MR ROBOT is a sophisticated Android Malware-as-a-Service operation targeting Indian bank customers. It operates on a subscription model allowing cybercriminals to rent customized banking trojans distributed via fake Play Store pages and messaging apps. The malware uses a multi-stage dropper to deploy banking trojans that intercept SMS and OTPs, silently enable call forwarding to bypass two-factor authentication, and overlay phishing screens to steal sensitive financial and identity information. One affiliate compromised 153 devices and intercepted over 5,400 SMS messages. The operation includes a Telegram bot storefront offering about 36 fake apps impersonating banks and government services, with stolen data exfiltrated to Firebase Realtime Database and Telegram channels.
A stored cross-site scripting (XSS) vulnerability exists in the DefterAsist Financial Advisor Platform due to improper neutralization of input during web page generation. This vulnerability allows attackers with limited privileges to inject malicious scripts that can be executed in the context of other users. The issue affects versions of the platform up to the date 2026-10-27. The vulnerability has a medium severity rating with a CVSS score of 5.4.
The VikRentCar Car Rental Management System plugin for WordPress contains a blind SQL Injection vulnerability in the 'catid' parameter affecting all versions up to and including 1.4.10. This flaw allows authenticated users with contributor-level access or higher to inject additional SQL queries via a specially crafted block stored through the REST API and triggered by previewing a post. The vulnerability arises from insufficient escaping and lack of proper query preparation, enabling extraction of sensitive database information. The vulnerability has a CVSS score of 6.5, indicating medium severity. No public exploits or patches are currently documented.
Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8, including specific LTS releases, contain a Missing Authorization vulnerability (CWE-862). This flaw allows a low privileged attacker with remote access to potentially gain unauthorized access. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity impact primarily affecting confidentiality. Fixed versions are available starting from 8.9.0.0 and certain later LTS releases.
CVE-2026-118435 is an out-of-bounds write vulnerability in the Samsung Open Source escargot project. This flaw allows buffer manipulation which can lead to integrity and availability impacts. The vulnerability has a medium severity rating with a CVSS score of 5.4. No affected versions or patches are explicitly stated in the available data.
The WP Inventory Manager plugin for WordPress is vulnerable to time-based SQL Injection via 'sort_order' Shortcode Attribute in all versions up to, and including, 2.5.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This can be exploited by a Contributor via the [wpinventory_categories] shortcode embedded in a draft post rendered through preview, without requiring the post to be published.
The AI ChatBot for WooCommerce – WoowBot plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.0.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to repeatedly trigger RAG document sync operations that issue paid embedding API calls to OpenAI, Gemini, OpenRouter, or xAI charged to the site administrator's stored API key, draining their AI API credits and causing financial loss. The wp_chatbot nonce required to reach this endpoint is emitted to every authenticated frontend visitor via wp_localize_script, making it trivially obtainable by any subscriber-level account.
The UiChemy – Convert Figma, Prompts and AI Builds to Elementor, Gutenberg and Bricks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'actions[save_builder][data][elements][...][settings][slot_{N}_link][url]' parameter in all versions up to, and including, 5.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The injected javascript: payload fires on click rather than on page load, making exploitation contingent on a privileged user such as an Editor or Administrator clicking the attacker-crafted link while reviewing or previewing the Contributor's post.
The Mage Eventpress plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.7.8 This is due to the mep_grant_shop_manager_access() function hooking user_has_cap and unconditionally granting manage_options whenever an attacker-controllable request marker matches — most notably $_GET['page'] starting with 'mep_' or 'mpwem_', which is never validated against an actually registered EventPress screen. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to elevate their privileges to Administrator by appending ?page=mep_x to core admin URLs (options-general.
The MP3 Audio Player WordPress plugin versions before 5.16 contain a vulnerability where one of its audio player shortcode attributes is not properly escaped before being output into an HTML attribute. This flaw allows users with Contributor-level access or higher to inject arbitrary JavaScript code. The injected script executes when another user, such as an administrator previewing a pending post, views the content.
The GoSMTP WordPress plugin versions before 1.2.5 lack an authorization check on the SMTP configuration page, allowing users with roles below administrator to modify outbound mail settings. This vulnerability can lead to administrator account takeover.
A vulnerability in Google Agent Development Kit (ADK) for Python's FileArtifactService allows an application to access artifacts of another application when both share a root directory and user ID. This occurs because the service accepted an application name in its API but did not use it when constructing on-disk paths, leading to cross-application access. The issue affects versions before 1.39.1 in the 1.x series and before 2.7.0 in the 2.x series. The vulnerability was addressed by enforcing full per-application path scoping in version 2.7.0 and backported to 1.39.1. The CVSS 4.0 base score is 5.3, indicating medium severity.
GROWI versions 7.0.0 through 8.0.6 have a missing authorization check vulnerability in the collaborative editing feature. This flaw allows users with read-only permissions, including guest users or users with pending, suspended, or invited status, to modify page drafts. The vulnerability has a medium severity rating with a CVSS score of 5.3.
An integer overflow vulnerability exists in assimp through version 6.0.5 in the MD2Importer::ValidateHeader() function. This flaw allows attackers to craft malicious .md2 files with manipulated numFrames and numVertices fields that bypass frame table bounds checks. Exploitation can lead to heap out-of-bounds reads, causing application crashes or potential exposure of adjacent heap memory.
Sunhillo SureLine versions prior to 9.1.5 have a path traversal vulnerability in the radarUpdater.cgi endpoint. This flaw allows unauthenticated remote attackers to read arbitrary files with root privileges by exploiting insufficient sanitization of the filename parameter. Sensitive files such as /etc/shadow, the web user database, root SSH private key, and TLS private key can be accessed, potentially leading to full system compromise.
A stored Cross-Site Scripting (XSS) vulnerability exists in the media plugin of TinyMCE. This flaw allows attackers to inject malicious scripts via elements crafted through the data-mce-object attribute, which are executed before proper sanitization. The vulnerability affects TinyMCE versions 7.9.3 and 8.5.1 up to but not including 7.9.4 and 8.9.3 respectively. It has been patched in TinyMCE 7.9.4 and 8.9.3. No official workaround is available other than upgrading.
