deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-58288
Published: 2025-12-11
Description: Genexus Protection Server 9.7.2.10 contains an unquoted service path vulnerability in the protsrvservice Windows service configuration. Attackers can exploit the unquoted binary path to execute arbitrary code with elevated LocalSystem privileges by placing malicious executables in specific file system locations.
CWE: CWE-428
References: https://www.exploit-db.com/exploits/52065; https://www.genexus.com/en/developers/downloadcenter?data=;;; https://www.genexus.com/es/
CVE: CVE-2024-58289
Published: 2025-12-11
Description: Microweber 2.0.15 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts into user profile fields. Attackers can input script payloads in the first name field that will execute when the profile is viewed by other users, potentially stealing session cookies and executing arbitrary JavaScript.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/microweber/microweber; https://microweber.me/; https://www.exploit-db.com/exploits/52058
CVE: CVE-2024-58290
Published: 2025-12-11
Description: Xhibiter NFT Marketplace 1.10.2 contains a SQL injection vulnerability in the collections endpoint that allows attackers to manipulate database queries through the 'id' parameter. Attackers can exploit boolean-based, time-based, and UNION-based SQL injection techniques to potentially extract or manipulate database information by sending crafted payloads to the collections page.
CWE: CWE-89
References: https://elements.envato.com/xhibiter-nft-marketplace-html-template-AQN45FA; https://www.exploit-db.com/exploits/52060; https://www.vulncheck.com/advisories/xhibiter-nft-marketplace-sql-injection-via-collections-endpoint
CVE: CVE-2024-58291
Published: 2025-12-11
Description: Flatboard 3.2 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts in forum information fields. Attackers can insert JavaScript payloads that execute when other users view the forum, potentially stealing session cookies and executing client-side scripts.
CWE: CWE-79
References: https://flatboard.org/; https://flatboard.org/support; https://www.exploit-db.com/exploits/52054
CVE: CVE-2024-58292
Published: 2025-12-11
Description: XMB Forum 1.9.12.06 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious JavaScript into templates and front page settings. Attackers can insert XSS payloads in footer templates and news ticker fields, enabling script execution for all forum users when pages are rendered.
CWE: CWE-79
References: https://www.exploit-db.com/exploits/52044; https://www.vulncheck.com/advisories/xmb-forum-persistent-cross-site-scripting-via-admin-templates; https://www.xmbforum2.com/
CVE: CVE-2024-58293
Published: 2025-12-11
Description: Akaunting 3.1.8 contains a server-side template injection vulnerability that allows authenticated administrators to execute template expressions in multiple form input fields. Attackers can inject template payloads in items, taxes, transactions, and vendor name fields to perform arithmetic operations and string manipulations.
CWE: CWE-1336
References: https://akaunting.com/forum; https://www.exploit-db.com/exploits/52030; https://www.softaculous.com/apps/erp/Akaunting
CVE: CVE-2024-58294
Published: 2025-12-11
Description: FreePBX 16 contains an authenticated remote code execution vulnerability in the API module that allows attackers with valid session credentials to execute arbitrary commands. Attackers can exploit the 'generatedocs' endpoint by crafting malicious POST requests with bash command injection to establish remote shell access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.exploit-db.com/exploits/52031; https://www.freepbx.org/; https://www.vulncheck.com/advisories/freepbx-authenticated-remote-code-execution-via-api-module
CVE: CVE-2024-58295
Published: 2025-12-11
Description: ElkArte Forum 1.1.9 contains a remote code execution vulnerability that allows authenticated administrators to upload malicious PHP files through the theme installation process. Attackers can upload a ZIP archive with a PHP file containing system commands, which can then be executed by accessing the uploaded file in the theme directory.
CWE: CWE-434
References: https://github.com/elkarte/Elkarte/releases/download/v1.1.9/ElkArte_v1-1-9_install.zip; https://www.elkarte.net/; https://www.exploit-db.com/exploits/52026
CVE: CVE-2024-58296
Published: 2025-12-11
Description: CE Phoenix v3.0.1 contains a stored cross-site scripting vulnerability in the currencies administration panel that allows attackers to inject malicious scripts. Attackers can insert XSS payloads in the title field to execute arbitrary JavaScript when administrators view the currencies page.
CWE: CWE-79
References: https://demos6.softaculous.com/CE_Phoenixx3r6jqi4kl/admin/currencies.php; https://phoenixcart.org/; https://www.exploit-db.com/exploits/52015
CVE: CVE-2024-58297
Published: 2025-12-11
Description: PyroCMS v3.0.1 contains a stored cross-site scripting vulnerability in the admin redirects configuration that allows attackers to inject malicious scripts. Attackers can insert a payload in the 'Redirect From' field to execute arbitrary JavaScript when administrators view the redirects page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://pyrocms.com/; https://www.exploit-db.com/exploits/52016; https://www.softaculous.com/apps/cms/PyroCMS/
CVE: CVE-2024-58298
Published: 2025-12-11
Description: Compuware iStrobe Web 20.13 contains a pre-authentication remote code execution vulnerability that allows unauthenticated attackers to upload malicious JSP files through a path traversal in the file upload form. Attackers can exploit the 'fileName' parameter to upload a web shell and execute arbitrary commands by sending POST requests to the uploaded JSP endpoint.
CWE: CWE-434
References: https://www.bmc.com/; https://www.bmc.com/support; https://www.exploit-db.com/exploits/51991
CVE: CVE-2024-58300
Published: 2025-12-11
Description: Siklu MultiHaul TG series devices before version 2.0.0 contain an unauthenticated vulnerability that allows remote attackers to retrieve randomly generated credentials via a network request. Attackers can send a specific hex-encoded command to port 12777 to obtain username and password, enabling direct SSH access to the device.
CWE: CWE-306
References: https://siklu.com/; https://www.exploit-db.com/exploits/51932; https://www.vulncheck.com/advisories/siklu-multihaul-tg-series-unauthenticated-credential-disclosure-vulnerability
CVE: CVE-2024-58301
Published: 2025-12-11
Description: Purei CMS 1.0 contains a time-based blind SQL injection vulnerability that allows attackers to manipulate database queries through unfiltered user input parameters. Attackers can exploit vulnerable endpoints like getAllParks.php and events-ajax.php by injecting crafted SQL payloads to potentially extract or modify database information.
CWE: CWE-89
References: https://purei.com; https://www.exploit-db.com/exploits/51929; https://www.vulncheck.com/advisories/purei-cms-sql-injection-via-multiple-vulnerable-endpoints
CVE: CVE-2024-58302
Published: 2025-12-11
Description: FoF Pretty Mail 1.1.2 contains a local file inclusion vulnerability that allows administrative users to include arbitrary server files in email templates. Attackers can exploit the template settings by inserting file inclusion payloads to read sensitive system files like /etc/passwd during email generation.
CWE: CWE-98
References: https://flarum.org/; https://github.com/FriendsOfFlarum/pretty-mail; https://www.exploit-db.com/exploits/51947
CVE: CVE-2024-58303
Published: 2025-12-11
Description: FoF Pretty Mail 1.1.2 contains a server-side template injection vulnerability that allows administrative users to inject malicious code into email templates. Attackers can execute system commands by inserting crafted template expressions that trigger arbitrary code execution during email generation.
CWE: CWE-1336
References: https://flarum.org/; https://github.com/FriendsOfFlarum/pretty-mail; https://www.exploit-db.com/exploits/51948
CVE: CVE-2024-58304
Published: 2025-12-11
Description: SPA-CART CMS 1.9.0.3 contains a stored cross-site scripting vulnerability in the product description parameter that allows authenticated administrators to inject malicious scripts. Attackers can submit JavaScript payloads through the 'descr' parameter in the product edit form to execute arbitrary code in administrative users' browsers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/51919; https://www.vulncheck.com/advisories/spa-cart-cms-stored-cross-site-scripting-via-product-description
CVE: CVE-2024-58306
Published: 2025-12-11
Description: minaliC 2.0.0 contains a denial of service vulnerability that allows remote attackers to crash the web server by sending oversized GET requests. Attackers can send crafted HTTP requests with excessive data to overwhelm the server and cause service interruption.
CWE: CWE-400
References: http://minalic.sourceforge.net/; https://www.exploit-db.com/exploits/51917; https://www.vulncheck.com/advisories/minalic-denial-of-service-vulnerability-via-large-get-request
CVE: CVE-2024-58307
Published: 2025-12-11
Description: CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the members view functionality that allows authenticated attackers to manipulate database queries. Attackers can inject malicious SQL code through the view parameter to potentially execute time-based blind SQL injection attacks and extract database information.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://sourceforge.net/projects/cszcms/files/install/CSZCMS-V1.3.0.zip/download; https://www.cszcms.com/; https://www.exploit-db.com/exploits/51916
CVE: CVE-2024-58308
Published: 2025-12-11
Description: Quick.CMS 6.7 contains a SQL injection vulnerability that allows unauthenticated attackers to bypass login authentication by manipulating the login form. Attackers can inject specific SQL payloads like ' or '1'='1 to gain unauthorized administrative access to the system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://opensolution.org/download/home.html?sFile=Quick.Cms_v6.7-en.zip; https://www.exploit-db.com/exploits/51910; https://www.opensolution.org
CVE: CVE-2024-58309
Published: 2025-12-11
Description: xbtitFM 4.1.18 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries by injecting malicious SQL code through the msgid parameter. Attackers can send crafted requests to /shoutedit.php with EXTRACTVALUE functions to extract database names, user credentials, and password hashes from the underlying database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/51909; https://www.vulncheck.com/advisories/xbtitfm-unauthenticated-sql-injection-in-shouteditphp; https://xbtitfm.eu
CVE: CVE-2024-58310
Published: 2025-12-11
Description: APC Network Management Card 4 contains a path traversal vulnerability that allows unauthenticated attackers to access sensitive system files by manipulating URL parameters. Attackers can exploit directory traversal techniques to read critical system files like /etc/passwd by using encoded path traversal characters in HTTP requests.
CWE: CWE-22
References: https://www.apc.com/; https://www.exploit-db.com/exploits/51897; https://www.vulncheck.com/advisories/apc-network-management-card-path-traversal-via-directory-traversal
CVE: CVE-2024-58312
Published: 2025-12-11
Description: xbtitFM 4.1.18 contains a path traversal vulnerability that allows unauthenticated attackers to access sensitive system files by manipulating URL parameters. Attackers can exploit directory traversal techniques to read critical system files like using encoded path traversal characters in HTTP requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.exploit-db.com/exploits/51909; https://www.vulncheck.com/advisories/xbtitfm-unauthenticated-path-traversal-in-nfogenphp; https://xbtitfm.eu
CVE: CVE-2024-58313
Published: 2025-12-11
Description: xbtitFM 4.1.18 contains an insecure file upload vulnerability that allows authenticated attackers with administrative privileges to upload and execute arbitrary PHP code through the file_hosting feature. Attackers can bypass file type restrictions by modifying the Content-Type header to image/gif, adding GIF89a magic bytes, and using alternate PHP tags to upload web shells that execute system commands.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://www.exploit-db.com/exploits/51909; https://www.vulncheck.com/advisories/xbtitfm-insecure-file-upload-in-filehosting-feature; https://xbtitfm.eu
CVE: CVE-2025-13668
Published: 2025-12-11
Description: A potential security vulnerability in Quartus® Prime Pro Edition Design Software may allow escalation of privilege.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.altera.com/security/security-advisory/asa-0001
CVE: CVE-2025-34499
Published: 2025-12-11
Description: AnyDesk 7.0.15 and 9.0.1 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated SYSTEM privileges. Attackers can exploit the unquoted service path configuration to inject malicious executables that will be run with high-level system permissions.
CWE: CWE-428
References: http://anydesk.com; http://anydesk.com/download; https://www.exploit-db.com/exploits/51968
CVE: CVE-2025-34504
Published: 2025-12-11
Description: KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows attackers to manipulate the 'link' parameter. Attackers can craft malicious URLs in the link parameter to redirect users to arbitrary external websites after authentication.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/kalcaddle/KodExplorer/releases/tag/4.52; https://kodcloud.com/; https://www.exploit-db.com/exploits/52245
CVE: CVE-2025-34506
Published: 2025-12-11
Description: WBCE CMS version 1.6.3 and prior contains an authenticated remote code execution vulnerability that allows administrators to upload malicious modules. Attackers can craft a specially designed ZIP module with embedded PHP reverse shell code to gain remote system access when the module is installed.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/Swammers8/WBCE-v1.6.3-Authenticated-RCE; https://github.com/WBCE/WBCE_CMS; https://wbce-cms.org/
CVE: CVE-2025-64721
Published: 2025-12-11
Description: Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. In versions 1.16.6 and below, the SYSTEM-level service SbieSvc.exe exposes SbieIniServer::RC4Crypt to sandboxed processes. The handler adds a fixed header size to a caller-controlled value_len without overflow checking. A large value_len (e.g., 0xFFFFFFF0) wraps the allocation size, causing a heap overflow when attacker data is copied into the undersized buffer. This allows sandboxed processes to execute arbitrary code as SYSTEM, fully compromising the host. This issue is fixed in version 1.16.7.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-190
References: https://github.com/sandboxie-plus/Sandboxie/commit/000492f8c411d24292f1b977a107994347bc7dfa; https://github.com/sandboxie-plus/Sandboxie/releases/tag/v1.16.7; https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-w476-j57g-96vp
CVE: CVE-2025-66419
Published: 2025-12-11
Description: MaxKB is an open-source AI assistant for enterprise. In versions 2.3.1 and below, the tool module allows an attacker to escape the sandbox environment and escalate privileges under certain concurrent conditions. This issue is fixed in version 2.4.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-362
References: https://github.com/1Panel-dev/MaxKB/commit/f8ada9a110c4dbef8c3c2636c78847ecd621ece7; https://github.com/1Panel-dev/MaxKB/releases/tag/v2.4.0; https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-f9qm-2pxq-fx6c
CVE: CVE-2025-66446
Published: 2025-12-11
Description: MaxKB is an open-source AI assistant for enterprise. Versions 2.3.1 and below have improper file permissions which allow attackers to overwrite the built-in dynamic linker and other critical files, potentially resulting in privilege escalation. This issue is fixed in version 2.4.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-362
References: https://github.com/1Panel-dev/MaxKB/releases/tag/v2.4.0; https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-5xx2-3q9w-jpgf
CVE: CVE-2025-66450
Published: 2025-12-11
Description: LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, when a user posts a question, the iconURL parameter of the POST request can be modified by an attacker. The malicious code is then stored in the chat which can then be shared to other users. When sharing chats with a potentially malicious “tracker”, resources loaded can lead to loss of privacy for users who view the chat link that is sent to them. This issue is fixed in version 0.8.1.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-80
References: https://github.com/danny-avila/LibreChat/commit/6fa94d3eb8f[PII_REDACTED]d10dccf8b01a735744c; https://github.com/danny-avila/LibreChat/security/advisories/GHSA-84vx-vmcf-xgpp
CVE: CVE-2025-66451
Published: 2025-12-11
Description: LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, when creating prompts, JSON requests are sent to define and modify the prompts via PATCH endpoint for prompt groups (/api/prompts/groups/:groupId). However, the request bodies are not sufficiently validated for proper input, enabling users to modify prompts in a way that was not intended as part of the front end system. The patchPromptGroup function passes req.body directly to updatePromptGroup() without filtering sensitive fields. This issue is fixed in version 0.8.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-915
References: https://github.com/danny-avila/LibreChat/commit/01413eea3d3c1454d32ca9704fa[PII_REDACTED]737; https://github.com/danny-avila/LibreChat/security/advisories/GHSA-vpqq-5qr4-655h
CVE: CVE-2025-66452
Published: 2025-12-11
Description: LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, there is no handler for JSON parsing errors; SyntaxError from express.json() includes user input in the error message, which gets reflected in responses. User input (including HTML/JavaScript) can be exposed in error responses, creating an XSS risk if Content-Type isn't strictly enforced. This issue does not have a fix at the time of publication.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/danny-avila/LibreChat/security/advisories/GHSA-q6c5-gvj5-c264
CVE: CVE-2025-67780
Published: 2025-12-11
Description: SpaceX Starlink Dish devices with firmware 2024.12.04.mr46620 (e.g., on Mini1_prod2) allow administrative actions via unauthenticated LAN gRPC requests, aka MARMALADE 2. The cross-origin policy can be bypassed by omitting a Referer header. In some cases, an attacker's ability to read tilt, rotation, and elevation data via gRPC can make it easier to infer the geographical location of the dish.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-306
References: https://www.akawlabs.com/blog/starlink-grpc-execution
CVE: CVE-2025-67779
Published: 2025-12-12
Description: It was found that the fix addressing CVE-2025-55184 in React Server Components was incomplete and does not prevent a denial of service attack in a specific case. React Server Components versions 19.0.2, 19.1.3 and 19.2.2 are affected, allowing unsafe deserialization of payloads from HTTP requests to Server Function endpoints. This can cause an infinite loop that hangs the server process and may prevent future HTTP requests from being served.
CVSS Score: 7.5 (HIGH)
CWE: CWE-502, CWE-400, CWE-502
References: https://react.dev/blog/2025/12/11/denial-of-service-and-source-code-exposure-in-react-server-components; https://www.facebook.com/security/advisories/cve-2025-67779
CVE: CVE-2025-10451
Published: 2025-12-12
Description: Unchecked output buffer may allowed arbitrary code execution in SMM and potentially result in SMM memory corruption.
CVSS Score: 8.2 (HIGH)
CWE: CWE-787
References: https://www.insyde.com/security-pledge/sa-2025009/
CVE: CVE-2025-13052
Published: 2025-12-12
Description: When the user set the Notification's sender to send emails to the SMTP server via msmtp, an improper validated TLS/SSL certificates allows an attacker who can intercept network traffic between the SMTP client and server to execute a man-in-the-middle (MITM) attack, which may obtain the sensitive information of the SMTP.

Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RKD2 as well as from ADM 5.0.0 through ADM 5.1.0.RN42.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://www.asustor.com/security/security_advisory_detail?id=49
CVE: CVE-2025-13053
Published: 2025-12-12
Description: When a user configures the NAS to retrieve UPS status or control the UPS, a non-enforced TLS certificate verification can allow an attacker able to intercept network traffic between the client and server can perform a man-in-the-middle (MITM) attack, which may obtain the sensitive information of the UPS server configuation.

This issue affects ADM: from 4.1.0 through 4.3.3.RKD2, from 5.0.0 through 5.1.0.RN42.
CVSS Score: 3.7 (LOW)
CWE: CWE-311
References: https://www.asustor.com/security/security_advisory_detail?id=49
CVE: CVE-2025-13665
Published: 2025-12-12
Description: The System Console Utility for Windows is vulnerable to a DLL planting vulnerability
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.altera.com/security/security-advisory/asa-0002
CVE: CVE-2025-13669
Published: 2025-12-12
Description: Uncontrolled Search Path Element vulnerability in Altera High Level Synthesis Compiler on Windows allows Search Order Hijacking.This issue affects High Level Synthesis Compiler: from 19.1 through 24.3.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.altera.com/security/security-advisory/asa-0003
CVE: CVE-2025-13670
Published: 2025-12-12
Description: The High Level Synthesis Compiler i++ command for Windows is vulnerable to a DLL planting vulnerability
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.altera.com/security/security-advisory/asa-0003
CVE: CVE-2025-13839
Published: 2025-12-12
Description: The LJUsers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter of the 'ljuser' shortcode in all versions up to, and including, 1.2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/ljusers/tags/1.2.0/ljusers.php#L194; https://plugins.trac.wordpress.org/browser/ljusers/trunk/ljusers.php#L194; https://www.wordfence.com/threat-intel/vulnerabilities/id/841adf53-930a-4286-96d0-9ee8b0c188c4?source=cve
CVE: CVE-2025-13886
Published: 2025-12-12
Description: The LT Unleashed plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.1 via the 'template' parameter in the `book` shortcode due to insufficient path sanitization. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where files such as wp-config.php can be included.
CVSS Score: 7.5 (HIGH)
CWE: CWE-98
References: https://plugins.trac.wordpress.org/browser/lt-unleashed/tags/1.1.1/lt-unleashed.php#L315; https://plugins.trac.wordpress.org/browser/lt-unleashed/trunk/lt-unleashed.php#L241; https://plugins.trac.wordpress.org/browser/lt-unleashed/trunk/lt-unleashed.php#L315