7 matches found
CVE-2026-43685
A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to inject arbitrary operating system commands through unsanitized input in the External ODBC Data Source connection test feature. This issue is fixed in FileMaker Cloud 2.22.0.5...
PT-2026-31999
Chamilo LMS is a learning management system. Prior to 1.11.38, there is a path traversal in main/exercise/savescores.php leading to arbitrary file feletion. User input from $ REQUEST'test' is concatenated directly into filesystem path without canonicalization or traversal checks. This vulnerabili...
CVE-2025-63713
Cross-Site Scripting XSS vulnerability in SourceCodester "MatchMaster" 1.0 allows remote attackers to inject arbitrary web script or HTML via crafted input in the custom test creation feature. The vulnerability exists because the application fails to properly sanitize user-supplied input in test...
Enhancing Software Vulnerability Detection through Adaptive Test Input Generation Using Genetic Algorithm
Software vulnerabilities continue to undermine the reliability and security of modern systems, particularly as software complexity outpaces the capabilities of traditional detection methods. This study introduces a genetic algorithm-based method for test input generation that innovatively...
PT-2024-40807 · Git +1 · Openssl
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a null-dereference read crash. Technical details include a crash type of null-dereference READ and a crash state involving do evp...
OESA-2022-2163 xorg-x11-server security update
Xephyr is an X server which has been implemented as an ordinary X application. It runs in a window just like other X applications,but it is an X server itself in which you can run other software. It is a very useful tool for developers who wish to test their applications without running them on...
Multiple Vulnerabilities in iball Baton 150M Wireless-N ADSI.2+
The iball Baton 150M Wireless-N ADSI.2+ is a wireless router from iBall India. The iball Baton 150M Wireless-N ADSI.2+ router is vulnerable to hard-coded user credentials and remote command execution. A remote attacker can log in to the router's web management interface with hard-coded user...