Skip to content
OpenAdvisories

Archive

30 June 2025

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Low 3.7

    D-Link DCS-7517 Qlync Password Generation httpd g_F_n_GenPassForQlync hard-coded password

    A vulnerability, which was classified as problematic, was found in D-Link DCS-7517 up to 2.02.0. This affects the function g_F_n_GenPassForQlync of the file /bin/httpd of the component Qlync Password Generation Handler. The manipulation leads to use of hard-c…

  • Low 3.7

    D-Link DCS-6517/DCS-7517 Root Password Generation httpd generate_pass_from_mac entropy

    A vulnerability classified as problematic was found in D-Link DCS-6517 and DCS-7517 up to 2.02.0. Affected by this vulnerability is the function generate_pass_from_mac of the file /bin/httpd of the component Root Password Generation Handler. The manipulation …

  • Low 3.1

    File Browser's Password Protection of Links Vulnerable to Bypass

    File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. In versions 2.32.0 and prior, the implementation of password protected links is error-prone, resulting in potent…

  • Low 2.3

    Host Header Injection (HHI) in the Hotspot Shield VPN client

    Host Header Injection (HHI) vulnerability in the Hotspot Shield VPN client, which can induce unexpected behaviour when accessing third-party web applications through the VPN tunnel. Although such applications do not present this vulnerability per se, the use …

  • Low 2.8
    CVE-2025-32462 Public exploit

    Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, all…