Malicious code in rootaccessxvv-bbmarker (npm)

Source: amazon-inspector 126c6e67bc80ed62f5e620ef9a8ce11ca39653348a59bc8d7a1d0cef76f72a02 package.json declares a postinstall lifecycle script that runs on npm install and POSTs installer host identifiers to a hardcoded webhook.site collector at...

zynos-attacker

IMPORTANT : These scripts are intended for educational purposes only. Description : With these scripts you can attack ZynOS routers and modify/extract anything you want on the target router from extracting ISP username and password to injecting rogue DNS servers IPs...

CVE-2026-91662

A vulnerability exists in the Java Based Agent component of Oracle Essbase version 21.8.3.0.0 . This difficult-to-exploit flaw allows a low-privileged attacker with local infrastructure access to compromise Oracle Essbase, potentially leading to unauthorized access to critical data or the ability...

CVE-2026-91649

A vulnerability exists in the Java Based Agent component of Oracle Essbase version 21.8.3.0.0 . A high-privileged attacker with logon access to the infrastructure where Oracle Essbase executes can exploit this vulnerability to compromise the software. Successful exploitation may result in unautho...

CVE-2026-91633

A vulnerability exists in the Security component of Oracle Essbase version 21.8.3.0.0 . This easily exploitable flaw allows a high-privileged attacker with infrastructure access to compromise the system, potentially resulting in unauthorized access to critical data or complete access to all acces...

CVE-2026-91628

A vulnerability exists in the BRM Server component of the Oracle Communications Billing and Revenue Management product, specifically affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 . A low-privileged attacker with access to the infrastructure can exploit this vulnerability t...

CVE-2026-91629

The Oracle Communications Billing and Revenue Management product (component: Platform ) is affected by a difficult-to-exploit vulnerability in versions 15.0.0.0.0 , 15.0.1.0.0 , 15.1.0.0.0 , and 15.2.0.0.0 . A low-privileged attacker with infrastructure logon access can compromise the system, pot...

CVE-2026-91627

A vulnerability exists in the Platform component of Oracle Communications Billing and Revenue Management (versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0). A low privileged attacker with access to the underlying infrastructure can exploit this flaw to compromise the product, potential...

CVE-2026-91617

A vulnerability exists in the Remote Diagnostic Agent component of Oracle Middleware Common Libraries and Tools within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 , 14.1.1.0.0 , 14.1.2.0.0 , and 15.1.1.0.0 . A low-privileged attacker with local access to the infrastructure can...

CVE-2026-91614

A vulnerability exists in the Security component of Oracle Communications Unified Inventory Management (affected versions: 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1 ). A low-privileged attacker with logon access to the infrastructure where the software executes can easily exploit this flaw to ...

CVE-2026-91613

A vulnerability exists in the Security component of the Oracle Communications Unified Inventory Management product, affecting versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1. A low-privileged attacker with logon access to the infrastructure can exploit this vulnerability to compromise the s...

CVE-2026-91559

The PeopleSoft Enterprise FIN Manufacturing Brazil product (version 9.1 ) contains a vulnerability in the Integration component. A low-privileged attacker with access to the infrastructure where the software executes can exploit this flaw to compromise the system. Successful exploitation may lead...

CVE-2026-91562

A vulnerability exists in the Inventory component of Oracle PeopleSoft Enterprise FIN Inventory Brazil (version 9.1 ). This flaw allows a low-privileged attacker with access to the underlying infrastructure to compromise the product, potentially leading to unauthorized update, insert, or delete a...

CVE-2026-91557

A vulnerability exists in the BI Foundation component of Oracle Business Intelligence Enterprise Edition within Oracle Analytics. Specifically, version 12.2.1.4.0 is affected. This is a difficult to exploit vulnerability that allows a low privileged attacker with local access to the infrastructur...

CVE-2026-91553

A vulnerability exists in the Product Configurator component of Oracle PeopleSoft Enterprise FIN Product Configurator Brazil (version 9.1 ). This easily exploitable flaw allows a low-privileged attacker with local infrastructure access to compromise the product. Successful exploitation can lead t...

CVE-2026-91547

A vulnerability exists in the Vendor Access Module component of Oracle GoldenGate . Affected versions include 19.1.0.0.0-19.32.0.0 , 21.3-21.23 , and 23.4-23.26.3.0.0 . A low privileged attacker with logon access to the infrastructure where Oracle GoldenGate executes can easily exploit this flaw ...

CVE-2026-91539

A vulnerability exists in the Presentation Services component of Oracle Business Intelligence Enterprise Edition (Oracle Analytics), specifically affecting version 12.2.1.4.0 . A low-privileged attacker with local access to the infrastructure can exploit this vulnerability to compromise the syste...

CVE-2026-91537

A vulnerability exists in the Utility component of Oracle Solaris version 11.4 . A low-privileged attacker with local access to the infrastructure can easily exploit this flaw to compromise the system, potentially leading to a full takeover of Oracle Solaris . The vulnerability is associated with...

CVE-2026-91505

A vulnerability exists in the Porting component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61 and 8.62 ). A high-privileged attacker with access to the execution infrastructure can exploit this flaw to compromise the product. Successful exploitation may lead to unauthorized creation,...

CVE-2026-91501

A vulnerability exists in the Installer component of the Oracle Identity Manager product within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with logon access to the underlying infrastructure can exploit this flaw to compromise Oracle ...