Skip to content
OpenAdvisories

Archive

29 December 2025

Vulnerabilities first published on this day (UTC), newest first.

← November 2025 2025 / December /29 January 2026 →
  1. 1143
  2. 2179
  3. 396
  4. 4170
  5. 5146
  6. 666
  7. 723
  8. 8246
  9. 9672
  10. 10261
  11. 11210
  12. 12230
  13. 1382
  14. 1444
  15. 15149
  16. 16364
  17. 17191
  18. 18399
  19. 19111
  20. 2024
  21. 2130
  22. 22111
  23. 23154
  24. 24494
  25. 2533
  26. 2659
  27. 2715
  28. 2844
  29. 29131
  30. 30428
  31. 31219
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-68860 Public exploit

    WordPress Mobile builder plugin <= 1.4.2 - Broken Authentication vulnerability

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Mobile Builder Mobile builder mobile-builder allows Authentication Abuse.This issue affects Mobile builder: from n/a through <= 1.4.2.

    Mobile Builder Mobile builder
  • Medium 6.0
    CVE-2025-14175 Public exploit

    Weak Algorithm Support in SSH Server on TL-WR820N

    A vulnerability in the SSH server of TP-Link TL-WR820N v2.80 allows the use of a weak cryptographic algorithm, enabling an adjacent attacker to intercept and decrypt SSH traffic. Exploitation may expose sensitive information and compromise confidentiality.

    TP-Link Systems TL-WR820N v2.8 Network devices
  • Critical 10.0
    CVE-2025-52691 Exploited · Ransomware Public exploit Scanner template EPSS 86%

    Upload Arbitrary Files

    Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.

    SmarterTools SmarterMail
    KEV Jan 26, 2026
  • Medium 6.5
    CVE-2025-60458 Public exploit

    UxPlay 1.72 contains a double free vulnerability in its RTSP request handling. A specially crafted RTSP TEARDOWN reques…

    uxplay uxplay Debian Ubuntu
  • Critical 9.8
    CVE-2025-57460 Public exploit

    File upload vulnerability in machsol machpanel 8.0.32 allows attacker to gain a webshell.

  • Medium 6.1
    CVE-2025-57462 Public exploit

    Stored cross-site scripting (xss) in machsol machpanel 8.0.32 allows attackers to execute arbitrary web scripts or HTML…

  • Medium 6.1
    CVE-2025-65442 Public exploit

    DOM-based Cross-Site Scripting (XSS) vulnerability in 201206030 novel V3.5.0 allows remote attackers to execute arbitra…