Skip to content
OpenAdvisories

Archive

12 September 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-10327 Public exploit EPSS 10%

    MiczFlor RPi-Jukebox-RFID shuffle.php os command injection

    A weakness has been identified in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected by this vulnerability is an unknown functionality of the file /htdocs/api/playlist/shuffle.php. Executing manipulation of the argument playlist can lead to os command injection.…

  • Medium 5.3
    CVE-2025-59139 Public exploit

    Hono has Body Limit Middleware Bypass

    Hono is a Web application framework that provides support for any JavaScript runtime. In versions prior to 4.9.7, a flaw in the `bodyLimit` middleware could allow bypassing the configured request body size limit when conflicting HTTP headers were present. The…

  • Medium 6.3
    CVE-2025-55996 Public exploit

    Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward interface