CVE-2025-60931

An Insecure Direct Object Reference IDOR in the Employee Compensation View function of Infor Global HR v11.24.10.01.33 allows unauthorized attackers to arbitrarily view the compensation information of other employees via a crafted GET request...

CVE-2025-60931

An Insecure Direct Object Reference IDOR in the Employee Compensation View function of Infor Global HR v11.24.10.01.33 allows unauthorized attackers to arbitrarily view the compensation information of other employees via a crafted GET request...

EUVD-2025-210526

An Insecure Direct Object Reference IDOR in the Employee Compensation View function of Infor Global HR v11.24.10.01.33 allows unauthorized attackers to arbitrarily view the compensation information of other employees via a crafted GET request...

PT-2026-65839

An Insecure Direct Object Reference IDOR in the Employee Compensation View function of Infor Global HR v11.24.10.01.33 allows unauthorized attackers to arbitrarily view the compensation information of other employees via a crafted GET request...

CVE-2025-60931

An Insecure Direct Object Reference IDOR in the Employee Compensation View function of Infor Global HR v11.24.10.01.33 allows unauthorized attackers to arbitrarily view the compensation information of other employees via a crafted GET request...

CVE-2025-60931: Authorization Bypass Through User-Controlled Key

An Insecure Direct Object Reference IDOR in the Employee Compensation View function of Infor Global HR v11.24.10.01.33 allows unauthorized attackers to arbitrarily view the compensation information of other employees via a crafted GET request...

CVE-2025-60931

An Insecure Direct Object Reference IDOR in the Employee Compensation View function of Infor Global HR v11.24.10.01.33 allows unauthorized attackers to arbitrarily view the compensation information of other employees via a crafted GET request...

CVE-2025-60931

An Insecure Direct Object Reference (IDOR) vulnerability exists in the Employee Compensation View function of Infor Global HR v11.24.10.01.33 . An unauthorized attacker can arbitrarily view the compensation information of other employees by sending a crafted GET request . Exploitation details are...

EUVD-2026-47111

Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite component: Compensation Workbench. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-47112

Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite component: Compensation Workbench. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-60800

Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite component: Compensation Workbench. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-60799

Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite component: Compensation Workbench. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-62788

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Compensation Workbench versions 12.2.3 through 12.2.15 Description A flaw in the Oracle Compensation Workbench allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to...

CVE-2026-60800: Improper Access Control

Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite component: Compensation Workbench. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-60799: Improper Access Control

Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite component: Compensation Workbench. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-62789

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Compensation Workbench versions 12.2.3 through 12.2.15 Description A flaw in the Oracle Compensation Workbench allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to...

ecommerce-poc

Event-Driven E-Commerce Saga POC This project is a small even...

This old-school scam is still working

When we read about this new malware tactic, or that novel social engineering approach, it’s easy to forget that there are scammers out there making a living from ancient methods. Recently, one of our researchers received this variation on the good old Nigerian advance-fee scam. From: Mrs.Inga-Bri...

Lloyds Group to Compensate 450,000 Customers After App Glitch

Lloyds Banking Group to compensate 450,000 customers after app glitch exposed data. Find out how the glitch affected…...

Semi-Device-Independent Quantum Random Number Generator Resistant to General Attacks

Quantum random number generators QRNGs produce true random numbers based on the inherent randomness of quantum theory, rendering them a foundational segment of quantum cryptography. Distinguished from trusted-device QRNGs whose security depends on characterized devices, semi-device-independent...