EUVD-2026-79782

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. While the...

CVE-2026-87127

CVE-2026-87127 affects the G-Invoicing component of Oracle Purchasing in Oracle E-Business Suite, versions 12.2.10 through 12.2.15 . The vulnerability is easily exploitable by a low-privileged attacker with network access via HTTP . Although the flaw resides in Oracle Purchasing, the changed scop...

PT-2026-92950

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Purchasing versions 12.2.10 through 12.2.15 Description A flaw in the G-Invoicing component of Oracle Purchasing allows a low privileged attacker with network access via HTTP to compromise the system. This issue...

PT-2026-92990

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Purchasing versions 12.2.11 through 12.2.15 Description A flaw in the G-Invoicing component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized...

PT-2026-92991

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Purchasing versions 12.2.10 through 12.2.15 Description A flaw in the G-Invoicing component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized...

CVE-2026-87167: Improper Access Control

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful...

CVE-2026-87168: Improper Access Control

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful...

CVE-2026-87127: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. While the...

Astra Linux – Vulnerability in ntfs-3g

A properly crafted NTFS image with an unallocated bitmap can lead to an endless recursive function call chain starting from ntfsattrpwrite, causing stack consumption in NTFS-3G 2021.8.22...

CVE-2026-85602: Reliance on Untrusted Inputs in a Security Decision

The Grav Form plugin getgrav/grav-plugin-form versions 8.0.6 through 9.1.19 select the reCAPTCHA version to validate based solely on which response field key is present in the submitted payload. On a site configured for reCAPTCHA v3, an anonymous attacker can place their v3 token under the v2 fie...

CVE-2026-72379: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fs: refuse OTMPFILE creation with an unmapped fsuid or fsgid vfstmpfile never checked that the caller's fsuid and fsgid map into the filesystem. On an idmapped mount whose idmapping does not cover the caller's fsu,gid, the -tmpfi...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: policy-controller, airflow, harbor-registry, k8sgpt, buildkitd, guac, zarf, up, pulumi, flux-source-controller, rclone, sops, goreleaser, cosign, tekton-chains, py3-azure-identity, cortex, chezmoi, py3-cassandra-medusa, prometheus-operator, step, zot, trivy,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, kor, rancher-system-agent, opentofu, tflint, aws-eks-pod-identity-agent, nri-haproxy, terraform, wgcf, kubernetes-csi-external-health-monitor, harbor-cli, undock, kyverno-notation-aws, conftest, prometheus-operator, step-kms-plugin,...

Malicious Package

Overview @years20/n8n-nodes-utils-helper-g is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Malicious code in @years20/n8n-nodes-utils-helper-g (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ed8dc4c0467877e129dc4b2035e154dc4fec24bfda412d649fa02ed7150133 On npm install, the package's postinstall script duplicated in the main module executes shell commands to collect host identity id, hostname, pwd,...

Malicious Package

Overview @years17/n8n-nodes-utils-helper-g is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

MAL-2026-13890 Malicious code in @years19/n8n-nodes-utils-helper-g (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ee748f84613cc36319702d58eb2ce50d87de1a1889a639d2004ddd03226bef7 The package's postinstall script callback.js and its declared main entrypoint index.js contain byte-identical dropper code that runs on npm install a...

Malicious code in @years19/n8n-nodes-utils-helper-g (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ee748f84613cc36319702d58eb2ce50d87de1a1889a639d2004ddd03226bef7 The package's postinstall script callback.js and its declared main entrypoint index.js contain byte-identical dropper code that runs on npm install a...

MAL-2026-13876 Malicious code in @years17/n8n-nodes-utils-helper-g (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3685924a9f7a3a8bbccd7521020a9f1e7ae208f1b991805b2861e4c289a6eaa3 The package's postinstall hook runs callback.js, which appends an attacker-controlled ssh-ed25519 public key labeled pwn@kali to...

PT-2026-80487

A flaw was found in GLib. A buffer over-read can occur in the g regex replace function when used with the G REGEX RAW compile flag and case-change replacement escapes because the string append function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the...