16121 matches found
PT-2026-79859
Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged index creation permissions can submit a single request containing a specially crafted, malformed custom analysis definition that i...
PT-2026-79891
Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. A specially crafted request submitted by an authenticated user with minimal privileges to a validation capability of the Observability log analysis feature...
PT-2026-79950
Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. A specially crafted request submitted by an authenticated user with minimal privileges to a validation capability of the Observability log analysis feature...
Zeek 8.2.2
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Zeek ha...
SiNMULI: Novel Signed Network Approach for Malicious URL Identification
In today's era of rapid advancements in artificial intelligence, computer security and online safeguarding measures have undergone significant improvements. However, malicious websites continue to facilitate the spread of phishing schemes, fraudulent activities and unsolicited communications...
CVE-2026-71164
creationtimestamp| type| source ---|---|--- 2026-08-18 22:27:29+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfb7fpve52m 2026-08-19 09:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtgfocbhk22y 2026-08-19 17:16:54+00:00| seen|...
CVE-2026-62637
creationtimestamp| type| source ---|---|--- 2026-08-18 22:19:06+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfaqfzned2j 2026-08-19 05:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfyb77ug323 2026-08-19 17:21:17+00:00| seen|...
kill-chain-vulnerability-scanner
Kill Chain Scanner A Python-based automated web applicatio...
CVE-2026-73930
creationtimestamp| type| source ---|---|--- 2026-08-18 22:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtf7pmeark2t 2026-08-18 22:29:21+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfbcr4kzg2j 2026-08-19 10:20:05+00:00| seen|...
CVE-2026-73918
...
CVE-2026-73916
Helidon 3.2.18 (Oracle Fusion Middleware, Imperative Web Server component) is affected by a critical vulnerability (CVSS 9.1) exploitable by an unauthenticated attacker over HTTP, granting unauthorized access to all Helidon-accessible data and enabling creation, deletion, or modification of criti...
CVE-2026-71167
Helidon 4.5.0's Imperative Web Server component is critically vulnerable (CVSS 9.4) to unauthenticated, remote HTTP attacks allowing full data compromise and partial DoS. No public exploit or root-cause details are provided; Oracle has released patches per its August 2026 CPU advisory.
CVE-2026-71089
Oracle Agile PLM MCAD Connector CAX Client version 3.6 is vulnerable: an unauthenticated attacker with local infrastructure access can exploit it (low complexity, human interaction required) to gain unauthorized read access to a subset of accessible data. CVSS 3.3 LOW; no exploitation observed. O...
CVE-2026-71037
...
CVE-2026-71034
...
CVE-2026-70847
...
CVE-2026-70685
Affected component: Oracle Hyperion Calculation Manager Security component, version 11.2.25.0.000. Root cause: unauthenticated attacker with local infrastructure access can compromise the application. Impact: high confidentiality breach and low integrity impact, with scope change affecting additi...
CVE-2026-62633
Oracle Fusion Middleware's Oracle Reports Developer 14.1.2.0.0 (Security and Authentication component) has an easily exploitable unauthenticated HTTP vulnerability rated CVSS 9.8 (C/I/A High), enabling full product takeover. Oracle's August 2026 security advisory (cspuaug2026.html) addresses this...