Skip to content
OpenAdvisories

Archive

29 July 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.9
    CVE-2025-54381 Public exploit EPSS 14%

    BentoML is Vulnerable to an SSRF Attack Through File Upload Processing

    BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1.4.0 until 1.4.19, the file upload processing system contains an SSRF vulnerability that allows unauthenticated remote attackers to force t…

  • Critical 9.8
    CVE-2025-50738 Public exploit

    Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs

    The Memos application, up to version v0.24.3, allows for the embedding of markdown images with arbitrary URLs. When a user views a memo containing such an image, their browser automatically fetches the image URL without explicit user consent or interaction be…

  • Critical 9.8
    CVE-2025-44136 Public exploit Scanner template

    MapTiler Tileserver-php v2.0 is vulnerable to Cross Site Scripting (XSS). The GET parameter "layer" is reflected in an …