Lucene search
+L

43 matches found

The Hacker News
The Hacker News
•added 2026/10/28 12:48 p.m.•8 views

Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch

Threat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite EBS, according to threat intelligence firm Defused Cyber. The vulnerability in question is CVE-2026-101767 CVSS score: 9.8 , a case of improper authentication in the Oracle Application Objec...

9.8CVSS8.1AI score0.00614EPSS
SaveExploits3
Packet Storm News
Packet Storm News
•added 2026/10/27 12:00 a.m.•9 views

Oracle E-Business Suite 12.2.15 SQL Injection

Oracle E-Business Suite versions 12.2.3 through 12.2.15 contain an unauthenticated Thin Client Framework SQL injection issue that can lead to remote code execution. The supplied Nuclei template checks the affected AppsTCFServer handshake and proxy creation response...

6.4AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/10/20 12:00 a.m.•24 views

PT-2026-119440

Name of the Vulnerable Software and Affected Versions Oracle Application Object Library versions 12.2.3 through 12.2.15 Description An unauthenticated SQL injection exists in the Thin Client Framework TCF servlet of the Oracle Application Object Library. An attacker with network access via HTTP c...

10CVSS8.4AI score0.00614EPSS
SaveExploits3References38
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•26 views

EUVD-2000-1221

Malware in sbrugna...

9CVSS6.4AI score0.02128EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2014-4368

Malware in sbrugna...

6.8CVSS7.5AI score0.01918EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•29 views

EUVD-2018-1022

Malware in sbrugna...

6.1CVSS6.3AI score0.02035EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2023-0007

Malicious code in bioql PyPI...

5.3CVSS6.5AI score0.00948EPSS
SaveExploits1References10
osv_cve
osv_cve
•added 2024/07/09 4:15 a.m.•20 views

CVE-2024-39598

SAP CRM WebClient UI Framework allows an authenticated attacker to enumerate accessible HTTP endpoints in the internal network by specially crafting HTTP requests. On successful exploitation this can result in information disclosure. It has no impact on integrity and availability of the applicati...

7.7CVSS5.7AI score0.00309EPSS
SaveExploits0References2
osv_mal
osv_mal
•added 2024/06/25 12:44 p.m.•32 views

MAL-2024-2418 Malicious code in gew7-client-framework (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 12:44 p.m.•16 views

Malicious code in gew7-client-framework (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/04/06 12:00 a.m.•36 views

client framework for AI

The vulnerability of the Client framework for AI and Python Ray application development lies in insufficiently checking incoming requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using specially crafted requests...

10CVSS8AI score0.83942EPSS
SaveExploits7References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/09/11 12:00 a.m.•19 views

Cisco Jabber Client Framework Command Injection

The vulnerability of the Cisco Jabber Client Framework for Windows software is related to the lack of measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS8.3AI score0.03902EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2019/09/19 12:00 a.m.•70 views

Cisco Jabber Client Framework Code Execution

The vulnerability of the Cisco Jabber Client Framework for Mac relates to permission processing errors. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...

6.7CVSS5.8AI score0.00313EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/09/05 1:20 a.m.•38 views

CVE-2019-12645 Cisco Jabber Client Framework for Mac Code Execution Vulnerability

A vulnerability in Cisco Jabber Client Framework JCF for Mac Software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to execute arbitrary code on an affected device The vulnerability is due to improper file level permissions on an affected devi...

6.7CVSS7.9AI score0.00313EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/05 12:00 a.m.•11 views

CVE-2019-12645: Improper Input Validation

A vulnerability in Cisco Jabber Client Framework JCF for Mac Software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to execute arbitrary code on an affected device The vulnerability is due to improper file level permissions on an affected devi...

7.8CVSS7.4AI score0.00313EPSS
SaveExploits0References3
CISA
CISA
•added 2019/09/05 12:00 a.m.•30 views

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities affecting Cisco products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the...

7.2AI score
SaveExploits0References7
CNVD
CNVD
•added 2019/09/05 12:00 a.m.•24 views

Cisco Jabber Client Framework Input Validation Error Vulnerability

Cisco Jabber Client Framework JCF is the United States Cisco Cisco company's set of unified communications client framework. The framework provides online status display, instant messaging, voice and other features. An input validation error vulnerability exists in the Cisco Jabber Client...

7.8CVSS7.7AI score0.00313EPSS
SaveExploits0References1
Cisco
Cisco
•added 2019/09/04 4:00 p.m.•102 views

Cisco Jabber Client Framework for Mac Code Execution Vulnerability

A vulnerability in Cisco Jabber Client Framework JCF for Mac Software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to execute arbitrary code on an affected device The vulnerability is due to improper file level permissions on an affected devi...

6.7CVSS7.3AI score0.00313EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/09/04 12:00 a.m.•11 views

PT-2019-3259

Name of the Vulnerable Software and Affected Versions Cisco Jabber Client Framework for Mac affected versions not specified Description The issue is related to improper file level permissions, allowing an authenticated, local attacker to execute arbitrary code on an affected device. An attacker...

7.8CVSS0.00313EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2019/02/21 12:00 a.m.•22 views

Cisco Jabber Client Framework XSS

The vulnerability of the Cisco Jabber Client Framework exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute any arbitrary JavaScript script remotely...

5.5CVSS6AI score0.00876EPSS
SaveExploits0References3
Rows per page
Query Builder