Skip to content
OpenAdvisories

Archive

8 October 2025

Vulnerabilities first published on this day (UTC), newest first.

← September 2025 2025 / October /8 November 2025 →
  1. 1246
  2. 2120
  3. 3158
  4. 4159
  5. 539
  6. 6114
  7. 7241
  8. 8103
  9. 9170
  10. 10126
  11. 1176
  12. 1236
  13. 1391
  14. 14370
  15. 15189
  16. 16132
  17. 1787
  18. 1873
  19. 1911
  20. 2081
  21. 21156
  22. 22393
  23. 2398
  24. 2499
  25. 2539
  26. 266
  27. 27315
  28. 28147
  29. 29161
  30. 30203
  31. 31103
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-10353 Public exploit Scanner template

    Missing Authorization vulnerability in Melis Platform

    File upload leading to remote code execution (RCE) in the “melis-cms-slider” module of Melis Technology's Melis Platform. This vulnerability allows an attacker to upload a malicious file via a POST request to '/melis/MelisCmsSlider/MelisCmsSliderDetails/saveD…

    Melis Technology Melis Platform melisplatform/melis-cms-slider Packagist
  • Critical 9.3
    CVE-2025-10352 Public exploit

    Missing Authorization vulnerability in Melis Platform

    Vulnerability in the melis-core module of Melis Technology's Melis Platform, which, if exploited, allows an unauthenticated attacker to create an administrator account via a request to '/melis/MelisCore/ToolUser/addNewUser'.

    Melis Technology Melis Platform melisplatform/melis-core Packagist
  • Critical 9.3
    CVE-2025-10351 Public exploit

    SQL injection vulnerability in Melis Platform

    SQL injection vulnerability based on the melis-cms module of the Melis platform from Melis Technology. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'idPage' parameter in the '/melis/MelisCms/PageEdition/g…

    Melis Technology Melis Platform melisplatform/melis-cms Packagist
  • Medium 5.3
    CVE-2025-11171 Public exploit

    Chartify – WordPress Chart Plugin <= 3.5.9 - Missing Authentication for Administrative Function

    The Chartify – WordPress Chart Plugin for WordPress is vulnerable to Missing Authentication for Critical Function in all versions up to, and including, 3.5.9. This is due to the plugin registering an unauthenticated AJAX action that dispatches to admin-class …

    Ays Pro Chartify – WordPress Chart Plugin Web / CMS
  • Medium 6.1
    CVE-2025-61183 Public exploit

    VaahCMS is vulnerable to XSS through its Avatar Upload endpoint

    Cross Site Scripting in vaahcms v.2.3.1 allows a remote attacker to execute arbitrary code via upload method in the storeAvatar() method of UserBase.php

    webreinvent/vaahcms Packagist
  • High 8.8
    CVE-2025-57457 Public exploit

    An OS Command Injection vulnerability in the Admin panel in Curo UC300 5.42.1.7.1.63R1 allows local attackers to inject…