Skip to content
OpenAdvisories

Archive

18 November 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 7.0
    CVE-2025-34324 Public exploit

    GoSign Desktop < 2.4.1 Insecure Update Mechanism RCE

    GoSign Desktop versions 2.4.0 and earlier use an unsigned update manifest for distributing application updates. The manifest contains package URLs and SHA-256 hashes but is not digitally signed, so its authenticity relies solely on the underlying TLS channel.…

  • High 8.0
    CVE-2025-48593 Public exploit

    In bta_hf_client_cb_init of bta_hf_client_main.cc, there is a possible remote code execution due to a use after free. T…

  • High 7.3
    CVE-2025-63602 Public exploit

    A vulnerability was discovered in Awesome Miner thru 11.2.4 that allows arbitrary read and write to kernel memory and M…