Skip to content
OpenAdvisories

Archive

21 July 2025

Vulnerabilities first published on this day (UTC), newest first.

11 results · Clear filters · Feed

  • Medium 4.4
    CVE-2025-2301 Public exploit

    IDOR in Akbim Software's Online Exam Registration

    Authorization Bypass Through User-Controlled Key vulnerability in Akbim Software Online Exam Registration allows Exploitation of Trusted Identifiers. This issue affects Online Exam Registration: before 14.03.2025.

  • Medium 6.1
    CVE-2024-55040 Public exploit

    Cross Site Scripting vulnerability in Sensaphone WEB600 Monitoring System v.1.6.5.H and before allows a remote attacker…

  • High 7.5
    CVE-2025-51869 Public exploit

    Insecure Direct Object Reference (IDOR) vulnerability in Liner thru 2025-06-03 allows attackers to gain sensitive infor…

  • High 7.5
    CVE-2025-51868 Public exploit

    Insecure Direct Object Reference (IDOR) vulnerability in Dippy (chat.dippy.ai) v2 allows attackers to gain sensitive in…

  • Medium 5.4
    CVE-2025-51396 Public exploit

    A stored cross-site scripting (XSS) vulnerability in Live Helper Chat v4.60 allows attackers to execute arbitrary web s…

  • Medium 5.4
    CVE-2025-51398 Public exploit

    A stored cross-site scripting (XSS) vulnerability in the Facebook registration page of Live Helper Chat v4.60 allows at…

  • Medium 5.4
    CVE-2025-51397 Public exploit

    A stored cross-site scripting (XSS) vulnerability in the Facebook Chat module of Live Helper Chat v4.60 allows attacker…

  • Medium 5.4
    CVE-2025-51401 Public exploit

    A stored cross-site scripting (XSS) vulnerability in the chat transfer function of Live Helper Chat v4.60 allows attack…

  • Medium 5.4
    CVE-2025-51400 Public exploit

    A stored cross-site scripting (XSS) vulnerability in the Personal Canned Messages of Live Helper Chat v4.60 allows atta…

  • Medium 6.5
    CVE-2025-51403 Public exploit

    A stored cross-site scripting (XSS) vulnerability in the department assignment editing module of of Live Helper Chat v4…

  • Low 3.7
    CVE-2025-54352 Public exploit

    WordPress 3.5 through 6.8.2 allows remote attackers to guess titles of private and draft posts via pingback.ping XML-RP…