Skip to content
OpenAdvisories

Archive

6 September 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.9
    CVE-2025-58443 Public exploit Scanner template EPSS 21%

    FOG's authentication bypass leads to full SQL DB dump

    FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Versions 1.5.10.1673 and below contain an authentication bypass vulnerability. It is possible for an attacker to perform an unauthenticated DB dump where they could pull a ful…

  • Critical 9.4

    internetarchive is vulnerable to Directory Traversal through file downloads

    internetarchive is a Python and Command-Line Interface to Archive.org In versions 5.5.0 and below, there is a directory traversal (path traversal) vulnerability in the File.download() method of the internetarchive library. The file.download() method does not …

  • Critical 9.8
    CVE-2025-8359 Public exploit

    AdForest <= 6.0.9 - Authentication Bypass to Admin

    The AdForest theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 6.0.9. This is due to the plugin not properly verifying a user's identity prior to authenticating them. This makes it possible for unauthenticated at…