Skip to content
OpenAdvisories

Archive

2 July 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 7.5
    CVE-2025-34079 Public exploit

    NSClient++ Authenticated Remote Code Execution via ExternalScripts API

    An authenticated remote code execution vulnerability exists in NSClient++ version 0.5.2.35 when the web interface and ExternalScripts module are enabled. A remote attacker with the administrator password can authenticate to the web interface (default port 844…

  • High 7.3
    CVE-2025-34078 Public exploit

    NSClient++ 0.5.2.35 Local Privilege Escalation via ExternalScripts and Web Interface

    A local privilege escalation vulnerability exists in NSClient++ 0.5.2.35 when both the web interface and ExternalScripts features are enabled. The configuration file (nsclient.ini) stores the administrative password in plaintext and is readable by local users…

  • High 8.1
    CVE-2025-4380 Public exploit Scanner template EPSS 43%

    Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion

    The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.89 via the 'bsa_template' parameter of the `bsa_preview_callback` function. This makes it possi…