Skip to content
OpenAdvisories

Archive

3 December 2025

Vulnerabilities first published on this day (UTC), newest first.

44 results · Clear filters · Feed

  • Medium 6.1

    A stored cross-site scripting (XSS) vulnerability in the PwdGrp.cgi endpoint of AVTECH SECURITY Corporation DGM1104 Ful…

  • Medium 6.2

    Aquarius Desktop 3.0.069 for macOS stores user authentication credentials in the local file ~/Library/Application Suppo…

  • Medium 6.5
    CVE-2025-65345 Public exploit

    alexusmai laravel-file-manager is vulnerable to Directory Traversal

    alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation.

  • Medium 5.1

    The Aquarius HelperTool (1.0.003) privileged XPC service on macOS contains multiple flaws that allow local privilege es…