Latest Critical CVEs

• CVE-2025-66450 - LibreChat JSON Injection in Chat POST Allows Remote Resource Inclusion and PXSS via Image Upload

  CVE ID :CVE-2025-66450
  Published : Dec. 11, 2025, 10:15 p.m. | 47 minutes ago
  Description :LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, when a user posts a question, the iconURL parameter of the POST request can be modified by an attacker. The malicious code is then stored in the chat which can then be shared to other users. When sharing chats with a potentially malicious “tracker”, resources loaded can lead to loss of privacy for users who view the chat link that is sent to them. This issue is fixed in version 0.8.1.
  Severity: 8.6 | HIGH
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2025-66446 - MaxKB has a Python sandbox LD_PRELOAD bypass

  CVE ID :CVE-2025-66446
  Published : Dec. 11, 2025, 10:15 p.m. | 47 minutes ago
  Description :MaxKB is an open-source AI assistant for enterprise. Versions 2.3.1 and below have improper file permissions which allow attackers to overwrite the built-in dynamic linker and other critical files, potentially resulting in privilege escalation. This issue is fixed in version 2.4.0.
  Severity: 8.8 | HIGH
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2025-66419 - MaxKB vulnerable to privilege escalation through sandbox bypass

  CVE ID :CVE-2025-66419
  Published : Dec. 11, 2025, 10:15 p.m. | 47 minutes ago
  Description :MaxKB is an open-source AI assistant for enterprise. In versions 2.3.1 and below, the tool module allows an attacker to escape the sandbox environment and escalate privileges under certain concurrent conditions. This issue is fixed in version 2.4.0.
  Severity: 8.8 | HIGH
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2025-64721 - Sandboxie's Integer Overflow in SbieIniServer::RC4Crypt allows sandbox escape and SYSTEM compromise

  CVE ID :CVE-2025-64721
  Published : Dec. 11, 2025, 10:15 p.m. | 47 minutes ago
  Description :Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. In versions 1.16.6 and below, the SYSTEM-level service SbieSvc.exe exposes SbieIniServer::RC4Crypt to sandboxed processes. The handler adds a fixed header size to a caller-controlled value_len without overflow checking. A large value_len (e.g., 0xFFFFFFF0) wraps the allocation size, causing a heap overflow when attacker data is copied into the undersized buffer. This allows sandboxed processes to execute arbitrary code as SYSTEM, fully compromising the host. This issue is fixed in version 1.16.7.
  Severity: 9.9 | CRITICAL
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2025-34506 - WBCE CMS 1.6.3 Authenticated Remote Code Execution via Module Upload

  CVE ID :CVE-2025-34506
  Published : Dec. 11, 2025, 10:15 p.m. | 47 minutes ago
  Description :WBCE CMS version 1.6.3 and prior contains an authenticated remote code execution vulnerability that allows administrators to upload malicious modules. Attackers can craft a specially designed ZIP module with embedded PHP reverse shell code to gain remote system access when the module is installed.
  Severity: 8.6 | HIGH
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2024-58313 - xbtitFM 4.1.18 Insecure File Upload in file_hosting Feature

  CVE ID :CVE-2024-58313
  Published : Dec. 11, 2025, 10:15 p.m. | 47 minutes ago
  Description :xbtitFM 4.1.18 contains an insecure file upload vulnerability that allows authenticated attackers with administrative privileges to upload and execute arbitrary PHP code through the file_hosting feature. Attackers can bypass file type restrictions by modifying the Content-Type header to image/gif, adding GIF89a magic bytes, and using alternate PHP tags to upload web shells that execute system commands.
  Severity: 8.6 | HIGH
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2024-58312 - xbtitFM 4.1.18 Unauthenticated Path Traversal in nfogen.php

  CVE ID :CVE-2024-58312
  Published : Dec. 11, 2025, 10:15 p.m. | 47 minutes ago
  Description :xbtitFM 4.1.18 contains a path traversal vulnerability that allows unauthenticated attackers to access sensitive system files by manipulating URL parameters. Attackers can exploit directory traversal techniques to read critical system files like using encoded path traversal characters in HTTP requests.
  Severity: 8.7 | HIGH
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2024-58310 - APC Network Management Card 4 Path Traversal via Directory Traversal

  CVE ID :CVE-2024-58310
  Published : Dec. 11, 2025, 10:15 p.m. | 47 minutes ago
  Description :APC Network Management Card 4 contains a path traversal vulnerability that allows unauthenticated attackers to access sensitive system files by manipulating URL parameters. Attackers can exploit directory traversal techniques to read critical system files like /etc/passwd by using encoded path traversal characters in HTTP requests.
  Severity: 8.7 | HIGH
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2024-58309 - xbtitFM 4.1.18 Unauthenticated SQL Injection in shoutedit.php

  CVE ID :CVE-2024-58309
  Published : Dec. 11, 2025, 10:15 p.m. | 47 minutes ago
  Description :xbtitFM 4.1.18 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries by injecting malicious SQL code through the msgid parameter. Attackers can send crafted requests to /shoutedit.php with EXTRACTVALUE functions to extract database names, user credentials, and password hashes from the underlying database.
  Severity: 8.7 | HIGH
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2024-58308 - Quick.CMS 6.7 SQL Injection Authentication Bypass via Admin Login

  CVE ID :CVE-2024-58308
  Published : Dec. 11, 2025, 10:15 p.m. | 47 minutes ago
  Description :Quick.CMS 6.7 contains a SQL injection vulnerability that allows unauthenticated attackers to bypass login authentication by manipulating the login form. Attackers can inject specific SQL payloads like ' or '1'='1 to gain unauthorized administrative access to the system.
  Severity: 9.3 | CRITICAL
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2024-58307 - CSZCMS 1.3.0 Authenticated SQL Injection via Members View Endpoint

  CVE ID :CVE-2024-58307
  Published : Dec. 11, 2025, 10:15 p.m. | 47 minutes ago
  Description :CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the members view functionality that allows authenticated attackers to manipulate database queries. Attackers can inject malicious SQL code through the view parameter to potentially execute time-based blind SQL injection attacks and extract database information.
  Severity: 9.3 | CRITICAL
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2024-58306 - minaliC 2.0.0 Denial of Service Vulnerability via Large GET Request

  CVE ID :CVE-2024-58306
  Published : Dec. 11, 2025, 10:15 p.m. | 47 minutes ago
  Description :minaliC 2.0.0 contains a denial of service vulnerability that allows remote attackers to crash the web server by sending oversized GET requests. Attackers can send crafted HTTP requests with excessive data to overwhelm the server and cause service interruption.
  Severity: 8.7 | HIGH
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2024-58303 - FoF Pretty Mail 1.1.2 Server Side Template Injection via Email Template Settings

  CVE ID :CVE-2024-58303
  Published : Dec. 11, 2025, 10:15 p.m. | 47 minutes ago
  Description :FoF Pretty Mail 1.1.2 contains a server-side template injection vulnerability that allows administrative users to inject malicious code into email templates. Attackers can execute system commands by inserting crafted template expressions that trigger arbitrary code execution during email generation.
  Severity: 8.6 | HIGH
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2024-58301 - Purei CMS 1.0 SQL Injection via Multiple Vulnerable Endpoints

  CVE ID :CVE-2024-58301
  Published : Dec. 11, 2025, 10:15 p.m. | 47 minutes ago
  Description :Purei CMS 1.0 contains a time-based blind SQL injection vulnerability that allows attackers to manipulate database queries through unfiltered user input parameters. Attackers can exploit vulnerable endpoints like getAllParks.php and events-ajax.php by injecting crafted SQL payloads to potentially extract or modify database information.
  Severity: 9.3 | CRITICAL
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2024-58300 - Siklu MultiHaul TG Series e Vulnerability

  CVE ID :CVE-2024-58300
  Published : Dec. 11, 2025, 10:15 p.m. | 47 minutes ago
  Description :Siklu MultiHaul TG series devices before version 2.0.0 contain an unauthenticated vulnerability that allows remote attackers to retrieve randomly generated credentials via a network request. Attackers can send a specific hex-encoded command to port 12777 to obtain username and password, enabling direct SSH access to the device.
  Severity: 8.7 | HIGH
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2024-58298 - Compuware iStrobe Web 20.13 Pre-Auth Remote Code Execution via File Upload

  CVE ID :CVE-2024-58298
  Published : Dec. 11, 2025, 10:15 p.m. | 47 minutes ago
  Description :Compuware iStrobe Web 20.13 contains a pre-authentication remote code execution vulnerability that allows unauthenticated attackers to upload malicious JSP files through a path traversal in the file upload form. Attackers can exploit the 'fileName' parameter to upload a web shell and execute arbitrary commands by sending POST requests to the uploaded JSP endpoint.
  Severity: 9.2 | CRITICAL
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2024-58295 - ElkArte Forum 1.1.9 Authenticated Remote Code Execution via Theme Upload

  CVE ID :CVE-2024-58295
  Published : Dec. 11, 2025, 10:15 p.m. | 47 minutes ago
  Description :ElkArte Forum 1.1.9 contains a remote code execution vulnerability that allows authenticated administrators to upload malicious PHP files through the theme installation process. Attackers can upload a ZIP archive with a PHP file containing system commands, which can then be executed by accessing the uploaded file in the theme directory.
  Severity: 8.6 | HIGH
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2024-58294 - FreePBX 16 Authenticated Remote Code Execution via API Module

  CVE ID :CVE-2024-58294
  Published : Dec. 11, 2025, 10:15 p.m. | 47 minutes ago
  Description :FreePBX 16 contains an authenticated remote code execution vulnerability in the API module that allows attackers with valid session credentials to execute arbitrary commands. Attackers can exploit the 'generatedocs' endpoint by crafting malicious POST requests with bash command injection to establish remote shell access.
  Severity: 8.7 | HIGH
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2024-58293 - Akaunting 3.1.8 Server-Side Template Injection via Multiple Form Fields

  CVE ID :CVE-2024-58293
  Published : Dec. 11, 2025, 10:15 p.m. | 47 minutes ago
  Description :Akaunting 3.1.8 contains a server-side template injection vulnerability that allows authenticated administrators to execute template expressions in multiple form input fields. Attackers can inject template payloads in items, taxes, transactions, and vendor name fields to perform arithmetic operations and string manipulations.
  Severity: 8.6 | HIGH
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2024-58290 - Xhibiter NFT Marketplace 1.10.2 SQL Injection via Collections Endpoint

  CVE ID :CVE-2024-58290
  Published : Dec. 11, 2025, 10:15 p.m. | 47 minutes ago
  Description :Xhibiter NFT Marketplace 1.10.2 contains a SQL injection vulnerability in the collections endpoint that allows attackers to manipulate database queries through the 'id' parameter. Attackers can exploit boolean-based, time-based, and UNION-based SQL injection techniques to potentially extract or manipulate database information by sending crafted payloads to the collections page.
  Severity: 9.3 | CRITICAL
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...