Skip to content
OpenAdvisories

Archive

28 December 2025

Vulnerabilities first published on this day (UTC), newest first.

← November 2025 2025 / December /28 January 2026 →
  1. 1143
  2. 2179
  3. 396
  4. 4170
  5. 5146
  6. 666
  7. 723
  8. 8246
  9. 9672
  10. 10261
  11. 11210
  12. 12230
  13. 1382
  14. 1444
  15. 15149
  16. 16364
  17. 17191
  18. 18399
  19. 19111
  20. 2024
  21. 2130
  22. 22111
  23. 23154
  24. 24494
  25. 2533
  26. 2659
  27. 2715
  28. 2844
  29. 29131
  30. 30428
  31. 31219
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.2
    CVE-2025-15162

    Tenda WH450 RouteStatic stack-based overflow

    A vulnerability was determined in Tenda WH450 1.0.0.18. Affected by this vulnerability is an unknown functionality of the file /goform/RouteStatic. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack can be execut…

    Tenda WH450
  • High 7.2
    CVE-2025-15161

    Tenda WH450 PPTPUserSetting stack-based overflow

    A vulnerability was found in Tenda WH450 1.0.0.18. Affected is an unknown function of the file /goform/PPTPUserSetting. Performing a manipulation of the argument delno results in stack-based buffer overflow. Remote exploitation of the attack is possible. The …

    Tenda WH450
  • High 7.2
    CVE-2025-15160

    Tenda WH450 PPTPServer stack-based overflow

    A vulnerability has been found in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/PPTPServer. Such manipulation of the argument ip1 leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disc…

    Tenda WH450
  • High 7.8
    CVE-2025-68973

    In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leadi…

    gnupg GnuPG gnupg2 gnupg2 Debian Ubuntu Azure Linux Alpine
  • High 7.3
    CVE-2025-15142

    9786 phpok3w show.php sql injection

    A vulnerability was identified in 9786 phpok3w up to 901d96a06809fb28b17f3a4362c59e70411c933c. Impacted is an unknown function of the file show.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. Th…

    9786 phpok3w
  • High 7.3
    CVE-2025-15140

    saiftheboss7 onlinemcqexam quesadd.php sql injection

    A vulnerability was found in saiftheboss7 onlinemcqexam up to 0e56806132971e49721db3ef01868098c7b42ada. This vulnerability affects unknown code of the file /admin/quesadd.php. Performing manipulation of the argument ans1/ans2 results in sql injection. The att…

    saiftheboss7 onlinemcqexam
  • High 8.8
    CVE-2025-15137 EPSS 11%

    TRENDnet TEW-800MB NTPSyncWithHost.cgi sub_F934  command injection

    A vulnerability was detected in TRENDnet TEW-800MB 1.0.1.0. Affected by this vulnerability is the function sub_F934  of the file NTPSyncWithHost.cgi. The manipulation results in command injection. The attack may be launched remotely. The exploit is now public…

    Trendnet TEW-800MB
  • High 8.8
    CVE-2025-15136 EPSS 11%

    TRENDnet TEW-800MB Management wizardset do_setWizard_asp command injection

    A security vulnerability has been detected in TRENDnet TEW-800MB 1.0.1.0. Affected is the function do_setWizard_asp of the file /goform/wizardset of the component Management Interface. The manipulation of the argument WizardConfigured leads to command injecti…

    Trendnet TEW-800MB
  • High 7.3
    CVE-2025-15127

    FantasticLBP Hotels_Server Room.php sql injection

    A security vulnerability has been detected in FantasticLBP Hotels_Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. Affected by this issue is some unknown functionality of the file /controller/api/Room.php. Such manipulation of the argument hotelId leads…

    FantasticLBP Hotels Server