10855 matches found
EUVD-2014-6458
Malware in sbrugna...
How to Prevent NPM Supply Chain Attacks in CI/CD Pipelines with Container Security
Introduction Containerized applications power the backbone of modern software delivery. But with speed comes risk. Vulnerabilities and embedded secrets can slip through the cracks long before they hit production. The result? Alert fatigue, noisy false positives, and critical exposures that disrup...
Oracle E-Business Suite RCE (CVE-2025-61882)
The versions of Oracle E-Business Suite installed on the remote host are affected a remote code execution vulnerability as referenced in the CVE-2025-61882 Security Alert Advisory. - Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite component: BI Publisher...
Oracle E-Business Suite Unspecified Vulnerability
Oracle E-Business Suite contains an unspecified vulnerability in the BI Publisher Integration component. The vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks can result in takeover of Oracle Concurrent...
EUVD-2025-32443
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite component: BI Publisher Integration. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2025-61882
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite component: BI Publisher Integration. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2025-61882
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite component: BI Publisher Integration. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2025-61882
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite component: BI Publisher Integration. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
PT-2025-40802
CVE-2025-61882: CRITICAL Oracle E-Business Suite's BI Publisher Integration has a severe vulnerability CVE-2021-2574 affecting versions 12.2.3-12.2.14. Unauthenticated attackers can compromise system int...cve,CVE-2025-61882,cybersecurity https://t.co/oVu1164qXo https://t.co/dUWOeRb5kt...
CVE-2025-9286
The Appy Pie Connect for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization within the resetuserpassword REST handler in all versions up to, and including, 1.1.2. This makes it possible for unauthenticated attackers to to reset the password of...
PT-2025-40791
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.3 through 12.2.14 Description Oracle E-Business Suite is affected by a critical remote code execution RCE vulnerability CVE-2025-61882. This flaw allows unauthenticated attackers to execute arbitrary code,...
WordPress Appy Pie Connect for WooCommerce plugin <= 1.1.2 - Missing Authorization to Unauthenticated Privilege Escalation via reset_user_password vulnerability
Missing Authorization to Unauthenticated Privilege Escalation via resetuserpassword vulnerability discovered by johska in WordPress Plugin Appy Pie Connect for WooCommerce versions = 1.1.2...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication via the http server port. An attacker can retrieve sensitive integration data, such as email addresses, by sending unauthenticated requests to the listening port on localhost. Note: This is only exploitable if th...
CVE-2025-61679
Summary: CVE-2025-61679 affects Anyquery (SQLite-based SQL query engine). Versions ≤ 0.4.3 allow an attacker with localhost access (low privileges) to use the HTTP server via the port unauthenticated and access private integration data (e.g., emails) without provider login warnings. Root cause: u...
CVE-2025-61679 Anyquery Unauthenticated Access Vulnerability Exposes Private Integration Data
Anyquery is an SQL query engine built on top of SQLite. Versions 0.4.3 and below allow attackers who have already gained access to localhost, even with low privileges, to use the http server through the port unauthenticated, and access private integration data like emails, without any warning of ...
EUVD-2025-32429
Anyquery is an SQL query engine built on top of SQLite. Versions 0.4.3 and below allow attackers who have already gained access to localhost, even with low privileges, to use the http server through the port unauthenticated, and access private integration data like emails, without any warning of ...
EUVD-2022-51771
Malicious code in bioql PyPI...
EUVD-2024-29762
Malicious code in bioql PyPI...