CVE-2026-60867

creationtimestamp| type| source ---|---|--- 2026-07-23 17:48:22+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-08-01 07:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mryxjnhwm72d...

CVE-2026-60867

The CVE-2026-60867 vulnerability affects the Oracle E-Business Suite Oracle Advanced Pricing (component: Pricing Installation). Affected versions are 12.2.3–12.2.15 . A low-privileged attacker with network access via HTTP can compromise Oracle Advanced Pricing, enabling unauthorized creation, del...

CVE-2026-60867

...

Nodejs js-yaml load() Code Execution

This module can be used to abuse node.js applications that parse user-supplied YAML input using the load function from the 'js-yaml' package use exploit/multi/fileformat/nodejs/jsyamlloadcodeexec msf undefinedjsyamlloadcodeexec show actions ...actions... msf undefinedjsyamlloadcodeexec set ACTION...