Skip to content
OpenAdvisories

Archive

1 August 2025

Vulnerabilities first published on this day (UTC), newest first.

← July 2025 2025 / August /1 September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Critical 9.4
    CVE-2025-54782 Public exploit Scanner template EPSS 47%

    @nestjs/devtools-integration's CSRF to Sandbox Escape Allows for RCE against JS Developers

    Nest is a framework for building scalable Node.js server-side applications. In versions 0.2.0 and below, a critical Remote Code Execution (RCE) vulnerability was discovered in the @nestjs/devtools-integration package. When enabled, the package exposes a local…

    nestjs nest @nestjs/devtools-integration npm
  • Critical 9.3
    CVE-2013-10049 Public exploit

    Raidsonic NAS Devices Unauthenticated Remote Command Execution

    An OS command injection vulnerability exists in multiple Raidsonic NAS devices—specifically tested on IB-NAS5220 and IB-NAS4220—via the unauthenticated timeHandler.cgi endpoint exposed through the web interface. The CGI script fails to properly sanitize user-…

    Raidsonic Technology IB-NAS4220 IB-NAS5220
  • Critical 9.4
    CVE-2013-10060 Public exploit

    Netgear Routers pppoe.cgi RCE

    An authenticated OS command injection vulnerability exists in Netgear routers (tested on the DGN2200B model) firmware versions 1.0.0.36 and prior via the pppoe.cgi endpoint. A remote attacker with valid credentials can execute arbitrary commands via crafted i…

    NETGEAR DGN2200B Network devices
  • Critical 9.3
    CVE-2013-10047 Public exploit

    MiniWeb <= Build 300 Arbitrary File Upload

    An unrestricted file upload vulnerability exists in MiniWeb HTTP Server <= Build 300 that allows unauthenticated remote attackers to upload arbitrary files to the server’s filesystem. By abusing the upload handler and crafting a traversal path, an attacker ca…

    MiniWeb MiniWeb
  • Critical 9.3
    CVE-2013-10051 Public exploit

    InstantCMS <= 1.6 Remote PHP Code Execution

    A remote PHP code execution vulnerability exists in InstantCMS version 1.6 and earlier due to unsafe use of eval() within the search view handler. Specifically, user-supplied input passed via the look parameter is concatenated into a PHP expression and execut…

    InstantCMS InstantCMS
  • Critical 9.3
    CVE-2013-10055 Public exploit

    Havalite CMS Arbitary File Upload RCE

    An unauthenticated arbitrary file upload vulnerability exists in Havalite CMS version 1.1.7 (and possibly earlier) in the upload.php script. The application fails to enforce proper file extension validation and authentication checks, allowing remote attackers…

    Havalite CMS Havalite CMS
  • Critical 9.3
    CVE-2013-10048 Public exploit EPSS 17%

    D-Link Devices command.php Unauthenticated RCE

    An OS command injection vulnerability exists in various legacy D-Link routers—including DIR-300 rev B and DIR-600 (firmware ≤ 2.13 and ≤ 2.14b01, respectively)—due to improper input handling in the unauthenticated command.php endpoint. By sending specially cr…

    D-Link DIR-600 DIR-300 Network devices
  • Critical 9.3
    CVE-2025-54574 Public exploit EPSS 22%

    Squid's URN Handling can lead to Buffer Overflow

    Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around…

    squid-cache squid squid squid3 Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2025-5947 Public exploit Scanner template

    Service Finder Bookings <= 6.0 - Authentication Bypass via User Switch Cookie

    The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via authentication bypass in all versions up to, and including, 6.0. This is due to the plugin not properly validating a user's cookie value prior to logging them in throug…

    Aonetheme Service Finder Bookings Web / CMS
  • Critical 9.8
    CVE-2025-50460 Public exploit

    MS SWIFT Remote Code Execution via unsafe PyYAML deserialization

    A remote code execution (RCE) vulnerability exists in the ms-swift project version 3.3.0 due to unsafe deserialization in tests/run.py using yaml.load() from the PyYAML library (versions = 5.3.1). If an attacker can control the content of the YAML configurati…

    ms-swift PyPI
  • Critical 9.8
    CVE-2025-50472 Public exploit

    The modelscope/ms-swift library thru 2.6.1 is vulnerable to arbitrary code execution through deserialization of untrust…