watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882

watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882 Detection Artifact Generator for Oracle E-Business Suite CVE-2025-61882 See our blog post for technical details Detection in Action root@kitploit: python3 watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882.py --command 'bash -i &...

CVE-2025-61882-Oracle-EBS

Oracle E-Business Suite — CVE-2025-61882 Este repositorio contiene los artefactos de investigación de ZeroZenX y una implementación de exploit totalmente operativa para CVE-2025-61882, proporcionados para respaldar la investigación defensiva, la respuesta a incidentes, la ingeniería de detección ...

CVE-2025-53072-CVE-2025-62481

CVE-2025-53072 & CVE-2025-62481 Vulnerabilidad en el producto Oracle Marketing de Oracle E-Business Suite componente: Marketing Administration. ¿Cómo funciona este método de detección? Esta plantilla de Nuclei detecta instancias de Oracle E-Business Suite vulnerables a CVE-2025-53072 y...

CVE-2025-61882-CVE-2025-61884

CVE-2025-61882 & CVE-2025-61884 EDIT: Oracle just disclosed a new vulnerability CVE-2025-61884, the detection script for that vuln can be found in this repo or originally here:https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550. As quoted from Oracle's security advisory: This Securit...

Enterprise-Information-Security-Risk-Assessment-Oracle-E-Business-Suite-Case-Study

信息安全：GDPR合规与应急响应 一个面向高风险生物特征监控系统（CCTV、人脸识别技术和集中式接触追踪）的全面安全与隐私合规框架，包括框架比较分析（ISO 27001、Cyber Essentials、NIST CSF 2.0、COBIT）以及针对2025年Oracle E-Business Suite CVE-2025-61882入侵事件的详细应急响应案例研究。 目录 项目概述 第1章：数据保护合规 隐私设计与默认保护（DPbD） 框架比较分析 安全实施与应急响应 第2章：Oracle EBS入侵案例研究 CVE-2025-61882分析 攻击者TTP与防御对策 风险评估与缓解策略...

cve-2025-61882-oracle_ebs_rce_reproduction

CVE-2025-61882 — Oracle E-Business Suite 未认证远程代码执行 CVSS 9.8 严重 概述 CVE-2025-61882 是 Oracle E-Business Suite（EBS）中一个无需认证即可远程执行代码的漏洞，影响并发处理和 BI Publisher 组件。该漏洞允许未经认证的攻击者通过 HTTP 网络访问完全攻破目标系统。该漏洞已被包括 Clop 勒索软件团伙在内的多个组织在野外利用，并于 2025 年 10 月被添加到 CISA 已知被利用漏洞（KEV）目录中。 技术细节 该漏洞存在于 Oracle EBS 处理并发处理/BI...

Oracle E-Business Suite 12.2.3 -12.2.11 - Remote Code Execution

Oracle E-Business Suite 12.2.3 through 12.2.11 is susceptible to remote code execution via the Oracle Web Applications Desktop Integrator product, Upload component. An attacker with HTTP network access can execute malware, obtain sensitive information, modify data, and/or gain full control over a...

CVE-2025-61882-Oracle-E-Business-Suite-Pre-Auth-RCE-Exploit

CVE-2025-61882 - Exploit RCE Pre-Auth de Oracle E-Business Suite Una vulnerabilidad crítica de Ejecución Remota de Código RCE sin autenticación previa en Oracle E-Business Suite versiones 12.2.3–12.2.14 permite a los atacantes obtener control total sobre servidores vulnerables mediante solicitude...

http-oracle-ebs-cve-2025-61882.nse

http-oracle-ebs-cve-2025-61882.nse Detecta Oracle E-Business Suite CVE-2025-61882. Detección: comprobaciones en múltiples niveles — fingerprinting, verificación de versiones, pruebas de endpoints y SSRF, análisis de tiempos y explotación controlada para 4 resultados de alta confianza. Por defecto...

vulnerabilities present in Oracle E-Business Suite

Oracle has identified 159 vulnerabilities in various Oracle E-Business Suite products, including Oracle Applications Framework, Oracle Document Management and Collaboration, Oracle Mobile Application Server, Oracle Alert, Oracle Application Object Library, Oracle Applications Manager, Oracle Bill...

Blackash-CVE-2025-61882

🛡️🚨 CVE‑2025‑61882 — Ejecución Remota de Código Crítica Pre‑Autenticación en Oracle E‑Business Suite EBS 🚨🛡️ Resumen breve: Ejecución remota de código crítica pre‑autenticación en Oracle E‑Business Suite EBS — afecta a 12.2.3 → 12.2.14, CVSS 9.8 , explotada activamente en el mundo real se ha...

Blackash-CVE-2025-61884

CVE-2025-61884 Nuevo fallo en Oracle E-Business Suite podría permitir a los hackers acceder a datos sin iniciar sesión 💀 CVE-2025-61884 — Resumen completo 🧾💥...

CVE-2025-61882-CVE-2025-61884

CVE-2025-61882 & CVE-2025-61884 EDIT: Oracle acaba de revelar una nueva vulnerabilidad, CVE-2025-61884; el script de detección para esa vulnerabilidad se puede encontrar en este repositorio o, originalmente, aquí:https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550. Según se cita en e...

CVE-2025-61882

Escáner RCE para Oracle E-Business Suite CVE-2025-61882 Un escáner masivo rápido y multi-hilo para detectar CVE-2025-61882 en instalaciones de Oracle E-Business Suite. Esta vulnerabilidad crítica permite la ejecución remota de código sin autenticación. 🎯 Características Escaneo Masivo - Procesa...

CVE-2026-87265

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Other issue. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attac...

CVE-2026-87165

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: ECC For Award and IDV. The supported version that is affected is V16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

CVE-2026-87169

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: Wage Determination Online. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT...

CVE-2026-87166

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Other issue. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attac...

CVE-2026-87161

Vulnerability in the Oracle HRMS India product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS India. While th...

CVE-2026-87163

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Other issue. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attac...