Zast.Ai

**Name of the Vulnerable Software and Affected Versions** karakeep-app karakeep versions prior to 0.32.0 **Description** An issue in the OAuth Sign-In component, specifically within a function in the `apps/web/server/auth.ts` file, allows for improper authentication. This flaw can be exploited remotely, although the attack complexity is high and exploitability is considered difficult. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** karakeep-app karakeep versions prior to 0.33.0 **Description** An issue exists in the Login Endpoint within the `authorize()` function of the `apps/web/server/auth.ts` file. This flaw allows for improper restriction of excessive authentication attempts, which could be exploited remotely. The attack is characterized by high complexity and is difficult to execute. **Recommendations** Upgrade to version 0.33.0. As a temporary mitigation, restrict access to the `authorize()` function in the Login Endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** opensourcepos Open Source Point of Sale versions prior to 3.4.3 **Description** An issue exists in the Login Endpoint component within the `Login::index` function of the `app/Config/Filters.php` file. This flaw allows for the improper restriction of excessive authentication attempts, which could be exploited remotely. The attack is characterized by high complexity and difficult exploitability. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** mangroup dtale versions prior to 3.22.1 **Description** An issue exists in the Login Endpoint component within the `Login()` function of the `dtale/auth.py` file. This flaw allows for improper restriction of excessive authentication attempts, which could be exploited remotely. The attack is characterized by high complexity and is considered difficult to execute. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `Login()` function in the `dtale/auth.py` file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** mangroup dtale versions prior to 3.22.1 **Description** A flaw in the Flask Session Cookie component allows for the generation of insufficiently random values. This issue occurs within the `build secret key()` function located in the `dtale/app.py` file. Remote exploitation is possible, although the attack complexity is high and exploitability is considered difficult. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** VictoriaMetrics versions prior to 1.147.0 **Description** An issue exists in the VMAuth Authentication Endpoint within the `requestHandler()` function of the `app/vmauth/main.go` file. A remote attacker can perform a manipulation that leads to improper restriction of excessive authentication attempts. The attack complexity is high and exploitability is considered difficult. **Recommendations** Update to version 1.147.0.

**Name of the Vulnerable Software and Affected Versions** Print, PDF, Email by PrintFriendly for WordPress versions prior to 5.5.11 **Description** Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. Authenticated attackers with administrator-level access and above can inject arbitrary web scripts through the `content position css` parameter. These scripts execute whenever a user accesses an affected page. **Recommendations** Update the plugin to version 5.5.11 or later. As a temporary mitigation, restrict access to the `content position css` parameter to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Sympl Repeater for ACF and Elementor versions prior to 2.4 **Description** Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping in the `symp arfe replace content()` function. The function utilizes `str replace()` to insert raw ACF field values, obtained via `get field()`, directly into Elementor-rendered HTML without proper escaping. This allows authenticated attackers with Author-level access or higher to inject arbitrary web scripts into pages, which execute when a user visits the affected page. **Recommendations** Update to a version newer than 2.3. As a temporary mitigation, restrict user permissions to prevent users with Author-level access from modifying ACF repeater field values.

**Name of the Vulnerable Software and Affected Versions** StatCounter – Free Real Time Visitor Stats versions prior to 2.1.2 **Description** The plugin is subject to Stored Cross-Site Scripting, a flaw where malicious scripts are permanently stored on the target server. This occurs due to insufficient output escaping of the post author's nickname within the `statcounter addToTags()` function. The function, which is hooked to `wp head` and executes on every post page, retrieves the author's nickname using `the author meta()` and echoes it into a JavaScript double-quoted string context inside a `<script>` block without using `esc js()` or equivalent escaping. Consequently, authenticated attackers with Author-level access or higher can inject arbitrary web scripts that execute when any user, including unauthenticated visitors, views a post authored by the attacker. **Recommendations** Update the plugin to a version later than 2.1.1. As a temporary workaround, restrict users from having Author-level access or higher until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Splide Carousel Block versions prior to 1.7.2 **Description** The Splide Carousel Block plugin for WordPress contains a Stored Cross-Site Scripting issue caused by insufficient input sanitization and output escaping. Authenticated attackers with contributor-level access or higher can inject arbitrary web scripts through the `url` block attribute. These scripts execute when a user accesses the affected page. For the payload to execute for general site visitors, the post must first be approved and published by an editor or administrator. **Recommendations** Update the plugin to a version later than 1.7.1. As a temporary mitigation, restrict the ability of users with contributor-level access to modify the `url` block attribute.

**Name of the Vulnerable Software and Affected Versions** ByteDance verl versions prior to 0.7.1 **Description** A sandbox issue exists in the `math equal()` function within the `prime math/grader.py` file. This flaw allows for remote attacks, although the complexity is high and exploitability is considered difficult. **Recommendations** Update to a version newer than 0.7.0. As a temporary workaround, consider restricting the use of the `math equal()` function in the `prime math/grader.py` file.

Name of the Vulnerable Software and Affected Versions OpenClaw versions through 2026.1.26 Description A weakness exists in OpenClaw up to version 2026.1.26, specifically within the `assertPublicHostname Handler` functionality of the file `src/agents/tools/web-fetch.ts`. A manipulation can lead to server-side request forgery. The attack can be executed remotely and is characterized by high complexity, though exploitation is known to be difficult. The exploit has been made publicly available. Recommendations Upgrade to version 2026.1.29 or later, which includes the patch b623557a2ec7e271bda003eb3ac33fbb2e218505. Upgrade the affected component.

**Name of the Vulnerable Software and Affected Versions** elecV2 versions prior to 3.8.4 **Description** A flaw exists in elecV2, specifically in the `pm2run` function within the `/rpc` file. A manipulation of this function can lead to operating system command injection. This issue can be exploited remotely. The exploit has been published. **Recommendations** Update to version 3.8.4 or later. As a temporary workaround, consider restricting access to the `/rpc` file. Avoid using the `pm2run` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** elecV2 versions prior to 3.8.4 **Description** A code injection issue exists in the JSON Parser component due to manipulation of the `rawcode` argument within the `runJSFile` function of the `/webhook` file. Remote exploitation is possible. The project was informed of the issue but has not responded. **Recommendations** Update to version 3.8.4 or later.

**Name of the Vulnerable Software and Affected Versions** elecV2 versions up to 3.8.3 **Description** A flaw exists in elecV2, specifically within the Endpoint component. Manipulation of the `filename` argument in a function related to the `/logs` file can lead to cross-site scripting. This issue is potentially exploitable remotely. The project was notified of the problem but has not yet responded. The exploit has been publicly disclosed. **Recommendations** Versions prior to 3.8.4 should be updated.

**Name of the Vulnerable Software and Affected Versions** elecV2 elecV2P versions through 3.8.3 **Description** A server-side request forgery condition exists due to manipulation of the `req` argument within the `eAxios` function located in the `/mock` file of the URL Handler component. This allows for remote attacks. The project was notified of the issue but has not yet responded. The exploit is publicly available. **Recommendations** Versions prior to 3.8.4 should be updated. Consider temporarily disabling the `eAxios` function until a patch is available. Restrict access to the `/mock` file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** elecV2 versions prior to 3.8.4 **Description** A path traversal issue exists due to the manipulation of the `path.join` function within the `/log/` file of the Wildcard Handler component. This allows for remote exploitation. The project was notified of the issue but has not yet responded. The exploit has been publicly disclosed. **Recommendations** Update to version 3.8.4 or later. As a temporary workaround, restrict access to the `/log/` file. Consider disabling the Wildcard Handler component until a patch is available.

**Name of the Vulnerable Software and Affected Versions** elecV2 versions up to 3.8.3 **Description** A flaw exists in the function `path.join` within the file `/store/:key`. Manipulation of the `URL` argument can lead to path traversal, allowing for remote exploitation. The exploit has been publicly disclosed. The project was notified of the issue but has not yet responded. **Recommendations** Versions prior to 3.8.4 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Content Visibility for Divi Builder version 4.01 **Description** A contributor-controlled expression reaches the `eval()` function through real feature paths. More than 2,000 active installations are reported. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Jcharis Machine-Learning-Web-Apps versions prior to a6996b634d98ccec4701ac8934016e8175b60eb5 **Description** A security issue exists in Jcharis Machine-Learning-Web-Apps. The `render template` function within the Jinja2 Template Handler component, located in the file Machine-Learning-Web-Apps-master/Build-n-Deploy-Flask-App-with-Waypoint/app/app.py, is susceptible to cross site scripting. This manipulation can be exploited remotely. The exploit is publicly available. The product utilizes a rolling release model, meaning specific version details for affected and updated releases are unavailable. The project was notified of the issue but has not yet responded. **Recommendations** Versions prior to a6996b634d98ccec4701ac8934016e8175b60eb5: At the moment, there is no information about a newer version that contains a fix for this vulnerability.