Skip to content
OpenAdvisories

Archive

31 July 2025

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Medium 5.3
    CVE-2014-125122 Public exploit

    Linksys WRT120N tmUnblock.cgi Stack-Based Buffer Overflow Admin Password Reset

    A stack-based buffer overflow vulnerability exists in the tmUnblock.cgi endpoint of the Linksys WRT120N wireless router. The vulnerability is triggered by sending a specially crafted HTTP POST request with an overly long TM_Block_URL parameter to the endpoint…

  • Medium 6.3
    CVE-2025-54589 Public exploit Scanner template

    copyparty Reflected XSS via Filter Parameter

    Copyparty is a portable file server. In versions 1.18.6 and below, when accessing the recent uploads page at `/?ru`, users can filter the results using an input field at the top. This field appends a filter parameter to the URL, which reflects its value direc…

  • Medium 6.3
    CVE-2024-34328 Public exploit

    An open redirect in Sielox AnyWare v2.1.2 allows attackers to execute a man-in-the-middle attack via a crafted URL.

  • Medium 6.5
    CVE-2024-34327 Public exploit

    Sielox AnyWare v2.1.2 was discovered to contain a SQL injection vulnerability via the email address field of the passwo…

  • Medium 6.1
    CVE-2025-50866 Public exploit

    CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting (XSS) vulnerability in the email parameter of …

  • Medium 6.5
    CVE-2025-50867 Public exploit

    A SQL Injection vulnerability exists in the takeassessment2.php endpoint of the CloudClassroom-PHP-Project 1.0, where t…

  • Medium 5.4
    CVE-2025-29557 Public exploit

    ExaGrid EX10 6.3 - 7.0.1.P08 is vulnerable to Incorrect Access Control in the MailConfiguration API endpoint, where use…