Skip to content
OpenAdvisories

Archive

1 August 2025

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Medium 6.9
    CVE-2013-10063 Public exploit

    Netgear SPH200D <= 1.0.4.80 Path Traversal via HTTP GET

    A path traversal vulnerability exists in the Netgear SPH200D Skype phone firmware versions <= 1.0.4.80 in its embedded web server. Authenticated attackers can exploit crafted GET requests to access arbitrary files outside the web root by injecting traversal s…

  • Medium 6.9
    CVE-2013-10062 Public exploit

    Linksys Routers apply.cgi Path Traversal

    A directory traversal vulnerability exists in Linksys router's web interface (tested on the E1500 model firmware versions 1.0.00, 1.0.04, and 1.0.05), specifically in the /apply.cgi endpoint. Authenticated attackers can exploit the next_page POST parameter to…

  • Medium 5.4
    CVE-2025-46018 Public exploit

    CSC Pay Mobile App 2.19.4 (fixed in version 2.20.0) contains a vulnerability allowing users to bypass payment authoriza…

  • Medium 6.1
    CVE-2025-45778 Public exploit

    A stored cross-site scripting (XSS) vulnerability in The Language Sloth Web Application v1.0 allows attackers to execut…

  • Medium 5.3
    CVE-2025-54939 Public exploit

    LiteSpeed QUIC (LSQUIC) Library before 4.3.1 has an lsquic_engine_packet_in memory leak.