EUVD-2026-106748

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Porting. Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools...

EUVD-2026-106394

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Porting. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools...

EUVD-2026-105851

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Porting. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools...

EUVD-2026-105830

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Porting. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools...

CVE-2026-91505

A vulnerability exists in the Porting component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61 and 8.62 ). A high-privileged attacker with access to the execution infrastructure can exploit this flaw to compromise the product. Successful exploitation may lead to unauthorized creation,...

CVE-2026-87353

Oracle PeopleSoft Enterprise PeopleTools (component: Porting ) is affected by a vulnerability in versions 8.61-8.63 . This high-complexity vulnerability allows an unauthenticated attacker with infrastructure access to compromise the product. Successful exploitation requires human interaction from...

CVE-2026-101435

A vulnerability exists in the Porting component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). A low-privileged attacker with access to the execution infrastructure can exploit this flaw to compromise the product. Successful exploitation may lead to a complete Denial ...

CVE-2026-101414

The Oracle PeopleSoft Enterprise PeopleTools product, specifically the Porting component in versions 8.61-8.63 , is affected by a vulnerability that allows an unauthenticated attacker with infrastructure access to compromise the software. The root cause is not explicitly detailed, but a successfu...

SharpWhispers

SharpWhispers C porting of SysWhispers2. It uses SharpASM to find the code caves for executing the system call stub. Read the blog post for the technical details: https://www.secforce.com/blog/sharpasm-sharpwhispers/ Requirements Visual Studio .NET Framework = 3.5 Python3 Usage / / / | | /| / / /...

rustproofing-linux

Rustproofing Linux Porting Linux Kernel Bugs to Rust This source code repository is a collection of examples accompanying the blog post at https://research.nccgroup.com/?p=18577. DO NOT USE these examples for anything but following the blog post. They intentionally contain vulnerabilities, and ev...

Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another

Forescout Research - Vedere Labs said it used Anthropic's Claude to port a working pre-authentication remote code execution RCE exploit from one WAGO programmable logic controller PLC to another, executing attacker-supplied ARM shellcode on live hardware. The exploit targetsCVE-2021-31886 , a...

katalyst-koi: Session cookies can be replayed after user logout

Impact Admin session cookies were not invalidated when an admin user logged out. An attacker with access to a valid admin session cookie could continue to access admin functionality after logout, until the cookie expired or session secrets were rotated. This affects applications using Koi admin...

[SECURITY] Fedora 44 Update: plasma5support-6.6.4-1.fc44

Support components for porting from KF5/Qt5 to KF6/Qt6...

[SECURITY] Fedora 42 Update: libpcap-1.10.6-1.fc42

Libpcap provides a portable framework for low-level network monitoring. Libpcap can provide network statistics collection, security monitoring and network debugging. Since almost every system vendor provides a different interface for packet capture, the libpcap authors created this...

Biting the CHERI Bullet: Blockers, Enablers and Security Implications of CHERI in Defence

There is growing interest in securing the hardware foundations software stacks build upon. However, before making any investment decision, software and hardware supply chain stakeholders require evidence from realistic, multiple long-term studies of adoption. We present results from a 12 month...

CVE-2022-49233

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Call dcstreamrelease for remove link enc assignment Why A porting error resulted in the stream assignment for the link being retained without being released - a memory leak. How Fix the porting error by adding ba...

org.jberet:tck-porting-impl (1.0.0.alpha3) potentially affected by CVE-2024-1102 via org.jberet:jberet-core (1.0.0.alpha3)

org.jberet:jberet-core MAVEN version 1.0.0.alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jberet:jberet-core and may be impacted: - org.jberet:tck-porting-impl 1.0.0.alpha3 Source cves: CVE-2024-1102 Source advisory: OSV:GHSA-9WMF-XF3H-R8PR...

org.jberet.test-apps:chunkpartition (1.0.0.beta2), org.jberet.test-apps:chunkstop (1.0.0.beta2) +11 more potentially affected by CVE-2024-1102 via org.jberet:jberet-core (1.0.0.beta2)

org.jberet:jberet-core MAVEN version 1.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jberet:jberet-core and may be impacted: - org.jberet.test-apps:chunkpartition 1.0.0.beta2 - org.jberet.test-apps:chunkstop 1.0.0.beta2 -...

CVE-2023-25168 Symbolic Link (Symlink) Following allowing the deletion of files and directories on the host system in wings

Wings is Pterodactyl's server control plane. This vulnerability can be used to delete files and directories recursively on the host system. This vulnerability can be combined with GHSA-p8r3-83r8-jwj5 to overwrite files on the host system. In order to use this exploit, an attacker must have an...

Linux Variant of Clop Ransomware Spotted, But Uses Faulty Encryption Algorithm

The first-ever Linux variant of the Clop ransomware has been detected in the wild, but with a faulty encryption algorithm that has made it possible to reverse engineer the process. "The ELF executable contains a flawed encryption algorithm making it possible to decrypt locked files without paying...