Skip to content
OpenAdvisories

Archive

27 August 2025

Vulnerabilities first published on this day (UTC), newest first.

← July 2025 2025 / August /27 September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 10.0
    CVE-2024-13985 Public exploit Scanner template EPSS 15%

    Dahua EIMS capture_handle.action RCE

    A command injection vulnerability in Dahua EIMS versions prior to 2240008 allows unauthenticated remote attackers to execute arbitrary system commands via the capture_handle.action interface. The flaw stems from improper input validation in the captureCommand…

    Zhejiang Dahua Technology EIMS
  • Critical 9.4
    CVE-2025-34157 Public exploit

    Coolify Stored Cross-Site Scripting (XSS) in Project Name Field

    Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a stored cross-site scripting (XSS) attack in the project creation workflow. An authenticated user with low privileges can create a project with a maliciously crafted name containing embedded JavaS…

    coolLabs Technologies Coolify
  • Critical 9.4
    CVE-2025-34159 Public exploit

    Coolify Docker Compose Directive Injection in Application Deployment Workflow

    Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a remote code execution vulnerability in the application deployment workflow. The platform allows authenticated users, with low-level member privileges, to inject arbitrary Docker Compose directive…

    coolLabs Technologies Coolify
  • Critical 9.4
    CVE-2025-34161 Public exploit

    Coolify Git Repository Field Command Injection in Project Deployment Workflow

    Coolify versions prior to v4.0.0-beta.420.7 are vulnerable to a remote code execution vulnerability in the project deployment workflow. The platform allows authenticated users, with low-level member privileges, to inject arbitrary shell commands via the Git R…

    coolLabs Technologies Coolify
  • Critical 9.8
    CVE-2025-50428 Public exploit

    In RaspAP raspap-webgui 3.3.2 and earlier, a command injection vulnerability exists in the includes/hostapd.php script.…

  • Critical 9.8
    CVE-2025-52122 Public exploit

    The Freeform CraftCMS plugin contains an Server-side template injection (SSTI) vulnerability

    Freeform 5.0.0 to before 5.10.16, a plugin for CraftCMS, contains an Server-side template injection (SSTI) vulnerability, resulting in arbitrary code injection for all users that have access to editing a form (submission title).

    solspace/craft-freeform Packagist