Skip to content
OpenAdvisories

Archive

6 April 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-32013 Public exploit

    Server-Side Request Forgery via LNURL Authentication Callback in LNbits Lightning Network Payment System

    LNbits is a Lightning wallet and accounts system. A Server-Side Request Forgery (SSRF) vulnerability has been discovered in LNbits' LNURL authentication handling functionality. When processing LNURL authentication requests, the application accepts a callback …

  • High 7.2
    CVE-2025-32370 Public exploit

    Kentico Xperience before 13.0.178 has a specific set of allowed ContentUploader file extensions for unauthenticated upl…