CVE-2025-50063

CVE-2025-50063 (Oracle Java SE Install component) is documented to affect Oracle Java SE 8u451. The vulnerability can be exploited by a low-privileged user with logon access to the infrastructure where Java SE runs, and successful exploitation requires user interaction. It can lead to takeover of...

CVE-2025-50062

...

CVE-2025-50062

The CVE-2025-50062 entry concerns Oracle PeopleSoft Enterprise HCM Global Payroll Core (Global Payroll for Core) with affected versions 9.2.51–9.2.52. Multiple connected sources describe a vulnerability where a low-privileged attacker with network access over HTTP can compromise the system, enabl...

CVE-2025-30762

...

CVE-2025-30756

...

CVE-2025-30753

CVE-2025-30753 affects Oracle WebLogic Server (Core) in Oracle Fusion Middleware. Affects WebLogic versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0. The vulnerability can be exploited by a low-privilege attacker with network access via HTTP to cause a hang or frequent crashes (complete DOS). No pu...

CVE-2025-30748

CVE-2025-30748 affects Oracle PeopleSoft PeopleTools (PIA Core Technology) in versions 8.60, 8.61, and 8.62. The vulnerability stems from the PIA Core Technology and can be exploited by an unauthenticated attacker with network access over HTTP; exploitation requires human interaction and may impa...

CVE-2025-30749

CVE-2025-30749 affects Oracle Java SE, GraalVM for JDK and GraalVM Enterprise Edition (component: 2D, with JSSE/Networking/Scripting as other components) per the provided documents. Affected Oracle Java SE versions include 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; affected GraalVM for ...

CVE-2025-30746

...

CVE-2025-30746

...

CVE-2025-30746

The CVE-2025-30746 entry concerns Oracle E-Business Suite’s Oracle iStore Shopping Cart (versions 12.2.3–12.2.14). The vulnerability allows an unauthenticated, network-accessible attacker over HTTP to compromise iStore, requiring user interaction. Impact includes unauthorized update/insert/delete...

CVE-2025-30744

...

CVE-2025-30739

...

CVE-2025-41239

creationtimestamp| type| source ---|---|--- 2025-07-15 18:53:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114858762801914674 2025-07-16 12:20:29+00:00| seen| https://vulnerability.circl.lu/bundle/419fd7d2-3c77-4032-b717-747015a7b289 2025-07-16 12:26:04+00:00| seen|...

CVE-2025-34113 Tiki Wiki CMS Authenticated Command Injection in Calendar Module

An authenticated command injection vulnerability exists in Tiki Wiki CMS versions ≤14.1, ≤12.4 LTS, ≤9.10 LTS, and ≤6.14 via the viewmode GET parameter in tiki-calendar.php. When the calendar module is enabled and an authenticated user has permission to access it, an attacker can inject and execu...

CVE-2025-34112

Riverbed SteelCentral NetProfiler / NetExpress 10.8.7 virtual appliances are affected by an authenticated multi‑stage remote code execution chain. A SQL injection in /api/common/1.0/login allows an attacker to create a new user, which is then used to trigger a command injection in /index.php?page...

CVE-2025-53891

creationtimestamp| type| source ---|---|--- 2025-07-15 06:33:43+00:00| seen| https://bsky.app/profile/potato.software/post/3ltybumgogk26...

CVE-2025-7360

CVE-2025-7360 (HT Contact Form Widget for Elementor / Gutenberg Blocks / Form Builder) The WordPress plugin versions up to 2.2.1 are vulnerable to an arbitrary file move due to insufficient file path validation in handle_files_upload(), allowing unauthenticated attackers to relocate files on the ...

CVE-2025-53027

creationtimestamp| type| source ---|---|--- 2025-07-15 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-602/...

FacialMotionID: Identifying Users of Mixed Reality Headsets Using Abstract Facial Motion Representations

Facial motion capture in mixed reality headsets enables real-time avatar animation, allowing users to convey non-verbal cues during virtual interactions. However, as facial motion data constitutes a behavioral biometric, its use raises novel privacy concerns. With mixed reality systems becoming...