Skip to content
OpenAdvisories

Archive

6 September 2025

Vulnerabilities first published on this day (UTC), newest first.

← August 2025 2025 / September /6 October 2025 →
  1. 184
  2. 2140
  3. 3194
  4. 4272
  5. 5233
  6. 660
  7. 719
  8. 899
  9. 9348
  10. 1099
  11. 11155
  12. 1292
  13. 1315
  14. 1437
  15. 15412
  16. 16231
  17. 17219
  18. 18199
  19. 19120
  20. 2015
  21. 2117
  22. 22415
  23. 23126
  24. 24125
  25. 25108
  26. 26201
  27. 2753
  28. 2836
  29. 29120
  30. 30103
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.9
    CVE-2025-58443 Public exploit Scanner template EPSS 21%

    FOG's authentication bypass leads to full SQL DB dump

    FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Versions 1.5.10.1673 and below contain an authentication bypass vulnerability. It is possible for an attacker to perform an unauthenticated DB dump where they could pull a ful…

    FOGProject fogproject
  • High 8.6
    CVE-2025-9961 Public exploit EPSS 11%

    Authenticated RCE by CWMP binary

    An authenticated attacker may remotely execute arbitrary code via the CWMP binary on the devices AX10 and AX1500.  The exploit can only be conducted via a Man-In-The-Middle (MITM) attack.  This issue affects AX10 V1/V1.2/V2/V2.6/V3/V3.6: before 1.2.1; AX1500 …

    TP-Link Systems AX1500 V1/V1.20/V1.26/V1.60/V1.80/V2.60/V3.6 AX10 V1/V1.2/V2/V2.6/V3/V3.6 Network devices
  • Medium 4.9
    CVE-2025-10046 Public exploit

    ELEX WooCommerce Google Shopping (Google Product Feed) <= 1.4.3 - Authenticated (Admin+) SQL Inejction

    The ELEX WooCommerce Google Shopping (Google Product Feed) plugin for WordPress is vulnerable to SQL Injection via the 'file_to_delete' parameter in all versions up to, and including, 1.4.3 due to insufficient escaping on the user supplied parameter and lack …

    ELEXtensions ELEX WooCommerce Google Shopping (Google Product Feed) Web / CMS
  • Critical 9.8
    CVE-2025-8359 Public exploit

    AdForest <= 6.0.9 - Authentication Bypass to Admin

    The AdForest theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 6.0.9. This is due to the plugin not properly verifying a user's identity prior to authenticating them. This makes it possible for unauthenticated at…

    scriptsbundle AdForest Web / CMS