Skip to content
OpenAdvisories

Archive

8 December 2025

Vulnerabilities first published on this day (UTC), newest first.

246 results · Feed

  • Critical 9.1

    NUT-14 allows cashu tokens to be created with a preimage hash. However, nutshell (cashubtc/nuts) before 0.18.0 do not v…

  • Medium 4.6

    A stored cross-site scripting (XSS) vulnerability exists in the web interface of Lyrion Music Server <= 9.0.3. An authe…

  • High 7.2

    Authenticated append-style command-injection Ruijie APs (AP_RGOS 11.1.x) allows an authenticated web user to execute ap…

  • High 7.5

    memos vulnerability allows the creation of arbitrary accounts

    Incorrect access control in the /api/v1/user endpoint of usememos memos v0.25.2 allows unauthorized attackers to create arbitrary accounts via a crafted request.

  • Medium 5.4

    Barix Instreamer v04.06 and v04.05 contains a stored cross-site scripting (XSS) vulnerability in the Web UI Configurati…

  • Medium 4.3

    memos vulnerability allows arbitrarily reactions deletion

    Incorrect access control in usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily delete reactions made to other users' Memos.