Skip to content
OpenAdvisories

Archive

28 January 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2025-23211 Public exploit Scanner template

    Tandoor Recipes - SSTI - Remote Code Execution

    Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. A Jinja2 SSTI vulnerability allows any user to execute commands on the server. In the case of the provided Docker Compose file as root. This vulnerability is …

  • Critical 9.8
    CVE-2022-3365 Public exploit

    Emote Interactive Remote Mouse Server command injection due to weak encoding

    Due to reliance on a trivial substitution cipher, sent in cleartext, and the reliance on a default password when the user does not set a password, the Remote Mouse Server by Emote Interactive can be abused by attackers to inject OS commands over theproduct's …