Skip to content
OpenAdvisories

Archive

26 September 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 8.2
    CVE-2025-59845 Public exploit

    Apollo Embedded Sandbox and Explorer vulnerable to CSRF via window.postMessage origin-validation bypass

    Apollo Studio Embeddable Explorer & Embeddable Sandbox are website embeddable software solutions from Apollo GraphQL. Prior to Apollo Sandbox version 2.7.2 and Apollo Explorer version 3.7.3, a cross-site request forgery (CSRF) vulnerability was identified. Th…

  • High 7.0
    CVE-2025-9267 Public exploit

    In Seagate Toolkit on Windows a vulnerability exists in the Toolkit Installer prior to versions 2.35.0.6 where it attem…

  • High 8.4
    CVE-2025-56383 Public exploit

    Notepad++ v8.8.3 has a DLL hijacking vulnerability, which can replace the original DLL file to execute malicious code. …