Skip to content
OpenAdvisories

Archive

10 August 2025

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Low 3.5

    atjiu pybbs IndexController.java changeLanguage redirect

    A vulnerability has been found in atjiu pybbs up to 6.0.0 and classified as problematic. This vulnerability affects the function changeLanguage of the file src/main/java/co/yiiu/pybbs/controller/front/IndexController.java. The manipulation of the argument ref…

  • Low 2.4

    atjiu pybbs Admin Panel settings cross site scripting

    A vulnerability, which was classified as problematic, was found in atjiu pybbs up to 6.0.0. This affects an unknown part of the file /api/settings of the component Admin Panel. The manipulation leads to cross site scripting. It is possible to initiate the att…

  • Low 3.5

    Portabilis i-Diario Informações adicionais planos-de-aula-por-areas-de-conhecimento cross site scripting

    A vulnerability was found in Portabilis i-Diario up to 1.5.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /planos-de-aula-por-areas-de-conhecimento/ of the component Informações adicionais. The manipulation o…

  • Low 3.5

    Portabilis i-Diario Registro das atividades registros-de-conteudos-por-disciplina cross site scripting

    A security flaw has been discovered in Portabilis i-Diario up to 1.5.0. The affected element is an unknown function of the file /registros-de-conteudos-por-disciplina/ of the component Registro das atividades. The manipulation of the argument Registro de ativ…

  • Low 3.5

    Portabilis i-Diario Registro das atividades registros-de-conteudos-por-areas-de-conhecimento cross site scripting

    A vulnerability was identified in Portabilis i-Diario up to 1.5.0. Impacted is an unknown function of the file /registros-de-conteudos-por-areas-de-conhecimento/ of the component Registro das atividades. The manipulation of the argument Registro de atividades…

  • Low 3.0
    CVE-2025-52136 Public exploit

    In EMQX before 5.8.6, administrators can install arbitrary novel plugins via the Dashboard web interface. NOTE: the Sup…