Use-after-free in ImageMagick's PDF writer (coders/pdf.c) can crash the process when a CMYK-colorspace image is written to PDF using JPEG2000 compression; affected releases are ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32. The attacker supplies the crafted CMYK image, but the trigger is the operator-side PDF export operation with JPEG2000 compression selected, which is not the default output mode - reading or decoding the image alone does not reach the vulnerable code path. The issue is a low-impact availability defect (no confidentiality or integrity loss), unauthenticated per the CVSS PR:N vector, and no public exploit code or confirmed in-the-wild exploitation was identified at time of analysis; vendor patches exist as commits in the ImageMagick and ImageMagick6 repositories.
Memory exhaustion in ImageMagick before 6.9.13-57 (6.x line) and before 7.1.2-32 (7.x line) lets unauthenticated attackers leak memory by feeding crafted input to the YUV encoder, which fails to free allocated image buffers when a specific encoder operation fails. The impact is availability-only (CWE-401 memory leak, assessed CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L; vendor/NVD CVSS 4.0 base 6.3), and because each failure leaks only incrementally, a practical denial of service requires repeated, high-volume triggering of the failing path. Exploitation is gated by the target application actually producing YUV output, since the flaw lives in coders/yuv.c WriteYUVImage and deployments that never write YUV are not exposed; no public exploit code has been identified at time of analysis and there is no CISA KEV confirmation of active exploitation.
Repeated GIF encoding of crafted or attacker-influenced images can steadily exhaust process memory in ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32, because the GIF encoder fails to release allocated buffers when color quantization fails. Remote, unauthenticated attackers who can get an application to convert or write images to GIF output can trigger a small, bounded leak on each attempt, and enough repetitions degrade availability (CVSS 4.0 base 6.3; our independent assessment scores it CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). No public exploit code was identified at time of analysis, and there is no code execution, data exposure, or privilege gain associated with this flaw.
A memory leak in ImageMagick's PNG encoder (coders/png.c, WriteOnePNGImage) fails to release the image and image_info structures when libpng write-structure initialization fails, allowing any unauthenticated remote party who can repeatedly drive PNG encoding operations into that failure path to steadily exhaust process memory and cause a denial of service. Affected are all ImageMagick 6.x releases before 6.9.13-57 and 7.x releases before 7.1.2-32; the vendor has released fixed versions (6.9.13-57 and 7.1.2-32) and upstream commits, and no public exploit code was identified at time of analysis. Impact is availability-only and low in magnitude per both the vendor's CVSS 4.0 score of 6.3 and our independent CVSS 3.1 assessment of AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L, because the leak only compounds after the host is already experiencing libpng allocation failures - the practical risk is moderate and typically relevant to services that encode attacker-supplied images at scale.
Crashing ImageMagick's PostScript decoder is achievable with a crafted PostScript or EPS file: in ImageMagick versions from 7.1.1-31 up to but not including 7.1.2-32, the PostScript coder (coders/ps.c) dereferences a NULL profile pointer once a resource policy limit is reached during decoding, terminating the process and denying service to any application, pipeline, or web service that converts untrusted images. The issue is remotely reachable without authentication or user interaction (CVSS 4.0 base 6.3; independently assessed as availability-only under CVSS 3.1: AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L), and no public exploit code was identified at the time of analysis. Impact is confined to a process crash - there is no disclosure, modification, or code execution.
Code injection through crafted MVG (Magick Vector Graphics) drawing files can reach ImageMagick's PostScript rendering path, where an attacker-controlled font name is embedded into a generated PostScript stream and handed to a Ghostscript delegate. The flaw affects ImageMagick 6.x before 6.9.13-57 and 7.x before 7.1.2-32 and is reachable by unauthenticated remote attackers (PR:N, UI:N) who can cause a malicious MVG file to be decoded, but only when ImageMagick is built with a PostScript renderer and the text-rendering call actually takes the RenderPostscript path rather than FreeType (attack requirements: present). Resulting impact is limited to integrity and availability of the conversion process (no confidentiality loss); there is no public exploit identified at time of analysis, and the vendor rates the issue medium at CVSS 4.0 base 6.3, so it is a moderate, conditional priority rather than an emergency.
Unauthenticated attackers can read internal Elixir terms from ash_typescript RPC error responses by deliberately provoking errors that the library's error builder has no dedicated clause for, affecting versions 0.1.0 through 0.19.0. Two RPC request paths trigger the leak: a struct-typed action argument carrying an invalid nested value that pushes a raw Ash.Type cast error into the builder, and field selection on a generic action returning a primitive that causes the full Ash.Info.Manifest.Type struct to be embedded into the response. The issue is a medium-severity CWE-209 information disclosure (CVSS 4.0 6.3; independent 3.1 assessment AV:N/AC:H/PR:N/UI:N/C:L), no public exploit code has been identified at time of analysis, and a vendor patch is available in ash_typescript 0.19.1.
LDAP injection (CWE-90) in Frappe Framework allows unauthenticated remote attackers to manipulate directory queries by injecting crafted LDAP filter syntax through unsanitized endpoint parameters, with an impact limited to information disclosure (VC:L, VI:N, VA:N). The flaw affects Frappe releases before 14.99.2 and 15.x releases before 15.86.0, and is rated 6.3 under CVSS 4.0 (AV:N/AC:L/AT:P/PR:N/UI:N); exploitability is conditional because the instance must have LDAP integration actively configured, which is the attack requirement reflected by AT:P. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
GraphQL schema disclosure in Parse Server allows unauthenticated attackers who hold the public Application ID and client key to recover private class and field names by replaying an introspection operation cached in Apollo Server's automatic persisted query (APQ) registry, because the server's introspection restriction is enforced only against operation text sent with the request and not against operations resolved from the cache. Exploitation is not autonomous: it requires the GraphQL API to be enabled and network-reachable and, critically, that a master- or maintenance-key client has already executed and cached an introspection query, so the attacker replays that privileged cached entry rather than submitting introspection text directly - a prerequisite captured as Attack Requirements: Present in the CVSS 4.0 vector and reflected in an independent rescoring of AV:N/AC:H. Impact is limited to information disclosure (no data modification, no code execution, no server compromise); no public exploit code was identified at time of analysis.
Path traversal in Nginx UI (0xJacky) before 2.4.3 allows an authenticated user who can create or modify an automatic backup to write backup archive files - and, when the backup is configured as an encrypted configuration backup, the adjacent encryption key file - outside the validated storage directory, with the privileges of the Nginx UI process. Exploitation requires a valid Nginx UI account with backup-management permissions (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L, 6.3 per the independent assessment) and only takes effect when the configured automatic backup actually runs; the attacker influences the generated archive/key filename rather than arbitrary file content. The issue is fixed in version 2.4.3, and no public exploit code was identified at time of analysis.
Zebra versions prior to 6.4.0 improperly validate the integrity of gossiped blocks, allowing an unauthenticated inbound peer to force the node to drop legitimate new blocks without penalizing the attacker. By rewriting a genuine block's coinbase scriptSig to height 1 while preserving the valid ZIP-244 block hash, an attacker can trigger a behind-tip drop before consensus validation, delaying tip discovery for mining backends. No public exploit code has been identified at time of analysis, and the effect is limited to availability with no code execution or data disclosure.
Zcash Zebra nodes before 6.4.0 can be stalled during synchronization by unauthenticated network peers that serve forged block bodies carrying valid header hashes. Attackers can flip authorizing-only bytes such as the coinbase scriptSig, forcing the node to waste computational resources on full Sapling, Orchard, and Ironwood proof verification for up to a 67-second sync stall. This moderate-severity availability issue has no public exploit identified at time of analysis and requires no authentication (PR:N), but the attacker must be a connected peer during a sync operation.
Local information disclosure in IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 allows an attacker who already has access to the host to read sensitive data by abusing a service account that was configured with excessive permissions. The flaw is a privilege-assignment problem (CWE-250) rather than a memory-safety or injection bug: because the service account holds rights beyond what it needs, anything reachable by that account - files, directories, or configuration - becomes reachable to a local user. Impact is confidentiality-only (C:H with I:N/A:N on CVSS 3.1, base 6.2, AV:L/AC:L/PR:N/UI:N), so no tampering or denial of service is involved, there is no network attack path, and there is no public exploit identified at time of analysis; IBM has published a fix referenced in advisory node/7291755.
GV-E-Map Server V18.2.0A ships with a plaintext database password hard-coded into a distributed application component, so anyone who can read the shipped binary or inspect the running process memory on the host can recover the credential and use it against the back-end database. The weakness is CWE-798 (hard-coded credentials) with a CVSS 3.1 base score of 6.2 (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), meaning local access with no privileges required but no network-facing trigger; the exposure is therefore sharply limited to attackers who already hold a local foothold or operator-level filesystem/memory access. No public exploit identified at time of analysis, and the issue is not reported as actively exploited in the source data.
OS command injection in the Agno agent framework's CodingTools.run_shell helper (versions up to and including 3.0.9) lets an authenticated caller who can influence the tool's `command` argument execute arbitrary shell commands on the host running the agent. The weakness is a bypass of the `restrict_to_base_dir` allowlist and metacharacter block rather than an absence of one: allowlisted interpreters such as python, pip and git can be invoked with inline-code options (for example `python -c`) to run arbitrary code, so the restriction only reduces accidental damage and is explicitly documented as 'not a security sandbox'. Publicly available exploit code exists, but the practical risk is LOW: exploitation requires run_shell to be enabled (it was on by default through 3.0.9 and is off by default from 3.0.10), an agent wired to accept untrusted input, and the affected CVSS 3.1 vector is AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L, with the vendor-supplied CVSS 4.0 score of 2.0 consistent with that low assessment. There is no indication of confirmed active exploitation (not in CISA KEV), and a vendor patch is available - upgrade to 3.0.10.
Cross-site request attacks can reach the terminal-spawn handler in BlackBeltTechnology pi-agent-dashboard 0.8.0 and earlier, letting a malicious web page open a WebSocket or blind-POST to the loopback service and invoke terminalManager.spawn with an attacker-chosen working directory, because pre-patch builds enforce no Origin-based authorization gate on the WebSocket upgrade or on /api/* mutation routes. Exploitation is unauthenticated from the network's perspective but requires the victim to have the dashboard running and to visit an attacker-controlled page in the same browser, making user interaction mandatory; publicly available exploit code exists (disclosed via VulDB and a linked public drive folder), but there is no CISA KEV listing and no confirmed active exploitation, and our assessment rates this a genuinely low-priority issue despite remote reachability given the loopback binding, mandatory interaction, and only low confidentiality/integrity/availability impact.
Agno's Team Delegation Feature runs member agents without a confirmation gate, allowing an actor who can influence delegated task content to cause team agents to execute actions with unnecessary, unscoped privileges. The flaw resides in the delegate_task_to_member / delegate_task_to_members tooling in libs/agno/agno/team/_default_tools.py and affects agno versions up to 3.0.6 and 3.1.1. Publicly available exploit code exists (no CISA KEV listing), and the upstream fix - PR #10124, which sets delegate_func.requires_confirmation = True - still awaits acceptance, so no released patched version is independently confirmed.
Heap buffer overflow in FreeRDP's RDP license negotiation path lets a malicious or man-in-the-middle RDP server corrupt client heap memory when a 32-bit FreeRDP client (3.0.0 through the 3.31.x line, fixed in 3.32.0) connects to it and receives a crafted SERVER_LICENSE_REQUEST carrying an oversized scopeCount that defeats the length check. A successful attack can crash or destabilize the client (denial of service) and could potentially lead to code execution in the client's context, but exploitation requires the victim to initiate an outbound RDP session to an attacker-controlled endpoint and the integer truncation only manifests on 32-bit builds, not 64-bit ones. No public exploit identified at time of analysis; the vendor fix is shipped in FreeRDP 3.32.0, and the assessed risk vector is CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H.
SQL injection in Tencent WeKnora through version 0.8.1 allows an authenticated, low-privileged remote attacker to bypass the platform's own SQL Validator by crafting a malicious subquery that is mishandled by the validateSubquery function in internal/utils/inject.go, manipulating backend database queries. Publicly available exploit code exists, including a proof-of-concept write-up and a public gist, so exploitation is practical for anyone with valid credentials, though the assessed impact is limited to Low confidentiality, integrity, and availability per the vendor vector; no confirmed active exploitation (CISA KEV) has been recorded. The issue carries a very low CVSS 4.0 base score of 2.1 and is a low-priority issue despite being a remotely reachable SQL injection (CWE-89).
SQL injection in DataEase up to and including 3.0.0 allows an authenticated low-privilege user - or the holder of a valid share-link identity - to inject SQL through a crafted calculated-field expression that is concatenated into a query by Utils.buildCalcField (io/dataease/engine/utils/Utils.java). Because a valid identity is required (CVSS PR:L), the assessed impact is limited to low confidentiality, integrity, and availability loss rather than full database takeover, and publicly available exploit code exists for this flaw. There is no indication that it is confirmed actively exploited (no CISA KEV listing), so it should be treated as a moderate-priority issue rather than an emergency.
Improper privilege management in RuoYi up to 4.8.3 allows an authenticated low-privileged attacker to modify role authorization data via the roleKey parameter at the /system/role/authDataScope endpoint, enabling privilege escalation within the management console. Publicly available exploit code exists, and the vendor did not respond to disclosure; no vendor-released patch has been identified at time of analysis. The vulnerability has a CVSS 4.0 base score of 5.3 (medium) with low integrity and availability impact and no confidentiality impact.
Authenticated path traversal in the Template Management component of westboy CicadasCMS (versions up to commit 2431154dac8d0735e04f1fd2a3c3556668fc8dab) allows a low-privileged user to manipulate the filePath argument sent to /system/cms/template/input so that the underlying TemplateController.input handler resolves paths outside the intended template directory, exposing files that should not be readable. Exploitation requires a valid low-privileged session (CVSS PR:L) and is limited to confidentiality impact - there is no write or code-execution primitive - so this is a moderate, not high-priority issue despite being remotely reachable. Publicly available exploit code exists (a proof-of-concept is published on GitHub and linked from the VulDB advisory), and the vendor was contacted early but did not respond, so no vendor-released patch has been identified at time of analysis.
Improper access control in 1024-lab SmartAdmin 3.30.0 and earlier lets any authenticated low-privilege user read configuration values they should not see by manipulating the configKey argument of the /support/config/queryByKey endpoint. The endpoint is remotely reachable and publicly available exploit code exists (a GitHub issue containing the proof of concept), but the flaw is not listed in CISA KEV and the project has not responded to the report. With a CVSS 4.0 base score of 5.3 and only low confidentiality/integrity/availability impact, this is a genuine but modest-priority issue rather than a top-tier emergency.
Code injection in the PythonTools component of Agno (agno-agi/agno) through version 3.0.6 lets an attacker who can influence the 'code' argument of run_python_code execute arbitrary Python in the host process. The CVSS v4.0 vector supplied with the record is low (2.1, PR:L), and our independent assessment confirms that a low-privilege foothold is required - realistic paths are an authorized-but-malicious user of an agent that has PythonTools enabled, or indirect prompt injection steering the model into calling the tool with attacker-chosen code; PythonTools is an optional agent tool rather than a default network-exposed endpoint. Publicly available exploit code exists (a third-party advisory and PoC repository are linked), and the vendor was notified via a GitHub issue but has not responded, so no vendor patch is confirmed; despite the RCE framing, the signals point to a low real-world priority.
Insufficient session expiration in MacroZheng Mall through 1.0.3 allows an attacker who already holds a valid low-privilege JWT for a disabled or deactivated account to keep that session alive by repeatedly calling the /admin/refreshToken endpoint, because JwtTokenUtil.validateToken verified only the username match and token non-expiry and omitted the userDetails.isEnabled() check. The issue is rated 5.3 (CVSS 4.0 vector with PR:L, E:P) with low confidentiality, integrity and availability impact and no scope change, and publicly available exploit code exists, although there is no confirmation of active exploitation. Effectively, the defect prevents account deactivation from taking effect on the token-refresh path, letting a terminated user retain access until the token is otherwise invalidated.
Authenticated file upload in KusalkaSilva LMS (rolling release commit ffeb873f) allows an attacker with a valid account to bypass the getimagesize() content check and upload arbitrary files via the uploaded_file/image argument to upload_save.php. Publicly available exploit code exists, and while the flaw is rated CVSS 2.1 by the vendor, successful exploitation could lead to remote code execution only if the upload directory is web-accessible and configured to execute PHP; otherwise impact is limited to storing malicious files. The project has not responded to the issue report, and no fixed version is available, but real-world risk is low given the niche deployment and required authentication.
Stored cross-site scripting in the Netcore NR268 router running firmware 1.7.121109 allows an attacker with a presence on the device's local/broadcast network to plant a malicious DHCP hostname that later executes as script in the browser of an administrator who views the DHCP host-dump page rendered by filter_hosts_dump.cgi. The DHCP hostname is persisted by the router and only fires on subsequent admin page views, so successful exploitation pairs local-network access to inject the value with the passive step of the administrator opening the affected page; no authentication on the router itself is needed. Publicly available exploit code exists in the form of a detailed GitHub proof-of-concept report, and the vendor was contacted about the disclosure but did not respond; impact is confined to script execution in the administrator's session (integrity-low, with no demonstrated confidentiality or availability loss).
SQL injection in itsourcecode Online Admission System 1.0 lets an authenticated low-privilege user inject arbitrary SQL through the ID parameter of the admin-area script /admin/sum.php, allowing data disclosure or manipulation. Publicly available exploit code exists (referenced via the VulDB submission and a public GitHub issue), although the CVE is not listed in CISA KEV, so there is no confirmed active exploitation. With a CVSS 4.0 base score of 5.3 (E:P, PR:L) and only low confidentiality/integrity/availability impact, this is a low-to-moderate risk that should not be treated as an urgent priority despite the public exploit.
Authenticated SQL injection in itsourcecode Baptism Information Management System 1.0 allows a low-privilege, logged-in user to inject arbitrary SQL through the b_id parameter of the pbaptism.php endpoint, potentially reading, modifying, or corrupting records in the underlying database. Publicly available exploit code exists - the vulnerability was reported via VulDB and a proof-of-concept submission is linked from a public GitHub issue - and the vendor's freely distributed PHP source means the flawed query pattern is easy to locate and reproduce. Because exploitation requires a valid session (CVSS vector PR:L) and the application has an extremely small deployment base, the practical risk is low-to-moderate, consistent with the assigned CVSS 4.0 base score of 5.3.
Cross-site request forgery in the CGI endpoint of the Netcore NR268 router (firmware 1.7.121109) allows an attacker to ride an authenticated administrator's active browser session and silently submit unauthorized state-changing requests to the device. Publicly available exploit code exists, but exploitation requires the logged-in admin to visit an attacker-controlled page while a valid session is open, which materially limits realistic risk; the independent assessment rates this low-priority (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) with impact confined to low-integrity configuration changes and no data disclosure or denial of service. No vendor-released patch has been identified at time of analysis, and the vendor did not respond to the disclosure.
Authenticated path traversal in WMCMS 4.446.1257 lets any user holding a low-privileged account read files outside the intended web directory by manipulating the path/file argument of /index.php, exposing source code, configuration, and credential material on the host. The flaw is network-reachable with no user interaction, and publicly available exploit code exists - a GitHub proof-of-concept repository dedicated to this exact build - so unpatched instances with weak, default, or shared credentials are the realistic targets. Impact is bounded to confidentiality (no write, no code execution, no availability effect), and our independent assessment rates this a moderate-risk, low-priority issue in practice because a valid session is a prerequisite.
Stored cross-site scripting in QGIS Server's WFS3 (OGC API Features) HTML renderer allows an attacker who can write feature attributes into a published writable vector layer to inject markup or script that executes in the QGIS Server origin when a victim opens an items or feature HTML page. Affected releases are QGIS Server versions prior to 3.44.12 and the 4.x line from 4.0.0 through 4.2.3; exploitation requires the WFS3/OGC API Features interface to be enabled and serving HTML, a writable published layer the attacker can populate (for example through WFS-T transactions), and a user who actually views the crafted page. The vendor rates this CVSS 6.1 (Medium) with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N, while our independent assessment applies the same score but a PR:L vector because the attacker must hold write access to a published layer; no public exploit code and no confirmed active exploitation (CISA KEV) were identified at time of analysis.
SQL injection in itsourcecode Baptism Information Management System 1.0 allows an attacker who already holds a low-privileged session to manipulate the ID argument of ebaptism.php and inject arbitrary SQL into the backend query, potentially exposing or altering records such as baptism registrations. Publicly available exploit code exists - a proof-of-concept was published in a public GitHub issue tied to the VulDB report - but there is no confirmed active exploitation (CISA KEV). The vendor-scored CVSS 4.0 base value is 2.1 with E:P, and an independent assessment rates the real-world risk as low because exploitation requires network reach plus a low-privileged authenticated context and the product has a very small, largely non-production deployment base.
Cross-site scripting in Progress MarkLogic Server lets a remote, unauthenticated attacker execute arbitrary script in the browser of an authenticated MarkLogic user - typically an administrator or developer working in the web-based Admin or Query console - after that user clicks a crafted link or loads attacker-supplied content. Only 12.x releases before 12.1.0 and 11.x releases before 11.3.7 are affected; the flaw is rated CVSS 3.1 base 6.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N), with the required victim interaction and the need for an existing authenticated session being the main limiting factors. Successful exploitation could drive unauthorized actions or expose information accessible to that authenticated user, and no public exploit code has been identified at time of analysis.
Authenticated SQL injection in SEMCMS through version 5.0 lets a low-privileged logged-in user inject arbitrary SQL through the SEMCMS_Banner.php banner handler, potentially reading or altering data stored in the underlying database. Publicly available exploit code exists (a GitHub proof-of-concept repository was referenced in the disclosure), but there is no indication of confirmed active exploitation (no CISA KEV entry), and the requirement for a valid authenticated session keeps the real-world priority LOW. The vendor was contacted about the flaw but never responded, so no official fix has been issued and all deployments up to 5.0 remain affected.
SQL injection in SEMCMS 5.0 and earlier lets an attacker manipulate a user-controlled parameter handled by SEMCMS_Download.php so that unsanitized input is passed into a backend SQL query, exposing and potentially modifying database contents. Per the CVSS vector (PR:L) a low-privileged authenticated session is required, which narrows exposure to actors who can reach and log into the application, although that authentication requirement is derived from the vector alone and has not been confirmed by a vendor advisory. Publicly available exploit code exists (referenced from a GitHub PoC repository), the CVSS 4.0 vector carries an Exploit Maturity of E:P, and the vendor was contacted early but did not respond; no vendor-released patch was identified at time of analysis.
CSV export formula injection in OTRS (7.0.X, 8.0.X, and 2023.X through 2026.X before 2026.7.X, plus legacy ((OTRS)) Community Edition 6.x and products derived from it) lets attacker-influenced text that lands in ticket or contact fields be written into exported CSV files as spreadsheet formulas starting with =, +, -, or @, so that opening the export in Excel or similar software can cause unintended actions, information disclosure, or invocation of external functionality inside the spreadsheet client. Rated CVSS 3.1 6.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N), the issue is unauthenticated from the network perspective per the vector, since a payload can arrive through external channels such as inbound email routed into an OTRS queue rather than requiring a valid account; the real limiting factors are that an export workflow must actually be used and the recipient must generally confirm one or more spreadsheet security-warning dialogs before a formula executes. Only the victim's spreadsheet application is affected, no code executes on the OTRS server, and no public exploit identified at time of analysis with no CISA KEV listing.
Samsung Flow builds prior to 4.9.22.4 contain an improper authentication weakness that lets an attacker on an adjacent wireless network reach sensitive information exchanged or stored by the app. Exploitation is unauthenticated and requires no user interaction (CVSS 4.0 PR:N/UI:N), but the vector also requires a specific precondition (AT:P) and proximity, so a successful attempt depends on timing or an active pairing/connection state rather than being reliably repeatable on demand. Severity is moderate (6.1 base) and no public exploit code or confirmed active exploitation was identified at time of analysis; realistic risk is constrained by the adjacent-network vector and the conditional attack requirement.
Untrusted external web-link handling in IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 Interim Fix 2 allows a remote, unauthenticated attacker to craft a link that can expose sensitive information or trigger unauthorized actions inside a victim's browser (CWE-1022). The flaw cannot be triggered server-side or automatically: it requires the victim to click an attacker-supplied link that resolves through the application's untrusted external reference, so the practical barrier is social engineering rather than authentication (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N, score 6.1). Impact is confined to the victim's browser context rather than the Db2 Recovery Expert host, and no public exploit code or confirmed active exploitation (CISA KEV) was identified at time of analysis.
An open redirect in Thelia's address-creation workflow (versions up to and including 2.6.0) lets an attacker craft a URL that carries an arbitrary external destination in the 'next' parameter; once the victim completes the 'Add New Address' form, the application redirects them to that attacker-controlled site. The flaw is remotely reachable without authentication (CVSS:3.1/AV:N/AC:L/PR:N) but requires the victim to both open the crafted link and successfully submit the form (UI:R), and it produces no server-side compromise - impact is limited to confidentiality and integrity at low severity with changed scope. EPSS is only 0.18% (7th percentile), and no public exploit code or active exploitation has been identified at time of analysis.
Reflected cross-site scripting in IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 lets an unauthenticated attacker inject arbitrary JavaScript into the product's Web UI, which then executes in the browser of a logged-in user within a trusted session and can lead to credential or session disclosure. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N, score 6.1) shows the attacker does not need to authenticate, but a victim with an active session must be induced to trigger the reflected payload, making user interaction the primary limiting factor and the practical risk moderate-to-low. No public exploit code or confirmed active exploitation has been identified at time of analysis, and a vendor patch is available (CWE-79).
Reflected cross-site scripting in IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 allows an unauthenticated attacker to embed arbitrary JavaScript in the Web UI, which executes in the browser of a victim operator who interacts with the crafted content and can lead to disclosure of credentials from a trusted session. The flaw is rated CVSS 6.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N), meaning no attacker authentication is needed but the payload only fires after a legitimate user opens or interacts with the injected content, so this is not a drive-by, self-propagating compromise. Exploitation status is assessed as no public exploit identified at time of analysis, with no CISA KEV listing; the practical exposure is limited by the mandatory user interaction, the narrow deployment base of this recovery tooling, and the fact that only the specific 5.5 IF 2 build is in scope.
Reflected cross-site scripting in IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 Web UI allows unauthenticated remote attackers to inject arbitrary JavaScript into a victim's trusted session, potentially leading to credential disclosure. The CVSS 3.1 base score is 6.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N); no public exploit was identified at time of analysis. A vendor patch is available, and successful exploitation requires a logged-in operator to interact with attacker-supplied input.
Reflected cross-site scripting in Thelia versions up to 2.6.0 allows remote attackers to execute arbitrary JavaScript in the context of an authenticated user's session by crafting a link with a malicious 'next' parameter. The flaw arises from improper escaping of double quotes in the Smarty templates address.html and address-update.html, requiring the victim to click the link while logged in. No public exploit code or active exploitation has been identified at time of analysis; EPSS estimates a 0.16% probability of exploitation in the next 30 days, and the CVSS score is 6.1 (moderate).
Path traversal in CicadasCMS up to commit 2431154 allows authenticated users with high-privilege backend access to manipulate the TemplateController.save function via the /system/cms/template/save endpoint, potentially leading to limited file read or write. The vulnerability requires an authenticated session with privileged backend access (PR:H) and has a medium CVSS 4.0 score of 5.1; publicly available exploit code exists. The vendor did not respond to the disclosure, and no patched version has been released.
Samsung Internet versions prior to 30.0.5.24 are susceptible to script injection due to improper input validation, allowing unauthenticated remote attackers to compromise confidentiality of user data (CVSS 4.0 base 6.0). Exploitation requires passive user interaction (e.g., visiting a malicious page), and the assessed impact is limited to confidentiality (VC:H, VI:N, VA:N). The flaw was confirmed by Samsung's product security team; no public exploit has been identified at time of analysis.
SQL injection in Zen Cart 2.2.2 and earlier within the admin/modules.php Module Configuration interface allows an authenticated administrator to manipulate the configuration parameter and execute crafted SQL against the backend database, yielding limited confidentiality, integrity, and availability impact. Exploitation requires a valid backend administrative session (CVSS PR:H), so it is not reachable by unauthenticated or low-privileged users; publicly available exploit code exists, and an upstream fix is available as commit 08f572654edee1db8f9db091c9949825c6c69339. This is a genuine but lower-priority SQL injection given the admin-level prerequisite.
Temporal Server's Scheduler V2 callback handling fails to bind internal completion callbacks to the namespace that attached them, so an authenticated caller with write permission in one namespace can forge the reserved temporal://internal callback and alter schedule state in a different namespace. To succeed an attacker must already know the target namespace identifier, the schedule identifier, and the identity and timing of a currently running scheduled action, which makes this a targeted integrity attack rather than mass exploitation; the independent assessment rates it CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N. Scheduler V2 is disabled by default, so default deployments are not exposed, though schedules created while it was enabled remain targets even after the feature is turned off, and no public exploit code was identified at time of analysis.
Stored DDNS account credentials on Netcore NR268 routers running firmware 1.7.121109 are disclosed through the DDNS Handler endpoint ddns_wan_list_show.cgi (function ddns_wan_list_show), which returns the user_idN and passwordN values for configured dynamic DNS providers. Exploitation requires an already-authenticated session with high (administrative) privileges on the web management interface (CVSS vector PR:H), so the flaw is primarily a credential-exposure issue for attackers who have already obtained admin access rather than a direct path to compromise; there is no integrity or availability impact and confidentiality loss is limited. Publicly available exploit code exists - a proof-of-concept write-up is hosted on GitHub - but there is no indication of active exploitation (not listed in CISA KEV), and the assessed CVSS 3.1 score is 4.9-equivalent impact-wise with a base of AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N, making this a low-priority issue despite the remote reachability and public disclosure.
Display-layer injection in Shenzhen HCC Technology MPOS M6 PLUS 1.31-N lets an attacker on the same local or adjacent network distort how the terminal's QR code rendering component stacks its UI layers by supplying a manipulated 'alignment' argument, causing the device to draw QR codes or controls in a misleading way. The bug is unauthenticated from the network position, but it requires the victim to interact with the manipulated display (UI:P) and yields only low integrity impact with no confidentiality or availability loss, per both the vendor-reported CVSS 4.0 score of 5.1 and independent assessment. Publicly available exploit code exists on GitHub (Davim09/m6plusexploit) and the vendor did not respond to the disclosure, so no vendor patch has been identified; this is a low-to-moderate real-world priority, not an actively exploited (CISA KEV) issue.