IBM ApplinX 数据伪造问题漏洞

IBM ApplinX is an International Business Machines IBM company focused on converting green screen interfaces into modern Web-based applications. IBM ApplinX has a data forgery issue vulnerability that stems from improper JWT token validation, which can be exploited by an attacker to elevate...

PT-2026-3681

Name of the Vulnerable Software and Affected Versions Oracle APEX Sample Applications versions 23.2.0 through 23.2.1 Oracle APEX Sample Applications versions 24.1.0 through 24.2.1 Description A flaw exists within the Oracle APEX Sample Applications product, specifically the Brookstrut Sample App...

Oracle Health Sciences Applications security vulnerabilities

Oracle Health Sciences Applications is a clinical research and development solution developed by Oracle Corporation for the healthcare industry in the United States. Version 7.0.1.0 of Oracle Life Sciences Central Designer in Oracle Health Sciences Applications contains a security vulnerability...

Oracle APEX security vulnerabilities

Oracle APEX is a low-code development platform provided by Oracle, a company based in the United States. There are security vulnerabilities in the Oracle APEX Sample Applications versions 23.2.0, 23.2.1, 24.1.0, 24.2.0, and 24.2.1. These vulnerabilities allow attackers with low privileges to acce...

Oracle Health Sciences Applications security vulnerabilities

Oracle Health Sciences Applications is a clinical research and development solution developed by Oracle Corporation for the healthcare industry in the United States. The version 7.0.1.0 of Oracle Life Sciences Central Coding in Oracle Health Sciences Applications contains a security vulnerability...

MiracleLinux 4 : krb5-appl-1.0.1-10.AXS4 (AXSA:2020-4695:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-4695:01 advisory. telnet-server: no bounds checks in nextitem function allows to remotely execute arbitrary code CVE-2020-10188 Tenable has extracted the preceding description...

Security Bulletin: Multiple vulnerabilities may affect IBM® SDK, Java™ Technology Edition for IBM Content Collector for SAP Applications

Summary Multiple Vulnerabilities were disclosed as part of the Oracle January 2026 Critical Patch Update. Vulnerability Details CVEID:CVE-2025-53066 DESCRIPTION: An unspecified vulnerability in Java SE related to the JAXP component could allow a remote attacker to cause high confidentiality impac...

MiracleLinux 4 : xorg-x11-apps-7.6-6.AXS4, xorg-x11-utils-7.5-6.AXS4, xorg-x11-server-utils-7.5-13.AXS4 (AXSA:2013-314:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-314:01 advisory. xorg-x11-apps A collection of common X Window System applications. xorg-x11-server-utils A collection of utilities used to tweak and query the runtime...

CVE-2025-24090

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.3 and iPadOS 18.3. An app may be able to enumerate a user's installed apps...

CVE-2025-24090

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.3 and iPadOS 18.3. An app may be able to enumerate a user's installed apps...

CVE-2025-14894 CVE-2025-14894

Livewire Filemanager, commonly used in Laravel applications, contains LivewireFilemanagerComponent.php, which does not perform file type and MIME validation, allowing for RCE through upload of a malicious php file that can then be executed via the /storage/ URL if a commonly performed setup proce...

BreachLock Expands Adversarial Exposure Validation (AEV) to Web Applications

New York, United States, 15th January 2026, CyberNewsWire...

CVE-2026-22909

Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed applications, potentially disrupting system operations...

CVE-2026-22909

Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed applications, potentially disrupting system operations...

CVE-2026-22909

Technical details about CVE-2026-22909 are not publicly detailed in the provided documents. Monitor for updates from sources like NVD, Red Hat, and vendor PSIRTs for affected products, versions, and fixes.

EUVD-2026-2820

Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed applications, potentially disrupting system operations...

CVE-2026-22909

Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed applications, potentially disrupting system operations...

CVE-2026-22909

Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed applications, potentially disrupting system operations...

PT-2026-2990

Name of the Vulnerable Software and Affected Versions versions prior to 2026 Description Certain system functions may be accessed without proper authorization. This could allow attackers to start, stop, or delete installed applications, potentially disrupting system operations. Recommendations At...

PT-2026-2940

Rocket.Chat is an open-source, secure, fully customizable communications platform. In Rocket.Chat versions up to 6.12.0, the API endpoint GET /api/v1/oauth-apps.get is exposed to any authenticated user, regardless of their role or permissions. This endpoint returns an OAuth application, as long a...