Vulnerabilities in Oracle E-Business Suite components

Oracle has discovered vulnerabilities in various components of the Oracle E-Business Suite, including Oracle Payments, Oracle Internet Procurement Connector, Oracle Financials Common Modules, Oracle iAssets, Oracle Public Sector Financials International, Oracle Universal Work Queue, Oracle Payrol...

📄 ChurchCRM 6.4.0 Cross Site Scripting

ChurchCRM versions 6.4.0 and below suffer from persistent cross site scripting vulnerability in group role name assignment. CVE-2025-67876: ChurchCRM has Stored XSS in Group Role Name Leading to Admin Session Hijacking Overview | Field | Details | |---|---| | CVE ID | CVE-2025-67876 | | Severity ...

CVE-2022-0517

Mozilla VPN can load an OpenSSL configuration file from an unsecured directory. A user or attacker with limited privileges could leverage this to launch arbitrary code with SYSTEM privilege. This vulnerability affects Mozilla VPN 2.7.1...

📄 Microsoft Windows 11 Build 10.0.27898.1000 AiRegistrySync Bypass / Privilege Escalation

Microsoft Windows 11 build 10.0.27898.1000 Metasploit module designed to achieve local privilege escalation on Windows 10/11 by targeting a vulnerability misconfiguration in the AiRegistrySync service...

EUVD-2019-12053

Malware in sbrugna...

EUVD-2021-11106

Malware in sbrugna...

EUVD-2005-2073

Malware in sbrugna...

EUVD-2019-7958

Malware in sbrugna...

EUVD-2017-8315

Malware in sbrugna...

EUVD-2019-13490

Malware in sbrugna...

EUVD-2020-18547

Malware in sbrugna...

EUVD-2025-2535

Malicious code in bioql PyPI...

EUVD-2023-28824

Malicious code in bioql PyPI...

EUVD-2021-31003

Malicious code in bioql PyPI...

EUVD-2025-21350

Malicious code in bioql PyPI...

EUVD-2023-51774

Malicious code in bioql PyPI...

EUVD-2024-26029

Malicious code in bioql PyPI...

EUVD-2024-18947

Malicious code in bioql PyPI...

EUVD-2023-44663

Malicious code in bioql PyPI...

CVE-2025-22470

CVE-2025-22470 affects SATO CL4/6NX Plus and CL4/6NX-J Plus (Japan model) with firmware versions prior to 1.15.5-r1. The vulnerability arises from the ability to upload crafted dangerous files, enabling an arbitrary Lua script to execute on the target system with root privileges. Public reference...