3178 matches found
CVE-2026-94295
The Chikkili- Google Pay India for Woocommerce WordPress plugin through 1.0.6 does not verify that a payment notification actually originated from the payment provider before marking the associated order as paid, allowing unauthenticated attackers to mark arbitrary orders as paid without any...
EUVD-2026-109340
The Chikkili- Google Pay India for Woocommerce WordPress plugin through 1.0.6 does not verify that a payment notification actually originated from the payment provider before marking the associated order as paid, allowing unauthenticated attackers to mark arbitrary orders as paid without any...
WordPress Chikkili- Google Pay India for Woocommerce plugin <= 1.0.6 - Unauthenticated Payment Confirmation Forgery vulnerability
Unauthenticated Payment Confirmation Forgery vulnerability discovered by Pedro Pinho in WordPress Plugin Chikkili- Google Pay India for Woocommerce versions = 1.0.6...
PT-2026-122953
Name of the Vulnerable Software and Affected Versions Chikkili- Google Pay India for Woocommerce WordPress plugin versions prior to 1.0.7 Description An issue exists where the plugin fails to verify that payment notifications originate from the legitimate payment provider before marking an order ...
State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web
State Bank of India has identified 3,897 customer records containing personal information in a set of about 375,000 records available on the dark web, and it does not yet know where the data came from. The state-owned bank, India's largest, said in a stock-exchange filing dated October 21 that it...
EUVD-2026-106336
Vulnerability in the Oracle HRMS India product of Oracle E-Business Suite component: Indian Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HRMS India executes to...
EUVD-2026-106282
Vulnerability in the Oracle HRMS India product of Oracle E-Business Suite component: Indian Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS India. Successful...
CVE-2026-87295
Vulnerability in the Oracle HRMS India product of Oracle E-Business Suite component: Indian Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HRMS India executes to...
CVE-2026-83359
Vulnerability in the Oracle HRMS India product of Oracle E-Business Suite component: Indian Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS India. Successful...
CVE-2026-87295
A vulnerability exists in the Oracle HRMS (India) product within the Oracle E-Business Suite (specifically the Indian Payroll component). Affected versions include 12.2.3-12.2.15 . A low-privileged attacker with access to the infrastructure where the product executes can exploit this vulnerabilit...
CVE-2026-83359
The Oracle HRMS (India) product, specifically the Indian Payroll component, is affected by a vulnerability in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may lead to unauthorized ac...
Oracle E-Business Suite: CVE-2026-87295: Critical Patch Update
Vulnerability in the Oracle HRMS India product of Oracle E-Business Suite component: Indian Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HRMS India executes to...
PT-2026-119614
Vulnerability in the Oracle HRMS India product of Oracle E-Business Suite component: Indian Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HRMS India executes to...
Oracle E-Business Suite: CVE-2026-83359: Critical Patch Update
Vulnerability in the Oracle HRMS India product of Oracle E-Business Suite component: Indian Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS India. Successful...
Oracle HRMS (India) security vulnerabilities
A security vulnerability exists in Oracle HRMS India versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Indian Payroll component and may allow attackers with low privileges to log in and execute infrastructure tasks, resulting in unauthorized access to critical data ...
PT-2026-119559
Vulnerability in the Oracle HRMS India product of Oracle E-Business Suite component: Indian Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS India. Successful...
Oracle HRMS (India) security vulnerabilities
A security vulnerability exists in Oracle HRMS India versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Indian Payroll component and may allow low-privilege attackers to gain unauthorized access via HTTP, thereby accessing critical or all accessible data...
India Mandates Registered Caller Name Display on 4G and Newer Networks From November 1
The Indian government has directed telecom service providers TSPs in the country to mandatorily display callers' registered names along with their numbers for incoming calls starting November 1, 2026, in an effort to help people identify calls from unknown numbers and tackle spam or fraudulent...
Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2
The Pakistan-aligned threat group tracked as Transparent Tribe aka APT36 and Earth Karkaddan has been attributed to a fresh set of cyber attacks targeting government and defense entities in India and Afghanistan. The attacks, per Zscaler ThreatLabz, involve the use of previously undocumented tool...
