored album photos and other uploaded files by directly requesting the album/getphoto and album/getcover routes, which perform no authorization check. Because OSSN assigns object and file GUIDs sequentially, an attacker can simply walk the numeric ID space to reach friends-only album photos and files belonging to other users without ever logging in. Publicly available exploit code exists (a HackMD write-up documents the technique), and the issue rates a moderate CVSS of 6.9 (v4.0) with confidentiality-only impact (no modification or denial of service); there is no confirmed active exploitation (CISA KEV). The vendor has published an upstream fix commit, but a released patched version beyond 10.1 has not been independently confirmed.
Malformed keyset acceptance in Tink-Go through 2.8.0 allows unauthenticated remote attackers to bypass structural validation via keyset.NewHandleWithNoSecrets() or ReadWithNoSecrets(), causing malformed public or no-secret keysets (e.g., an enabled key without a valid primary, or a DESTROYED key with no KeyData) to be accepted. This integrity flaw can mislead downstream consumers such as jwt.JWKSetFromPublicKeysetHandle() into producing a JWK set from an invalid handle. Publicly available exploit code exists, but no active exploitation (CISA KEV) has been confirmed; the impact is limited to integrity with no secret disclosure or code execution.
Authenticated attackers with low privileges can escalate to elevated privileges on IBM i systems running Db2 Mirror for i 7.4, 7.5, or 7.6 by submitting a crafted request that bypasses additional authorization and input-validation checks, potentially allowing malicious code execution. This critical-severity (CVSS 9.9) privilege escalation affects standard deployments and requires a valid low-privilege account; no public exploit code or active exploitation has been identified at time of analysis, but a vendor patch is available.
Remote code execution and sensitive-information disclosure in IBM i 7.3, 7.4, 7.5, and 7.6 stem from improper data sanitization by the HTTP Server Administration web application (CWE-94 code injection). An authenticated attacker with only low privileges who can reach that administration interface over the network can inject and execute arbitrary code or read sensitive data, with the scope change (S:C) driving Confidentiality, Integrity, and Availability impacts all High for a CVSS 3.1 base score of 9.9. Exploitation is not unauthenticated and is not possible against systems that do not run the HTTP Server Administration interface, or that expose it only to a trusted management network; no public exploit has been identified at time of analysis and there is no CISA KEV confirmation of active exploitation, though IBM has published a vendor patch.
Authenticated path traversal in IBM DataStage on Cloud Pak for Data 5.4.0.0 allows a remote attacker holding a valid platform account to bypass intended directory restrictions and execute arbitrary code. Exploitation requires only low-privileged credentials (CVSS PR:L), needs no user interaction, and is network-reachable with low complexity, which is why the vector scores 9.9 Critical with a scope change (S:C) reflecting impact that can extend beyond the vulnerable component. Despite the high score, the practical risk picture is more moderate: EPSS is only 0.49% (40th percentile), CISA SSVC rates exploitation as none with automatable set to no, there is no public exploit code identified at time of analysis and no KEV listing, and the vendor has published a patch, so remediation is available rather than dependent on compensating controls alone.
Authenticated privilege escalation in Progress MarkLogic Server lets an attacker who already holds query-execution access invoke an XQuery evaluation function without the additional evaluation privilege that function requires, so the query is evaluated with elevated permissions and can lead to server-side code execution in the server's security context. Affected deployments are 12.x releases before 12.1.0 and 11.x releases before 11.3.7; the vulnerability is rated CVSS 9.9 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H), with the scope change and full confidentiality, integrity, and availability impact reflecting what is possible once the missing privilege check is bypassed. Exploitation requires a pre-existing account with query-execution access rather than anonymous reachability, and no public exploit code has been identified at time of analysis; there is no confirmed active exploitation (CISA KEV) reported for this issue.
Authenticated XQuery injection in Progress MarkLogic Server 11.x before 11.3.7 and 12.x before 12.1.0 allows a remote attacker who already holds a manage-user-level account to escalate to persistent unauthorized administrative control of the database. The flaw resides in a deprecated Management API package path and carries a 9.9 CVSS score because exploitation crosses a security boundary (S:C) and fully compromises confidentiality, integrity, and availability. It is not a pre-authentication issue - a valid manage-user credential is mandatory - and no public exploit code has been identified at time of analysis, so risk is concentrated in environments where the Management API is network-exposed and manage-user grants are loosely administered.
An authenticated privilege-escalation flaw in Progress MarkLogic Server lets an attacker who already holds forest-management privileges create a persistent, unauthorized administrator account, resulting in complete administrative control of the server. Affected are 12.x releases before 12.1.0 and 11.x releases before 11.3.7; the vulnerability is reachable over the network (AV:N) with low privileges (PR:L) and no user interaction, and it is rated 9.9 because a successful escalation changes scope, giving the attacker high confidentiality, integrity and availability impact across the deployment. No public exploit code has been identified at time of analysis, and there is no confirmed active exploitation (no CISA KEV listing); the practical risk is concentrated in deployments that delegate forest-management rights to non-super-admin or duty-separated roles, since an attacker must first possess that privilege to exploit the flaw.
Improper authorization in obsidian-tc prior to 1.3.1 lets any holder of a valid JWT reach beyond its own vault and read, write, or delete the contents of every other configured vault on the same HTTP server. The flaw affects CWE-639-style trust in a caller-controlled key: tool dispatch never compares the caller-supplied input.vault value against the vault bound to the caller, the JWT carries no vault claim, and the folder ACL is a single global instance, so roughly 90 vault-scoped tools resolve an attacker-named vault id under that shared ACL. Exploitation requires the HTTP transport with more than one vault configured and a valid token (authenticated, PR:L); the trusted stdio transport is unaffected and single-vault deployments have no second vault to pivot to, but cross-tenant confidentiality, integrity, and availability are all fully compromised when those conditions hold - no public exploit code has been identified at time of analysis.
Remote code execution in IBM Maximo AI Service 9.1.0 and 9.2.0 lets an unauthenticated remote attacker execute arbitrary code on an affected deployment by abusing improper control of code generation (CWE-94). With a CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), the flaw requires no authentication, no user interaction, and no special conditions beyond network reachability of the vulnerable instance. No public exploit code has been identified at time of analysis, and there is no KEV listing; IBM has published an advisory with a vendor fix, so the practical priority is identifying and patching internet- or network-exposed Maximo AI Service 9.1.0/9.2.0 instances.
A stack-based buffer overflow (CWE-121) in the UNISOC modem OTA stack lets an attacker within radio range achieve remote code execution or crash the baseband by broadcasting a crafted SIB1 message whose scheduling information is not properly validated, which the modem parses automatically with no authentication or user interaction (PR:N/UI:N). The vendor assigned a CVSS 3.1 score of 9.8 with an AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H vector, but the exploitation path is adjacency-gated: the adversary must operate a rogue cellular base station (SDR plus a full baseband stack), out-compete legitimate cells so the victim device camps on the malicious cell during idle-mode (re)selection, and the target must run the affected UNISOC modem/OTA stack - making this a proximity-limited, targeted attack rather than an internet-scale one. No public exploit code and no confirmed active exploitation were identified at time of analysis.
Unauthenticated OS command injection in GPT-SoVITS through 20250606v2pro lets any network-reachable attacker run arbitrary commands as the server user by inserting shell substitutions such as $(...) into the UVR5 WebUI output folder textbox and then triggering an mp3 or m4a export. The root cause (CWE-78) sits in tools/uvr5/vr.py, which hands the user-controlled output path to a shell during export without sanitization, so the impact is full compromise of the account running the WebUI (high confidentiality, integrity and availability loss per both the supplied CVSS 4.0 score of 9.3 and the independent CVSS 3.1 assessment of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Exploitation depends on the UVR5 WebUI being reachable over the network, which is not guaranteed because these Gradio-style instances are commonly bound to localhost or a trusted LAN, and no public exploit code or confirmed in-the-wild activity has been identified from the available intelligence.
Authentication bypass and privilege escalation in IBM Planning Analytics 2.0 and 2.1 allow an unauthenticated remote attacker to reach functionality that should require credentials by abusing improperly validated sub-requests (CWE-288). Per the assessed vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, exploitation needs only network reachability to the Planning Analytics application interface - no authentication, no user interaction, and no documented non-default configuration - yielding high confidentiality, integrity, and availability impact, which is why the score is 9.8. Signals conflict and must be weighed carefully: despite the severity and total technical impact under SSVC, EPSS is only 0.36% (28th percentile), CISA SSVC records Exploitation: none, and no public exploit code has been identified at time of analysis, so this should be treated as a serious but not yet observed threat. The vendor has released a fix, so exposure is concentrated in unpatched, internet- or partner-reachable deployments.
Unauthenticated remote attackers can gain full administrative control of the HAProxy Data Plane API - and through it the managed HAProxy load balancer - in Community and Enterprise Edition releases 2.2.0 through 3.4.3 when a specific mTLS topology is deployed. When a TLS Certificate Authority (tls_ca) and a numeric TLS port (tls_port) are configured, Server.ConfigureAPI() sets a process-global flag that disables HTTP Basic authentication on a request handler shared concurrently by HTTP, HTTPS, and UNIX-domain-socket listeners, while mutual-TLS client-certificate verification is only enforced on the HTTPS path; every other active listener therefore fails open. An attacker who can reach a plain HTTP or UNIX management endpoint can read cleartext HAProxy configuration data and replace the managed configuration via the raw configuration endpoint; no public exploit code has been identified at time of analysis, and the vendor has released fixed versions 3.4.4, 3.3.9, 3.2.17, 3.0.25 and 2.9.29 (plus EE backports).
Unauthenticated remote agent enumeration and invocation in PraisonAI's AgentTeam.launch() / Agents.launch() HTTP server lets any client that can reach the listening port list deployed agents and trigger agent.chat() calls, burning model resources, reaching connected private context, and firing agent tools and workflow side effects. The affected artifact is the Python package praisonaiagents before 1.6.59, whose FastAPI server binds to 0.0.0.0 by default and accepts requests with no Authorization header - or even with an obviously wrong bearer token. Vendor-released patch: praisonaiagents 1.6.59 (PraisonAI v4.6.59); no public exploit identified at time of analysis, and the practical limiting factor is deployment: the routes are only remotely reachable if launch() is actually started and network-exposed rather than bound to localhost or placed behind an authenticating proxy.
Loading an untrusted EXL3-format checkpoint in ExLlamaV3 can drive an out-of-range CUDA kernel function-pointer read and invocation, reliably crashing the process (denial of service) during model load. The EXL3 loader derives K from the model-supplied trellis.shape[-1] // 16 and computes kernel index cbi from it, then indexes 24-entry reconstruct_kernel_instances/reconstruct_had_kernel_instances tables without bounds checks in reconstruct_slice and reconstruct_had_slice; the authoritative assessment rates exploitation as local, high-complexity, user-interaction-required (AV:L/AC:H/PR:N/UI:R) with high availability impact, and controlled indirect kernel dispatch beyond the crash only under specific host memory layouts. No public exploit was identified at time of analysis, EPSS is low (0.20%, 10th percentile), and upstream fix PR #310 adds TORCH_CHECK bounds.
Unauthenticated remote command injection in the end-of-life Edimax BR-6208AC router (firmware 1.32) allows an attacker who can reach the device's HTTP web-management interface to execute arbitrary operating-system commands by manipulating the submit-url argument of the /goform/formAccept endpoint. The assessed CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N, C:H/I:H/A:H) confirms that no credentials and no user interaction are required, and publicly available exploit code exists in the GitHub repository referenced by the disclosure. Edimax was contacted before publication but did not respond and has shipped no patched firmware; the original CVSS 4.0 score of 6.9 understates the confidentiality, integrity and availability impact compared with the independent assessment, and overall exploitability is governed mainly by whether the management interface is reachable from the WAN or only from the local network, making this a moderate real-world priority.
Unauthenticated command injection in Edimax BR-6208AC firmware version 1.32 allows a remote attacker to execute arbitrary operating-system commands on the router by supplying crafted input through the readE2P argument of the /goform/formWlanMP endpoint. The issue is rated critical (CVSS 4.0 base 9.3; an independent assessment reaches the equivalent CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and publicly available exploit code exists, although there is no confirmation of active exploitation (device is not in CISA KEV). The vendor was contacted early and did not respond, and the product is no longer supported, so the decisive practical concern is permanent exposure: any BR-6208AC 1.32 whose web management interface is reachable over the WAN or from an untrusted network segment remains exploitable indefinitely.
Denial of service in IBM DataStage on Cloud Pak for Data 5.4.0.0 can be triggered by a remote user who already holds valid platform credentials and supplies path traversal sequences to the product's file-handling logic, disrupting or halting the service. Exploitation requires an authenticated session with low privileges (CVSS vector PR:L) and no action by a victim, so the practical barrier is credential access rather than network reachability; availability is the realistic impact, with no evidence of code execution. A vendor patch is available via IBM support advisory node 7288649, and no public exploit code or confirmed active exploitation was identified at time of analysis.
Privilege abuse in Progress MarkLogic Server 12.x before 12.1.0 and 11.x before 11.3.7 lets a remote attacker who already holds delegated database-administrator privileges run backup or restore operations against forests outside their authorized database scope, resulting in unauthorized read or modification of security-critical data. The flaw is rated CVSS 9.6 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N) under CWE-269 (Improper Privilege Management), and because exploitation requires the pre-existing delegated DB-admin role it is an authenticated privilege-abuse issue rather than an unauthenticated pre-auth bug. No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV; no EPSS data or proof-of-concept reference was supplied, so the realistic threat model is a malicious or compromised privileged tenant administrator.
Insufficient isolation in Progress MarkLogic Server 12.x before 12.1.0 and 11.x before 11.3.7 allows code executed through REST Client API and XDBC evaluation paths to reach the surrounding HTTP request, response, and session state, enabling unauthorized actions or compromise of an authenticated user's session. The vendor scores this 9.6 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H), but the scope change and full confidentiality/integrity/availability impact only materialize when an attacker can reach an evaluation interface and a victim with an authenticated session triggers it; our assessment rates the prerequisite as authenticated (PR:L) rather than unauthenticated, so exposure is limited to deployments where these endpoints are reachable and in use. No public exploit code has been identified at time of analysis, and the flaw is not confirmed as actively exploited (no CISA KEV listing) as of this report.
Missing authentication in the remove_announcements.php state-changing endpoint of KusalkaSilva Learning-Management-System lets unauthenticated remote attackers delete announcement records by supplying a chosen ID parameter to a mysql_query call; the CVSS 4.0 base score is 6.9 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/E:P), and our independent 3.1 assessment (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) confirms the vector is remotely reachable with no privileges and no user interaction, with impact bounded to integrity and availability of announcement data rather than full system compromise. Publicly available exploit code exists (the flaw is documented in the project's own GitHub issue tracker), but there is no indication of confirmed active exploitation (not in CISA KEV). Real-world priority is modest: the target is an obscure, unversioned GitHub learning project with negligible production exposure, and the maintainer has not responded to the report.
An improper authorization flaw in Zoraxy up to and including 3.3.4 lets remote, unauthenticated attackers bypass the Basic Auth, ZorxAuth SSO, and CAPTCHA protections that a reverse-proxy administrator has attached to a protected endpoint. The bypass only works on deployments that have configured a Path Exception rule for one of those auth providers: the exception matcher compares the incoming request path against the configured PathPrefix as a raw string prefix instead of enforcing a path-segment boundary, so any protected URL that textually begins with an exempted prefix is treated as exempt and served without authentication. Publicly available exploit code exists (no CISA KEV listing), the issue is reported via VulDB, and upgrading to 3.3.5-rc1 resolves it.
Payment-amount tampering in macrozheng mall through version 1.0.3 lets a customer-side attacker override the amount submitted to Alipay: the portal's payment endpoint passes the client-supplied total_amount straight into the Alipay bizContent instead of the order's stored payAmount, so an attacker with a valid order can alter what is charged or recorded. Exploitation requires a live Alipay integration and an authenticated customer account holding a legitimate outTradeNo, and impact is confined to order/payment integrity rather than code execution or data exposure (assessed CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N). Public exploit code and the upstream fix commit are both available, but there is no indication the flaw is being actively exploited (not in CISA KEV).
Model-influenced tool calls in the Agno agent framework (agno-agi) through 3.0.6 and 3.1.1 reach Python exec()/runpy()/subprocess without any confirmation gate, so an attacker who can steer the model's input - typically through prompt injection in untrusted data the agent ingests - can cause the agent to run attacker-chosen code on the host or container running the agent. The issue is remotely reachable and unauthenticated (CVSS:4.0 vector AV:N/PR:N/UI:N; our assessed CVSS:3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), and publicly available exploit code exists - although no CISA KEV entry indicates confirmed exploitation in the wild at time of analysis. Real-world risk is conditional: only agents built with the PythonTools toolkit that expose the code-executing tools under the vulnerable default (no explicit requires_confirmation_tools) and that accept attacker-influenceable input are exposed.
Missing authentication in Agno (agno-agi) through version 2.7.3 and 3.0.6 causes AgentOS agent endpoints to be reachable by any remote caller when no security_key is configured, because get_authentication_dependency in auth.py applies no authentication check in that default state. Publicly available exploit code exists, and the project was notified through an upstream issue report but has not yet responded, so no vendor-released patch is identified at time of analysis. The flaw is configuration-dependent and is assessed as medium severity (CVSS 4.0 base 5.5, our independent CVSS:3.1 5.3-equivalent vector AV:N/AC:L/PR:N/UI:N with partial C:L/I:L/A:L impact) - deployments that set a security_key are not exposed, so unauthenticated remote access is confined to default-configured, network-reachable instances.
Zen Cart e-commerce stores up to and including version 2.2.2 mishandle attacker-supplied payment data in the PayPal IPN handler, where a crafted txn_id value is processed by zen_db_perform in includes/modules/payment/paypaldp.php and then rendered without proper escaping in the administrator's PayPal payment notification. The vendor's patch replaces the raw output with htmlspecialchars()/ENT_QUOTES escaping across fields in paypal_admin_notification.php, which points to an output-injection (cross-site scripting/stored-injection) defect rather than the SQL-injection class originally reported by VulDB - an unverified framing the independent assessment explicitly flags as contradictory. Publicly available exploit code exists, but exploitation is constrained: the PayPal payment module and its IPN handler must be enabled and reachable so a malicious IPN callback is processed, and the fixed flaw additionally requires an administrator to open the affected notification (user interaction).
SQL injection in Exponent CMS versions up to and including 3.0.2patch2 allows unauthenticated remote attackers to execute arbitrary SQL via the userLogin function in xmlrpc.php when the optional USE_XMLRPC configuration flag is enabled and the endpoint is network-reachable. The flaw stems from unsanitized username input (CWE-89), and publicly available exploit code exists, though exploitation is gated by the non-default XML-RPC setting, limiting real-world exposure. The vendor did not respond to disclosure, so no official fix is available; this is a moderate-risk issue (assessed CVSS 3.1: 6.9) best handled with compensating controls such as disabling USE_XMLRPC or restricting access to xmlrpc.php.
SQL injection in the XCMS password-recovery flow (PublicController::sendFindPwdMail in Admin/Home/Controller/PublicController.class.php) allows a remote unauthenticated attacker to inject arbitrary SQL through the 'email' argument, exposing or altering data in the CMS database. The vulnerable endpoint is the standard find-password mail handler, reachable with no authentication and no user interaction (CVSS vector PR:N/UI:N), which is why the independent assessment rates confidentiality impact High while limiting integrity impact to Low under a CVSS:3.1 base vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N. Publicly available exploit code exists (a proof-of-concept writeup is linked from the VulDB record), though the flaw is not confirmed actively exploited (CISA KEV) and risk is tempered by the product's very low deployment footprint; no vendor patch has been identified in the supplied data.
Use of default credentials in the PRVTPRO Amnezia Web Panel Backup Download feature (app.py) allows remote attackers to log in with the product's shipped default credential set and download backup data, exposing configuration and any secrets contained in those backups. Affected versions are through 1.6.2 and 1.7.2; publicly available exploit code exists, while there is no confirmed active exploitation (the CVE is not listed in CISA KEV). The CVSS v4.0 score is 6.9 with a vector of AV:N/AC:L/AT:N/PR:N/UI:N and low confidentiality/integrity/availability impact, and the independent assessment agrees the path is remotely reachable with no user interaction and no legitimately provisioned account, limited primarily by whether the default credentials have been changed and whether the panel is reachable from untrusted networks.
Information exposure in code-projects Online Ticket Reservation System 1.0 allows an unauthenticated, remote attacker to fetch the raw database bootstrap file /database/medallion.sql directly over HTTP and read the embedded schema and any seed data it contains. The path is trivial to guess and publicly available exploit code exists (published via a GitHub proof-of-concept referenced from the VulDB entry), though there is no confirmed evidence of active exploitation in the wild and the attack requires the .sql file to sit inside the web-accessible document root with .sql requests not blocked. Impact is limited to confidentiality loss - schema and content disclosure only, with no write access or code execution - so despite a CVSS 4.0 base score of 5.5, the practical business risk is comparatively low.
SHAREit for Android 6.27.38_ww exposes a dangerous JavaScript bridge routine (syncInvoke) that allows attacker-controlled web content rendered inside the app's WebView to invoke privileged native functionality, resulting in limited information disclosure. Exploitation is unauthenticated but requires the victim to open or load a malicious page within the app, as demonstrated by the publicly available '1-click.html' proof-of-concept; no confirmed active exploitation (CISA KEV) is reported. Given the low confidentiality-only impact and the user-interaction prerequisite, this is a moderate, lower-priority issue.