EUVD-2026-106725

Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft component: Strategic Sourcing. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

EUVD-2026-106726

Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft component: Supplier Registration. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

EUVD-2026-106727

Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft component: Bidder Registration. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

EUVD-2026-106723

Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft component: Strategic Sourcing. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

EUVD-2026-106518

Vulnerability in the PeopleSoft Enterprise SCM Manufacturing product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM...

CVE-2026-91480

A vulnerability exists in the Strategic Sourcing component of Oracle PeopleSoft Enterprise SCM (version 9.2 ). A low-privileged attacker with network access via HTTP can exploit this issue to compromise the product. Successful exploitation may lead to unauthorized access to critical data or compl...

CVE-2026-91481

A vulnerability exists in the Supplier Registration component of Oracle PeopleSoft Enterprise SCM Purchasing (version 9.2 ). A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the product, provided they can obtain human interaction from another per...

CVE-2026-91482

The PeopleSoft Enterprise SCM Strategic Sourcing product (version 9.2 ) is vulnerable in the Bidder Registration component. A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the system. Successful exploitation may result in unauthorized access to ...

CVE-2026-91478

Oracle PeopleSoft Enterprise SCM Strategic Sourcing version 9.2 is vulnerable to a high-severity security flaw. A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the Strategic Sourcing component, potentially leading to a full takeover of the produ...

CVE-2026-91264

A vulnerability exists in the Security component of Oracle PeopleSoft Enterprise SCM Manufacturing version 9.2 . A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation can lead to unauthorized update, insert, ...

jenkinsci__workflow-cps-global-lib-plugin_CVE-2022-25174_544-vff04fa68714d

Pipeline Shared Libraries When you have multiple Pipeline jobs, you often want to share some parts of the Pipeline scripts between them to keep Pipeline scripts DRY. A very common use case is that you have many projects that are built in the similar way. This plugin adds that functionality by...

CVE-2026-90397

A flaw was found in the Linux kernel's Qualcomm qcom Secure Channel Manager SCM firmware component. This vulnerability allows for a NULL pointer dereference due to improper initialization of a shared memory pointer. An attacker could exploit this timing issue, potentially leading to a system cras...

CVE-2023-33829-POC

CVE-2023-33829-POC SCM Manager XSS...

Find-AdminAccess

FindAdminAccess A C utility that enumerates domain computers and tests administrative access to them, including connectivity checks, admin privileges verification, and C$ share writability testing. Features Enumerate all computers in an Active Directory domain Test network connectivity Verify...

CVE-2023-33829

CVE-2023-33829: Stored-XSS-on-SCM-Manager-1.60 Summary A vulnerability is discovered in the SCM Manager 1.2 = 1.60 version that allows an attackers previously authenticated with write permissions execute javascript code in specific fields. This Proof of Concept is maded in a local environment...

Blackhat-USA-2022-Materials

Black Hat USA 2022 Presentation Materials Presentation materials for my Black Hat USA 2022 Briefing and Arsenal talks Black Hat USA Briefing - Controlling the Source: Abusing Source Code Management Systems Description...

CVE-2026-86671

In Eclipse Che versions 7.29.0 and later, the GET /api/scm/resolve and POST /api/factory/resolver endpoints pass an attacker-controlled URL to URLFetcher.fetch, which calls new URLurl.openConnection with no scheme or host allow-list and returns the response body to the caller. Any authenticated C...

CVE-2026-86671

In Eclipse Che versions 7.29.0 and later , the GET /api/scm/resolve and POST /api/factory/resolver endpoints are vulnerable to Server-Side Request Forgery (SSRF) . The application passes attacker-controlled URLs to URLFetcher.fetch() without an allow-list for schemes or hosts. Consequently, an au...

CVE-2026-86671

In Eclipse Che versions 7.29.0 and later, the GET /api/scm/resolve and POST /api/factory/resolver endpoints pass an attacker-controlled URL to URLFetcher.fetch, which calls new URLurl.openConnection with no scheme or host allow-list and returns the response body to the caller. Any authenticated C...

EUVD-2026-92474

In Eclipse Che versions 7.29.0 and later, the GET /api/scm/resolve and POST /api/factory/resolver endpoints pass an attacker-controlled URL to URLFetcher.fetch, which calls new URLurl.openConnection with no scheme or host allow-list and returns the response body to the caller. Any authenticated C...