Skip to content
OpenAdvisories

Archive

6 March 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-27509 Public exploit

    SAML authentication vulnerability due to improper SAML response validation

    fleetdm/fleet is an open source device management, built on osquery. In vulnerable versions of Fleet, an attacker could craft a specially-formed SAML response to forge authentication assertions, provision a new administrative user account if Just-In-Time (JIT…

  • Medium 6.5
    CVE-2024-57972 Public exploit

    The pairing API request handler in Microsoft HoloLens 1 (Windows Holographic) through 10.0.17763.3046 and HoloLens 2 (W…

  • Critical 9.8
    CVE-2025-25763 Public exploit

    crmeb CRMEB-KY v5.4.0 and before has a SQL Injection vulnerability at getRead() in /system/SystemDatabackupServices.php