Remote Code Execution

Buffer overflow in the Attachment_Times method in a certain ActiveX control in dwa85W.dll in IBM Lotus iNotes 8.5.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a long. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 66.5%.

The URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a crafted notes:// URL. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 64.6%.

Microsoft XML Core Services 3.0 through 6.0 access uninitialized memory locations, allowing remote attackers to execute code or cause memory corruption through a crafted website, actively exploited before patch availability.

Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by attempting to access a. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 87.3%.

Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Same ID Property Remote Code. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 82.2%.

Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 10.7%.

Multiple stack-based buffer overflows in a certain ActiveX control in qp2.cab in IBM Lotus Quickr 8.2 before 8.2.0.27-002a for Domino allow remote attackers to execute arbitrary code via a long. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 61.9%.

The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to upload arbitrary code to a designated pathname, and possibly execute this code,. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 82.3%.

The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to execute arbitrary code by (1) injecting. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 89.5%.

Stack-based buffer overflow in Lattice Semiconductor PAC-Designer 6.2.1344 allows remote attackers to execute arbitrary code via a long string in a Value tag in a SymbolicSchematicData definition tag. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 66.1%.

Multiple stack-based buffer overflows in Apple QuickTime before 7.7.2 on Windows allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TeXML. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 69.6%.

The DiagTraceR3Info function in the Dialog processor in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2, when a certain Developer Trace. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 77.7%.

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and before 11.1.115.8 on Android 4.x allows remote. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 90.1%.

Multiple stack-based buffer overflows in tm1admsd.exe in the Admin Server in IBM Cognos TM1 9.4.x and 9.5.x before 9.5.2 FP2 allow remote attackers to cause a denial of service (daemon crash) or. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 79.0%.

Heap-based buffer overflow in the Ole API in the CQOle ActiveX control in cqole.dll in IBM Rational ClearQuest 7.1.1 before 7.1.1.9, 7.1.2 before 7.1.2.6, and 8.0.0 before 8.0.0.2 allows remote. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 66.6%.

The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 76.8%.

Remote code execution in Microsoft MSCOMCTL.OCX ActiveX controls allows unauthenticated attackers to execute arbitrary code via maliciously crafted Office documents, RTF files, or web pages. Actively exploited since April 2012 and confirmed in CISA KEV catalog. Despite being patched in 2012, EPSS score of 94.32% (100th percentile) indicates continued exploitation attempts against unpatched systems. Affects broad Microsoft product ecosystem including Office 2003-2010, SQL Server 2000-2008 R2, BizTalk, Commerce Server, Visual FoxPro, and Visual Basic 6.0 Runtime.

The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and EPSS exploitation probability 89.0%.

Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS:// stream. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 72.9%.

Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 73.7%.

Stack-based buffer overflow in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allows remote attackers to. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 68.4%.

Stack-based buffer overflow in pcspref.dll in pcsws.exe in IBM Personal Communications 5.9.x before 5.9.8 and 6.0.x before 6.0.4 might allow remote attackers to execute arbitrary code via a long. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 75.1%.

Unrestricted file upload vulnerability in andesk/managementsuite/core/core.anonymous/ServerSetup.asmx in the ServerSetup web service in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 86.5%.

Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Actively exploited in the wild (cisa kev) and public exploit code available.

Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns before 4.33 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 66.9%.

The StopModule method in the NTR ActiveX control before 2.0.4.8 allows remote attackers to execute arbitrary code via a crafted lModule parameter that triggers use of an arbitrary memory address as a. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 73.3%.

Multiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote attackers to execute arbitrary code via (1) a long bstrUrl parameter to the StartModule method, (2) a long. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 73.7%.

Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 86.5%.

Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and EPSS exploitation probability 88.0%.

The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when developer mode is used, allows remote attackers to execute arbitrary commands via unspecified vectors. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 92.6%.

The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data types of properties, which. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

Adobe Reader and Acrobat contain an unspecified U3D component vulnerability causing memory corruption that allows remote code execution, exploited as a zero-day in December 2011 through crafted PDF files.

Adobe Flash Player contains a type confusion vulnerability in object handling that allows remote attackers to execute arbitrary code via malicious SWF content, actively exploited in targeted attacks in April 2011.

Adobe Flash Player 10.2 and earlier across all platforms contain an unspecified vulnerability allowing remote code execution, exploited in the wild via Flash content embedded in Microsoft Office documents and web pages.

Remote code execution in Microsoft Office 2003-2010 and Office for Mac 2004-2011 allows attackers to execute arbitrary code via malicious RTF documents. This vulnerability is confirmed actively exploited (CISA KEV) with publicly available exploit code and an EPSS score of 93.79% (100th percentile), indicating extremely high real-world exploitation likelihood. Microsoft released patches via security bulletin MS10-087. The vulnerability affects a wide range of Office versions across Windows and macOS platforms, representing significant enterprise exposure despite the 2010 disclosure date.

JBoss Seam 2 in Red Hat JBoss EAP 4.3.0 fails to sanitize JBoss Expression Language inputs, allowing remote attackers to achieve arbitrary code execution via crafted URL parameters when the Java Security Manager is misconfigured.

Remote code execution in Windows Shell across XP through Windows 7 via malicious .LNK or .PIF shortcut files automatically processed when displayed in Windows Explorer. Confirmed actively exploited (CISA KEV) in 2010 Stuxnet campaign targeting Siemens WinCC SCADA systems, with 92.13% EPSS score reflecting historical widespread exploitation. Public exploits available. Originally weaponized as zero-day before Microsoft MS10-046 patch release.

Adobe Reader and Acrobat contain a use-after-free vulnerability in the Doc.media.newPlayer JavaScript method that was actively exploited as a zero-day in December 2009 via crafted PDF files with ZLib compressed streams.

Microsoft Office Excel 2002 through 2007 and Office for Mac contain a memory corruption vulnerability triggered by a specially crafted spreadsheet with a malformed FEATHEADER record, allowing remote code execution.

Adobe Reader and Acrobat 9.x, 8.x, and 7.x contain a stack-based buffer overflow in the getIcon method of the Collab object that allows remote attackers to execute arbitrary code via a crafted PDF argument.

Remote code execution in Gitea (self-hosted Git service) via a code-injection flaw (CWE-94) allows attackers to run arbitrary code on the server, with the issue fixed in Gitea 1.27.1 (Alpine package 1.27.1-r0). The vulnerability is confirmed actively exploited (CISA KEV) and publicly available exploit code exists, including a Nuclei detection template and a proof-of-concept repository. With a CVSS 9.8 network/no-auth vector, any internet-exposed unpatched Gitea instance is at immediate, high risk of full compromise.

Code injection in Vim enables local arbitrary code execution when a user opens a specially crafted file, affecting versions prior to the fix packaged as 9.2.0481-r0 on Alpine Linux and addressed separately under Ubuntu USN-8415-1. The vulnerability (CWE-94) arises from improper control over code generation within Vim's scripting or modeline processing, allowing an attacker who can deliver a malicious file to achieve full compromise of confidentiality, integrity, and availability on the target system. No public exploit has been identified at time of analysis, and the EPSS score of 0.01% (3rd percentile) suggests negligible current exploitation activity despite the High CVSS rating.

Code injection in Gitea's Actions workflow handling can let a low-privileged authenticated user who can open a pull request cause workflow content to be executed from the wrong commit in pull_request_target runs, potentially running attacker-influenced workflow code in a privileged context. Gitea 1.19.0 through 1.27.1 are affected; fixed releases are Gitea 1.27.2 and Alpine package 1.27.3-r0. Exploitation is gated on Gitea Actions being enabled and a repository defining a pull_request_target workflow, EPSS is low at 0.22% (12th percentile), and no public exploit was identified at time of analysis.

Stored cross-site scripting in the Document Gallery WordPress plugin through 5.1.1 lets any authenticated user with the Contributor role or higher embed malicious event-handler attributes inside gallery shortcode attributes, which are then rendered unescaped into the page markup. Because the injected payload is stored in post content, it executes in the browser of a higher-privileged editor or administrator who later views or previews that content, potentially leading to session/token theft or full site takeover via an admin session. Publicly available exploit code exists (WPScan advisory), but the flaw is not in CISA KEV and carries no EPSS score in the supplied data, so there is no evidence of active or widespread exploitation - only demonstrated feasibility. Risk is tempered by the required authenticated foothold and the mandatory privileged-victim interaction (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N per independent assessment).

Code injection in Llama-Chinese's Gradio chat demo (examples/chat_gradio_no_merge.py) lets unauthenticated remote attackers run arbitrary code when an operator loads an attacker-influenced value for base_model_name_or_path. Exposed deployments of the example script are the realistic attack surface; the project uses a rolling release with no disclosed version and has not responded to the issue report. Publicly available exploit code exists, but there is no CISA KEV confirmation of active exploitation.

Code injection in RVC-Project Retrieval-based-Voice-Conversion-WebUI through 2.3.260718 lets unauthenticated remote attackers who can reach an exposed Gradio interface manipulate the ckpt_path argument passed to change_info_ in webui.py and execute attacker-controlled code, although user/operator interaction is required and default deployments bind to localhost. Publicly available exploit code exists, but there is no CISA KEV listing and no EPSS score was provided, and the project has not responded to the issue report. Practical risk is concentrated on instances explicitly exposed via Gradio --listen/--share or a reverse proxy/tunnel, where the lack of default authentication makes the code-injection path reachable.

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bounds check for skb-backed dynptrs The skb_pointer_if_linear() function checks whether a memory region of length len starting at offset off into the skb is in the linear area, and returns a pointer to the region if so. The check currently subtracts between skb_headlen and offset of the check, and since skb_headlen is unsigned the subtraction can underflow. This causes the bounds check to spuriously pass and generate an arbitrary pointer of the form *(skb->data + off). The only user of this helper is currently skb-backed BPF dynptr code. Returning the wrong pointer leads to the dynptr erroneously being backed with invalid memory. Ensure the subtraction cannot underflow, and fail the check if it would. Use u64 arithmetic to also prevent overflow when calculating (skb_headlen(skb) - off) since off is unsigned.

Code injection in AUTOMATIC1111 Stable Diffusion WebUI through 1.10.1 lets remote attackers execute attacker-chosen Python objects when a victim loads a malicious third-party model whose YAML configuration supplies a crafted 'target' value to get_obj_from_str in modules/sd_models.py. User interaction is mandatory - the victim must import the untrusted model/config - but no authentication is needed on the attacker side because the payload travels inside distributed model files; publicly available exploit code exists and a proof-of-concept ZIP is referenced. No CISA KEV entry confirms active exploitation, and the vendor has not responded to the early issue report, so no vendor-released patch was identified at time of analysis; the supplied CVSS 4.0 score of 2.1 conflicts with the independently assessed CVSS 3.1 vector, which rates post-load confidentiality, integrity, and availability impact as high.

Path traversal in Vita3K builds before 4187 allows a crafted .vpk archive to write files outside the emulator's install directory, potentially leading to host code execution with the privileges of the Vita3K process. Exploitation is local and requires the victim to install a malicious package, so risk is moderate-to-low for most environments but non-trivial for users who routinely sideload .vpk files. No public exploit code has been identified at time of analysis, and the flaw is remediated in build 4187.

JQ::Lite versions before 2.51 for Perl execute Perl code embedded in a query's regular expression by compiling it with string eval. The pattern given to test(), match(), or the match and =~ conditions of select() is placed in a `qr'...'` literal and compiled as source text, so a `(?{ ... })` code block in it runs without `use re 'eval'`. Single quotes in the pattern are escaped, but a code block runs in place and needs none. An attacker who supplies a query, or text that an application inserts into the pattern of one, can execute arbitrary Perl code in the calling process.

Code injection (CWE-94) in the HivePress WordPress plugin, affecting versions through 1.7.32, allows an authenticated user holding only low privileges to influence the generation of executable code on the host site, with the assessed impact falling entirely on confidentiality. Exploitation is network-reachable at low complexity with no user interaction, but it is gated by authentication (CVSS PR:L), so an attacker must first obtain a valid account on the target WordPress installation - fully unauthenticated visitors cannot exploit it. EPSS, CISA KEV, and public exploit-code status were not provided in the source data, so no active-exploitation signal can be asserted; the vendor's fix version is likewise not enumerated in the available input, and remediation details should be confirmed against the Patchstack advisory.

PHP object injection in ACF Frontend Admin by DynamiApps through 3.29.13 lets an authenticated administrator store crafted serialized content that the plugin later deserializes when rendering public-facing pages. Remote code execution is conditional: it requires a usable POP/gadget chain in the plugin or WordPress core, so object injection alone does not guarantee code execution; the CVSS 3.1 score is 6.6 with PR:H and AC:H. No public exploit code or CISA KEV entry was identified at time of analysis.

Argument injection in Seanime v3.7.0 through v3.10.3 lets unauthenticated clients on the same LAN or a shared Tailnet smuggle attacker-controlled flags into the ffmpeg command line, achieving arbitrary file write and file truncation as the user running seanime. The flaw is reachable because the application's privileged-settings guard did not treat a switch of transcodeHwAccel to 'custom' (with attacker-supplied decodeFlags/encodeFlags in transcodeHwAccelCustomSettings) as a protected change, so a crafted mediastream or HLS playlist request is executed with the injected options appended verbatim to ffmpeg's argument vector. This is rated Medium (CVSS 4.0 5.3, AV:A/AC:L/PR:N/UI:N/VC:L/VI:L/VA:N); exploitation is bounded to adjacent-network reachability and requires a trusted LAN/localhost origin, no public exploit code has been identified at time of analysis, and no confirmed active exploitation (CISA KEV) has been reported.

Code injection in Apache Kylin versions 4 through 5.0.4 lets an attacker who can supply or influence a JDBC URL's 'special parameter' trigger generation of attacker-controlled code in the context of the Kylin service, with the assessed vector rating confidentiality, integrity and availability impact as high (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Per the vendor, practical risk is concentrated on Kylin services directly exposed to the public network, which Apache describes as uncommon, while typical in-house deployments are mostly not impacted; exposure of the datasource/JDBC configuration path is therefore the principal limiting factor. No CISA KEV listing, EPSS score, or public proof-of-concept is present in the available intelligence, so no public exploit has been identified at time of analysis, and upgrading to 5.0.5 removes the vulnerable condition.

Arbitrary shortcode execution in the ProfilePress (formerly WP User Avatar) WordPress plugin through version 4.17.5 allows authenticated users with Subscriber-level access or higher to plant shortcode markup inside a comment, which is later rendered server-side by do_shortcode() when any visitor opens that user's front-end profile Comments tab. Because the plugin's ppress_neutralize_buffer_shortcodes() pass only strips pp-custom-html and bracket fragments containing HTML delimiters, shortcodes exposed by any other active plugin or theme remain intact and can be executed with attacker-chosen attributes, giving a low-privilege user a route to capability-gated or data-returning shortcodes and to raw HTML injection on a publicly viewable page. Rated CVSS 5.4 (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N), the impact is bounded by which shortcodes a given site happens to have installed, and no public exploit code or confirmed active exploitation was identified at time of analysis.

Authenticated attackers holding only subscriber-level access can execute arbitrary WordPress shortcodes on sites running the WPEverest User Registration & Membership plugin in all versions up to and including 5.2.8, because an action passes an unvalidated value straight into do_shortcode without checking it first. The flaw is rated CVSS 5.4 (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) and there is no public exploit identified at time of analysis - it is not confirmed actively exploited (CISA KEV). Impact is bounded, but the practical risk is elevated on the many sites that leave open user registration enabled, since an attacker can simply self-provision the required subscriber account and then trigger the vulnerable shortcode path; sites that disable open registration meaningfully reduce exposure.

Arbitrary shortcode execution in the Slim SEO WordPress plugin (all versions up to and including 4.11.1) allows an authenticated attacker holding a Subscriber-level account to store a shortcode payload in their own Biographical Info field, which the plugin subsequently passes to do_shortcode when rendering that author's description on the front end. Exploitation is gated by concrete prerequisites - an attacker-controlled low-privilege account (in practice, open user registration), a front-end request that resolves the author description without redirection (the ?author= query parameter while Slim SEO's auto_redirection setting is disabled), and the presence of other plugins whose shortcodes are worth invoking - and the resulting impact depends on which shortcodes other installed plugins expose, making this a moderate, authentication-gated code-injection issue rather than a top-priority emergency. No public exploit identified at time of analysis, and the vendor shipped a fix in 4.11.2 that strips shortcodes from the user bio.

A deterministic 3-byte heap-based buffer overflow in ssldump's FAN/1 X.509 fingerprinting routine (fanx_fingerprint in ssl/sslxprint.c) corrupts the heap on every call that processes a valid certificate. Exploitation requires the victim to run ssldump with FAN/1 fingerprinting enabled (the -j and -N options) against an attacker-supplied pcap containing a TLS handshake with a valid X.509 server certificate; the attack vector is local and depends on the user actively choosing to parse the malicious capture with non-default options. The most likely outcome is a crash/denial of service, with arbitrary code execution in the context of the ssldump user remaining a worst-case possibility; no public exploit code has been identified at time of analysis, and the overflow content is largely fixed, which makes code execution substantially harder than a denial of service.

Unauthenticated shortcode injection in the Forminator Forms WordPress plugin (≤1.58.1) allows remote attackers to execute arbitrary registered shortcodes by sending a GET request to the search results page on any block-theme install, or by submitting an anonymous comment on any post with comments enabled. With a CVSS score of 6.5 and no public exploit identified at time of analysis, the practical impact is bounded by which shortcodes are present on the target site, but the exceptionally low exploitation barrier-no authentication, no user interaction, and no Forminator-specific configuration-makes this an elevated-priority issue.

Unauthenticated arbitrary shortcode execution in the WordPress plugin Forminator Forms (Contact Form, Payment Form & Custom Form Builder) affects all versions up to and including 1.58.1, allowing remote attackers to run any WordPress shortcode registered on the target site by submitting a quiz form. Exploitation is gated by a non-default configuration: a published quiz whose email/notification template contains the {quiz_result} merge tag, after which attacker bytes injected via the User-Agent header or the referer_url POST parameter (neither of which is stripped of the '[' and ']' shortcode delimiters by sanitize_text_field()/esc_html()) are fed to do_shortcode(). The assessed vector is CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N (Attack Complexity High, unauthenticated) because the quiz-result template precondition must be met; no public exploit code and no CISA KEV active-exploitation entry were identified at time of analysis, and real-world impact scales with which dangerous shortcodes other installed plugins or themes expose.

Arbitrary shortcode execution in the WordPress Broken Link Checker plugin (all versions up to and including 2.4.14.1) allows an unauthenticated commenter to embed a shortcode payload in a comment's href or src attribute; once that comment is approved through the site's normal moderation workflow, the plugin's link parser passes the value to do_shortcode during a scheduled WP-Cron scan, executing the shortcode with no further attacker interaction. The published CVSS v3.1 base score is 6.5 (AV:N/AC:L/PR:N/UI:N), but the practical vector carries a user-interaction precondition (UI:R) because moderator approval is required, and impact is bounded by which shortcodes are registered on the target site. No public exploit code has been identified at time of analysis.

Arbitrary shortcode execution in the Popup Box plugin for WordPress (ays-pro) versions 6.4.1 through 6.4.2 lets unauthenticated remote attackers invoke any shortcode registered on the site with attacker-chosen attributes, because client-controlled IP-related HTTP headers are folded into a popup body and then run through do_shortcode(). The attack is only reachable when a site administrator has manually inserted the %%user_ip_address%% token into a popup's Custom Content body, so default installations and sites that never use that token are not affected; impact is bounded by the shortcodes already installed (no direct PHP injection), which is why the assessed vector scores only 4.8 with high attack complexity. No public exploit code and no confirmed active exploitation were identified at time of analysis, and the vendor reference points to a fix in 6.4.3.

Buffer Overflow vulnerability in WEINVEIW CO.,LTD EBPro v.6.10.01.510_20251022 allows a remote attacker to execute arbitrary code via the UtilityManagerEx.exe component

Cross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an attacker to execute arbitrary code via reflecting un-sanitized input from query string parameters directly into the HTML response without proper output encoding

Arbitrary code execution is possible on a broad set of Lenovo consumer tablets - including the Idea Tab Pro TB373FU, Idea Tab / Lenovo Tab K11 Gen 2 TB336FU and TB336ZU, Legion Tab TB321FU, Tab M11 TB330FU and TB330XU, Tab Extreme TB570FU and TB570ZU, and Tab K11 TB330FUP, with additional models enumerated in vendor tagging (Tab K11 Plus, Tab K9, Tab One, Tab P12, Tab Plus, Yoga Tab, Yoga Tab Plus, and the TB311FU/TB311XU folio and clear-case variants) - by an attacker who has physical possession of the tablet while it is already unlocked. The CVSS 4.0 base score is 5.4 (MEDIUM), with vector AV:P/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N, meaning exploitation requires the attacker to be physically at the device (AV:P), no prior privileges are needed (PR:N), no victim interaction is required beyond the device already being unlocked (UI:N), and attack requirements are present (AT:P) in the form of physical custody plus an unlocked state; the flaw affects a device's own confidentiality, integrity and availability but does not propagate to subsequent systems. No CISA KEV listing is associated with this CVE and no public exploit code has been identified at time of analysis, so real-world risk is bounded by the physical and unlocked-device preconditions - a locked, powered-off, or patched unit is not exploitable via this issue.

Code injection in the WPMU DEV Broken Link Checker WordPress plugin, affecting all versions up to and including 2.4.14.1, allows an unauthenticated remote attacker to feed crafted input to the plugin's link-checking/parsing routine and potentially expose sensitive data. Per the assessed CVSS vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N), exploitation is network-reachable and needs no privileges, but a victim must be induced to trigger the vulnerable action, and the confirmed impact is confined to confidentiality with no integrity or availability effect. No public exploit identified at time of analysis.

Arbitrary code execution is possible in HPE NonStop Posix User Threads for an authenticated local user with low-level privileges who supplies crafted input to the pthread functionality, due to a heap-based buffer overflow (CWE-122). The flaw requires pre-existing local access (AV:L), no user interaction (UI:N), and no non-default configuration indicated by the available data; there is no public exploit identified at time of analysis. The vendor advisory is at https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US, and the independent assessment rates confidentiality, integrity, and availability impact as High despite the vendor's 6.6 Medium base score with Low/Low/High impact.

A stack-based buffer overflow in the HPE NonStop Kernel Level Thread Model library allows a locally authenticated, low-privileged user to overwrite stack memory and, in the assessed worst case, execute arbitrary code in the context of the affected library. The vulnerability is reachable only with local access and valid low-privilege credentials (CVSS:3.1/AV:L/AC:L/PR:L/UI:N), so it cannot be triggered remotely and requires an attacker to already hold a foothold on the NonStop host; no public exploit code or confirmed active exploitation has been identified at time of analysis, and the assessed severity is moderate rather than emergency-grade. Success depends on invoking the vulnerable library from an existing session, which constrains realistic exposure to insiders, compromised local accounts, or post-exploitation privilege-escalation chains on operator-managed NonStop systems.

Unauthenticated shortcode injection in the Ocean Extra plugin for WordPress (all versions up to and including 2.6.0) lets remote attackers pass attacker-controlled values into the WordPress do_shortcode() function without proper validation, causing arbitrary registered shortcodes to execute. Per the assessed CVSS vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N, score 6.5), no authentication and no user interaction are required, but real-world impact is bounded by which shortcodes are actually registered on the target site; the practical severity is therefore moderate rather than critical, and no public exploit code or confirmed active exploitation was identified at time of analysis. Note that the OceanWP/Ocean Extra vendor advisory and an upstream code changeset are the primary available intelligence, and no vendor-released fixed version number is independently confirmed.

Arbitrary file write in the Markdown Preview Enhanced extension for Visual Studio Code (all versions before 0.8.30) lets JavaScript already running inside a preview webview invoke the _crossnote.updateMarkdown command with an arbitrary target URI and attacker-supplied content; the extension then hands both straight to vscode.workspace.fs.writeFile, so configuration, startup, source, and build files can be overwritten within the limits of the VS Code user's operating-system privileges. Exploitation is conditional rather than standalone: remote attackers need no credentials per the CVSS PR:N vector, but the victim must open attacker-controlled Markdown or repository content with the extension active, and the attacker must first obtain a separate webview JavaScript execution path such as the .crossnote/head.html script injection or the blind command-dispatch weakness fixed in the same release. No public exploit code and no confirmed active exploitation were identified at time of analysis, and a vendor patch exists in 0.8.30, making this a moderate, conditional risk rather than a drop-everything priority.

Authenticated FileRise users who hold both upload and archive-extraction permissions can bypass the application's blocked-extension upload policy by packaging a PHP-family file inside a ZIP archive and extracting it, because the filename policy is never applied before ZipArchive::extractTo() writes entries to disk (CWE-434). All FileRise versions prior to 3.16.0 are affected via the network with low privileges (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N, 6.5); the guaranteed outcome is arbitrary-extension file write, and code execution occurs only on deployments whose web server actually executes content from the upload/storage directory. Exploitation is conditional rather than confirmed in the wild - no public exploit code has been identified at time of analysis and there is no CISA KEV entry - and the vendor addressed the flaw with upstream fix commit f7114ca2a4e624238dda0d097a07ad6b05c11bb6, released in version 3.16.0.

Local privilege escalation in Metalama allows an unprivileged user on a shared Linux or macOS host to plant a malicious .NET assembly in the world-writable system temp directory that will later be loaded and executed by a higher-privileged victim's build process. Metalama cached and extracted compile-time assemblies, auxiliary tools, and embedded helper assemblies under Path.GetTempPath() (/tmp) and trusted existing artifacts solely on a sentinel '.completed' marker file rather than any integrity check, so an attacker can pre-create the deterministic directory layout and rely on the marker to skip regeneration. Exploitation requires a pre-existing local account on the same shared machine or CI/build agent and a victim build initiated afterward; Windows default configurations are not affected because per-user temp ACLs prevent cross-user planting. No public exploit code has been identified at time of analysis and there is no KEV listing, but EPSS-style urgency is moderate given the low attack complexity and the availability of a vendor fix in 2026.1.19 (and 2025.1.18 on the older branch).

Unauthenticated remote code execution is possible in the WordPress plugin MDTF (wp-meta-data-filter-and-taxonomy-filter) through version 1.3.9, which carries a CWE-94 code injection flaw in PluginUs.Net's metadata/taxonomy filtering component. Per the CVSS vector (PR:N/UI:N) no credentials or user interaction are required, so any site running the vulnerable release with the plugin active is exposed; the NVD score of 5.3 (C:L/I:N/A:N) is materially lower than the assessed C:H/I:H/A:H, and no public exploit code and no CISA KEV listing were identified at time of analysis. Confidence is capped because the signals are thin and internally inconsistent - the unresolved CVSS disagreement and the absence of any named injectable parameter, function, or endpoint mean the minimal precondition confirmed so far is simply the presence of the vulnerable plugin version.

Arbitrary file write in @appium/support (Appium) prior to 7.2.6 lets a crafted ZIP archive escape the intended extraction directory by first planting a symbolic-link entry that points outside that directory and then adding a regular-file entry whose legitimate name resolves through the link; because the pre-fix containment check validated only entry names lexically, neither '..' segments nor absolute paths are required. Per the CVSS vector (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N), the attack is network-deliverable and unauthenticated but requires an operator or automated pipeline to actually trigger extraction of the hostile archive, and the write is confined to locations writable by the Appium process - overwriting configuration, startup scripts, or executables can escalate to code execution depending on that writable target. Vendor-released patch: @appium/support 7.2.6; no public exploit code and no CISA KEV entry are associated with this CVE at time of analysis.

Shopware version 6.7 allows the upload of attacker‑controlled HTML files and serves them as text/html without effective security headers, enabling stored cross-site scripting (XSS). When a malicious uploaded file containing an embedded JavaScript payload is viewed by an administrator, the attacker can access and exfiltrate the administrator's authentication token. The compromised token enables unauthorized access to the Shopware Administration API. If the affected administrator account possesses extension‑management privileges, an attacker can upload, install, and activate malicious plugins to achieve arbitrary PHP code execution on the underlying OS with the privileges of the Shopware process.

Authenticated JumpServer users who hold permission to create or execute Ansible-based automation tasks can inject attacker-controlled template expressions that the automation rendering engine evaluates, invoking sensitive Ansible lookups (file, pipe, env, password) that disclose files or environment values and may permit limited command execution under the privileges of the automation process. All JumpServer deployments prior to 4.10.17-lts are affected, but exploitation requires operator-level privilege (CVSS vector PR:H) and remains confined to the automation process - it grants neither unauthenticated access nor reach into unrelated JumpServer assets. No public exploit identified at time of analysis, and the issue is fixed in version 4.10.17-lts.

Local attackers with low-level privileges can cause buffer overflows and memory corruption in AMI AptioV UEFI firmware by supplying malformed length values to a firmware interface, potentially leading to arbitrary code execution within the BIOS/SMM environment. The vulnerability (CWE-805) affects AptioV-based firmware across OEM platforms and requires local access plus existing OS-level privileges; no public exploit identified at time of analysis. Due to the local attack vector and dependency on OEM firmware updates, this is assessed as a credible but second-tier priority.

An out-of-bounds write (CWE-787) in AMI Aptio V (APTIOV) BIOS firmware can be triggered by a local attacker who already holds high privileges, potentially corrupting memory inside firmware code paths and enabling buffer overflows, arbitrary code execution, and loss of confidentiality, integrity, and availability. Successful abuse requires local access plus pre-existing administrative or kernel-level privileges, and the high attack complexity means specific state, timing, or configuration preconditions must be met before the write can be controlled, so this is best characterized as a firmware persistence/privilege-escalation primitive rather than an initial-access or remote attack vector. At time of analysis there is no public exploit identified, no CISA KEV listing, and no confirmed exact fix version in the available data, though AMI has issued security advisory AMI-SA-2026002 covering the issue.

A classic buffer overflow (CWE-120) in AMI Aptio V UEFI/BIOS firmware allows a local user holding low-level privileges to supply crafted input to an affected BIOS code path, producing memory corruption that can crash or destabilize the platform (rated high availability impact) and potentially execute limited attacker-controlled code in firmware context. Exploitation is strictly local and requires existing privileges rather than anonymous access (CVSS:3.1/AV:L/AC:L/PR:L/UI:N), with no user interaction and low attack complexity, but the exact vulnerable interface is not identified because the CPE is wildcarded and the advisory content was not retrieved. There is no public exploit code identified at time of analysis and the flaw is not listed in CISA KEV, making this a serious-but-not-emergent local firmware flaw; no EPSS score was supplied.

Integer overflow in AMI AptioV BIOS firmware, classified as CWE-190, can be triggered by a local high-privileged caller to cause buffer overflows, memory corruption, and potential arbitrary code execution with high impact to confidentiality, integrity, and availability. Exploitation requires local access, an existing administrator/root-level foothold (PR:H), and high attack complexity (AC:H) per the assessed vector AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H, so it is not remotely reachable or mass-exploitable. No public exploit was identified at time of analysis, and active exploitation is not confirmed by KEV data; this is a moderate-priority, high-barrier firmware flaw rather than a widespread emergency.

Heap buffer underwrite in ImageMagick's PICT decoder (coders/pict.c) on 32-bit builds allows unauthenticated remote attackers to corrupt memory below the allocated buffer by supplying a crafted PICT file with maximized row, column, and bytes-per-line values, potentially causing a crash or code execution. Affected versions are ImageMagick before 7.1.2-33 (7.x) and before 6.9.13-58 (6.x) when compiled as 32-bit; 64-bit builds are not affected. No public exploit code has been identified at the time of analysis, and the CVSS v4.0 score is 6.3 (moderate) with high attack complexity per the assessed CVSS:3.1 vector (AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).

Code injection in storyicon's comfyui_segment_anything custom node allows arbitrary Python code to run inside the victim's ComfyUI environment when a crafted GroundingDINO configuration is loaded through the SLConfig._file2dict routine in local_groundingdino/util/slconfig.py. Because the loader evaluates config-file contents as Python, an attacker who can place or share a malicious config (for example bundled with a shared workflow or downloaded model set) can execute code with the privileges of the ComfyUI process; the independent assessment rates this AV:L/UI:R with high confidentiality, integrity and availability impact confined to the host running the node. No public exploit was identified at time of analysis, and no vendor-released patch is available - the project was notified through GitHub issue #114 but has not responded.

Code injection in PaddlePaddle PaddleX through version 3.7.2 allows an attacker to execute arbitrary Python code by supplying a crafted 'scale' value that the text-detection preprocessing component passes to a bare eval() call. The flaw is not reachable in a default deployment: it requires the victim to load an attacker-controlled PaddleX text-detection model or pipeline configuration, which is why the assessed vector carries User Interaction (UI:P) and a local attack vector despite high confidentiality, integrity, and availability impact. No public exploit code has been identified at time of analysis, and the upstream fix (PR #5212) is still awaiting acceptance, so no released patched version is independently confirmed.

Code injection in TinyLLaVA Factory (TinyLLaVA_Factory) allows a remote attacker to execute arbitrary code with the privileges of the process that loads a model configuration, by supplying a crafted llm_model_name_or_path value that is handled by TinyLlavaConfig._load_text_config in tinyllava/model/configuration_tinyllava.py. Exploitation is not fully autonomous: user interaction is required (CVSS 4.0 UI:P / assessed CVSS 3.1 UI:R) because an operator must point the loader at the hostile path or model reference - an untouched default deployment is not affected - while authentication is not required per the vector (PR:N). Publicly available exploit code exists (the CVE reference set includes a public upstream issue/exploit at GitHub issue #212 and is flagged as 'exploit'), but there is no confirmation of active exploitation via CISA KEV, and because the project uses a rolling release with no response to the report, no vendor-patched version can be identified; the independent assessment (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, base 8.8) rates confidentiality, integrity and availability impact as High, well above the 2.1 score published by the reporting source.

Code injection in the AutoBackend model-loading path of iMoonLab yolov13 (all versions up to commit 73289949533efac82bb5f72ec19b746618656bd2) allows a local, low-privileged attacker to execute arbitrary code by supplying or tampering with a model artifact whose imgsz, names, or kpt_shape metadata is passed to eval() in ultralytics/nn/autobackend.py. Exploitation is not remote: the attacker must already be able to plant or modify a model file that the victim's pipeline later loads (for example an untrusted downloaded checkpoint, a shared model registry, or a writable model directory), and the CVSS 4.0 vector confirms local access with low privileges (AV:L/PR:L). No public exploit code and no confirmed active exploitation were identified at time of analysis, and the upstream project was notified via GitHub issue #81 but has not responded, so no vendor-released patch exists as of this analysis.

Code injection in RAE, through its Config-Driven Model Instantiation component, allows a local attacker with low-level privileges to cause arbitrary Python object resolution and potentially code execution when a user loads or runs a crafted model configuration. Exploitation is constrained to local access with required user interaction and only low confidentiality, integrity, and availability impact, so despite the RCE and code-injection tags this is assessed as a low-priority, low-real-risk issue. No public exploit code has been identified at time of analysis, and no vendor-released patch has been identified.

Code injection in ModelTC LightX2V through version 0.5.0 allows a local attacker to execute arbitrary code when a victim loads an attacker-controlled tokenizer/model via the cosmos3 runner's AutoTokenizer.from_pretrained call, by supplying a crafted auto_map value in the model configuration. Exploitation requires the user to load untrusted model content and runs only with the local user's existing privileges; there is no remote network attack surface. Publicly available exploit code exists, the project has not responded or released a patch, and the assessed real-world risk remains low because the attack is local and depends on the victim choosing to load a malicious model.

Loading an attacker-supplied read-only dictionary (.rws) file in GNU Aspell through 0.60.8.2 can corrupt heap memory, yielding reliable denial of service and potentially code execution. The root cause is a heap-based buffer overflow write (CWE-122) triggered by a signed-integer overflow in String::reserve(), which lets a crafted 32-bit length field in the .rws header (for example lang_name_size = 0x7FFFFFFF, paired with the valid endian marker 12345678) bypass the capacity check so attacker-controlled data is written past an undersized allocation. Exploitation is local in nature - there is no network-service trigger - and requires the victim to actively load the malicious dictionary, such as by running 'aspell dump master <file>'; no public exploit code was identified and there is no confirmed active exploitation at time of analysis, so this is assessed as a moderate-priority issue despite the RCE tag.

Code injection in IBM Maximo Application Suite's Location Service for Esri component (versions 9.0, 9.1, and 9.2) allows an authenticated attacker with high privileges (CVSS PR:H) and network access to supply an unsanitised container image configuration in the Kubernetes operator template, which the operator may then deploy. The issue is rated CVSS 6.5 Medium (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) and can lead to high confidentiality and integrity impact, but requires privileged access to the MAS environment and affects an optional component. No public exploit identified at time of analysis, and no KEV or EPSS data indicates active exploitation.