PwnedCheck

PwnedCheck PwnedCheck è uno strumento da riga di comando per verificare se le password sono comparse in violazioni di dati note utilizzando l'APIHave I Been Pwned e supporta gli export crittografati dei vault Bitwarden. Caratteristiche Controlla singole password dalla riga di comando Elabora...

vercel-april2026-incident-response

Vercel April 2026 Incident Response Guide Zuletzt aktualisiert: 20. April 2026 @ 12:07 Uhr AEST/Brisbane – v2 – enthält Update des Vercel-CEOs vom 20. April WICHTIG: Dies ist keine rechtliche oder offizielle Beratung. Wenn Sie glauben, dass Sie kompromittiert wurden, wenden Sie sich bitte an eine...

PwnedPasswordsChecker

PwnedPasswordsChecker PwnedPasswordsChecker è uno strumento che verifica se l'hash di una password nota in formato SHA1 o NTLM è presente nella lista delle fughe di dati di I Have Been Pwned e il numero di occorrenze. Puoi scaricare la versione con hash codificato per SHA1 qui o quella per NTLM q...

Breach-Report-Collection

Raccolta di report sulle violazioni Una raccolta di aziende che rendono pubbliche le TTP degli avversari dopo essere state violate Utile per l'analisi di intrusioni lanciate da avversari con effetti e impatto misurabili Organizzazione| Data della violazione| Avversario| Fonte ---|---|---|---...

Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution

Impact When Pipelines-as-Code is configured with a GitHub App installed across multiple repositories, the installation token issued during webhook processing is not scoped to the triggering repository by default. The token retains access to all repositories in the GitHub App installation. This...

PT-2026-80744

Name of the Vulnerable Software and Affected Versions Tekton Pipelines-as-Code versions prior to 0.48.0 Description When configured with a GitHub App installed across multiple repositories, the installation token issued during webhook processing is not scoped to the triggering repository by...

GHSA-JFJ5-WRJ9-63X4 langgraph-api: Incomplete assistant authorization in LangGraph Server run creation

Summary In affected versions of langgraph-api the LangGraph Server runtime, the run-creation path authorized the assistant attached to a run using a different authorization event than the rest of the assistant-handling code paths. Direct assistant reads and cron creation dispatch the...

MINI-PV5F-R8VF-3VP3

Bulletin has no description...

CVE-2026-71060

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financia...

CVE-2026-70988

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Content Acquisition System. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP ...

CVE-2026-70836

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial...

CVE-2026-70785

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion component: Server. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-70696

Vulnerability in the Oracle Payments product of Oracle E-Business Suite component: File Transmission. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Payments. Successful...

CVE-2026-70692

Vulnerability in the Oracle Marketing Encyclopedia System product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-62599

Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite component: Third Party Data Integration. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

EUVD-2026-62181

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

EUVD-2026-62097

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 3.2.18. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. While the vulnerability is in...

EUVD-2026-62084

Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications component: Security Component. Supported versions that are affected are 7.5.0-7.5.1, 7.6.0-7.8.0 and 8.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access...

EUVD-2026-62064

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial...

EUVD-2026-62051

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...