Skip to content
OpenAdvisories

Archive

20 June 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 4.7
    CVE-2025-6335 Public exploit

    DedeCMS Template dedetag.class.php command injection

    A vulnerability was found in DedeCMS up to 5.7.2 and classified as critical. This issue affects some unknown processing of the file /include/dedetag.class.php of the component Template Handler. The manipulation of the argument notes leads to command injection…

  • Medium 5.5
    CVE-2025-6264 Public exploit

    Velociraptor priviledge escalation via UpdateConfig artifact

    Velociraptor allows collection of VQL queries packaged into Artifacts from endpoints. These artifacts can be used to do anything and usually run with elevated permissions.  To limit access to some dangerous artifact, Velociraptor allows for those to require h…