Code Injection

phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not properly choose delimiters to prevent use of the preg_replace e (aka eval) modifier, which might allow remote. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 87.0%.

The Ninja Forms plugin before 2.9.42.1 for WordPress allows remote attackers to conduct PHP object injection attacks via crafted serialized values in a POST request. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 80.6%.

The HipChat for JIRA plugin before 6.30.0 for Atlassian JIRA allows remote authenticated users to execute arbitrary Java code via unspecified vectors, related to "Velocity Template Injection. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 82.5%.

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

radexecd.exe in Persistent Systems Radia Client Automation (RCA) 7.9, 8.1, 9.0, and 9.1 allows remote attackers to execute arbitrary commands via a crafted request to TCP port 3465. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 88.3%.

The client in iPass Open Mobile before 2.4.5 on Windows allows remote authenticated users to execute arbitrary code via a DLL pathname in a crafted Unicode string that is improperly handled by a. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 68.3%.

The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly interact with a DOM object that has a named getter, which might allow remote attackers to. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 83.6%.

Unrestricted file upload vulnerability in process-upload.php in ProjectSend (formerly cFTP) r100 through r561 allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 82.9%.

project/register.php in Tuleap before 7.7, when sys_create_project_in_one_step is disabled, allows remote authenticated users to conduct PHP object injection attacks and execute arbitrary PHP code. Rated medium severity (CVSS 6.0), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 52.4%.

lib/message.php in X7 Chat 2.0.0 through 2.0.5.1 allows remote authenticated users to execute arbitrary PHP code via a crafted HTTP header to index.php, which is processed by the preg_replace. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 66.0%.

displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1). Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 86.2%.

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 49.7%.

Eval injection vulnerability in the internals.batch function in lib/batch.js in the bassmaster plugin before 1.5.2 for the hapi server framework for Node.js allows remote attackers to execute. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 84.2%.

The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c allows remote attackers to execute arbitrary programs via a %00 sequence in a. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

The Infusionsoft Gravity Forms plugin 1.5.3 through 1.5.10 for WordPress does not properly restrict access, which allows remote attackers to upload arbitrary files and execute arbitrary PHP code via. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 82.2%.

The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacters in a device option in the edit[content] parameter to index.php/HeIp. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 82.6%.

The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) update_system_info_debian_package, (2) ossec_task, (3). Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 79.3%.

DataLife Engine (DLE) 9.7 allows remote attackers to execute arbitrary PHP code via the catlist[] parameter to engine/preview.php, which is used in a preg_replace function call with an e modifier. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 85.1%.

The Square Squash allows remote attackers to execute arbitrary code via a YAML document in the (1) namespace parameter to the deobfuscation function or (2) sourcemap parameter to the sourcemap. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 80.5%.

GetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbitrary commands via unspecified vectors. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 71.0%.

The framework/Util/lib/Horde/Variables.php script in the Util library in Horde before 5.1.1 allows remote attackers to conduct object injection attacks and execute arbitrary PHP code via a crafted. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 81.3%.

An unspecified ActiveX control in WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.1, and KingGraphic before 3.1.2 allows remote attackers to download arbitrary DLL code onto a client. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 60.5%.

op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the password. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 90.0%.

license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the timestamp parameter for. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 87.2%.

Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x before 4.2.24 allows remote attackers to execute. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 83.5%.

Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 87.4%.

Eval injection vulnerability in ajax.php in openSIS 4.5 through 5.2 allows remote attackers to execute arbitrary PHP code via the modname parameter. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 70.9%.

Certain getText methods in the ActionSupport controller in Apache Roller before 5.0.2 allow remote attackers to execute arbitrary OGNL expressions via the first or second parameter, as demonstrated. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 87.0%.

admin/confnetworking.html in PineApp Mail-SeCure allows remote attackers to execute arbitrary commands via shell metacharacters in the pinghost parameter during a ping operation. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 71.9%.

The Security Screen (_core_/securite/ecran_securite.php) before 1.1.8 for SPIP, as used in SPIP 3.0.x before 3.0.12, allows remote attackers to execute arbitrary PHP via the connect parameter. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 69.5%.

GDI+ in Microsoft Windows and Office fails to properly handle TIFF images, allowing remote code execution through crafted documents, actively exploited in targeted attacks against Pakistani and Middle Eastern organizations.

NAS4Free 9.1.0.1.804 and earlier allows remote authenticated users to execute arbitrary PHP code via a request to exec.php, aka the "Advanced | Execute Command" feature. Rated medium severity (CVSS 6.0), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 49.4%.

Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor. Rated medium severity (CVSS 4.6), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 64.5%.

The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 83.6%.

HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, and Windows Server 2008 SP2 allow remote attackers to execute arbitrary code via a crafted screensaver in a theme file,. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and EPSS exploitation probability 82.2%.

Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create bookmarks to execute arbitrary. Rated medium severity (CVSS 6.0), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 60.9%.

Apache Struts 2 before 2.3.14.2 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not properly handled when using the includeParams attribute in the (1) URL or (2). Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and EPSS exploitation probability 87.6%.

Apache Struts 2 before 2.3.14.2 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not properly handled when using the includeParams attribute in the (1) URL or (2). Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 91.1%.

VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers to execute arbitrary code via unspecified vectors. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 81.9%.

The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to execute arbitrary code via unspecified vectors involving. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 86.3%.

An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager (aka CPO-M). Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 61.4%.

An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code via (1) a pointer argument to the. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 68.3%.

Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 87.4%.

The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 82.0%.

Eval injection vulnerability in the ldapagnt_eval function in ldapagnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allows remote attackers to execute arbitrary Perl code. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 49.8%.

The proc_deutf function in includes/functions_vbseocp_abstract.php in vBSEO 3.5.0, 3.5.1, 3.5.2, 3.6.0, and earlier allows remote attackers to insert and execute arbitrary PHP code via "complex curly. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 79.6%.

phpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mirror during an unspecified time frame in 2012, contains an externally introduced modification (Trojan Horse) in server_sync.php, which. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 87.9%.

Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed by FTP between November 2011 and February 2012, contains an externally introduced modification (Trojan. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 64.8%.

The callme_startcall function in recordings/misc/callme_page.php in FreePBX 2.9, 2.10, and earlier allows remote attackers to execute arbitrary commands via the callmenum parameter in a c action. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 85.7%.

The URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a crafted notes:// URL. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 64.6%.

Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by attempting to access a. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 87.3%.

Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Same ID Property Remote Code. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 82.2%.

Remote code execution in Microsoft MSCOMCTL.OCX ActiveX controls allows unauthenticated attackers to execute arbitrary code via maliciously crafted Office documents, RTF files, or web pages. Actively exploited since April 2012 and confirmed in CISA KEV catalog. Despite being patched in 2012, EPSS score of 94.32% (100th percentile) indicates continued exploitation attempts against unpatched systems. Affects broad Microsoft product ecosystem including Office 2003-2010, SQL Server 2000-2008 R2, BizTalk, Commerce Server, Visual FoxPro, and Visual Basic 6.0 Runtime.

The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when developer mode is used, allows remote attackers to execute arbitrary commands via unspecified vectors. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 92.6%.

Remote code execution in Gitea (self-hosted Git service) via a code-injection flaw (CWE-94) allows attackers to run arbitrary code on the server, with the issue fixed in Gitea 1.27.1 (Alpine package 1.27.1-r0). The vulnerability is confirmed actively exploited (CISA KEV) and publicly available exploit code exists, including a Nuclei detection template and a proof-of-concept repository. With a CVSS 9.8 network/no-auth vector, any internet-exposed unpatched Gitea instance is at immediate, high risk of full compromise.

Code injection in Vim enables local arbitrary code execution when a user opens a specially crafted file, affecting versions prior to the fix packaged as 9.2.0481-r0 on Alpine Linux and addressed separately under Ubuntu USN-8415-1. The vulnerability (CWE-94) arises from improper control over code generation within Vim's scripting or modeline processing, allowing an attacker who can deliver a malicious file to achieve full compromise of confidentiality, integrity, and availability on the target system. No public exploit has been identified at time of analysis, and the EPSS score of 0.01% (3rd percentile) suggests negligible current exploitation activity despite the High CVSS rating.

Code injection in Apache Kylin versions 4 through 5.0.4 lets an attacker who can supply or influence a JDBC URL's 'special parameter' trigger generation of attacker-controlled code in the context of the Kylin service, with the assessed vector rating confidentiality, integrity and availability impact as high (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Per the vendor, practical risk is concentrated on Kylin services directly exposed to the public network, which Apache describes as uncommon, while typical in-house deployments are mostly not impacted; exposure of the datasource/JDBC configuration path is therefore the principal limiting factor. No CISA KEV listing, EPSS score, or public proof-of-concept is present in the available intelligence, so no public exploit has been identified at time of analysis, and upgrading to 5.0.5 removes the vulnerable condition.

Arbitrary shortcode execution in the ProfilePress (formerly WP User Avatar) WordPress plugin through version 4.17.5 allows authenticated users with Subscriber-level access or higher to plant shortcode markup inside a comment, which is later rendered server-side by do_shortcode() when any visitor opens that user's front-end profile Comments tab. Because the plugin's ppress_neutralize_buffer_shortcodes() pass only strips pp-custom-html and bracket fragments containing HTML delimiters, shortcodes exposed by any other active plugin or theme remain intact and can be executed with attacker-chosen attributes, giving a low-privilege user a route to capability-gated or data-returning shortcodes and to raw HTML injection on a publicly viewable page. Rated CVSS 5.4 (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N), the impact is bounded by which shortcodes a given site happens to have installed, and no public exploit code or confirmed active exploitation was identified at time of analysis.

Authenticated attackers holding only subscriber-level access can execute arbitrary WordPress shortcodes on sites running the WPEverest User Registration & Membership plugin in all versions up to and including 5.2.8, because an action passes an unvalidated value straight into do_shortcode without checking it first. The flaw is rated CVSS 5.4 (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) and there is no public exploit identified at time of analysis - it is not confirmed actively exploited (CISA KEV). Impact is bounded, but the practical risk is elevated on the many sites that leave open user registration enabled, since an attacker can simply self-provision the required subscriber account and then trigger the vulnerable shortcode path; sites that disable open registration meaningfully reduce exposure.

Arbitrary shortcode execution in the Slim SEO WordPress plugin (all versions up to and including 4.11.1) allows an authenticated attacker holding a Subscriber-level account to store a shortcode payload in their own Biographical Info field, which the plugin subsequently passes to do_shortcode when rendering that author's description on the front end. Exploitation is gated by concrete prerequisites - an attacker-controlled low-privilege account (in practice, open user registration), a front-end request that resolves the author description without redirection (the ?author= query parameter while Slim SEO's auto_redirection setting is disabled), and the presence of other plugins whose shortcodes are worth invoking - and the resulting impact depends on which shortcodes other installed plugins expose, making this a moderate, authentication-gated code-injection issue rather than a top-priority emergency. No public exploit identified at time of analysis, and the vendor shipped a fix in 4.11.2 that strips shortcodes from the user bio.

Unauthenticated shortcode injection in the Forminator Forms WordPress plugin (≤1.58.1) allows remote attackers to execute arbitrary registered shortcodes by sending a GET request to the search results page on any block-theme install, or by submitting an anonymous comment on any post with comments enabled. With a CVSS score of 6.5 and no public exploit identified at time of analysis, the practical impact is bounded by which shortcodes are present on the target site, but the exceptionally low exploitation barrier-no authentication, no user interaction, and no Forminator-specific configuration-makes this an elevated-priority issue.

Unauthenticated arbitrary shortcode execution in the WordPress plugin Forminator Forms (Contact Form, Payment Form & Custom Form Builder) affects all versions up to and including 1.58.1, allowing remote attackers to run any WordPress shortcode registered on the target site by submitting a quiz form. Exploitation is gated by a non-default configuration: a published quiz whose email/notification template contains the {quiz_result} merge tag, after which attacker bytes injected via the User-Agent header or the referer_url POST parameter (neither of which is stripped of the '[' and ']' shortcode delimiters by sanitize_text_field()/esc_html()) are fed to do_shortcode(). The assessed vector is CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N (Attack Complexity High, unauthenticated) because the quiz-result template precondition must be met; no public exploit code and no CISA KEV active-exploitation entry were identified at time of analysis, and real-world impact scales with which dangerous shortcodes other installed plugins or themes expose.

Arbitrary shortcode execution in the WordPress Broken Link Checker plugin (all versions up to and including 2.4.14.1) allows an unauthenticated commenter to embed a shortcode payload in a comment's href or src attribute; once that comment is approved through the site's normal moderation workflow, the plugin's link parser passes the value to do_shortcode during a scheduled WP-Cron scan, executing the shortcode with no further attacker interaction. The published CVSS v3.1 base score is 6.5 (AV:N/AC:L/PR:N/UI:N), but the practical vector carries a user-interaction precondition (UI:R) because moderator approval is required, and impact is bounded by which shortcodes are registered on the target site. No public exploit code has been identified at time of analysis.

Arbitrary shortcode execution in the Popup Box plugin for WordPress (ays-pro) versions 6.4.1 through 6.4.2 lets unauthenticated remote attackers invoke any shortcode registered on the site with attacker-chosen attributes, because client-controlled IP-related HTTP headers are folded into a popup body and then run through do_shortcode(). The attack is only reachable when a site administrator has manually inserted the %%user_ip_address%% token into a popup's Custom Content body, so default installations and sites that never use that token are not affected; impact is bounded by the shortcodes already installed (no direct PHP injection), which is why the assessed vector scores only 4.8 with high attack complexity. No public exploit code and no confirmed active exploitation were identified at time of analysis, and the vendor reference points to a fix in 6.4.3.

Code injection in Ultralytics FastSAM's AutoBackend model-loading path lets a crafted model file execute arbitrary Python when its metadata entries (imgsz, names, kpt_shape) are passed into a dynamically evaluated expression from session.get_modelmeta().custom_metadata_map in ultralytics/nn/autobackend.py. The attack is bounded to the local model-loading surface - there is no network-facing exposure - and requires that a user or process loads an attacker-supplied model artifact, so the practical prerequisite is delivering a malicious model to a victim rather than obtaining privileges on the host. VulDB rates it 4.8 (medium) under CVSS 4.0 with low confidentiality/integrity/availability impact and PR:L/UI:N, while our independent assessment scores it CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, i.e. higher impact and requiring user interaction instead of prior authentication; no CISA KEV listing or public exploit code is present in the supplied data, and the maintainers were notified via a GitHub issue but have not responded, so no vendor-released patch is identified at time of analysis.

Code injection in ImprintLab Medical-SAM-Adapter 0.1.0-alpha and 0.1.0 allows a local, low-privileged attacker to execute arbitrary code in the context of the user who loads a crafted model file. The flaw resides in the AutoBackend model-loading path (models/MobileSAMv2/ultralytics/nn/autobackend.py), where the imgsz, names, or kpt_shape metadata fields are passed into a dynamically evaluated expression without neutralization (CWE-95). Publicly available exploit code exists, and the project has not responded to the issue report; exploitation requires local access and victim interaction to load the malicious model, limiting impact to Low confidentiality, integrity, and availability.

An issue in the context-compaction feature of DeepSeek Harness (dsh) commit c291e796 allows attackers to execute a prompt injection attack via crafted external content.

CRLF injection in Netgate pfSense CE 2.7.1 through 2.9.0 allows authenticated users with the 'DNS Resolver: Advanced' privilege to inject arbitrary Unbound directives via the sock_queue_timeout parameter. This can override local DNS records and forwarding for all clients, impacting integrity and availability. Publicly available exploit code exists, and the issue is rated medium severity (CVSS 4.0 base 5.1).

Authenticated pfSense CE users holding the 'DNS Resolver: Access Lists' privilege can embed CR/LF characters in the aclname or aclaction fields of an Unbound access list, causing attacker-supplied Unbound directives (local-data, local-zone, forward-zone) to be written into access_lists.conf and letting the attacker control which DNS answers are served to LAN clients. All pfSense CE versions through 2.9.0 are affected (CPE cpe:2.3:a:netgate:pfsense_ce:*), the root cause is CWE-93 (improper neutralization of CRLF sequences), and publicly available exploit code exists; there is no CISA KEV confirmation of active exploitation. Because the CVSS vector requires PR:H, exploitation demands an authenticated account with a specific, highly privileged DNS configuration role, so realistic risk is insider misuse or abuse of a compromised privileged session rather than opportunistic external attack - a genuine but bounded-priority issue rather than an emergency.

Code injection in the WPMU DEV Broken Link Checker WordPress plugin, affecting all versions up to and including 2.4.14.1, allows an unauthenticated remote attacker to feed crafted input to the plugin's link-checking/parsing routine and potentially expose sensitive data. Per the assessed CVSS vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N), exploitation is network-reachable and needs no privileges, but a victim must be induced to trigger the vulnerable action, and the confirmed impact is confined to confidentiality with no integrity or availability effect. No public exploit identified at time of analysis.

Unauthenticated shortcode injection in the Ocean Extra plugin for WordPress (all versions up to and including 2.6.0) lets remote attackers pass attacker-controlled values into the WordPress do_shortcode() function without proper validation, causing arbitrary registered shortcodes to execute. Per the assessed CVSS vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N, score 6.5), no authentication and no user interaction are required, but real-world impact is bounded by which shortcodes are actually registered on the target site; the practical severity is therefore moderate rather than critical, and no public exploit code or confirmed active exploitation was identified at time of analysis. Note that the OceanWP/Ocean Extra vendor advisory and an upstream code changeset are the primary available intelligence, and no vendor-released fixed version number is independently confirmed.

HTTP header injection in FreeRDP 3.0.0 through 3.31.x allows a remote unauthenticated RDP client to alter HTTP request framing at an upstream proxy when the FreeRDP proxy is deployed with FixedTarget=false and forwards connections through that proxy. The issue stems from a lone line feed (LF) in the routing token target (Cookie: msts=) that is not rejected and gets written into the CONNECT request line and Host header. The impact is limited to integrity of HTTP requests at the upstream proxy; no public exploit identified at time of analysis, and the configuration prerequisites (FixedTarget=false plus an upstream HTTP proxy) constrain exposure.

Request-line injection in cpp-httplib 0.29.0 through 0.50.x lets a caller-controlled path that reaches Client::open_stream() - or any client path when set_path_encode(false) is in effect, such as a decoded redirect Location - carry raw CR/LF bytes into detail::write_request_line() and split the outbound HTTP/1.1 request line, injecting attacker-shaped request metadata that a downstream backend or intermediary may honor. The library itself requires no authentication (CVSS vector PR:N), but practical exploitation needs two coinciding conditions: the embedding application must forward remote input into that unsanitized path, and the receiving server or proxy must interpret the injected bytes as header or request boundaries. Impact is integrity-only (I:L) with no confidentiality or availability effect, no public exploit code has been identified at time of analysis, and the vendor fix is released in 0.51.0, making this a low-priority defense-in-depth issue rather than an urgent threat.

Unauthenticated remote code execution is possible in the WordPress plugin MDTF (wp-meta-data-filter-and-taxonomy-filter) through version 1.3.9, which carries a CWE-94 code injection flaw in PluginUs.Net's metadata/taxonomy filtering component. Per the CVSS vector (PR:N/UI:N) no credentials or user interaction are required, so any site running the vulnerable release with the plugin active is exposed; the NVD score of 5.3 (C:L/I:N/A:N) is materially lower than the assessed C:H/I:H/A:H, and no public exploit code and no CISA KEV listing were identified at time of analysis. Confidence is capped because the signals are thin and internally inconsistent - the unresolved CVSS disagreement and the absence of any named injectable parameter, function, or endpoint mean the minimal precondition confirmed so far is simply the presence of the vulnerable plugin version.

Heap memory disclosure and multicast join-state injection in Juniper Junos OS running on EX Series and MX Series platforms, and in Junos OS Evolved on ACX Series, arise from an integer underflow in the rpd routing daemon that can be triggered by an unauthenticated attacker on an adjacent network segment sending a malformed draft-Rosen MVPN message. Only devices that actually support and have draft-Rosen MVPN configured and active are exposed, which bounds the affected population; impact is limited to low-level confidentiality and integrity loss (assessed CVSS 3.1 base 5.3, AV:A/AC:L/PR:N/UI:N/C:L/I:L/A:N) rather than device takeover or denial of service. No public exploit code has been identified at time of analysis and there is no indication of confirmed active exploitation (CISA KEV), so this is a moderate, patch-in-normal-cycle priority rather than an emergency, especially since vendor fixes are already published.

LDAP filter injection in Zimbra Collaboration Suite 10.1.0 through 10.1.21 lets unauthenticated remote attackers reshape the external LDAP search filters Zimbra constructs during authentication, turning the login path into a password oracle for external directory users on domains configured for search-filter authentication combined with lazy provisioning. A secondary, authenticated path through S/MIME lookups can return certificates and identity data belonging to unintended directory entries. The flaw carries a moderate CVSS 5.3 (confidentiality-only, no code execution or write access) and no public exploit identified at time of analysis; it is not confirmed actively exploited (CISA KEV), no EPSS score was supplied, and real-world exposure is gated by the non-default external-directory auth and provisioning configuration.

Path traversal in YOURLS before 1.10.5 lets an attacker escalate a pre-planted PHP file into code execution: the keyword returned by yourls_get_request() survives yourls_sanitize_url() and yourls_esc_url(), is passed to file_exists() and include() under YOURLS_PAGEDIR, and '../' or '..\' sequences let it resolve a script outside the pages directory, which then runs with the privileges of the YOURLS web process. Exploitation is conditional and chained rather than self-contained - the vulnerable code supplies only the include primitive, so an attacker must first get a PHP file onto the server through a separate upload or file-write vector, which the advisory acknowledges by describing an 'uploaded or injected file'. No public exploit code has been identified at time of analysis, and the supplied CVSS 5.3 (AV:L/AC:L/PR:L) conflicts with the independent assessment, which rates this inclusion primitive CVSS 8.1 (AV:N/AC:H/PR:N) while still classifying overall risk as medium severity given the hard file-precondition.

Remote, unauthenticated data injection into upstream requests affects NGINX Plus and NGINX Open Source deployments that terminate HTTP/3 via the ngx_http_v3_module and have the proxy_request_buffering on directive active on the proxied location. An attacker able to reach such a listener can cause attacker-controlled bytes to be blended into the request forwarded to the backend, an integrity-only problem (CVSS 4.0 base 6.9; independent CVSS 3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) with no confidentiality loss, no availability loss, and, per F5, no control-plane exposure. Exposure is sharply narrowed because HTTP/3 is not enabled in default nginx builds and exploitation requires both a QUIC listener and request buffering; no public exploit has been identified at time of analysis.

HTML injection in BottleCRM 0.30 through 1.14.5 lets an authenticated organization member embed arbitrary markup and CSS into customized invoice PDFs by writing HTML into the notes, terms, client name, or client address fields that render_invoice_template() processes. The injected content can visually overlay totals, payee details, and payment instructions in the resulting PDF, which is then viewed by a victim through a direct download, a public link, or an email attachment (CVSS 4.0 base 5.1; assessed 3.1 vector AV:N/AC:L/PR:L/UI:R, integrity-only with low impact). Exploitation requires the deployment to actually use a custom invoice template and requires a victim to open the rendered document, making this a fraud-oriented, low-to-medium priority issue rather than automatic server-side compromise, and no public exploit code or confirmed active exploitation was identified at time of analysis.

HTML injection in Responsive Blocks WordPress plugin before 2.3.0 allows unauthenticated remote attackers to place arbitrary HTML, including phishing links, into notification emails sent to the site owner when a crafted value is submitted through the plugin's Form block. The issue is moderate, not critical: the independently assessed vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N, so there is no server-side code execution, confidentiality loss, or availability impact, and the injected content only matters if the recipient opens the email and interacts with the attacker-supplied HTML. Publicly available exploit code exists, but there is no evidence of confirmed active exploitation (CISA KEV) from the provided data.

Comment injection in Sunshine Photo Cart before 3.7.4 lets unauthenticated remote attackers submit comments to restricted galleries without satisfying the gallery access restriction, spoofing author name and email; the same restriction is enforced when comments are displayed. Publicly available exploit code exists, but EPSS remains low at 0.13% (2nd percentile), and the issue is integrity-only, allowing attacker-chosen comment content and metadata to be stored in password-protected, email-gated, private, account-only, or expired galleries. No CISA KEV active exploitation is indicated, and the flaw is a genuine but modest-severity integrity issue rather than a critical priority.

Stored HTML and link injection in the LTL Freight Quotes WordPress plugin before version 4.2.19 allows unauthenticated remote attackers to submit unsanitized values that are persisted and later rendered to storefront visitors. The plugin performs neither an authorization check nor input sanitization before storing these request values, so exploitation requires no authentication, no user interaction, and no special configuration on a default installation. Impact is limited to injected markup and links - the assessed vector (C:N/I:L/A:N) confirms no script execution, data confidentiality loss, or availability impact - and a publicly available exploit exists, though the EPSS score of 0.13% (2nd percentile) signals low real-world urgency, consistent with CISA's SSVC rating of no observed exploitation.

Unauthenticated username enumeration in Finsys Dockhand through 1.0.18 exploits an LDAP injection flaw in the tryLdapAuth login path (src/lib/server/auth.ts), where the submitted username is inserted into the LDAP search filter without escaping wildcard characters. Attackers can submit incremental patterns such as 'a*' to /api/auth/login and use response-timing differences to confirm which LDAP accounts exist, sidestepping per-username rate limiting because every probe carries a different filter string; the payoff is limited to username disclosure, not authentication bypass or code execution, and exploitation is slow, noisy and sensitive to network jitter. The vendor has shipped a fix in Dockhand 1.0.19, no public exploit code and no KEV-listed active exploitation were identified at time of analysis, and the issue rates as low-to-moderate priority despite the 6.3 medium CVSS 4.0 score. Only deployments with LDAP authentication enabled are affected; environments using non-LDAP authentication are not exposed to this path.

Authenticated JumpServer users who hold permission to create or execute Ansible-based automation tasks can inject attacker-controlled template expressions that the automation rendering engine evaluates, invoking sensitive Ansible lookups (file, pipe, env, password) that disclose files or environment values and may permit limited command execution under the privileges of the automation process. All JumpServer deployments prior to 4.10.17-lts are affected, but exploitation requires operator-level privilege (CVSS vector PR:H) and remains confined to the automation process - it grants neither unauthenticated access nor reach into unrelated JumpServer assets. No public exploit identified at time of analysis, and the issue is fixed in version 4.10.17-lts.

LDAP injection in Esri Portal for ArcGIS allows an authenticated administrator to tamper with directory search queries built by administrative functionality, causing unintended Active Directory or LDAP operations against the connected directory service. The flaw is network-reachable with low complexity and requires no user interaction, but it is gated behind high administrative privileges (PR:H) and only materializes when the portal is configured to integrate with an external AD/LDAP identity store. Impact is weighted toward information disclosure (C:H) with limited integrity effects (I:L) and no availability impact; no public exploit identified at time of analysis, and no confirmed actively exploited (CISA KEV) activity. Overall this is a moderate-severity, operationally-constrained issue rather than a top-tier emergency.

Authenticated MongoDB Server users who hold read access can receive field values in aggregation-framework output that their query did not intend to return, because certain constant values are handled incorrectly during internal query rewriting. Exploitation requires valid credentials with read privileges and a specifically shaped aggregation pipeline; there is no unauthenticated path, no write primitive, and no code execution or denial-of-service impact, so this is best treated as a medium-severity information-disclosure issue despite reference tags that mention RCE and code injection. No public exploit code and no confirmed active exploitation were identified at time of analysis, and the assessed CVSS 3.1 score of 5.3 is driven by low confidentiality impact with no integrity or availability effect.

Unauthenticated information disclosure in yt-dlp-web-ui through 4.0.0 lets remote attackers read server-side files by supplying a dash-prefixed value such as --load-info-json in the url parameter of the Service.Formats JSON-RPC method, causing the underlying yt-dlp process to load an attacker-chosen JSON file whose parsed contents are reflected back in the RPC response. Publicly available exploit code exists, including a published security advisory with reproduction details, though there is no CISA KEV confirmation of active exploitation; the CVSS 4.0 base score is 6.9, while a CVSS 3.1 scoring of the same vector yields 5.3 (Medium) because impact is confined to confidentiality. Any network-reachable instance at or below version 4.0.0 is affected with no authentication, user interaction, or non-default configuration required, so self-hosted instances bound only to localhost or a trusted LAN are materially lower risk than internet-exposed deployments.

Code injection in storyicon's comfyui_segment_anything custom node allows arbitrary Python code to run inside the victim's ComfyUI environment when a crafted GroundingDINO configuration is loaded through the SLConfig._file2dict routine in local_groundingdino/util/slconfig.py. Because the loader evaluates config-file contents as Python, an attacker who can place or share a malicious config (for example bundled with a shared workflow or downloaded model set) can execute code with the privileges of the ComfyUI process; the independent assessment rates this AV:L/UI:R with high confidentiality, integrity and availability impact confined to the host running the node. No public exploit was identified at time of analysis, and no vendor-released patch is available - the project was notified through GitHub issue #114 but has not responded.

Code injection in PaddlePaddle PaddleX through version 3.7.2 allows an attacker to execute arbitrary Python code by supplying a crafted 'scale' value that the text-detection preprocessing component passes to a bare eval() call. The flaw is not reachable in a default deployment: it requires the victim to load an attacker-controlled PaddleX text-detection model or pipeline configuration, which is why the assessed vector carries User Interaction (UI:P) and a local attack vector despite high confidentiality, integrity, and availability impact. No public exploit code has been identified at time of analysis, and the upstream fix (PR #5212) is still awaiting acceptance, so no released patched version is independently confirmed.