The Gravity Forms plugin for WordPress versions up to and including 2.10.0 is vulnerable to stored cross-site scripting (XSS) via the Consent field hidden inputs. This vulnerability arises from a flawed state validation mechanism that improperly validates input sanitized by wp_kses(), allowing malicious scripts to be stored and executed when an administrator views the Entries List page. Unauthenticated attackers can exploit this to execute arbitrary scripts in the context of authenticated administrators.
KDE Dolphin before 25.12.3 allows applications in a Flatpak (or with AppArmor confinement) to open folders outside of the application sandbox without additional scrutiny. Dolphin's implementation of the FileManager1 protocol allows the path given to be any type of file, including scripts or executables. (By default, Dolphin will then prompt the user to determine if they want to launch a script or executable; however, the intended behavior is to block the attempted action, not present a consent prompt.)
Microsoft Threat Intelligence uncovered a macOS-focused cyber campaign by North Korean threat actor Sapphire Sleet utilizing social engineering to compromise systems. The attack chain begins with a malicious AppleScript file disguised as a Zoom SDK update, which executes cascading payloads through curl-to-osascript chains. The campaign deploys multiple backdoors including com.apple.cli, services, icloudz, and com.google.chromes.updaters for persistence and command execution. Credential harvesting occurs through fake system dialogs that mimic legitimate macOS password prompts. The threat actor bypasses Transparency, Consent, and Control protections by directly manipulating the TCC database, enabling extensive data exfiltration targeting cryptocurrency wallets, browser credentials, Telegram sessions, SSH keys, and Apple Notes. Operations focus on cryptocurrency, finance, and blockchain organizations with the primary objective of stealing digital assets.
Improper validation of bash commands in Snowflake Cortex Code CLI versions prior to 1.0.25 allowed subsequent commands to execute outside the sandbox. An attacker could exploit this by embedding specially crafted commands in untrusted content, such as a malicious repository, causing the CLI agent to execute arbitrary code on the local device without user consent. Exploitation is non-deterministic and model-dependent. The fix is automatically applied upon relaunch with no user action required.
A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Member Center(华硕大厅) allows a local user to achieve privilege escalation to Administrator via exploitation of a Time-of-check Time-of-use (TOC-TOU) during the update process, where an unexpected payload is substituted for a legitimate one immediately after download, and subsequently executed with administrative privileges upon user consent.
Refer to the 'Security Update for ASUS Member Center' section on the ASUS Security Advisory for more information.
PraisonAI is a multi-agent teams system. Prior to 4.5.128, PraisonAI automatically loads a file named tools.py from the current working directory to discover and register custom agent tools. This loading process uses importlib.util.spec_from_file_location and immediately executes module-level code via spec.loader.exec_module() without explicit user consent, validation, or sandboxing. The tools.py file is loaded implicitly, even when it is not referenced in configuration files or explicitly requested by the user. As a result, merely placing a file named tools.py in the working directory is sufficient to trigger code execution. This behavior violates the expected security boundary between user-controlled project files (e.g., YAML configurations) and executable code, as untrusted content in the working directory is treated as trusted and executed automatically. If an attacker can place a malicious tools.py file into a directory where a user or automated system (e.g., CI/CD pipeline) runs praisonai, arbitrary code execution occurs immediately upon startup, before any agent logic begins. This vulnerability is fixed in 4.5.128.
The npm package @langgraphjs/toolkit versions 1.2.10 and 1.2.11 contains malicious code that executes a postinstall script to collect sensitive system information and exfiltrate it to a hardcoded external server. The package impersonates the LangChain/LangGraph ecosystem to deceive users. The exfiltrated data includes hostname, OS username, current working directory, git committer email, and GitHub login/email, violating user consent and privacy. Installation of this package may lead to full system compromise, requiring immediate secret and key rotation and package removal.
The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 7.4.4.2. This is due to the `revert_divs_to_summary` function replacing `”` HTML entities with literal double-quote characters (`"`) in post content without subsequent sanitization. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the injected page. The Classic Editor plugin is required to be installed and activated in order to exploit this vulnerability.
Claude Code is an agentic coding tool. Versions prior to 2.1.53 resolved the permission mode from settings files, including the repo-controlled .claude/settings.json, before determining whether to display the workspace trust confirmation dialog. A malicious repository could set permissions.defaultMode to bypassPermissions in its committed .claude/settings.json, causing the trust dialog to be silently skipped on first open. This allowed a user to be placed into a permissive mode without seeing the trust confirmation prompt, making it easier for an attacker-controlled repository to gain tool execution without explicit user consent. This issue has been patched in version 2.1.53.
CVE-2026-32753 is a high-severity cross-site scripting (XSS) vulnerability in FreeScout versions prior to 1.8.209. It arises from improper sanitization of SVG files masquerading as PNG images, allowing authenticated users to upload malicious SVG content that executes JavaScript when rendered inline. The vulnerability exploits the application's file extension and content-type checks, which incorrectly permit SVG payloads with a . png extension and image/svg+xml content type to bypass security controls. When another user or administrator views the malicious attachment, the embedded script executes with their privileges, enabling actions on their behalf without their consent. This flaw affects the confidentiality and integrity of user sessions and data. The issue has been fixed in version 1.8.
CVE-2026-22215 is a medium severity Cross-Site Request Forgery (CSRF) vulnerability affecting wpDiscuz versions prior to 7.6.47. The flaw exists in the getFollowsPage() function, which lacks nonce validation, allowing attackers to craft malicious requests that trigger unauthorized actions. Exploitation can lead to enumeration of user follow relationships and manipulation of follow data without user consent. No authentication or privileges are required, but user interaction is necessary to execute the attack. Although no known exploits are currently in the wild, the vulnerability poses a risk to websites using vulnerable wpDiscuz versions. Organizations should prioritize patching or applying mitigations to prevent unauthorized data manipulation and privacy breaches. The threat primarily affects WordPress sites globally, with heightened risk in countries with widespread WordPress adoption. The CVSS 4.
CVE-2025-70031 is a high-severity Cross-Site Request Forgery (CSRF) vulnerability affecting Sunbird-Ed portal version 1.13.4. This vulnerability allows remote attackers to trick authenticated users into executing unwanted actions without their consent, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system. Exploitation requires user interaction but no privileges or authentication are needed by the attacker. Although no known exploits are currently in the wild and no patches have been published, the vulnerability's CVSS score of 8.8 indicates a critical risk. Organizations using Sunbird-Ed portal should prioritize mitigation to prevent unauthorized state-changing requests. The threat is particularly relevant to countries with significant deployments of Sunbird-Ed, especially in education sectors. Immediate defensive measures include implementing CSRF tokens, validating request origins, and educating users about phishing risks.
Chamilo is a learning management system. Prior to version 1.11.34, a Cross-Site Request Forgery (CSRF) vulnerability allows an attacker to delete projects inside a course without the victim’s consent. The issue arises because sensitive actions such as project deletion do not implement anti-CSRF protections (tokens) and GET based requests. As a result, an authenticated user (Trainer) can be tricked into executing this unwanted action by simply visiting a malicious page. This issue has been patched in version 1.11.34.
In parsePermissionGroup of ParsedPermissionUtils.java, there is a possible way to bypass a consent dialog to obtain permissions due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
A deceptive campaign is using a fake Zoom meeting website to covertly install Teramind, a commercial monitoring tool, on unsuspecting users' Windows machines. The operation begins with a convincing imitation of a Zoom video call, complete with scripted participants and artificial technical issues. An automatic 'Update Available' prompt then initiates the download of a malicious installer without user consent. The installed software is a covert build of Teramind, designed to run invisibly and avoid detection by security tools. This campaign is particularly dangerous due to its use of legitimate commercial software, which may evade traditional antivirus detection. The attackers exploit users' trust in Zoom and Microsoft to execute their plan, highlighting the importance of verifying meeting links and being cautious with unexpected software updates.
The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's cmplz-accept-link shortcode in all versions up to, and including, 7.4.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2025-14472 is a high-severity Cross-Site Request Forgery (CSRF) vulnerability affecting Drupal's Acquia Content Hub versions before 3.6.4 and between 3.7.0 and 3.7.3. The vulnerability allows attackers to trick authenticated users into executing unwanted actions on the Content Hub without their consent, potentially leading to unauthorized data modification or leakage. Exploitation requires user interaction but no privileges or authentication from the attacker. The vulnerability impacts confidentiality and integrity but not availability.
CVE-2025-13982 is a high-severity Cross-Site Request Forgery (CSRF) vulnerability affecting the Drupal Login Time Restriction module versions before 1.0.3. This vulnerability allows an attacker to trick authenticated users into executing unwanted actions related to login time restrictions without their consent. Exploitation requires user interaction but no privileges or authentication are needed, and it can result in high confidentiality and integrity impacts. Although no known exploits are currently in the wild, the vulnerability poses a significant risk to Drupal sites using this module. European organizations relying on Drupal for web content management could face unauthorized changes to login policies, potentially leading to unauthorized access or denial of legitimate access. Mitigation involves promptly updating the module to version 1.0.3 or later once available, implementing anti-CSRF tokens, and monitoring for suspicious activity.
The Cookie consent for developers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple settings fields in all versions up to, and including, 1.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
