MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was ...
Continue reading
A security vulnerability has been identified in the JCE editor extension, a tool many site owners use to edit content on Joomla websites. This flaw allows people who do not have valid login credentials for your site to create new custom profiles for the JCE editor.
These unauthorized profiles can be used to upload and run harmful code on your ...
Continue reading
A security flaw tracked as CVE-2026-48687 has been found in FastNetMon Community Edition, affecting all versions up to 1.2.9. The issue exists in the tool’s Juniper router integration plugin, and could allow unauthorized commands to run on servers where FastNetMon is installed.
The problem occurs because the plugin builds log-related shell ...
Continue reading
A security flaw has been identified in the Twig template system, a common tool used to build dynamic content for websites. This issue impacts Twig versions 2.16.x, and all versions from 3.9.0 up to 3.25.x.The vulnerability is a sandbox bypass. Twig’s sandbox feature is designed to stop untrusted templates from running risky operations. Attackers ...
Continue reading
