CVE-2026-101499

A vulnerability exists in the Oracle WebCenter Sites component of Oracle Fusion Middleware . The affected versions are 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to compromise the product, which may result in a comple...

cve-2024-8069-exp-Citrix-Virtual-Apps-XEN

CVE-2024-8068 and CVE-2024-8069 Citrix Virtual Apps and Desktops XEN Unauthenticated Remote Code Execution Vulnerability Check out our blog post for detailed technical information. https://github.com/user-attachments/assets/563fd110-5321-49f7-8dc3-48eb0a53e0f9 Exploit Demonstration python...

CVE-2026-101495

A vulnerability exists in the Siebel Approval Manager component of the Oracle Siebel CRM Development product (affected versions 17.0-26.9 ). This easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to compromise the system, provided they can leverage human inte...

CVE-2026-101492

A vulnerability exists in the Siebel CRM Integration product of Oracle Siebel CRM , specifically within the Open Integration component, affecting versions 25.12-26.9 . This difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product...

CVE-2026-101488

Oracle PeopleSoft PeopleTools is vulnerable in the Business Interlink component within versions 8.61-8.63 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized read access to a subset of accessible data and cause a partial denial of service...

CVE-2019-19550

CVE-2019-19550 Description Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and 6.2.34.37 allows admin access to sensitive information of affected users using vulnerable versions. The attacker only needs to provide the correct URL. Important Dates Announcement to Vendor: 2019-12-02 Public...

CVE-2026-101484

A vulnerability exists in the Backup and Restore component of Oracle Secure Backup affecting versions 19.1.0.0.0 and 19.1.0.1.0 . An unauthenticated attacker with network access via TCP can easily exploit this flaw to compromise the system, potentially leading to a full takeover of Oracle Secure ...

CVE-2026-101480

A vulnerability exists in the NDMP daemon component of Oracle Secure Backup affecting versions 19.1.0.0.0 and 19.1.0.1.0 . An unauthenticated attacker with network access via TCP can exploit this issue to compromise the system, potentially resulting in unauthorized read access to a subset of acce...

CVE-2026-101479

A vulnerability exists in the Backup and Restore component of Oracle Secure Backup (versions 19.1.0.0.0 and 19.1.0.1.0 ). An unauthenticated attacker with network access via TCP can exploit this flaw to cause a hang or a frequently repeatable crash , resulting in a complete Denial of Service (DoS...

CVE-2026-101473

A vulnerability exists in the Product Quality Management component of Oracle Agile Product Lifecycle Management for Process (Oracle Supply Chain) affecting version 6.2.4 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise th...

CVE-2026-101468

A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM , specifically affecting the Cloud Gateway component in supported versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the deployment. Successful ex...

CVE-2026-101463

A vulnerability exists in the UIF Open UI component of the Oracle Siebel CRM End User product (affected versions 17.0-26.9 ). An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may result in unauthorized access t...

CVE-2026-101461

A vulnerability exists in the Server Infrastructure component of Oracle Siebel CRM Deployment (affected versions 17.0-26.9 ). An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may result in unauthorized access t...

CVE-2026-101460

A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM within the Server Infrastructure component. Affected versions include 17.0-26.9 . This easily exploitable vulnerability allows an unauthenticated attacker with network access via TLS to compromise the system. Success...

CVE-2026-101458

A vulnerability exists in the Siebel CRM Deployment product of Oracle Siebel CRM within the Server Infrastructure component, affecting supported versions 17.0-26.9 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation ma...

CVE-2026-101450

A vulnerability exists in the Integration Broker component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63 ). An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the system, provided they can leverage human interaction from a third...

CVE-2026-101439

A vulnerability exists in the Siebel Cloud Manager component of Oracle Siebel CRM Cloud Applications (affected versions 22.3-26.9 ). This difficult-to-exploit flaw allows an unauthenticated attacker with network access via LDAP to compromise the application. Successful exploitation may lead to un...

CVE-2026-101433

The PeopleSoft Enterprise PeopleTools product, specifically the Test Framework component in versions 8.61-8.63 , is vulnerable to an easily exploitable security flaw. An unauthenticated attacker with network access via HTTP can compromise the system to gain unauthorized read access to a subset of...

CVE-2026-101429

Oracle PeopleSoft PeopleTools (component: SQR ) versions 8.61-8.63 are affected by a high-severity vulnerability (CVSS 3.1 score of 7.0). An unauthenticated attacker with access to the underlying infrastructure can compromise the software, potentially resulting in a takeover of PeopleTools. Succe...

CVE-2026-101421

A vulnerability exists in the SQR component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63). An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system, potentially leading to unauthorized access to critical data or complete acc...