EUVD-2026-46987

Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Data Visualization Tools. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

EUVD-2026-46670

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle...

CVE-2026-62563

Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.5-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Work in Process...

CVE-2026-61325

Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite component: Internal Operations. The supported version that is affected is 12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Advanced Benefits...

CVE-2026-60908

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Create Item Instance. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base...

PT-2026-53956

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.9.3 Description A code injection flaw allows an unauthenticated remote attacker to gain full control over the system without user interaction. This enables the attacker to read all secrets available to...

SourceBans Material Admin 安全漏洞

SourceBans Material Admin is a game server management panel tool developed by SourceBans Material Admin developers. Versions prior to 1.1.6 of SourceBans Material Admin contained security vulnerabilities; these vulnerabilities allowed attackers to manipulate arbitrary user data in web application...

CVE-2026-33549

SPIP 4.4.10 through 4.4.12 before 4.4.13 allows unintended privilege assignment of administrator privileges during the editing of an author data structure because of STATUT mishandling...

mysql: DML unspecified vulnerability (CPU Oct 2025)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

Malicious code in teate-thy-sonic-ejte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67340ed58777d7c37fe2cb9a9a6edef6a0d39117b535564f361e5a1bcc2b5607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-afsfafi-daafigfif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e309fc6b076251b203ae614a2af7e1055e9d90ab5459fdc7a0d0f0d4920837b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175293 Malicious code in kapvino-sof-fidaabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642d1cd66002ad67c50bdc75a06e70cd2e163e4add1d4dd1f5b32fc84467be59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173466 Malicious code in buta-fna-fnaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2ff74a699a3012d9434ec9e64de1d3a8f4c5954c98d07081f0d76e482fce9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171102 Malicious code in deirdremurphy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f017c0f73882d9a27f465f61bdb297712f0abe6f24389643da91d3f7cf849f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171152 Malicious code in emilythomas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9befe28e80b03ce38c96ffe22b4492df0feff351ff3240a2c2550daa1ff73bdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in 12-mutfru-muytio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f31ad8d7d3f2d8543dd80077bd3b9229214b829733d907c7288a5a7babe5a617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fhfdd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f36ac86db504976833359cc15098977d71a32fb90ff71ca54aaf82988e6de61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/afyab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb8dc1d2f3a3e634577b9a63819efcd96b60f5f05898aa906141dcb557ae6a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163593 Malicious code in nokire-zabuza98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c05c2e3685fefd83c7080e3c59848c308ffd49abe31fdf50f44327aa5e2b5023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-dotenv-safe-rigel-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ccc363bda7653032d1ec59093033ea188b057325b09bef82a64b31336370d9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...