Information disclosure in GitLab CE/EE allows an authenticated user with no membership in a private project to read the title of a confidential issue when a merge request in a public project references that issue and a viewer-independent fragment cache serves per-user-redacted rendered content. Affected releases are GitLab CE/EE 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1; the issue is low severity (CVSS 3.5) because only the title is exposed and the cross-project reference and cache conditions must align. Publicly available exploit code exists, and vendor patches are available in 19.3.6, 19.4.3, and 19.5.1.
Crafted IPv4 packets addressed to the router itself can drive the line card network processor on Cisco IOS XR into repeated resets, causing traffic loss and - under sustained attack - a persistent shutdown state that requires manual line card reload to recover. The flaw affects carrier-grade hardware specifically: Cisco ASR 9000 and 9900 Series Aggregation Services Routers plus the ASR 9902 and 9903 Compact High-Performance Routers. No authentication or user interaction is needed (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, 7.5), and no public exploit code or confirmed active exploitation was identified at time of analysis; exposure is bounded by the fact that transit IPv4 traffic and all IPv6 traffic cannot trigger the fault.
Denial of service in Cisco Expressway Series allows remote unauthenticated attackers to disrupt availability by triggering uncaught exceptions in network-reachable service code, with CVSS 3.1 score 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The issue is an internally discovered CWE-248 weakness addressed in Cisco hardening releases; no public exploit or CISA KEV entry is identified at time of analysis. Affected deployments are Cisco Telepresence Video Communication Server (VCS)/Expressway instances that have not applied the fixed releases listed in Cisco advisory cisco-sa-exwy-hardening-FhcqBVcs.
Denial of service in Cisco Expressway Series allows unauthenticated remote attackers to crash the service by triggering a null pointer dereference (CWE-476). The issue is network-reachable, low complexity, and requires no user interaction, with impact limited to availability; exact affected and fixed releases must be confirmed in Cisco's advisory. No public exploit code was identified at time of analysis, and exposure is greatest for internet-facing or externally reachable Expressway deployments.
Network-reachable assertion failures in Cisco Expressway Series (TelePresence VCS Expressway) can terminate video and collaboration signaling services, allowing remote attackers to cause a denial-of-service condition without authentication or user interaction (CVSS 7.5). The vendor advisory describes multiple internally discovered CWE-617 reachable-assertion issues fixed in hardening releases; the exact affected and fixed versions are not specified in the provided data. No public exploit was identified at time of analysis, and there is no CISA KEV confirmation of active exploitation.
Cisco voice and collaboration products - Unified Communications Manager, Unified CM IM & Presence, Emergency Responder and Unity Connection (with Prime Collaboration Deployment and Unified CM SME also named in the advisory) - contain a set of internally discovered flaws in the CWE-703 improper-handling-of-exceptional-conditions class that can be triggered over the network by an unauthenticated remote attacker with no user interaction, disrupting service availability. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, 7.5 HIGH) rates this as a denial-of-service condition only, with no confidentiality or integrity impact. The issues were found during Cisco's own hardening review rather than through external reporting, and no public exploit has been identified at time of analysis; the realistic exposure depends on whether the affected collaboration nodes are reachable from untrusted networks, since these services normally sit on internal management planes.
Denial of service in the Cisco Snort 3 detection engine allows remote, unauthenticated attackers to exhaust device resources and disrupt inspection services on any deployment actively processing attacker-influenced traffic - including Cisco Secure Firewall Threat Defense (FTD), the Cisco UTD Snort IPS engine, Cisco Cyber Vision, and upstream Open Source Snort 3. The flaw is rooted in uncontrolled resource consumption (CWE-400) and carries a CVSS 3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), meaning only availability is impacted - there is no confidentiality or integrity loss and no code execution. No public exploit code or in-the-wild activity has been identified at time of analysis, and no CISA KEV listing exists; exploitation is gated by the requirement that the target actually sits inline as an IDS/IPS or firewall in a traffic-inspection path.
Path traversal in the Bold Grid weForms plugin for WordPress, affecting versions through 1.6.28, lets an attacker supply a crafted file-path parameter that escapes the intended directory and deletes arbitrary files on the underlying host, giving a primary availability impact (CVSS 7.5, C:N/I:N/A:H). Per the supplied CVSS vector the attack is network-reachable with no privileges or user interaction (AV:N/AC:L/PR:N/UI:N), though that unauthenticated claim is not independently confirmed and the vulnerable endpoint and parameter are not disclosed in the available data; in practice lower-privileged access may be needed. No public exploit code and no CISA KEV entry were identified at time of analysis, and no fixed version is listed in the available references. Signals are moderately consistent but incomplete, so the practical exploitability and any auth prerequisite should be validated against the vendor's Patchstack advisory before prioritizing response.
Failed token revocation in Django REST Framework 3.12.0 through 3.18.1 leaves API credentials live after they are supposedly revoked: calling delete() on a TokenProxy instance issues a DELETE that matches no row, returns a zero count, and raises no error, so applications, admin integrations, or operational scripts that trust the return value believe the credential is gone while it continues to authenticate requests. The defect is a credential-hygiene and failed-revocation problem (CWE-390) rather than a directly exploitable remote flaw - the CVSS 3.1 base score is 7.4 (High) with vector AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N, and because DRF tokens never expire automatically, any token that escapes revocation stays valid indefinitely until the database row is cleaned up manually. No public exploit code or confirmed active exploitation (CISA KEV) was identified at time of analysis; the practical prerequisite is that an attacker already holds a previously issued token that the victim attempted to revoke through the affected code path.
Node.js's experimental Permission Model can be bypassed in fs.realpathSync, letting JavaScript already running inside a permission-restricted process resolve filesystem paths that fall outside the granted scope and infer information about them. The flaw is local and low severity (assessed CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N): it only matters when the process was started with the --permission flag (or --experimental-permission in older releases) and the attacker can execute code inside that process, such as partially trusted plugin, template or sandboxed code; default Node.js deployments without the Permission Model are unaffected, and there is no integrity or availability impact. It is fixed in the 26.12.1 security release (2026-10-21) and is rated 'Low' in the vendor's own list of fixes; a public PoC reference exists as a GitHub gist but is not verified as working exploit code, no active exploitation is confirmed, and priority is monitor.
Path-restricted checkout in Dulwich 0.24.0 through 1.2.7 follows symlinks when writing restored files, so a crafted repository can redirect a selective checkout into arbitrary filesystem locations - including .git/hooks/post-checkout - to plant an executable hook and achieve code execution. Exploitation is conditional: the victim must obtain an attacker-controlled repository whose worktree entry is a symlink (mode 120000) pointing at a sensitive path, then explicitly call porcelain.checkout(paths=[...]) against a tag or ref where that same path is a regular executable blob; a plain clone or default full checkout does not trigger it. No public exploit code has been identified at time of analysis, and the issue is fixed in Dulwich 1.2.8.
Arbitrary file write leading to potential code execution affects Dulwich 0.22.5 through 1.2.7 when a victim pops a stash in an attacker-crafted repository, because intermediate directory symlinks are followed and can redirect writes into .git/hooks/post-checkout. Exploitation requires local operation of the affected library plus a multi-step stash workflow and a subsequent checkout, so this is a conditional code-execution risk rather than a drive-by remote compromise; no public exploit code was identified at time of analysis. Dulwich 1.2.8 contains the vendor fix.
Symlink-based path traversal in Dulwich 0.23.1 through 1.2.7 allows an attacker who controls a repository's commit history to write files outside the working directory when a victim runs filter_branch with an index_filter, with code execution possible if the write lands in .git/hooks. Exploitation is conditional: it requires local access and the victim to invoke the history-rewriting operation against the crafted repository, and no public exploit code was identified at time of analysis. Dulwich 1.2.8 fixes the issue by addressing cross-commit symlink persistence.
Truncating a partitioned topic through the Apache Pulsar broker admin REST API succeeds without the caller holding tenant admin or superuser rights, letting an authenticated user wipe consumer backlog and destroy retained data on topics they merely have lookup permission for. The broker proxies each per-partition truncate request through its own internal admin client, so the tenant-admin authorization check is evaluated against the broker's configured identity rather than the caller's, and passes whenever that internal role is a superuser or tenant admin (the usual setup when authorization is enabled). Affected releases are 2.8.0 through 4.0.13 and 4.1.0 through 4.2.4, with fixes in 4.0.14 and 4.2.5; successful exploitation requires a valid authenticated identity, lookup permission on the target, a partitioned topic addressed by its partitioned name, and a suitably privileged broker internal client, and yields high integrity and availability impact with no confidentiality impact. No CISA KEV entry or public exploit code was identified at the time of analysis, and no EPSS score was supplied.
Remote code execution in Splunk Enterprise is possible for authenticated users whose roles include the edit_manager_xml capability; by opening a crafted Manager XML configuration in Splunk Web, they can execute arbitrary operating-system commands with the privileges of the account running Splunk Enterprise. The flaw affects versions below 10.4.3, 10.2.8, 10.0.11, and 9.4.16. No public exploit was identified at time of analysis, and the high-privilege prerequisite confines meaningful exposure to environments where edit_manager_xml is assigned broadly rather than tightly restricted to trusted administrators.
Server-side request forgery in NoMachine's nxhtd web service lets unauthenticated remote attackers make the service fetch attacker-chosen URIs in the context of the NoMachine service account. Affected installations are those exposing the nxhtd listener, described as using port 4443 by default; exploitation requires only network reachability to that service. Impact is bounded to low confidentiality and integrity, and this is a moderate-priority issue rather than a critical emergency; no public exploit was identified at time of analysis.
Splunk SOAR (On-premises) below 8.7.0 exposes authentication token values to authenticated users who hold the 'Users and Roles view' permission because the REST API accepts caller-controlled query filters on sensitive user-record fields. An attacker with that role can use filter-based inference to recover other users' tokens and, if a recovered token belongs to an administrator, escalate to full administrative control of the SOAR instance. The vendor rates this 7.2 High using CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, while independent assessment places it at CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; no public exploit was identified at time of analysis and there is no CISA KEV listing.
Cross-organization schedule deletion and disabling in Trigger.dev before 4.5.6 allows authenticated users with their own project schedule route to target another organization's IMPERATIVE cron schedule by supplying the victim schedule's friendlyId to delete or disable actions. The flaw is a CWE-639 authorization bypass/IDOR in DeleteTaskScheduleService and SetActiveOnTaskScheduleService, which resolve the friendlyId without scoping it to the caller's organization; exploitation requires authentication and knowledge or enumeration of the victim's friendlyId, and impact is limited to schedule integrity/availability with no data disclosure. No public exploit was identified at the time of analysis, and CISA KEV does not list this CVE.
Privilege escalation in the Multicluster Global Hub Operator lets an attacker who already controls the operator or holds its service-account credentials impersonate arbitrary users, groups, and service accounts cluster-wide, then use that identity to obtain full administrative control. The issue is rated CVSS 3.1 7.2 HIGH (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) and stems from an overly permissive RBAC configuration in multicluster-global-hub-operator-bundle. No CISA KEV listing, EPSS score, or public exploit code is present in the supplied data; no public exploit identified at time of analysis.
Trigger.dev deployments before 4.6.2 return environment-wide S2 stream credentials to any caller who presents a public token with session write access and initializes session input, letting that narrowly scoped token reach every stream in the environment. With the leaked credential, an attacker talks to the S2 storage API directly to append to, create, or trim other sessions' and runs' streams, forging job output or permanently deleting records. Integrity and availability are both assessed high while confidentiality is unaffected, and exploitation is gated on possession of a valid session-write-capable public token (authenticated, PR:L) with no public exploit code or CISA KEV entry identified at time of analysis.
Trigger.dev prior to 4.7.0 fails to enforce ownership checks on the parentRunId supplied to batch-creation endpoints, allowing authenticated holders of unrestricted environment API keys to suspend, indefinitely block, or inject errors into runs they do not own, including cross-organization or production runs on shared deployments. The flaw is rated CVSS 7.2 and is an IDOR-style missing authorization issue (CWE-639); no public exploit code or CISA KEV entry was identified at time of analysis. Risk is concentrated in multi-tenant or shared instances where foreign run IDs are reachable, and is materially lower in isolated single-tenant deployments.
Trigger.dev before 4.6.0 fails to enforce organization scoping in the waitpoint token wait endpoint, allowing an authenticated attacker who holds any valid secret API key to supply another organization's run ID and make that run block indefinitely on a waitpoint the victim cannot complete; the same path can also inject resume data into the targeted run. This is an IDOR-class authorization flaw (CWE-639) affecting default multi-tenant deployments prior to 4.6.0, with the greatest practical impact on shared instances where keys from one organization can reference another organization's runs. No public exploit identified at time of analysis.
Authenticated NoSQL injection in Trudesk through 1.2.11 lets any low-privilege account manipulate the MongoDB $where clause in GET /api/v1/tickets/search, causing high-impact denial of service by looping mongod and exposing full ticket documents including internal notes. The flaw requires a valid account, so exploitation is not possible pre-auth, and no public exploit was identified at time of analysis. Risk is moderate and centered on malicious or compromised low-privilege users rather than anonymous internet attackers.
Authenticated users of Cerberus FTP Server (all releases prior to 2026.3.0) can supply a UNC/SMB path such as \\attacker-host\share into a parameter that accepts path values, causing the service to initiate an outbound SMB authentication and thereby leak the Cerberus service account's Net-NTLMv2 hash to an attacker-controlled listener. Impact is credential exposure rather than code execution: confidentiality is rated high while integrity and availability are unaffected, and the assessed vector requires an existing authenticated session (PR:L) with no user interaction. No public exploit code was identified at time of analysis and the issue is not in CISA KEV; exploitation additionally depends on the server being permitted to reach the attacker over outbound TCP 139/445, so the practical risk is moderate and environment-dependent.
Crafted /inference/v1/generate requests can permanently stall vLLM before 0.31.0 by killing the EngineCore input thread with an uncaught VLLMValidationError while /health continues to return 200. The trigger is a generate request that sets max_tokens to null-causing the min_tokens <= max_tokens validation to be skipped-together with an oversized min_tokens value, after which all subsequent generation requests hang until a manual restart. This is an availability-only flaw (CWE-248); the supplied CVSS 4.0 vector scores it 7.1 with PR:L, while our independent assessment uses CVSS 3.1 with PR:N, so authentication or network ACLs in front of the inference API materially reduce exposure, and no public exploit identified at time of analysis.
Denial of service in Pillow's legacy TarIO parser (all versions before 13.0.0) allows remote unauthenticated attackers to supply a crafted TAR archive that traps the parser in an uncontrolled loop, consuming a full CPU core and never returning. The exposure is sharply limited because only applications that directly call PIL.TarIO.TarIO on attacker-controlled archives are affected; the default Image.open() path does not reach this parser. No public exploit code was identified at time of analysis, and the raw 7.1 CVSS 4.0 score should be weighed against the non-default API prerequisite and required user or service interaction to supply the malicious archive.
Memory exhaustion in Pillow's SPIDER image plugin lets an attacker-supplied multi-frame .spider stack file bypass the library's decompression-bomb guard and drive allocations of several gigabytes. The flaw lives in SpiderImageFile.seek(), which reparses a later frame and overwrites self._size without re-running Image._decompression_bomb_check(), so a tiny file with a benign first frame passes Image.open() and then declares enormous dimensions in a later mode-F frame; loading that frame consumes roughly four bytes per attacker-declared pixel. All Pillow releases prior to 13.0.0 that parse SPIDER stacks are affected, and exploitation requires the application to open an untrusted multi-frame SPIDER file and then seek past frame 0 - a niche, passive-interaction path consistent with the assessed CVSS 3.1 vector AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. No public exploit code or confirmed active exploitation was identified at time of analysis, and the vendor patch is 13.0.0.
Heap buffer over-read in Pillow's Windows-only WMF/EMF renderer (versions prior to 13.0.0) lets a crafted wide, short metafile trigger out-of-bounds memory reads during rasterization. Pillow passes unchecked 32-bit metafile dimensions into the native drawwmf handler, which allocates a DIB using 16-bit-truncated width/height fields but then copies pixel data using the original full dimensions; because the truncated geometry keeps the total pixel count small, the image passes Pillow's decompression-bomb check while the copy still walks past the end of the heap buffer. Only Windows deployments that render attacker-supplied metafiles are exposed, and rendering must be explicitly initiated (UI:R); the practical outcome is limited disclosure of adjacent heap memory or a process crash via the enlarged read, with no public exploit identified at time of analysis and no CISA KEV listing.
Denial of service in Pillow 11.0.0 through 12.x lets an attacker-supplied PNG file consume unbounded CPU time when the application parses its EXIF metadata. Because PngImagePlugin accepts an uncapped eXIf chunk, a file stuffed with repeated six-byte 'Exif\x00\x00' headers causes Exif.load() to make a new shrinking copy of the buffer on every loop iteration, producing quadratic work that is triggered through routine calls such as Image.getexif(), Image._getexif(), or ImageOps.exif_transpose() - the latter backing many photo-upload auto-rotation workflows. The CVSS 4.0 score is 7.1 (assessed as CVSS 3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H), reflecting a pure availability impact with no confidentiality or integrity loss; no public exploit code or CISA KEV entry was identified at time of analysis, and a vendor fix ships in 13.0.0.
ZenTao PMS before 22.3 permits authenticated low-privilege users to bypass group-based access controls by invoking any controller method whose name contains 'ajax', potentially exposing sensitive data and administrative actions. The flaw in commonModel::isOpenMethod() treats such methods as open, enabling calls such as task.ajaxGetByID, system.ajaxDBAuthUrl, and admin.ajaxChangeTableEngine to read records, retrieve database credentials, trigger CI jobs, and alter tables. Exploitation requires a valid low-privilege session; no public exploit was identified at time of analysis, and the vendor has released 22.3 with an explicit privilege allow-list. The issue is rated CVSS 4.0 7.1 (High) with high confidentiality impact and low integrity impact.
Tenant isolation bypass in Trigger.dev releases before 4.7.3 lets an authenticated user read run metadata and payloads belonging to other tenants by submitting crafted queries to POST /api/v1/query that reference tables through the 'FROM {database.table}' placeholder syntax, including inside subqueries. Only confidentiality is affected - the flaw exposes data but does not allow modification, deletion, or code execution - so the practical exposure is concentrated in shared SaaS or multi-tenant self-hosted deployments, while single-tenant installations have no other tenant data to disclose. Authentication with a valid account is required (CVSS PR:L), no public exploit code has been identified at time of analysis, and the issue is not in CISA KEV; the assigned CVSS 4.0 score is 7.1, though an independent CVSS 3.1 assessment places it at 6.5 given the read-only impact.
Heap-based out-of-bounds read in FreeRDP before 3.32.1 allows an attacker-controlled RDP server to disclose heap memory when a victim pastes a crafted low-bit-depth PNG clipboard payload. The client-side flaw occurs in WinPR's PNG-to-CF_DIB conversion, where a bit-packed buffer is allocated for sub-8-bit PNGs but rows are copied as one byte per pixel, and exploitation requires clipboard redirection plus user paste interaction. Impact is information disclosure only; no public exploit code or confirmed active exploitation was identified at time of analysis.
Cache aliasing in vLLM before 0.31.0 allows authenticated users of a shared deployment to receive another request's cached processed media or reuse first-block KV cache state by supplying colliding EXIF ImageID or cache_salt values. The flaw is only exploitable when image-processing and/or prefix-KV caches are shared across distinct callers or tenants and the attacker can control the relevant cache-key inputs; single-tenant or isolated-cache deployments have no cross-request target. No public exploit identified at time of analysis; the vendor CVSS 4.0 score is 7.1, and the independent assessment rates confidentiality impact high with limited integrity impact.
Dulwich before 1.2.9 can be driven into an infinite recursion loop by a crafted packfile containing an OFS_DELTA object whose delta_offset is 0, causing CPU exhaustion during clone, fetch, cat-file, or internal object lookups. The flaw is availability-only and requires the victim or service to process an attacker-supplied packfile; publicly available exploit code exists.
Client-side denial of service in FreeRDP 3.0.0 through 3.31.x occurs when the smartcard emulation backend processes a server-supplied SCardGetStatusChange reader-state entry with a null szReader name, causing a null-pointer dereference in strcmp/_wcscmp that crashes the RDP client process. Exploitation is server-to-client: an attacker-controlled or compromised RDP server can trigger the crash against a victim who connects using a FreeRDP client with the smartcard channel/emulation enabled, requiring the user to initiate or accept the session. Impact is limited to availability (client crash) with no code execution or data disclosure, and no public exploit has been identified at time of analysis.
Denial of service in FreeRDP 3.32.0: a use-after-free in the drdynvc dynamic virtual channel allows a malicious RDP server to crash the client during teardown by sending one crafted Virtual Channel PDU with a totalLength smaller than the chunk size. The victim must initiate an RDP session to the attacker-controlled or compromised server (UI:P), so passive clients are not exposed; the assessed impact is availability-only with no confidentiality or integrity loss. No public exploit code was identified at time of analysis, and this CVE is not in CISA KEV.
Reflected cross-site scripting (XSS) in the Live Summary for Gravity Forms plugin (versions through 1.2.10) allows remote attackers to execute arbitrary script in a victim's browser by tricking them into visiting a crafted URL. Exploitation requires the victim to interact with the link and the targeted site to have the plugin active alongside Gravity Forms, with the highest risk when an authenticated administrator is tricked. No public exploit has been identified at the time of analysis.
Authenticated users of GitLab Enterprise Edition can bypass a required merge request approval policy on a protected branch under specific synchronization conditions, weakening the branch's approval gate without gaining any read or availability impact. The flaw affects EE versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1, and Community Edition is unaffected because approval policies are an EE feature. GitLab has released fixed versions, but publicly available exploit code exists (a HackerOne report is referenced), and the CVSS score is only 3.1 (AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N), consistent with a low-priority integrity issue rather than a high-risk compromise.
Improper authorization in Trigger.dev 4.5.0 through 4.6.1 lets authenticated holders of a valid public session token obtain presigned S3 write URLs and overwrite their own session's durable chat snapshot, forging the agent's conversation history. The PUT snapshot-url session endpoint lacks a secret-key-only authorization check, and the affected range ends before 4.6.2. No public exploit code has been identified at the time of analysis, and the independent assessment limits impact to the token holder's own session with no confidentiality, availability, or cross-tenant effect.
WarehousePG 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 permits any authenticated database role to invoke built-in cluster-expansion functions that perform no privilege check, enabling a low-privileged user to hold catalog locks cluster-wide or repeatedly force session reconnections. The result is a sustained availability outage - DDL, temporary table creation, GRANT and CREATE ROLE are blocked until a superuser terminates the offending session - rather than data disclosure or modification. No public exploit code has been identified at time of analysis, although exploitation only requires valid database credentials and network reachability to the cluster.
A stale-state flaw in Zephyr's experimental MCTP-over-I2C+GPIO target binding lets any device that can act as an I2C controller on the shared management bus crash the target with two ordinary transactions, because the selected pseudo-register and data-phase flag are never reset at STOP. The resulting NULL pointer dereference occurs inside the I2C target interrupt handler, so on parts that trap address-0 accesses it produces a fatal exception and device reset or halt; on other parts it degrades to a malformed packet buffer reaching the MCTP stack and silently dropped transmit packets. Only builds with CONFIG_MCTP and CONFIG_MCTP_I2C_GPIO_TARGET=y are exposed, exploitation requires a pre-existing foothold on the same physical bus (compromised peer endpoint or BMC), and no public exploit code was identified at time of analysis; the authoritative assessment scores this as availability-only impact (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) rather than the C:L/I:N variant in the published vector.
Denial of service in vLLM before 0.31.0 allows remote attackers to crash the entire serving instance by forging or reusing a client-supplied multimodal UUID so the P0/P1 processor caches disagree on token placeholders and hit a fatal mismatch. The flaw is reachable only when the deployment serves a multimodal model and exposes the multimodal inference API; text-only vLLM deployments are not affected. No public exploit was identified at time of analysis, and authentication requirements are conflicting in the supplied data: the CVSS 4.0 vector is PR:L while the independent assessment uses PR:N and the description says unauthenticated, so exposure depends on whether the endpoint is protected (vLLM's default server has no authentication per the assessment).
Stored cross-site scripting in the WordPress plugin Ninja Forms affects all versions through 3.15.5, allowing remote unauthenticated attackers to submit crafted form input that is later rendered without proper neutralization when an administrator views the stored entry, at which point the injected script executes in the privileged user's browser session. The flaw is rated CVSS 7.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L); the requirement that a victim interact with the stored content is the primary limiting factor, and no public exploit code or confirmed active exploitation was identified at time of analysis. Impact is bounded to confidentiality, integrity and availability of the administrative session and whatever that session can reach, but the scope change (S:C) means the malicious script can affect resources beyond the plugin itself, such as the wider wp-admin context.
Stored cross-site scripting in the Strong Testimonials WordPress plugin through version 3.3.12 allows an attacker to place a script payload in testimonial content that executes when a victim views the rendered testimonial, potentially in an administrative or page-rendering context. This is a moderate-priority issue: exploitation depends on a victim viewing the stored content and on whether testimonial submission is reachable by low-privileged users; under the assessed vector the attacker needs at least low-privileged authenticated access, though a public front-end submission configuration can lower that barrier. No public exploit code or confirmed active exploitation was identified at time of analysis.
Arbitrary file deletion and out-of-directory archive extraction in Trudesk through 1.2.11 let authenticated administrators turn backup-management endpoints into filesystem write and delete primitives. Exploitation requires an existing administrator account plus access to DELETE /api/v1/backup/:backup and POST /api/v1/backup/restore, where encoded traversal sequences and unvalidated file values bypass intended directory confinement. No public exploit identified at time of analysis, and no CISA KEV confirmation is present in the supplied data; the supplied CVSS:4.0 score is 7.0 and the independent CVSS:3.1 assessment is AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H.
Reflected cross-site scripting in the Geo Mashup WordPress plugin through version 1.13.22 allows remote attackers to execute arbitrary script in a victim's browser via a crafted request, potentially stealing session data or manipulating page content. The CVSS 3.1 score is 7.1 with a changed-scope impact, and the vector requires user interaction from the victim. No public exploit code or confirmed active exploitation was identified at time of analysis.
Stored cross-site scripting in the SureCart WordPress plugin through 4.9.5 lets an authenticated attacker persist malicious script that runs when a victim renders the affected content, enabling browser-session actions under the victim's privileges. The issue is rated CVSS 7.1 High with UI:R and scope change; no public exploit code or CISA KEV confirmation is present in the provided intelligence.
Reflected cross-site scripting (CWE-79) in the ThemeHunk Customizer WordPress plugin, affecting every version through 2.8.7, lets an unauthenticated remote attacker run arbitrary script in a victim's browser by convincing them to open a crafted URL containing the payload. Exploitation hinges on user interaction (UI:R) and is most dangerous when the victim is a logged-in administrator, because the injected script then executes with the privileges of the WordPress admin session; the flaw alone does not yield server-side access. No public exploit code and no CISA KEV entry were identified at time of analysis, and the issue was reported through Patchstack.
Reflected cross-site scripting in the VideoWhisper 'Paid Videochat Turnkey Site' (ppv-live-webcams) WordPress plugin, affecting all versions through 7.5.14, lets an unauthenticated remote attacker inject script into a page that executes in a victim's browser once that victim follows a crafted link. Because the flaw is reflected rather than stored, exploitation is one-victim-at-a-time and depends on user interaction (the attacker must lure an administrator or paying member with an active session on the target site), and the practical payoff is session/credential theft, action forgery, or page defacement within the victim's context rather than server takeover. No public exploit code and no CISA KEV entry were identified at time of analysis, and the plugin's limited deployment base narrows the realistic target pool; reported CVSS is 7.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L), with the assessed vector scoring availability impact as none.
Path traversal in gin-vue-admin through 2.9.2 allows an authenticated administrator to recursively delete arbitrary directories that are writable by the server process by supplying '../' sequences in the pluginName parameter of a POST request to /autoCode/removePlugin. The flaw is rated 7.0 (CVSS:4.0 AV:N/AC:L/PR:H, with high integrity and availability impact and no confidentiality impact); the independent assessment concurs with a 3.1 vector of AV:N/AC:L/PR:H/UI:N/I:H/A:H, so this is a moderate-priority, authentication-gated issue rather than a mass-exploitation threat. No public exploit code or confirmed active exploitation (CISA KEV) was identified at time of analysis, and the practical blast radius is bounded by the admin-level login requirement and by the filesystem permissions of the account under which the Gin server runs.