A path traversal (Zip Slip) flaw in kiwilan/php-archive through version 2.3.02 lets an attacker craft a ZIP archive whose entry names escape the intended extraction directory when ArchiveZip::extract() is called, allowing files to be written to arbitrary locations the PHP process can reach. The library is a dependency, not a network service, so exploitation requires the host application to pass an attacker-influenced archive to extract() and to run with filesystem permissions that make the overwritten paths meaningful. Publicly available exploit code exists (a proof-of-concept gist is referenced alongside the VulDB entry), but there is no evidence of active exploitation in the wild, and the vendor did not respond to the disclosure.
OS command injection in JumpServer through 4.10.19 lets an authenticated user with permission to create or edit a Host asset store a crafted IP/HOST address containing Jinja2 template syntax, which the Template Rendering component later evaluates and can use to run arbitrary OS commands. Exploitation requires a valid low-privileged account and a passive interaction step where the poisoned address is rendered, so it is realistically reachable by insiders or attackers who already hold credentials rather than by anonymous remote users. Publicly available exploit code exists (a public gist is referenced) and the vendor has fixed the issue in v5.0.0, with the fix also slated for an upcoming v4 release.
Open redirect in aircheng-org iWebShop-5 through 5.16 lets remote attackers craft a link that sends victims to an attacker-controlled site via the callback argument of IController::redirect in plugins/_userInfo/_userInfo.php. No authentication is required, but the victim must interact with the crafted URL (UI:P), and publicly available exploit code exists. The impact is limited to browser redirection for phishing or trust abuse, with no server-side code execution or data disclosure.
Unsafe deserialization in hankcs HanLP through 2.1.0-beta.64 allows unauthenticated remote attackers to achieve code execution when a victim loads an attacker-supplied model or config in which the classpath argument passed through hanlp.load() has been manipulated, reaching the reflection logic in plugins/hanlp_common/hanlp_common/reflection.py. Exploitation is not automatic against an idle installation: it requires the user to obtain and load an untrusted model, so exposure is concentrated in pipelines that consume third-party or externally sourced models rather than those loading only first-party artifacts. Publicly available exploit code exists (a PoC archive is linked from the VulDB entry), but there is no CISA KEV confirmation of active exploitation; the project was notified via GitHub issue #1969 and has not responded at time of analysis.
Double free in Artifex MuPDF (through 1.28.5) lets a crafted PDF crash the document parser by triggering the Signature Locking code path that reaches free_char_list in source/pdf/pdf-xref.c. The flaw is remotely reachable but requires the victim to open a malicious file (UI:P in the CVSS 4.0 vector), so exploitation hinges on user-initiated file opening rather than a network-facing service. Publicly available exploit code exists - the Ghostscript bug tracker hosts a working proof-of-concept attachment - though there is no CISA KEV entry confirming active exploitation in the wild; impact per all assessed metrics is availability-only (process crash / DoS), with no code execution, data disclosure, or integrity loss indicated.
Unsafe reflection in Unsloth's FastSentenceTransformer class (versions up to 0.1.501-beta) lets an attacker who supplies a crafted model, tokenizer, or configuration artifact steer class selection inside `_is_transformer_module_ref`, giving limited confidentiality, integrity, and availability impact. The CVSS vectors mark PR:N, so no credentials are needed, but UI:R/UI:P means the victim must load or process the attacker-influenced artifact - this is not exploitation of an exposed network service running with default configuration. Publicly available exploit code exists; the issue is fixed in Unsloth 0.1.902-beta.
Arbitrary Python object instantiation in ESPnet's espnet3 Inference Model Handler allows an attacker who supplies a crafted model bundle to execute code on the machine that loads it, with assessed impact of high confidentiality, integrity and availability loss. The bundle's inference config carries an attacker-chosen `_target_` value that Hydra's instantiate() resolves and calls, including targets nested inside arguments, and pre-fix ESPnet applied no namespace restriction to what could be built. Exploitation requires the victim to obtain and load the untrusted bundle (user interaction, no authentication required), publicly available exploit code exists, and ESPnet versions up to 202610.post2 are affected with an upstream fix merged as PR #6829; note that the published CVSS 4.0 base score of 2.1 reflects a low-impact/threat-adjusted rating and is materially lower than the assessed CVSS 3.1 vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
Code injection in the DeepPavlov conversational AI framework (versions up to and including 1.7.0) allows an attacker who can supply or influence a pipeline configuration file to have arbitrary code executed when that configuration is resolved. The flaw sits in the resolve() function of deeppavlov/core/common/params.py, which turns config reference strings into imported Python objects; per the independent assessment the realistic attack path is local and requires victim interaction (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), i.e. the victim must load a crafted config rather than being reachable autonomously over the network. Publicly available exploit code exists (a proof-of-concept archive is linked from the GitHub advisory trail), but there is no CISA KEV listing and no evidence of exploitation at scale, so the real-world priority remains low despite the high CIA impact once a malicious config is loaded. The vendor was notified through GitHub issue #1713 and has not responded.
Code injection in Llama-Chinese's Gradio chat demo (examples/chat_gradio_no_merge.py) lets unauthenticated remote attackers run arbitrary code when an operator loads an attacker-influenced value for base_model_name_or_path. Exposed deployments of the example script are the realistic attack surface; the project uses a rolling release with no disclosed version and has not responded to the issue report. Publicly available exploit code exists, but there is no CISA KEV confirmation of active exploitation.
Stored/DOM cross-site scripting in Mercury's mr.Markdown widget (versions 3.0.0 through 3.2.10) allows attacker-supplied Markdown containing raw HTML event handlers or javascript: links to execute in the browser of any user who views the affected dashboard. The widget converts Markdown with python-markdown, which passes raw HTML through, and then renders it into an ipywidgets.HTML sink via innerHTML without sanitization, so untrusted database rows, form submissions, uploaded files, or LLM/API responses can become script execution; the prior mr.Message markdown path uses the same unsafe renderer. Exploitation is unauthenticated per the CVSS vector (PR:N) but requires a victim to view the application (UI:R), and no public exploit code was identified at time of analysis. Mercury 3.2.11 fixes the issue by sanitizing rendered Markdown by default and requiring an explicit unsafe_allow_html=True opt-in for trusted content.
Manipulating the user_id argument in iWebShop-5 up to 5.16's send_message_mobile function (controllers/simple.php) can abuse weak password-recovery logic and potentially allow unauthorized password recovery for another account. The flaw is remotely reachable with low impact, publicly available exploit code exists, and independent assessment rates it a moderate, low-priority issue rather than an urgent one.
Reflected cross-site scripting in the Doctor Registration component (doctorregistration.php) of subhajitkhan's online-clinic-management-system allows remote attackers to inject script into a victim's browser session by manipulating the doc_name parameter, which the application echoes back without encoding. No authentication is required of the attacker, but exploitation depends on a victim loading a crafted request - the assessed vector is UI:R, so this is not a zero-click flaw - and impact is confined to the victim's session with no confidentiality or availability loss. Publicly available exploit code exists and the flaw has been published by VulDB, but it is not confirmed actively exploited (CISA KEV); real-world risk is assessed as LOW despite the MEDIUM 5.3 base score, chiefly because of the required user interaction and the project's negligible deployment base.
Deserialization of untrusted data in HanLP through 2.1.0-beta.64 allows an attacker who supplies a crafted vectors.vocab file to execute arbitrary code when a victim loads it with load_word2vec_as_vocab_tensor. The attack can be delivered remotely but requires the victim to open or load the malicious model file, so user interaction is the key prerequisite; no authentication or special configuration is needed. Publicly available exploit code exists, but the supplied intelligence does not confirm CISA KEV active exploitation.
An open redirect in the Diem PHP framework's Sign-In component (dmCorePlugin dmUserPlugin) allows remote attackers to redirect users to arbitrary external sites after authentication by manipulating the Referer argument in BasedmUserActions.class.php. Exploitation is unauthenticated but requires the victim to follow a crafted link (UI:P), and the impact is limited to integrity of the redirect destination, with no server compromise or data disclosure. Publicly available exploit code exists, though no confirmed active exploitation has been reported; the vendor has not responded to the issue report and follows a rolling release model, so no fixed version is specified.
SQL injection in itsourcecode Online Cake Ordering System 1.0 allows authenticated remote attackers to manipulate the 'cancel' argument in confirm.php, potentially exposing or altering limited data. A public exploit is available, but the vulnerability requires a low-privileged session and has low impact, and the product's negligible production presence keeps real-world risk low.
Code injection in RVC-Project Retrieval-based-Voice-Conversion-WebUI through 2.3.260718 lets unauthenticated remote attackers who can reach an exposed Gradio interface manipulate the ckpt_path argument passed to change_info_ in webui.py and execute attacker-controlled code, although user/operator interaction is required and default deployments bind to localhost. Publicly available exploit code exists, but there is no CISA KEV listing and no EPSS score was provided, and the project has not responded to the issue report. Practical risk is concentrated on instances explicitly exposed via Gradio --listen/--share or a reverse proxy/tunnel, where the lack of default authentication makes the code-injection path reachable.
Integer overflow in Tencent ncnn's YUV420SP-to-RGB conversion API (ncnn::yuv420sp2rgb in src/mat_pixel.cpp) lets unauthenticated remote attackers who can get a target application to process crafted YUV image dimensions or strides trigger an undersized buffer allocation and subsequent out-of-bounds writes. The flaw affects ncnn builds up to commit 44b02dabdcf97499281a4692ebd65bad73dcf8b6 and requires the application to process attacker-controlled YUV420SP data (UI:P); realistic outcomes are denial of service or bounded heap corruption with Low confidentiality, integrity, and availability impact rather than reliable remote code execution. Publicly available exploit code exists, and the vendor has not responded to the upstream issue report.
Out-of-bounds reads in Tencent ncnn's MatMul layer can disclose process memory or crash inference workloads when a crafted model drives matmul_transb with inconsistent dimensions. Affected builds are those at or before commit 44b02dabdcf97499281a4692ebd65bad73dcf8b6, and exploitation requires the victim to load and run an attacker-supplied model (UI:P); no KEV entry exists, but publicly available exploit code exists. The issue is genuine but moderate severity, with impact bounded to memory disclosure and possible denial of service rather than code execution.
Improper authorization in Donetick's chore history deletion handler (versions up to and including 0.1.82) lets any authenticated member of a Circle delete chore history belonging to other members by manipulating the AssignedTo argument passed to CanDeleteHistory. The flaw is limited in scope: the attacker must already hold an account inside the victim's Circle, so it is not reachable by unauthenticated outsiders and does not cross circle boundaries, and the impact is confined to integrity and availability of history records with no data disclosure. Publicly available exploit code exists and the issue is documented in the upstream repository (issue #711) and GitHub advisory GHSA-c545-2whr-g2v6, though there is no evidence of confirmed active exploitation (CISA KEV) at the time of analysis; the maintainer disputes the IDOR framing, characterizing the behavior as a bug affecting trusted collaborators rather than a security vulnerability.
SQL injection in Dav-ee Dairy Management System allows authenticated low-privileged users to manipulate the f_no or farmer parameter in payment/pay.php, potentially reading or altering payment and farmer records. The flaw stems from improper use of mysqli_real_escape_string, and publicly available exploit code exists; active exploitation is not confirmed by CISA KEV. Exploitation requires a valid low-privilege session and access to the payment feature, which limits exposure to authenticated staff accounts rather than unauthenticated internet users.
SQL injection in Dav-ee Dairy Management System (farmers/add.php) lets an authenticated low-privileged user inject arbitrary SQL through the f_no, f_id, f_name, f_locallity, f_ac, or f_phone parameters, which are passed unsanitized into mysqli_query. The product is not versioned, so all deployments of the identified commits are presumed affected, and publicly available exploit code exists. Real-world risk is LOW despite a public exploit: exploitation requires a valid low-privileged session with access to the add-farmer form, and the product has niche deployment; there is no indication of confirmed active exploitation (no CISA KEV listing).
Cross-site request forgery in aircheng-org iWebShop-5 through 5.16 allows an attacker to change an administrator password when a logged-in admin is induced to load attacker-controlled content; the affected code is admin_repwd_act in controllers/system.php. Publicly available exploit code exists (GitHub issue #9), but CISA KEV does not confirm active exploitation, and impact is limited because the attacker must rely on a live admin session and gains no direct access. The vendor has not responded and no fixed version is identified.
A permission-check flaw in Zephyr's RTIO syscall layer lets an unprivileged user-mode thread write into memory it is only permitted to read. In z_vrfy_rtio_cqe_get_mempool_buffer(), the two output parameters buff and buff_len are validated with K_SYSCALL_MEMORY_READ() instead of K_SYSCALL_MEMORY_WRITE(), so when CONFIG_USERSPACE and CONFIG_RTIO_SYS_MEM_BLOCKS are both enabled and the thread already holds an RTIO context grant, the kernel performs a pointer-sized and a 4-byte supervisor-mode store (a CWE-787 out-of-bounds write through mis-validated output pointers). Pointing those pointers at global read-only flash (.text/.rodata) causes a kernel fault handled by z_fatal_error() and the default fatal handler halts or reboots the device - a reliable denial of service - while targeting a K_MEM_PARTITION_P_RW_U_RO partition yields a partly attacker-controlled write that bypasses user-read-only protection; no data disclosure is possible because the read check still applies, and there is no public exploit identified at time of analysis, with exploitation strictly local (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H, 6.1).
Open redirect in antoinersx clawhost through version 0.0.45 allows remote attackers to craft reverse-proxy URLs that send victims to attacker-controlled sites by manipulating the token argument handled in reverseProxy.ts. Exploitation requires user interaction - a victim must follow the crafted link - and impact is limited to integrity (phishing/credential-harvesting), consistent with CVSS 5.3 v4.0 and an assessed CVSS 3.1 score of 4.3. Publicly available exploit code exists, but there is no confirmed active exploitation (not CISA KEV).
Cross-site scripting in the IBM Concert Web UI (versions 1.0 through 3.0.0) lets remote attackers inject arbitrary JavaScript into pages viewed by other users, potentially disclosing credentials from within a trusted session. Exploitation requires the victim to interact with attacker-supplied content - such as clicking a crafted link or loading a page reflecting the payload - while authenticated to Concert, so practical risk is targeted rather than mass exploitation. No public exploit code or confirmed active exploitation is known, and IBM has released a vendor fix; EPSS context is not provided in the available data.
Hard-coded MQTT broker credentials in D-Link EAGLE PRO AI routers (E15, M32, R15, R32) let remote attackers who can reach the broker service authenticate with publicly documented credentials and publish or subscribe to MQTT topics, potentially tampering with device and mesh communications. Publicly available exploit code and credential evidence exist, but exploitation depends on network reachability to the MQTT service, which is typically LAN- or mesh-side rather than internet-facing; the assessed impact is Low across confidentiality, integrity, and availability.
Code injection in Doctor-Dignity's MLC Chat module (_get_lib_module in python/mlc_chat/chat_module.py) allows an attacker who controls the model_lib argument to execute arbitrary code when a victim loads the attacker-supplied model library; publicly available exploit code exists, but there is no CISA KEV entry confirming active exploitation. The independent assessment rates real-world priority LOW because the attack is local (AV:L) and requires user interaction (UI:R) to load a malicious model configuration, rather than reaching an exposed network service.
Heap/stack buffer overflow in ztxz16 fastllm through 1.8.2, triggered inside SafeTensorItem::CreateBuffer (src/model.cpp) when a crafted safetensors file supplies manipulated data_offsets values during model weight loading. An attacker who convinces an operator to load an untrusted model file can cause out-of-bounds memory writes, yielding limited confidentiality, integrity, and availability impact; publicly available exploit code exists (VulDB submission with a poc.zip attachment) but there is no evidence of active exploitation in the wild. The vendor has not responded to the upstream issue report, so no fix has been published, and exploitation requires user interaction - the victim must explicitly load the malicious weights - which keeps this a moderate, low-priority supply-chain/untrusted-model-file issue rather than a remotely reachable server compromise.
Login cross-site request forgery (CSRF) and open redirect in the Apache Camel OAuth component (camel-oauth) let an attacker silently sign a victim into an attacker-controlled identity: the authorization code callback in affected releases neither issued a session-bound state parameter nor validated one, so a code obtained in any browser can be redeemed against whatever session presents it. Affected are Apache Camel 4.11.0 before 4.18.5 and 4.19.0 before 4.22.1 - and only deployments that actually use the camel-oauth authorization code flow to authenticate users, since that component is optional. The CVSS 3.1 score is 6.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N): remote and unauthenticated from the attacker's side, but exploitation requires victim interaction (following a crafted callback link), and impact is confined to the OAuth login identity rather than the host. No public exploit code or confirmed active exploitation was identified at time of analysis; the vendor has released fixed versions (4.23.0, 4.18.5, 4.22.1).
Code injection in AXA Group NLP.js 4.27.0 allows remote attackers to execute arbitrary JavaScript via the Evaluator.walkFunction condition-expression pipeline when an embedding application passes attacker-controlled input into the condition argument. Public exploit code exists, but the flaw is not reachable in a default standalone installation; it requires the host application to expose the condition-expression evaluation path, and the project has not responded to issue #1380, so no vendor-released patch was identified at time of analysis. Although the published CVSS 4.0 score is 2.1 and the RCE/code-injection tags draw attention, practical priority is low for typical deployments because exploitation depends on that application-level exposure.
Cross-site WebSocket hijacking and request-forgery in BlackBeltTechnology pi-agent-dashboard through 0.8.0 lets any web page the victim visits open an unauthenticated WebSocket to the loopback dashboard (ws://127.0.0.1:8000/ws), receive the session snapshot, spawn a terminal, and blind-POST to /api/* and /auth/logout using the victim's ambient trust, because the gateway validates neither Origin nor a CSRF gate on those paths. Exploitation requires the dashboard to be running locally and the user to browse an attacker-controlled page on the same host (UI:P/UI:R); no credentials are needed (PR:N), but the pre-patch impact is limited to low integrity (VI:L / CVSS 4.0 base 5.3 Medium) since CORS only ever hid responses, not requests. Publicly available exploit code exists (a GitHub issue tracking the flaw and an upstream fix PR), and the vendor shipped a patched release; no CISA KEV entry has been recorded, so active in-the-wild exploitation is not confirmed.
Reflected cross-site scripting in Ellucian Banner Student Registration Self-Service (StudentRegistrationSsb) 9.23 and earlier allows a remote, unauthenticated attacker (CVSS 3.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N, base 6.1) to run arbitrary script in a victim's browser session by tricking the victim into opening a crafted link to the /ssb/registration endpoint whose mepCode parameter carries the payload. The flaw is gated by user interaction - the attacker cannot trigger execution without a victim clicking the link - so it is best suited to phishing or targeted social engineering against students and registration staff rather than self-propagation. There is no confirmed active exploitation (not listed in CISA KEV) and no public exploit identified at time of analysis, but the absence of a vendor-supplied fix for all versions up to and including 9.23 means defenders must rely on WAF, output-encoding and network-exposure controls rather than patching.
Path traversal in the H3C Magic NX15 router (firmware V100R017) allows a user who already holds administrative rights on the device's management interface to write files outside the intended import location by supplying directory-traversal sequences in the fileName argument of the importprofile function at /api/upload. The flaw is network-reachable and needs no user interaction, but the CVSS vector specifies PR:H, so it is a post-authentication issue that presupposes privileged router credentials rather than an unauthenticated remote compromise; impact is limited to low confidentiality, integrity and availability effects, which is reflected in the low base score. Publicly available exploit code exists - a GitHub repository documenting the arbitrary file write against NX15R017 has been published - but exploitation has not been confirmed as active (no CISA KEV listing), and the overall risk is low-priority despite remote reachability.
Code execution in DeepPavlov through 1.7.0 can occur when a deployment loads a pipeline configuration that lets an attacker control the preprocessor argument passed to MultiTaskPipelinePreprocessor.__init__, causing attacker-supplied code to run with the privileges of the DeepPavlov process. Exploitation requires the ability to supply or alter the loaded model/pipeline configuration and low privileges, so it is not a drive-by unauthenticated remote attack; a user or service must load and execute the malicious configuration. Publicly available exploit code exists, but there is no CISA KEV confirmation of active exploitation, and the issue remains unresolved upstream.
SQL injection in Dav-ee dairy-management-system's employee deletion handler (employees/delete.php) allows a high-privileged authenticated user to supply a malicious e_payroll_no value that is passed unsanitized into mysqli_query. The issue is remotely reachable with low complexity and no user interaction, but the PR:H requirement limits exploitation to privileged sessions, and impact is assessed as low across confidentiality, integrity, and availability. Publicly available exploit code exists, but no CISA KEV entry or other evidence of active exploitation was provided; affected releases cannot be pinned because the project uses a rolling release model, and no vendor patch has been identified.
Stored cross-site scripting in SourceCodester Inventory System 1.0 is a genuine-but-low-priority issue: an authenticated low-privilege user can inject script through the Product_Name, Product_Code, or Vendor_Name parameters when saving a purchase via /api/transactions_handler.php?action=save_purchase, and the payload executes when another user views the affected purchase record. Publicly available exploit code exists, but there is no CISA KEV confirmation of active exploitation, and the product's limited deployment base reduces practical risk. The independent assessment scores this as CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N, requiring a valid account and victim interaction.
Cross-site scripting in SourceCodester Inventory System 1.0 allows an authenticated low-privileged user to inject script through the Product_Id or Product_Name argument in /api/products_handler.php?action=save, with execution occurring when another user later views the Product Management page. Exploitation requires valid credentials and victim interaction, publicly available exploit code exists, and the CVSS 4.0 score is 5.1; impact is limited to browser-session integrity with no confidentiality or availability loss.
Cross-site scripting in the dmWidget link-rendering component of Diem CMS allows authenticated low-privilege users to inject script through the text argument of dmBaseLinkTag::text in dmCorePlugin/lib/view/html/link/dmBaseLinkTag.php, with execution occurring in a victim's browser after the victim views or interacts with the crafted link. Deployments tracking Diem's rolling release at or before commit 116974edfb9a5b8bd69cb13586dc62bcdbb485ad are potentially affected, and publicly available exploit code exists; the reporter scores the issue CVSS 4.0 5.1, while the independent assessment places it at CVSS 3.1 5.4-equivalent impact with PR:L/UI:R. Exploitation is limited by the need for an authenticated account permitted to supply the widget's text argument and by the requirement for victim interaction.
Use-after-free in Mini-XML 4.0.5 and 4.0.6 is a low-priority, high-noise finding rather than a genuine emergency: when a consuming application passes attacker-controlled XML into mxml_load_data and the malformed-input error path is reached, freed memory can be reused and the process can crash, producing denial of service rather than confirmed code execution. Publicly available exploit code exists, and a community patch plus a POC archive have been disclosed, but the upstream project has not responded and no official vendor patch is confirmed. The independent assessment is remote with user/application interaction required (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L); the CNA's CVSS 4.0 vector is lower (2.0, PR:L/UI:P), reflecting that exposure depends on an application exposing Mini-XML parsing to untrusted input.
OS command injection in the FusionPBX Dialplan Editor allows an authenticated user with dialplan-edit rights to run arbitrary operating-system commands through manipulated values processed by app/dialplans/resources/classes/dialplan.php. The issue affects FusionPBX through 5.4.4, 5.5.7, and 5.6.5; publicly available exploit code exists, and no vendor patch or response was referenced at time of analysis. Because dialplan management is an administrative function, exploitation requires high privileges, but multi-tenant or delegated-admin deployments broaden the exposure.
Local privilege escalation in Red Hat rhc's rhc-canonical-facts.service lets an attacker who has already compromised the privileged yggdrasil service account pre-plant a symbolic link so the root-run unit follows it and changes ownership of an arbitrary file, enabling escalation to root. The flaw is CWE-59 link following and affects rhc installations on Red Hat Enterprise Linux 7, 8, 9, and 10 per CPE data; exploitation is local-only and requires high privileges (CVSS PR:H), so risk is confined to systems where the yggdrasil account is already reachable. No public exploit code was identified in the provided sources at time of analysis, and no CISA KEV or EPSS signal was supplied.
Path traversal in Diem through 5.1.3 lets an authenticated user with high backend privileges abuse the dmCodeEditor action's dmOs::join function to access files outside the intended directory; the issue is rated CVSS 4.0 5.1 and publicly available exploit code exists, though exploitation is gated by the high-privilege prerequisite. The project was notified via GitHub issue #451 and has not responded, and no vendor-released patch is identified.
Denial of service in the Zephyr UpdateHub firmware-over-the-air client can be triggered by a malformed CoAP probe response that omits the sha256sum field, causing z_impl_updatehub_probe() to call strlen() on a NULL pointer. The issue affects Zephyr builds with UpdateHub enabled, especially the default plain-CoAP configuration without CONFIG_UPDATEHUB_DTLS, where an unauthenticated on-path, DNS-spoofing, or source-address-racing attacker can inject the response during automatic polling. Impact is availability only and target-dependent: systems that protect or leave unmapped address 0 halt in Zephyr's fatal handler, while classic Cortex-M targets with a readable vector table may merely reject the request; no public exploit has been identified at time of analysis.
Denial of service in IBM MQ client applications that consume messages asynchronously can be triggered when a queue name carrying an improperly validated length value reaches the client, producing a buffer overflow (CWE-120) that crashes or hangs the consuming application. The flaw affects IBM MQ Operator and IBM MQ Advanced Container Images deployments and is reachable either by an attacker who already controls the queue manager or by a man-in-the-middle able to tamper with message metadata on unencrypted, non-TLS channels. IBM has released a vendor patch per its support advisory, no public exploit code or active exploitation has been identified at time of analysis, and the CVSS 5.9 score reflects availability-only impact with high attack complexity.
Cross-site scripting in the Diem PHP CMS administrative console lets a user who already holds high-privilege console access inject script through the dm_command argument processed by the append() function in dmAdminPlugin/modules/dmConsole/actions/actions.class.php, with the payload executing in the browser of a console operator who views the crafted page. Diem is delivered as a rolling release with no version metadata, so current checkouts at or around commit 116974edfb9a5b8bd69cb13586dc62bcdbb485ad remain unpatched, publicly available exploit code exists, and the project has not responded to the report. This is a low-to-moderate real-world priority despite the medium CVSS 4.0 base score of 4.8, because the vulnerable path sits behind high-privilege console authentication and the assessed impact is limited to low integrity with no confidentiality or availability effect.
Cross-site scripting in the Diem admin plugin's Version Check Service lets a high-privileged authenticated attacker supply markup that the html handler in dmAdminCtrl.js renders without proper escaping, executing script in a victim administrator's browser when the affected view is opened. The impact is limited to low integrity per the independent CVSS:3.1 assessment (C:N/I:L/A:N), and exploitation also requires victim interaction, so the issue is network-reachable but gated by administrative privileges and user action. Publicly available exploit code exists, but there is no CISA KEV confirmation and overall risk is low, especially because Diem uses a rolling release with no vendor-issued fixed version.
IBM Cloud Pak System 2.3.6.0 and 2.3.6.1 employ weaker-than-expected cryptographic algorithms, allowing an attacker who obtains the protected ciphertext to decrypt highly sensitive information. The CVSS 5.9 score (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) reflects that exploitation requires capturing the encrypted data and performing cryptanalysis, which substantially constrains real-world risk despite the unauthenticated network vector. No public exploit code or active exploitation has been identified at time of analysis, and IBM has released a vendor patch.
Signature verification in the Apache Camel PQC component can be silently defeated when concurrent exchanges share the producer's single stateful java.security.Signature instance, allowing a message to be reported as verified even though its signature was never actually checked against its own payload. Affected are Apache Camel releases from 4.12.0 before 4.18.5 and from 4.19.0 before 4.22.1 that use the camel-pqc sign/verify operations; remote, unauthenticated attackers who can drive concurrent traffic through such a route may interleave init/update/verify sequences. Exploitation is timing-dependent and non-deterministic (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N, 5.9), and no public exploit was identified at time of analysis; the practical prerequisite is a concurrently invoked PQC signing endpoint, which is the ordinary condition for a loaded Camel route. Vendor-released fixes exist in 4.23.0, 4.18.5 and 4.22.1.
Man-in-the-middle interception of Apache Camel's Knative HTTP client can expose traffic when TLS is enabled without a configured truststore, because affected versions (4.0.0 before 4.18.5 and 4.19.0 before 4.22.1) fall back to trusting every presented certificate instead of the JVM default trust anchors. Exploitation is conditional rather than universal: the deployment must set camel.knative.client.ssl.enabled=true while leaving both truststore.path and trust.cert.path unset, and a remote unauthenticated attacker must already hold a privileged network position to terminate the TLS session (CVSS 3.1 5.9, AC:H, C:H/I:N). No public exploit identified at time of analysis, and the vendor fix in 4.23.0 (plus 4.18.5 and 4.22.1 LTS) leaves trust options unset so JVM defaults apply and requires an explicit trust.all property to opt into trust-all.
In the camel-thrift data format, unmarshalled messages are deserialized into a process-wide shared defaultInstance and that same object is returned as the exchange body, so state from one message survives into the next. Senders who omit optional fields in a later payload inherit the previous sender's values, and concurrent exchanges can observe each other's partially written state - disclosing one tenant's data to another. Affected are Apache Camel 4.0.0 through 4.18.4 and 4.19.0 through 4.22.0; no public exploit identified at time of analysis, and exploitation requires a genuinely multi-tenant route using the Thrift data format plus attacker influence over message sequencing or timing (CVSS 5.9, AC:H, PR:N).