CVE-2026-87351

A vulnerability exists in the Oracle GoldenGate Admin Server Executable affecting versions 19.1.0.0.0-19.32.0.0 , 21.3-21.23 , and 23.4-23.26.3.0.0 . A low-privileged attacker with network access via HTTPS can easily exploit this flaw to compromise the system, potentially resulting in a full take...

CVE-2026-101697

A vulnerability exists in the Admin Console UI component of the Oracle One-to-One Fulfillment product within Oracle E-Business Suite, affecting versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the product, though the attack req...

CVE-2026-101694

A vulnerability exists in the Admin UI component of the Oracle Mobile Field Service product within Oracle E-Business Suite , affecting supported versions 12.2.3-12.2.15 . A high privileged attacker with network access via HTTPS can exploit this flaw to compromise the service, potentially resultin...

CVE-2026-101692

A vulnerability exists in the Admin UI component of the Oracle Mobile Field Service product within Oracle E-Business Suite . Affected versions are 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the service, potentially leading to...

CVE-2026-101665

A vulnerability exists in the Admin UI component of the Oracle Mobile Field Service product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the service, potentially leading to unauthoriz...

CVE-2026-101662

The Oracle Mobile Field Service product (component: Admin UI ) is vulnerable in supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the service. Successful exploitation may result in unauthorized creation, deletio...

CVE-2026-101661

The Oracle Mobile Field Service product (component: Admin UI ) within Oracle E-Business Suite is affected by a high-severity vulnerability in supported versions 12.2.3-12.2.15 . A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise the service. ...

CVE-2026-101658

A vulnerability exists in the Admin UI component of Oracle Mobile Field Service , part of the Oracle E-Business Suite. Affected versions include 12.2.3 through 12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this high-complexity vulnerability to compromise the servi...

CVE-2026-101660

A vulnerability exists in the Admin UI component of the Oracle Mobile Field Service product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). This easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the service. Successf...

CVE-2026-101636

The Oracle Mobile Field Service product, specifically the Admin UI component within Oracle E-Business Suite , is affected by a high-severity vulnerability in versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to c...

CVE-2019-19550

CVE-2019-19550 Description Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and 6.2.34.37 allows admin access to sensitive information of affected users using vulnerable versions. The attacker only needs to provide the correct URL. Important Dates Announcement to Vendor: 2019-12-02 Public...

CVE-2021-34646

CVE-2021-34646 PoC this vulnerability detail by NVD Versions up to, and including, 5.4.3, of the Booster for WooCommerce WordPress plugin are vulnerable to authentication bypass via the processemailverification function due to a random token generation weakness in the resetandmailactivationlink...

CVE-2022-47132

CVE-2022-47132 Academy LMS history.pushState'', '', '/' input type="submit" value="...

CVE-2024-22275

CVE-2024-22275: Partial File Read in VMware vCenter Server The vCenter Server contains a partial file read vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to partially read arbitrary files containing sensitive data. Vendor...

CVE-2026-36341

Cross-Site Scripting XSS vulnerability exists in Webkul Krayin CRM HTML Injection CVE: CVE-2026-36341 Summary The vulnerability is particularly critical because it affects the Admin Panel. In many CRM workflows, managers or higher-level admins review activities logged by staff. By injecting a...

CVE-2022-40684

CVE-2022-40684 Extract admin users and Fortigate details usage: Single URL: .\poc-cve-2022-40684.ps1 -fgt 192.168.1.1 Multiple URL's: .\poc-cve-2022-40684.ps1 -urlsfile urls.txt...

CVE-2022-31269

CVE : CVE-2022-31269 Exploit Title: Nortek Linear eMerge E3-Series - Information Disclosure leads to access admin dashboard...

CYBERDUDEBIVASH-5G-Core-Key-Rotation-Ghost-Admin-Auditor

CYBERDUDEBIVASH 5G Core Key Rotation & Ghost Admin Auditor v1.1 © 2026 CYBERDUDEBIVASH – All Rights Reserved Global Authority in Zero-Trust 5G & Private Network Security Bhubaneswar, Odisha, India Production-grade tool for detecting & remediating CVE-2026-0622 Ghost Admin privilege escalation &...

CVE-2026-113659

ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, an unauthenticated attacker can send a crafted link whose query string is automatically parsed by apos.http.parseQuery when an authenticated victim loads a page with the admin bundle. The parser accepts the specia...

CVE-2023-2833

CVE-2023-2833 Mass Exploit Generator by Alucard0x1 This repository contains an exploit for CVE-2023-2833, a privilege escalation vulnerability in the ReviewX plugin for WordPress versions up to and including 1.6.13. Description The ReviewX plugin is vulnerable to privilege escalation, allowing a...