CVE-2026-101522

Vulnerability in Oracle TimesTen In-Memory Database component: TimesTen IMDB. Supported versions that are affected are 22.1-22.1.1.43.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle TimesTen In-Memory Database executes to compromise...

CVE-2026-87354

A vulnerability exists in the Kubernetes Operator component of the Oracle TimesTen In-Memory Database (affected versions 22.1-22.1.40.0 and 26.1-26.1.1.2.0 ). A low-privileged attacker with network access via HTTPS can exploit this flaw to compromise the database, potentially leading to unauthori...

CVE-2026-101600

A vulnerability exists in the Oracle TimesTen In-Memory Database (specifically the TimesTen IMDB component) affecting versions 26.1-26.1.1.3.0 . A low-privileged attacker with logon access to the infrastructure where the database executes can exploit this difficulty-to-exploit vulnerability to co...

CVE-2026-101522

The Oracle TimesTen In-Memory Database (component: TimesTen IMDB ) is vulnerable in versions 22.1-22.1.1.43.0 . A low-privileged attacker with infrastructure access can exploit this vulnerability to compromise the database, potentially gaining unauthorized access to critical data or full access t...

PT-2026-119280

Vulnerability in Oracle TimesTen In-Memory Database component: TimesTen IMDB. Supported versions that are affected are 26.1-26.1.1.3.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle TimesTen In-Memory Database executes to compromis...

PT-2026-119672

Vulnerability in Oracle TimesTen In-Memory Database component: Kubernetes Operator. Supported versions that are affected are 22.1-22.1.40.0 and 26.1-26.1.1.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle TimesTen In-Memory...

PT-2026-119207

Vulnerability in Oracle TimesTen In-Memory Database component: TimesTen IMDB. Supported versions that are affected are 22.1-22.1.1.43.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle TimesTen In-Memory Database executes to compromise...

Oracle Timesten In-memory Database security vulnerabilities

The Oracle Timesten In-memory Database versions 22.1 to 22.1.40.0 and 26.1 to 26.1.1.2.0 have security vulnerabilities. These vulnerabilities stem from issues with the Kubernetes Operator component. This may allow attackers with low privileges to access data through an HTTPS network, enabling...

Oracle Timesten In-memory Database security vulnerability

A security vulnerability exists in Oracle Timesten In-memory Database versions 22.1 through 22.1.1.43.0. This vulnerability stems from issues within the TimesTen IMDB component and may allow attackers with limited privileges to log in, execute infrastructure tasks, and gain unauthorized access to...

Oracle Timesten In-memory Database security vulnerability

A security vulnerability exists in Oracle Timesten In-memory Database versions 26.1 through 26.1.1.3.0. This vulnerability stems from issues within the TimesTen IMDB component and is difficult to exploit. Privileged attackers who gain access to the infrastructure can perform unauthorized updates,...

Important: rpcbind

Issue Overview: A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by sending a large number of unique requests. The rpcbind service records previously unseen RPC Remote Procedure Call statistics in unbounded in-memory lists,...

unicorn

unicorn Escrito por: Dave Kennedy @HackingDave Sitio web: https://www.trustedsec.com Magic Unicorn es una herramienta sencilla para utilizar un ataque de downgrade de PowerShell e inyectar shellcode directamente en memoria. Basado en los ataques de PowerShell de Matthew Graeber y la técnica de...

pe-sieve

Introducción PE-sieve es una herramienta que ayuda a detectar malware en ejecución en el sistema, así como a recolectar el material potencialmente malicioso para su posterior análisis. Reconoce y vuelca una variedad de implantes dentro del proceso escaneado: PE reemplazados/inyectados, shellcodes...

java-stager

java-stager Un Stager Java de PoC que puede descargar, compilar y ejecutar un archivo Java en memoria. Esto es solo para fines de investigación, no lo uses donde no estés autorizado. ¿Qué es esto? Esto se basa en el trabajo de James Williams de su charla "Next Gen AV vs My Shitty Code" disponible...

nishang

Nishang Nishang es un conjunto de scripts y payloads que permite el uso de PowerShell para seguridad ofensiva, pruebas de penetración y red teaming. Nishang es útil durante todas las fases de las pruebas de penetración. Por Nikhil Mittal Fundador de Altered Security - ¡Formación práctica en red...

pupy

Pupy Instalación sencilla pip3 install pipx pipx ensurepath pipx install git+https://github.com/n1nj4sec/pupy@nextgen pupysh Si deseas información más detallada,consulta la wiki Instalación de desarrollo git clone https://github.com/n1nj4sec/pupy cd pupy git checkout nextgen git submodule init gi...

frida-fuzzer

Fuzzer de API de Frida v1.4 Derechos de autor C 2020 Andrea Fioraldi [email protected] Publicado bajo la Licencia Apache v2.0 Este fuzzer experimental está diseñado para fuzzing de API en memoria. El diseño está altamente inspirado y basado en AFL/AFL++. Por el momento, el mutador es bastant...

com.coiney:akka-rabbit-core_2.10 (0.3.0), com.coiney:akka-rabbit-core_2.11 (0.3.0) +7 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (3.3.3)

com.rabbitmq:amqp-client MAVEN version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.coiney:akka-rabbit-core2.10 0.3.0 - com.coiney:akka-rabbit-core2.11 0.3.0 - net.roboconf:roboconf-agent =0....

CVE-2026-77050

An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. django.utils.translation.getsupportedlanguagevariant is subject to a potential denial-of-service attack when processing many distinct, very long language codes, which are retained as keys in an in-memory...

CVE-2026-77050

An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. "django.utils.translation.getsupportedlanguagevariant" is subject to a potential denial-of-service attack when processing many distinct, very long language codes, which are retained as keys in an in-memor...