Archive
7 August 2025
Vulnerabilities first published on this day (UTC), newest first.
4 results · Clear filters · Feed
-
High 8.8CVE-2025-24000 Public exploit
WordPress Post SMTP plugin <= 3.2.0 - Account Takeover Vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in Saad Iqbal Post SMTP post-smtp allows Authentication Bypass.This issue affects Post SMTP: from n/a through <= 3.2.0.
-
Critical 9.4
Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via Time Parameter
An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) via the 'time' parameter of the '/protocol.csp?' endpoint. The input is processed by the internal date '-s' command without rebooting…
-
High 7.8CVE-2025-50675 Public exploit
GPMAW 14, a bioinformatics software, has a critical vulnerability related to insecure file permissions in its installat…
-
Medium 4.0CVE-2025-32094 Public exploit
An issue was discovered in Akamai Ghost, as used for the Akamai CDN platform before 2025-03-26. Under certain circumsta…