Skip to content
OpenAdvisories

Archive

7 November 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-12890 Public exploit

    Bluetooth: peripheral: Invalid handling of malformed connection request

    Improper handling of malformed Connection Request with the interval set to be 1 (which supposed to be illegal) and the chM 0x7CFFFFFFFF triggers a crash. The peripheral will not be connectable after it.

  • Medium 4.1
    CVE-2025-63420 Public exploit

    CrushFTP11 before 11.3.7_57 is vulnerable to stored HTML injection in the CrushFTP Admin Panel (Reports / "Who Created …