Skip to content
OpenAdvisories

Archive

25 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /25 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.4
    CVE-2014-125119 Public exploit

    WinRAR < 5.00 Filename Spoofing RCE

    A filename spoofing vulnerability exists in WinRAR when opening specially crafted ZIP archives. The issue arises due to inconsistencies between the Central Directory and Local File Header entries in ZIP files. When viewed in WinRAR, the file name from the Cen…

    RARLAB WinRAR
  • High 8.4
    CVE-2014-125114 Public exploit

    i-Ftp 2.20 Schedule.xml Stack-Based Buffer Overflow

    A stack-based buffer overflow vulnerability exists in i-Ftp version 2.20 due to improper handling of the Time attribute within Schedule.xml. By placing a specially crafted Schedule.xml file in the i-Ftp application directory, a remote attacker can trigger a b…

    i-Ftp i-Ftp
  • High 8.7
    CVE-2013-10032 Public exploit

    GetSimple CMS 3.2.1 Authenticated RCE via Arbitrary PHP File Upload

    An authenticated remote code execution vulnerability exists in GetSimpleCMS version 3.2.1. The application’s upload.php endpoint allows authenticated users to upload arbitrary files without proper validation of MIME types or extensions. By uploading a .pht fi…

    GetSimple CMS GetSimple CMS
  • High 8.8
    CVE-2015-10144 Public exploit

    Responsive Thumbnail Slider < 1.0.1 - Authenticated (Subscriber+) Arbitrary File Upload

    The Responsive Thumbnail Slider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type sanitization in the via the image uploader in versions up to 1.0.1. This makes it possible for authenticated attackers, with subscriber-level…

    nik00726 Thumbnail carousel slider Web / CMS
  • High 8.8
    CVE-2025-45466 Public exploit

    Unitree Go1 <= Go1_2022_05_11 is vulnerale to Incorrect Access Control due to authentication credentials being hardcode…

  • High 7.1
    CVE-2025-45467 Public exploit

    Unitree Go1 <= Go1_2022_05_11 is vulnerable to Insecure Permissions as the firmware update functionality (via Wi-Fi/Eth…