Skip to content
OpenAdvisories

Archive

6 September 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.9
    CVE-2025-58443 Public exploit Scanner template EPSS 21%

    FOG's authentication bypass leads to full SQL DB dump

    FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Versions 1.5.10.1673 and below contain an authentication bypass vulnerability. It is possible for an attacker to perform an unauthenticated DB dump where they could pull a ful…

  • Critical 9.8
    CVE-2025-8359 Public exploit

    AdForest <= 6.0.9 - Authentication Bypass to Admin

    The AdForest theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 6.0.9. This is due to the plugin not properly verifying a user's identity prior to authenticating them. This makes it possible for unauthenticated at…