Archive
6 April 2025
Vulnerabilities first published on this day (UTC), newest first.
2 results · Clear filters · Feed
-
Critical 9.3CVE-2025-32013 Public exploit
Server-Side Request Forgery via LNURL Authentication Callback in LNbits Lightning Network Payment System
LNbits is a Lightning wallet and accounts system. A Server-Side Request Forgery (SSRF) vulnerability has been discovered in LNbits' LNURL authentication handling functionality. When processing LNURL authentication requests, the application accepts a callback …
-
High 7.2CVE-2025-32370 Public exploit
Kentico Xperience before 13.0.178 has a specific set of allowed ContentUploader file extensions for unauthenticated upl…