19528 matches found
CVE-2025-32966 Dataease H2 JDBC Connection Remote Code Execution
DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.8, authenticated users can complete RCE through the backend JDBC link. This issue has been patched in version 2.10.8...
virtuoso-opensource: DoS in sqlc_add_distinct_node
A flaw was found in Virtuoso-OpenSource. This vulnerability allows attackers to cause a denial of service DoS via crafted SQL statements...
[SECURITY] Fedora 41 Update: chromium-135.0.7049.95-1.fc41
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] Fedora 41 Update: moodle-4.4.8-1.fc41
Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities...
[SECURITY] Fedora 40 Update: chromium-135.0.7049.95-1.fc40
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] Fedora 40 Update: moodle-4.3.12-1.fc40
Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities...
The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their lack of access control mechanisms. This allows attackers to circumvent existing security restrictions.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in access control. Exploiting these vulnerabilities can allow attackers to bypass existing security restrictions...
The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their inadequate authentication procedures, which allow attackers to escalate their privileges.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to enhance their privileges...
AiXamine: Simplified LLM Safety and Security
Evaluating Large Language Models LLMs for safety and security remains a complex task, often requiring users to navigate a fragmented landscape of ad hoc benchmarks, datasets, metrics, and reporting formats. To address this challenge, we present aiXamine, a comprehensive black-box evaluation...
The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their lack of access control mechanisms. This allows attackers to circumvent existing security restrictions.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in access control. Exploiting these vulnerabilities can allow attackers to bypass existing security restrictions...
The giflib open-source component has a buffer overflow vulnerability
...
PCMan FTP Server Buffer Overflow Vulnerability (CNVD-2025-10692)
PCMan FTP Server is PCMan open source set of FTP software. PCMan FTP Server suffers from a buffer overflow vulnerability that stems from mishandling of specific requests. No detailed vulnerability details are provided at this time...
Tecnick TCExam 跨站脚本漏洞
Tecnick TCExam is a Web-based open source e-exam system from the UK company Tecnick. The system is mainly used for online exams, etc. A cross-site scripting vulnerability exists in Tecnick TCExam version 16.3.2, which stems from vulnerability to multiple cross-site scripting attacks...
Tecnick TCExam SQL注入漏洞
Tecnick TCExam is a web-based open source e-exam system from Tecnick UK. The system is mainly used for online exams and so on. A SQL injection vulnerability exists in Tecnick TCExam version 16.3.2, which stems from improper neutralization of special elements in SQL commands, and could lead to SQL...
Open Source SACCO Management System 安全漏洞
Open Source SACCO Management System is an open source SACCO management system by Mayuri K., an individual developer. A security vulnerability exists in Open Source SACCO Management System v1.0, which is caused by a SQL injection vulnerability in the password parameter of /sacco/ajax.php...
[SECURITY] Fedora 42 Update: chromium-135.0.7049.95-1.fc42
Chromium is an open-source web browser, powered by WebKit Blink...
jam 安全漏洞
jam is an open source application from Wix Incubator. A security vulnerability exists in jam, which stems from improper neutralization of special elements of the Jinja2 template engine...
SourceCodester Web-based Pharmacy Product Management System 代码注入漏洞
SourceCodester Web-based Pharmacy Product Management System is SourceCodester open source a Web-based pharmacy product management system. A code injection vulnerability exists in version 1.0 of the SourceCodester Web-based Pharmacy Product Management System, which results from incorrect...
Maryam - Open-source Intelligence(OSINT) Framework
OWASP Maryam is a modular open-source framework based on OSINT and data gathering. It is designed to provide a robust environment to harvest data from open sources and search engines quickly and thoroughly. Installation Supported OS Linux FreeBSD Darwin OSX $ pip install maryam Alternatively, you...
