Skip to content
OpenAdvisories

Archive

9 October 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 7.3
    CVE-2025-11555 Public exploit

    Campcodes Online Learning Management System calendar_of_events.php sql injection

    A vulnerability was detected in Campcodes Online Learning Management System 1.0. This affects an unknown part of the file /admin/calendar_of_events.php. The manipulation of the argument date_start results in sql injection. The attack may be launched remotely.…

  • High 7.5
    CVE-2025-11371 Exploited Public exploit Scanner template EPSS 92%

    Gladinet CentreStack and TrioFox Local File Inclusion Flaw

    In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild.  This…

    KEV Nov 4, 2025
  • High 7.3
    CVE-2025-60375 Public exploit

    The authentication mechanism in Perfex CRM before 3.3.1 allows attackers to bypass login credentials due to insufficien…