Archive
14 July 2025
Vulnerabilities first published on this day (UTC), newest first.
3 results · Clear filters · Feed
-
Medium 5.3
Directus's exact version number is exposed by the OpenAPI Spec
Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.0.0 and prior to version 11.9.0, the exact Directus version number is incorrectly being used as OpenAPI Spec version this means that it is being exposed by …
-
Medium 5.3CVE-2025-53640 Public exploit
Indico vulnerable to user enumeration via API endpoint
Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Starting in version 2.2 and prior to version 3.3.7, an endpoint used to display details of users listed in certain fields (such as ACLs) could be …
-
Medium 6.3CVE-2025-7558 Public exploit
code-projects Voting System positions_add.php sql injection
A vulnerability was found in code-projects Voting System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/positions_add.php. The manipulation of the argument description leads to sql injection. The attack…