Skip to content
OpenAdvisories

Archive

7 August 2025

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 8.8
    CVE-2025-24000 Public exploit

    WordPress Post SMTP plugin <= 3.2.0 - Account Takeover Vulnerability

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Saad Iqbal Post SMTP post-smtp allows Authentication Bypass.This issue affects Post SMTP: from n/a through <= 3.2.0.

  • Critical 9.4
    CVE-2025-34152 Public exploit Scanner template EPSS 84%

    Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via Time Parameter

    An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) via the 'time' parameter of the '/protocol.csp?' endpoint. The input is processed by the internal date '-s' command without rebooting…

  • High 7.8
    CVE-2025-50675 Public exploit

    GPMAW 14, a bioinformatics software, has a critical vulnerability related to insecure file permissions in its installat…

  • Medium 4.0
    CVE-2025-32094 Public exploit

    An issue was discovered in Akamai Ghost, as used for the Akamai CDN platform before 2025-03-26. Under certain circumsta…