CVE-2026-83142

Vulnerability in the Oracle Proposals product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Proposals. While the...

CVE-2026-83142

Oracle Proposals (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is vulnerable to unauthorized data access. A low-privileged attacker with network access via HTTP can exploit this to gain complete access to all Oracle Proposals accessible data , with p...

EUVD-2026-79469

Vulnerability in the Oracle Proposals product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Proposals. While the...

PT-2026-92665

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Proposals versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of Oracle Proposals allows a low privileged attacker with network access via HTTP to compromise the system. This...

CVE-2026-83142: Improper Access Control

Vulnerability in the Oracle Proposals product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Proposals. While the...

WordPress CODE MONKEYS PROPOSALS plugin <= 1.0.1 - Subscriber+ Arbitrary File Deletion vulnerability

Subscriber+ Arbitrary File Deletion vulnerability discovered by João Ramos Maciel in WordPress Plugin Code Monkeys Proposals versions = 1.0.1...

CVE-2026-77005

The CODE MONKEYS PROPOSALS WordPress plugin through 1.0.1 does not validate a user-supplied file path before deleting a file, and does not check the capability of the user making the request, allowing any authenticated user, such as a subscriber, to delete arbitrary files on the server, which can...

CVE-2026-77005

The CODE MONKEYS PROPOSALS WordPress plugin (versions

CVE-2026-77005 Code Monkeys Proposals <= 1.0.1 - Subscriber+ Arbitrary File Deletion via Path Traversal

The CODE MONKEYS PROPOSALS WordPress plugin through 1.0.1 does not validate a user-supplied file path before deleting a file, and does not check the capability of the user making the request, allowing any authenticated user, such as a subscriber, to delete arbitrary files on the server, which can...

CVE-2026-77005 Code Monkeys Proposals <= 1.0.1 - Subscriber+ Arbitrary File Deletion via Path Traversal

The CODE MONKEYS PROPOSALS WordPress plugin through 1.0.1 does not validate a user-supplied file path before deleting a file, and does not check the capability of the user making the request, allowing any authenticated user, such as a subscriber, to delete arbitrary files on the server, which can...

EUVD-2026-76815

The CODE MONKEYS PROPOSALS WordPress plugin through 1.0.1 does not validate a user-supplied file path before deleting a file, and does not check the capability of the user making the request, allowing any authenticated user, such as a subscriber, to delete arbitrary files on the server, which can...

PT-2026-90557

Name of the Vulnerable Software and Affected Versions CODE MONKEYS PROPOSALS versions prior to 1.0.2 Description The plugin fails to validate user-supplied file paths before performing file deletion and does not verify the permissions of the user making the request. This allows any authenticated...

CVE-2026-77005: External Control of File Name or Path

The CODE MONKEYS PROPOSALS WordPress plugin through 1.0.1 does not validate a user-supplied file path before deleting a file, and does not check the capability of the user making the request, allowing any authenticated user, such as a subscriber, to delete arbitrary files on the server, which can...

CVE-2026-70781

Vulnerability in the Oracle Proposals product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Proposals. Successfu...

EUVD-2026-61732

Vulnerability in the Oracle Proposals product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Proposals. Successfu...

PT-2026-77776

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Proposals versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Proposals product. A high privileged attacker with network access via HTTP can exploit this...

CVE-2026-70781: Improper Access Control

Vulnerability in the Oracle Proposals product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Proposals. Successfu...

Exploring Privacy Leakage and Data Disclosure Violations in the MacOS Application Ecosystem

The systematic and excessive data collection practices of tech companies have rendered online privacy both a necessity and a sought-after commodity. However, while the privacy risks of the web, mobile, and IoT ecosystems have been extensively examined, desktop environments have been largely...

EUVD-2026-47460

Vulnerability in the Oracle Proposals product of Oracle E-Business Suite component: Proposals. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Proposals. Successful attacks o...

CVE-2026-61279

Vulnerability in the Oracle Proposals product of Oracle E-Business Suite component: Proposals. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Proposals. Successful attacks o...