CVE-2015-3073

CVE-2015-3073 This vulnerability allows remote attackers to bypass API restrictions on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

cve-2018-12798

Adobe Acrobat Reader Heap Overflow Remote Code Execution Vulnerability Vulnerability Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Vulnerability Description This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of...

CVE-2017-8759

CVE-2017-8759 PoC вооружения Этот репозиторий содержит данные, которые можно использовать для вооружения уязвимости CVE-2017-8759. Для получения полной информации посетите https://www.mdsec.co.uk/blog/, чтобы найти статью, связанную с этой уязвимостью. Как всегда, мои исследования направлены на т...

CVE-disclosures

CVE-2026-3171 и CVE-2026-3170 – Archana M Официальные раскрытия уязвимостей от Archana M. 🔹 CVE-2026-3171 Продукт: SourceCodester / Patrick Mvuma Patients Waiting Area Queue Management System 1.0 Тип уязвимости: Межсайтовый скриптинг CWE-79 Затронутый файл: /queue.php Вектор атаки: Удалённый...

CVE-2025-60656

CVE-2025-60656 - Хранимая межсайтовая сценарная атака XSS на главной странице | ---|--- Исследователи| DotAdrien Критичность| 8.5 ВЫСОКАЯ CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N Программное обеспечение| Script Pag Описание Хранимая межсайтовая сценарная атака XSS существует на главной страни...

code-ollama: `grep_search` Command Injection via Unescaped `$()` Shell Substitution (CWE-78)

grepsearch Command Injection via Unescaped $ Shell Substitution CWE-78 Summary The grepsearch tool in code-ollama constructs a shell command string by interpolating attacker-controlled pattern and path arguments, then executes it via childprocess.exec. The sanitization only escapes backslashes an...

CVE-2026-87137

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83247

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle...

CVE-2026-83206

Vulnerability in the Oracle Banking Corporate Lending Process Management product of Oracle Financial Services Applications component: Base. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT...

CVE-2026-83190

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to...

CVE-2026-83143

Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM component: eDetailing. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Life Sciences...

EUVD-2026-79932

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

EUVD-2026-79838

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Financial...

CVE-2026-83294

CVE-2026-83294 affects Oracle Business Intelligence Enterprise Edition (component: Platform Security ) in Oracle Analytics. Supported versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 are impacted. The vulnerability is easily exploitable by an unauthenticated attacker with local logon to the infr...

CVE-2026-83253

CVE-2026-83253 affects the Endeca Application Controller component within Oracle Commerce Guided Search / Oracle Commerce Experience Manager (version 11.4.0 ). This easily exploitable vulnerability allows an unauthenticated attacker with local access to the infrastructure where the product execut...

EUVD-2026-79558

Vulnerability in the Oracle Banking Corporate Lending Process Management product of Oracle Financial Services Applications component: Base. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT...

CVE-2026-83185

CVE-2026-83185 affects the CRM User Management Framework component of Oracle E-Business Suite , specifically supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though user interaction is required. Successful exploitat...

EUVD-2026-79486

Vulnerability in the Applications DBA product of Oracle E-Business Suite component: ADPatch. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Applications DBA executes to compromise...

CVE-2026-83150

CVE-2026-83150 affects Oracle Application Testing Suite version 13.3.0.1 . The vulnerability allows an unauthenticated attacker with local access to the infrastructure where the suite executes to achieve full takeover of the application, impacting confidentiality, integrity, and availability. Exp...

EUVD-2026-79408

Vulnerability in the Oracle Banking Branch product of Oracle Financial Services Applications component: Reports. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...