Unauthenticated WooCommerce order-status manipulation in the Snap Finance WordPress plugin before 3.12.0 allows remote attackers to mark arbitrary orders as paid or failed because the status-change handler does not verify that the request comes from an authorised source. The flaw has a CVSS 3.1 base score of 5.3 Medium (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N), with impact limited to order-state integrity and no confidentiality or availability impact. Publicly available exploit code exists, but no CISA KEV entry was provided indicating confirmed active exploitation.
Missing authorization checks in the TrueBooker WordPress plugin before 1.3.0 allow unauthenticated remote attackers to create and modify booking services and categories, including their prices. Publicly available exploit code exists, and the assessed CVSS vector indicates integrity-only impact (C:N/I:L/A:N) with no confidentiality or availability effect. This is a moderate-severity broken access control issue requiring only that the vulnerable plugin version be deployed.
Unauthenticated attackers can create TrueBooker bookings at attacker-chosen prices and attach them to arbitrary customer accounts in WordPress plugin versions before 1.3.0 because several AJAX actions lack authorization checks and the service price is not validated server-side. The flaw is medium severity (CVSS 5.3) with integrity-only impact, and publicly available exploit code exists. Exploitation requires the plugin to be installed and active with its booking AJAX actions reachable, which is the default state for core functionality.
WooCommerce orders can be marked as paid without payment by unauthenticated attackers on WordPress sites running BDM Digital Payment Gateway through 1.3.12. The plugin's public payment-status update route does not verify credentials and treats unset credentials as valid in the default configuration, so no special setup is required; no CISA KEV entry is provided, but publicly available exploit code exists. Impact is an integrity-only change to WooCommerce order payment status on sites with this specific plugin, with no code execution or data disclosure.
TrueBooker, a WordPress plugin, lets unauthenticated remote attackers rewrite its entire stored configuration because one of its setup handlers performs no WordPress capability check and validates only a token that is itself handed out to unauthenticated visitors. Any site running a version before 1.3.0 is affected; no login, no user interaction, and no non-default configuration are required, and publicly available exploit code exists (no CISA KEV entry at time of analysis). Impact is limited to integrity - settings the attacker does not supply are discarded, so the plugin can be left in an attacker-chosen or broken state - with no confidentiality or availability impact reflected in the CVSS 5.3 score, making this a moderate-priority integrity issue rather than a code-execution emergency.
Unauthenticated attackers can mark WooCommerce orders as paid without actually paying in sites running the 'Gateway for Vantiv on WC' WordPress plugin through version 1.0.1. The plugin's hosted-payment return handler accepts return notifications without verifying their authenticity (CWE-284), yielding a low-integrity impact (CVSS 5.3, I:L) with no confidentiality or availability effect. Publicly available exploit code exists, and exploitation is limited to sites that use this specific plugin as their payment gateway and expose the return handler.
Unauthenticated coupon creation in the ActiveTrail for WooCommerce WordPress plugin (all versions through 1.2.6) lets remote attackers mint arbitrary WooCommerce coupons, including 100%-off and free-shipping codes, without any credentials or user interaction. The defect is a missing authorization check on the plugin's coupon-generation routine (CWE-862), so any visitor who can reach the endpoint can write coupon data into the store; the assessed vector (AV:N/AC:L/PR:N/UI:N, I:L only) confirms default installs are reachable over the network while impact stays confined to integrity of discount data rather than data disclosure or site takeover. Publicly available exploit code exists and the finding is documented by WPScan and EUVD-2026-104082, but there is no CISA KEV entry - the practical threat is financially motivated coupon and discount fraud, not mass site compromise; no vendor-released patch is identified in the available data.
Unauthenticated information disclosure in the FormFlow for GoHighLevel (GHL) WordPress plugin through version 1.0.0 lets anyone who can reach the plugin's log file in the public wp-content/uploads directory read its contents, which include connected-CRM identifiers and, on sites that have linked their GoHighLevel integration, a third-party access token. Because the log is written into a web-served path rather than a protected location, no credentials or user interaction are required - only knowledge or guessing of the file path - so the exposure scales directly with how many affected installs exist and how many operators have completed the CRM link. Publicly available exploit code exists, making path discovery and retrieval straightforward; the practical blast radius is limited mainly by the plugin's small deployment footprint, with the high-confidentiality outcome reserved for integration-linked sites whose token is captured in the log.
Paid WooCommerce downloadable files can be retrieved without purchase on WordPress sites running ElementsReady Addons for Elementor through 6.7.2, because the plugin fails to enforce authorization on protected product download requests. The CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N (5.3 Medium) indicates a remote, low-complexity, unauthenticated attack with no user interaction; the practical exposure is limited to stores that actually sell protected downloadable products through the plugin. Publicly available exploit code exists, and no CISA KEV status or EPSS score is provided in the supplied data.
Unauthenticated attackers can mark arbitrary WooCommerce orders as paid on WordPress sites running the Snap Finance plugin through version 3.11.0, because the plugin's payment-return handling never verifies that the provider actually approved a completed transaction. Publicly available exploit code exists and the flaw needs no credentials or user interaction (CVSS:3.1/AV:N/AC:L/PR:N/UI:N, 5.3 medium), but exploitation is limited to sites where the plugin is active and Snap Finance is enabled as a checkout payment method. Impact is confined to integrity of order/payment status - fraudulent marking of orders as paid - with no data disclosure, site compromise, or availability loss.
Unauthenticated attackers can replace the published thumbnail image for any document on WordPress sites running the Document Gallery plugin through 5.1.1. The plugin's webhook endpoint does not verify request signatures when no shared secret is configured, and that is the default configuration, so default installations are exposed. Publicly available exploit code exists; impact is limited to integrity (CVSS 5.3, I:L with no confidentiality or availability impact), and CISA KEV status is not indicated.
The iPOSpays Payment Gateway for WooCommerce plugin (all versions before 1.4.7) records orders as paid without confirming that a payment actually settled, letting unauthenticated remote attackers flip any unpaid order to 'paid' and rewrite the order total. Exploitation is trivial where the gateway is enabled - no credentials, privileges, or victim interaction are required (CVSS:3.1/AV:N/AC:L/PR:N/UI:N) - but impact is confined to order and payment-record integrity, with no data disclosure or availability loss, giving a base score of 5.3. Publicly available exploit code exists and the flaw was reported by WPScan; there is no indication of confirmed active exploitation (CISA KEV) at time of analysis.
Forged Coinbase Commerce webhook notifications can mark arbitrary WooCommerce orders as paid or cancel already-paid orders in the Coinbase Commerce Payment Gateway plugin through version 1.4.1. The plugin ships with an empty webhook shared secret and does not reject an unconfigured value, so unauthenticated remote attackers who know or guess an order ID can bypass signature validation; publicly available exploit code exists. The CVSS 5.3 impact is limited to order-payment integrity with no confidentiality or availability impact, and merchants who have explicitly set a non-empty shared secret are not affected by the bypass.
Heap buffer overflow and stale-heap disclosure in Pillow's compressed TIFF save path can crash the process and potentially enable code execution when an application writes TIFF data to an in-memory stream such as io.BytesIO. Affected are Pillow versions 2.0.0 through 12.x (fixed in 13.0.0) that use libtiff and process attacker-influenced out-of-line TIFF tags or retained ICC profiles; file paths and targets with real file descriptors are not affected. The flaw requires a specific combination of compressed saving, seek-past-end behavior, and controlled tag data (AC:H/AT:P), and no public exploit code has been identified at time of analysis.
Missing authorization in CheckCle through 1.6.0 leaves the bundled PocketBase collections publicly accessible, allowing unauthenticated remote attackers to read, modify, and delete monitoring records and extract secrets such as server_token and alert_configurations values. Because the flaw is present in the default shipped schema, any instance with a reachable API endpoint is exposed out of the box; successful abuse can disable alerting, alter status pages, or erase monitoring data. No public exploit was identified at time of analysis, but the default-configuration exposure and high impact justify urgent patching.
Command injection in PingTools Network Utilities 4.64 Free allows a local user who can set or influence the Host field of a Watcher ICMP service to run arbitrary commands through sh -c, compromising confidentiality, integrity, and availability. The assessed vector is AV:L, so this is a local-device issue requiring access to the app and configuration or triggering of the Watcher ICMP feature, not an internet-facing remote attack. No public exploit code or CISA KEV entry was identified in the provided data.
Argument injection in Pillow's EPS decoding path (EpsImagePlugin.Ghostscript) lets a caller-controlled input filename be parsed as a Ghostscript option, and in the worst case escalates to arbitrary command execution. All Pillow releases from 2.6.0 up to but not including 13.0.0 are affected when Ghostscript is installed and the host application passes an unsanitized, attacker-influenced filename into Image.open() for EPS input; no authentication is required per the CVSS vector (PR:N), though exploitation depends on that application-level precondition. Making the path absolute before it is placed after Ghostscript's -f flag closes the issue, and the vendor shipped that change in 13.0.0 (commit a2c3631); no public exploit code or confirmed active exploitation was identified at time of analysis.
Heap buffer overflow in Pillow's JPEG decoder (all versions prior to 13.0.0) lets a crafted 8-bit lossless SOF3 JPEG corrupt heap memory, crash the process, and potentially achieve code execution when an application requests downscaling through draft() or thumbnail(). Exploitation is unauthenticated but conditional: the Pillow build must be linked against libjpeg-turbo 3.x, because libjpeg-turbo 2.x and IJG builds reject the SOF3 input outright, and the application must actually call draft()/thumbnail() on attacker-supplied images - a common pattern in upload/thumbnail pipelines, which is the realistic exposure surface. No public exploit code has been identified at time of analysis and the issue is not in CISA KEV; the CVSS 4.0 score of 9.2 reflects high confidentiality/integrity/availability impact, tempered by the AC:H rating derived from the narrow build-configuration prerequisite.
Heap-based buffer overflow in Pillow before 13.0.0 can corrupt memory and potentially enable arbitrary code execution when an application with the optional olefile dependency opens or thumbnails a crafted OLE2 FlashPix (FPX) image. The flaw is reachable by unauthenticated remote attackers who can supply malicious image input, but exposure is limited to deployments that have installed olefile and process untrusted FPX content; no public exploit identified at time of analysis, and no confirmed active exploitation (CISA KEV). The vendor-released patch is Pillow 13.0.0.
Heap buffer overflow in IBM MQ Operator and IBM MQ Advanced Container Images lets an authenticated user with authority to perform MQPUT operations crash the queue manager or potentially execute arbitrary code by supplying malformed message options. The advisory is scoped to these containerized IBM MQ products, and exploitation requires valid MQ credentials plus put authority, so this is not an unauthenticated attack. No public exploit identified at time of analysis, and IBM has released a vendor patch.
Denial of service and potential remote code execution in IBM MQ deployments using the MQ Operator and MQ Advanced Container Images result from a heap buffer overflow when an authenticated attacker with put authority sends MQPUT or MQPUT1 operations carrying malformed message handle properties. The CVSS 8.8 vector is network-reachable and requires no user interaction, but the PR:L component means the attacker must already hold valid credentials and put permissions, so the practical threat is an insider or post-compromise actor rather than an unauthenticated remote attacker. No public exploit code was identified at time of analysis, and IBM has released a vendor patch.
Out-of-bounds read in Pillow's TIFF encoder before 13.0.0 allows unauthenticated remote attackers to leak heap memory or cause a denial of service (process crash) when an application saves or re-encodes a malicious TIFF using the libtiff encoder. Exploitation requires the target to re-encode the attacker-supplied image-simply opening it does not trigger the bug-and the leak is limited to adjacent heap bytes rather than targeted data. No public exploit has been identified at time of analysis, and the vendor has released Pillow 13.0.0 to fix the issue.
Heap out-of-bounds over-read in Pillow 8.1.0 through 12.x allows a crafted TIFF processed by an application using libtiff-backed decoding to copy adjacent heap contents into output pixels or crash the process. The flaw affects the tile path in _decodeTile and the RGBA unpacker when duplicated PhotometricInterpretation or BitsPerSample tags are interpreted differently by Pillow and libtiff; the strip path is not affected. No public exploit code or CISA KEV entry was identified at time of analysis, and upgrading to 13.0.0 fixes the issue.
Unrestricted Java deserialization in the MQ Classes for Java shipped with IBM MQ Operator (versions 2.0.0 through 4.0.4) and the long list of MQ Advanced container image builds (9.3.0.x, 9.4.x and 10.0.0.x) lets an authenticated low-privilege user trigger a denial of service against the queue manager and, if a usable gadget chain is present on the classpath, potentially execute arbitrary code. The flaw is rated CVSS 8.8 (AV:N/AC:L/PR:L/UI:N, high confidentiality, integrity and availability impact) and requires valid credentials but no user interaction; the specific interface that accepts the serialized stream is not described in the available sources. There is no evidence of active exploitation - the issue is not in CISA KEV, SSVC records exploitation as none and automatable as no, EPSS is only 0.29% (20th percentile), and no public exploit code has been identified at time of analysis; the vuln.today priority is this_week and IBM has published a vendor fix.
Authenticated users of containerized IBM MQ deployments can cause denial of service or memory corruption by sending MQOPEN operations that are not properly validated for buffer size. The affected deployments identified in the CPE data are IBM MQ Operator and IBM MQ Advanced Container Images, with the provided feed using wildcard version fields rather than a precise version range. The vendor CVSS 3.1 score is 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), requiring valid MQ credentials and authority to open a queue or object; no public exploit was identified at time of analysis, and a vendor patch is available via IBM support advisory node 7292667.
SQL injection in Integratec's pre-authentication login endpoint (/login/ap_Login.aspx/start) allows remote unauthenticated attackers to read database contents-including credentials and user information-by supplying a crafted UNION-based payload in the sInfo POST parameter. The report carries an 8.8 CVSS score, and our independent assessment is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L, with no authentication or user interaction required; exploitation is limited mainly by whether the login interface is reachable from untrusted networks. No public exploit code was identified at time of analysis, but our independent assessment treats this as a credible, actionable priority rather than a paper-tiger high score.
A stack-based out-of-bounds write in Zephyr's OSDP Control Panel reply parser (cp_decode_response() in subsys/mgmt/osdp/src/osdp_cp.c) lets an attacker on the RS-485 bus overflow fixed 64-byte payload arrays inside a stack-allocated struct osdp_event by declaring an oversized REPLY_KEYPPAD or REPLY_RAW payload length. Any build with CONFIG_OSDP and CONFIG_OSDP_MODE_CP plus an event callback registered is affected, and because nobody validates the reply ID against an outstanding command, a malicious or compromised card reader can answer a routine CMD_POLL with a weaponized frame carrying a correct SOM, valid CRC-16 and matching sequence number. With the default 256-byte UART buffer roughly 180 attacker-chosen bytes land past the event object, corrupting saved registers and the return address on typical Cortex-M/RISC-V layouts, giving crash-to-potential-control-flow-hijack in the OSDP receive thread; no public exploit code has been identified at time of analysis and the issue is bus-adjacent (AV:A) rather than network-reachable.
SQL injection in SLiMS (Senayan Library Management Systems) 9 Bulian 9.8.0 allows an authenticated staff/librarian account to extract arbitrary database contents through the opac_hide and promoted GET parameters of admin/modules/bibliography/index.php, exposing patron records, credentials, and catalogue data. The flaw is reachable by any staff user with access to the bibliography administration module (PR:L), so it is not anonymously exploitable, and the primary impact per our assessment is confidentiality loss rather than data tampering. Publicly available exploit code exists (including a dedicated PoC repository) and CISA SSVC flags exploitation as 'poc', but EPSS remains low at 0.20% (10th percentile) and no active exploitation has been confirmed.
Cross-site request forgery in SLiMS 9 Bulian 9.8.0 allows a remote attacker to trick a logged-in administrator into issuing a GET request to admin/modules/circulation/loan_history_maintenance.php?action=run, which deletes loan history records. The endpoint lacks a CSRF token and POST confirmation, so the forged request executes with the administrator's privileges; the assessed impact is integrity-only (C:N/I:H/A:N), not confidentiality or availability. Exploitation requires an active admin session and user interaction (UI:R); a public PoC reference exists but is not verified as working exploit code, and EPSS is low at 0.20% (9th percentile).
Remote code execution in Craft CMS 5.0.0 through 5.10.x lets authenticated Control Panel users escape the Twig sandbox by supplying attacker-controlled 'as' or 'on' keys to Asset::getMimeType transforms, which are passed unfiltered into Craft::createObject and can attach malicious behaviors or event handlers that execute as the PHP web user. The CVSS 4.0 score is 8.7 (and the assessed CVSS 3.1 vector is AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), reflecting a high-integrity and high-availability impact once a Control Panel session is obtained. No public exploit code has been identified at the time of analysis and there is no CISA KEV confirmation, so the practical risk is concentrated in environments where Control Panel access is broadly granted, weakly protected, or susceptible to credential phishing or reuse; the fixed release is 5.11.0.
Authenticated remote code execution in Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 allows control panel users to write a webshell and execute code as the web user by abusing the Twig group filter's handling of non-string arrow arguments as callables. The flaw is a missing checkArrow guard that other arrow-accepting filters apply, letting a crafted element-select condition rule pass an array-callable such as FileHelper::writeToFile. Exploitation requires valid control panel credentials with permission to create or edit condition rules and a writable webroot; no public exploit has been identified at time of analysis.
Authenticated administrator accounts on Craft CMS 5.8.0 through 5.10.x can achieve remote code execution by submitting a crafted JSON-string field layout to ContentBlock::setFieldLayout() that embeds Yii 'as X' or 'on X' configuration keys, which slip past the platform's cleanseConfig() sanitization and let an attacker attach arbitrary behavior classes and event handlers that run OS commands as the web user and expose stored secrets. Exploitation is gated on the allowAdminChanges setting being enabled and on the attacker already holding admin control-panel access, so hardened production installs with that setting disabled (the recommended posture) are not reachable and the realistic attack surface is materially narrower than the 8.7 score suggests; no public exploit has been identified at time of analysis and no CISA KEV entry exists.
Unauthenticated arbitrary code execution in Dell Application Store affects every release prior to 26.05.0.7, reachable by an attacker who shares the same local network segment as the host. The root cause is a critical function that performs no authentication check (CWE-306), so an attacker with adjacent access (shared LAN or Wi-Fi broadcast domain, per AV:A) can invoke it without credentials or user interaction, yielding high confidentiality, integrity, and availability impact (CVSS 8.8). There is no public exploit identified at time of analysis and the issue is not in CISA KEV; the adjacency requirement keeps it off routed/internet attack paths and out of mass-scanning reach, but it is a credible priority for environments running the component on flat or untrusted Layer 2 networks.
Unauthenticated deserialization of attacker-controlled messages in Apache Camel's camel-jgroups consumer can lead to remote code execution in the Camel process. Any host that can reach the JGroups cluster's multicast group or bind port - adjacent network only, given the default UDP multicast stack - can join without credentials and deliver a crafted serialized object that JGroups deserializes on its own receive thread before Camel's routing logic ever runs. Code execution still depends on a usable gadget chain being present on the application classpath and on no JVM-wide -Djdk.serialFilter being configured, which is why the issue is assessed as high rather than critical; no public exploit code or confirmed active exploitation was identified at time of analysis. Deployments that explicitly configure a channel/channelProperties with AUTH and encryption, or that set a JVM-wide serialization filter, are not exploitable through this path.
Expression language injection in the Apache Camel dynamic-router-control endpoint allows a party who can place a message on a transport feeding that endpoint to choose both the expression language and the predicate expression that Camel compiles and then evaluates against every exchange routed through the corresponding dynamic-router endpoint, running with the full privileges of the Camel process - effectively code execution. The issue affects Camel 4.4.0 through 4.18.4 and 4.19.0 through 4.22.0 (releases before 4.4.0 are not affected), scored CVSS 3.1 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), so some access to the feeding transport is expected but no application-level authentication or user interaction is required. Exposure is limited to deployments that expose the control endpoint through a route forwarding messages from an external, shared or untrusted transport; no public exploit code was identified at time of analysis and the issue is not listed as confirmed actively exploited (CISA KEV).
Deserialization of untrusted data in the Apache Camel Spring Redis component (camel-spring-redis) allows an authenticated attacker who can either PUBLISH to a channel the route subscribes to, or write attacker-controlled bytes into a key the component later reads, to instantiate an arbitrary class graph in the application's JVM and execute its readObject method. Every release from 2.11.0 up to (but not including) 4.18.5 and 4.22.1 ships the affected default, which lazily builds a bare JdkSerializationRedisSerializer with no java.io.ObjectInputFilter whenever no serializer option is configured. No public exploit code was identified at time of analysis, but exploitation needs only a viable gadget on the classpath, which is why this carries CVSS 8.8 with high confidentiality and integrity impact.
PHP object injection in the WordPress plugin Quiz And Survey Master (quiz-master-next) through version 11.2.7 allows an authenticated low-privilege user, such as a subscriber-level account, to pass attacker-controlled data into an unsafe unserialize() call and inject arbitrary PHP objects, with a CVSS 3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Because the vector requires PR:L, the flaw is not reachable by fully anonymous visitors, but any site that allows open user registration effectively lowers the bar to a self-service account. Successful escalation to code execution or data tampering depends on a usable POP gadget chain being present in the plugin, WordPress core, or another installed plugin or theme; no public exploit code or confirmed active exploitation was identified at time of analysis, and the plugin is widely deployed across WordPress sites, making it an attractive target for follow-on research.
Privilege-gated remote code execution in Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 allows users with template-execution rights-such as Control Panel administrators or any account permitted to author or execute Twig templates-to bypass the Twig create() blocklist by supplying case-varied class names such as 'splfileobject'. Successful abuse can instantiate PHP's SplFileObject to read .env secrets or write a PHP file into the webroot, leading to remote code execution. The official CVSS 4.0 vector lists 8.7 with PR:N, but the independent assessment treats this as privilege-gated (CVSS 3.1 PR:H) and not exploitable by remote unauthenticated attackers against a default install; no public exploit was identified at time of analysis.
Memory corruption in Pillow versions prior to 13.0.0 can crash the process when Image.transform() takes the fast Transform.EXTENT or pure scale-and-translate Transform.AFFINE path with default NEAREST resampling and a selective allocation failure occurs under memory pressure. The defect is a double free/use-after-free in ImagingScaleAffine: the output image allocation succeeds, the additional per-column lookup allocation fails, and the error path deletes image storage that later cleanup releases again (CWE-416). The assessed impact is availability-only with no confidentiality or integrity effect, exploitation depends on attacker-influenced transform sizes plus genuine memory pressure, and no public exploit identified at time of analysis.
Process crash in Pillow before 13.0.0 can be triggered when an application decodes an attacker-supplied PPM or PGM image with zero width and then applies an ImageMorph morphology operation. The flaw is an out-of-bounds memory access in the native morphology routine, and unauthenticated remote attackers can exploit it only when that specific ImageMorph code path is used, resulting in denial of service rather than data exposure or code execution. Vendor-released patch: 13.0.0; no public exploit identified at time of analysis.
Prototype pollution in @rvf/set-get before 7.0.4 lets remote attackers crash a Node.js process by submitting a form field named 'hasOwnProperty.call' (or a similar dotted path into an inherited Object.prototype method) through @rvf/core form parsing. Because setPath resolves inherited properties with a plain `obj[part] === undefined` check, it walks into Object.prototype and overwrites the shared built-in function, denying service process-wide until restart. The CVSS 4.0 vector scores 8.7 with PR:N and UI:N, meaning no authentication or user interaction is required; no public exploit code was identified at time of analysis, and the practical scope is limited to applications that route untrusted form input through the vulnerable @rvf parsing stack, with impact confined to a recoverable denial of service rather than code execution or data exposure.
Account takeover in Craft CMS 5.0.0 through 5.10.x: the users/verify-email action fails to invalidate a user's emailed verification code for active accounts, so a code that has already been used to confirm an email change can be replayed against users/set-password to reset the victim's password. According to the CVSS vector no authentication is required (PR:N), but practical exploitation is gated on obtaining the victim's one-time code - via email interception or control of the change flow - and on the victim actually completing the verify-email step, which is why the assessed vector carries AC:H/UI:R and the issue is considered targeted rather than broadly remote. No public exploit code or confirmed active exploitation was identified at time of analysis, and the behavior is corrected in Craft CMS 5.11.0.
Denial of service in Grav CMS 1.7.53 before 1.7.53.5 and 2.0.0-rc.8 before 2.2.2 lets unauthenticated remote attackers exhaust server memory by bypassing the system.images.max_pixels safeguard when system.images.url_actions is enabled. Attackers use single-dimension or percentage forceResize, zoomCrop, or chained image actions to force PHP's GD library to allocate multi-gigabyte canvases and take the site down. No public exploit identified at time of analysis; the assessed CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) confirms this is an availability-only threat requiring the url_actions setting to be enabled.
Uninitialized heap memory disclosure in Pillow 5.3.0 through 12.x allows remote attackers to read stale process memory by supplying a crafted TIFF that uses JPEG (COMPRESSION=7) or Group 4 fax compression and triggers a libtiff 'short decode', after which the library converts rows from a buffer whose unwritten tail was never cleared. The tile decode path has been affected since 5.3.0 and the strip path since 6.0.0, and the impact is confidentiality-only (memory disclosure with no corruption, crash, or code execution) - an application is only exposed if it both decodes the attacker-supplied image and returns or re-encodes the resulting pixel data, since that output channel is the only way the stale bytes reach the attacker. No public exploit code or active exploitation is indicated in the available data, and the issue is fixed in Pillow 13.0.0.
Denial of service in Pillow (Python imaging library) versions 5.1.0 through 12.x allows remote attackers to crash or hang applications that append images to attacker-influenced PDFs. PdfParser lacks cycle and duplication tracking when following page-tree /Kids references and only guards against exact repeated trailer offsets, so a crafted PDF with a deep or cyclic page tree, repeated non-cyclic /Kids entries, or a long chain of unique previous-trailer offsets can raise an uncaught RecursionError or drive super-linear CPU and memory consumption before any output is written. Exploitation requires the target application to call Image.save with PDF append enabled against a PDF the attacker can supply; no public exploit code has been identified at time of analysis and the issue is not in CISA KEV, though the availability-only impact and trivial prerequisites justify prompt patching to 13.0.0.
Denial of service in Pillow 5.1.0 through 12.x: when an application uses Image.save with save_all=True to convert a multi-frame image (APNG, GIF, TIFF) into a multipage PDF, PdfParser.next_object_id() rebuilds and rescans the entire set of previously reserved PDF object identifiers for every object, producing quadratic runtime in the number of frames. Because the cost scales with the declared frame count, an unauthenticated remote attacker can submit a very small APNG that advertises a huge number of frames and exhaust CPU on the converting service. Active exploitation has not been confirmed (no CISA KEV listing) and no public exploit code was identified at time of analysis, but the trigger is trivial for anyone who can reach an image-to-PDF conversion workflow; the vendor fixed it in Pillow 13.0.0 via GHSA-jg86-v3jv-hrpm.
Memory exhaustion denial of service in Pillow 4.1.0 through 12.x allows unauthenticated remote attackers to exhaust server memory when an application decodes a crafted MSP image and loads its pixels. The MSP RLE decoder writes expanded run-length output into an in-memory buffer without limiting it to the declared image dimensions, bypassing Pillow's decompression-bomb pixel-count guard; no public exploit identified at time of analysis.
Denial of service in Pillow 5.1.0 through versions before 13.0.0 allows unauthenticated remote attackers to exhaust a processing worker's CPU by supplying a crafted PDF whose page tree contains a Parent-reference cycle when an application uses Pillow to append an image to that PDF. The flaw is an uncontrolled infinite loop in PdfParser.rewrite_pages(), giving availability-only impact with no confidentiality or integrity effect. Vendor-released patch: 13.0.0; no public exploit identified at time of analysis.
Denial of service in Pillow 12.0.0 through 12.x lets unauthenticated remote attackers crash a Python process by supplying a crafted IPTC image that reaches Image.merge(), or by calling Image.merge() with an I/F first band backed by image32 storage. The flaw is a null-pointer dereference (CWE-476) with high availability impact but no confidentiality or integrity impact; it is fixed in 13.0.0 and no public exploit was identified at time of analysis.
Memory exhaustion denial of service in Pillow 9.2.0 through pre-13.0.0 can be triggered by a crafted multi-frame GIF that leaves rejected, oversized frame dimensions stored after Image.DecompressionBombError is raised. The flaw is exploitable only in applications that catch that exception and then continue calling seek() or load() on the same GifImageFile object; applications that let the exception propagate or discard the image object are not affected. It is an availability-only issue, with no public exploit identified at time of analysis and no CISA KEV confirmation.