Threat database

Kiteworks Core versions prior to 9.5.0 contain a stored SQL injection vulnerability in an administrative reporting feature. This flaw allows an authenticated administrator to read sensitive database information and potentially disrupt service availability. Exploitation requires valid administrative credentials and access to the vulnerable reporting function.

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to a path traversal weakness in an administrative import function allowed an authenticated administrator to write files to arbitrary locations on the server. This could potentially be leveraged to execute arbitrary code on the underlying system.

Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms <= 2.7.2 versions.

The WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection via the 'data_fields_list' parameter in all versions up to, and including, 1.5.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with custom-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.1 versions.

BlueKitchen BTstack through 1.8.2 fails to validate the peer-reported endpoint count against table bounds in A2DP stream endpoint discovery. A bonded peer can send an AVDTP DISCOVER response with more endpoints than the fixed table holds, causing out-of-bounds writes that corrupt adjacent static objects and crash the process or sever event delivery.

The WP Directory Kit plugin for WordPress is vulnerable to blind SQL Injection via the 'order_by' parameter in all versions up to, and including, 1.5.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with custom-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certificate validation vulnerability in the IEC 60870-5-104 TLS client (Task Mode). This allows a network-positioned attacker to bypass certificate validation via a certificate with multiple simultaneous faults, enabling a Man-in-the-Middle attack on protected communications.

Unauthenticated Cross Site Request Forgery (CSRF) in Mang Board WP <= 2.3.8 versions.

CVE-2026-83596 is a high-severity buffer overflow vulnerability in WebKitGTK affecting Red Hat Enterprise Linux 6. It arises from improper memory handling when processing malicious web content, potentially causing memory corruption. Exploitation requires tricking a user into loading crafted web content, possibly leading to remote code execution. The vulnerability is exploitable primarily via graphical interface packages that use WebKitGTK4, such as GNOME components. Mitigation includes avoiding processing untrusted web content and optionally removing affected packages, though this may impact system functionality. No official fix or patch status is confirmed yet.

Mang Board WP, a WordPress plugin, contains a vulnerability in all versions up to and including 2.3.7 that allows authenticated users with subscriber-level access or higher to forge administrator authentication cookies. This is caused by improper privilege management due to flawed HMAC generation and insufficient validation of authentication cookies. Exploiting this flaw can lead to complete site takeover by changing administrator passwords.

CVE-2026-78376 is a high severity use-after-free vulnerability in WebKitGTK affecting Red Hat Enterprise Linux 6 and later versions. The flaw involves improper memory handling when processing malicious web content, which may lead to memory corruption and potentially remote code execution. Exploitation requires user interaction by loading malicious content. Mitigation includes avoiding untrusted web content and optionally removing GNOME-related packages dependent on WebKitGTK4. WebKitGTK3 can be removed without breaking functionality. No official patch status is provided in the advisory.

Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.3.4 versions.

Unauthenticated SQL Injection in WP Directory Kit <= 1.5.4 versions.

Unauthenticated SQL Injection in WP Directory Kit <= 1.5.4 versions.

Genkit does not properly validate host request headers. Any host on the developer's network, and any website the developer visits (via DNS rebinding), can reach POST /api/runAction on the Dev UI server (default port 4000) and execute any registered Genkit action and read the result. Fixed on 2026-06-18.

Anki versions prior to 25.09.3 contain a path traversal vulnerability in its local HTTP server endpoints. This flaw allows scripts from shared decks or malicious websites, combined with an origin-check bypass, to read arbitrary local files. The vulnerability is fixed in version 25.09.3.

Unauthenticated Broken Access Control in Kit (formerly ConvertKit) <= 3.3.5 versions.

uproot dynamically generates Python class source code from ROOT TStreamerInfo records in a file and compiles it at runtime. Some file-controlled streamer metadata fields (for example, streamer element names) are interpolated into the generated Python source without safe quoting via repr() or the !r format specifier. An attacker who can supply a crafted ROOT file can place Python expression-breaking content into a streamer metadata field. When uproot generates and invokes the corresponding reader method, the injected Python expression is evaluated in the context of the process opening the file, resulting in arbitrary Python code execution in applications that open or process attacker-controlled ROOT files with affected uproot code paths.