Skip to content
OpenAdvisories

Archive

24 June 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2025-34040 Public exploit Scanner template EPSS 15%

    Seeyon Zhiyuan OA System Path Traversal File Upload

    An arbitrary file upload vulnerability exists in the Zhiyuan OA platform via the wpsAssistServlet interface. The realFileType and fileId parameters are improperly validated during multipart file uploads, allowing unauthenticated attackers to upload crafted JS…

  • Critical 10.0
    CVE-2025-34037 Public exploit EPSS 96%

    Linksys Routers E/WAG/WAP/WES/WET/WRT-Series

    An OS command injection vulnerability exists in various models of E-Series Linksys routers via the /tmUnblock.cgi and /hndUnblock.cgi endpoints over HTTP on port 8080. The CGI scripts improperly process user-supplied input passed to the ttcp_ip parameter with…