Exploit for Command Injection in Microsoft

🔑 YellowKey-Bitlocker-CVE-2026-45585 - Manage your BitLocker r...

GHSA-RWJ8-PGH3-R573 GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL

Summary Repo.clonefrom passes the caller-supplied remote URL through Git.polishurl, which on every non-Cygwin platform calls os.path.expandvars on the URL before handing it to git clone. An attacker who controls the URL argument — the documented use case for clonefrom in "import repository from...

GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL

Summary Repo.clonefrom passes the caller-supplied remote URL through Git.polishurl, which on every non-Cygwin platform calls os.path.expandvars on the URL before handing it to git clone. An attacker who controls the URL argument — the documented use case for clonefrom in "import repository from...

CVE-2026-62515

Vulnerability in the Oracle Advanced Planning Command Center product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Orac...

CVE-2026-62515

CVE-2026-62515 affects Oracle E-Business Suite’s Oracle Advanced Planning Command Center (Internal Operations) with affected versions 12.2.3–12.2.15. The CVSS 3.1 base score is 7.6 (Confidentiality and Integrity impacts). The vulnerability is exploitable over HTTP with network access by a high-pr...

CVE-2026-62469

The CVE-2026-62469 entry concerns Oracle E-Business Suite, Oracle Human Resources product (Enterprise Command Center) affecting 12.2.14–12.2.15. The vulnerability permits a low-privilege user with logon to the infrastructure running Oracle Human Resources to compromise the application, enabling u...

CVE-2026-62468

CVE-2026-62468 affects Oracle E-Business Suite HR (Enterprise Command Center) with affected versions 12.2.14–12.2.15. The vulnerability is exploitable over the network (HTTP) by a low-privileged attacker and can lead to unauthorized creation/modification/deletion of data or unauthorized data acce...

CVE-2026-62469

Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite component: Enterprise Command Center. Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Human...

CVE-2026-62468

Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite component: Enterprise Command Center. Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Human...

CVE-2026-60763

CVE-2026-60763 affects Oracle Applications Manager in Oracle E-Business Suite (component: Command Line - RapidClone). Affected versions: 12.2.3–12.2.15. The vulnerability allows an unauthenticated attacker with access to the infrastructure where Oracle Applications Manager runs to compromise the ...

CVE-2026-60581

CVE-2026-60581 affects Oracle E-Business Suite, Oracle Enterprise Command Center Framework (Core), version V16. An unauthenticated attacker with access to the physical network segment attached to the hardware running the framework can compromise and potentially take over the Oracle Enterprise Com...

CVE-2026-60582

The CVE-2026-60582 affecting Oracle E-Business Suite’s Oracle Enterprise Command Center Framework (Core) in version V16 is exploitable by a low-privilege, network-accessible attacker via HTTP, leading to unauthorized data creation/deletion/modification, unauthorized data read, and potential compl...

CVE-2026-60580

CVE-2026-60580 affects Oracle E-Business Suite’s Oracle Enterprise Command Center Framework (Core) in version V16. The vulnerability allows an unauthenticated attacker with access to the physical network segment connected to the hardware hosting the framework to compromise it, potentially leading...

CVE-2026-60579

The CVE affects Oracle E-Business Suite's Oracle Enterprise Command Center Framework (Core) with affected version V16. The vulnerability allows an unauthenticated attacker with access to the physical communication segment to compromise the framework. Impact includes unauthorized creation, deletio...

CVE-2026-60577

CVE-2026-60577 concerns Oracle E-Business Suite’s Oracle Enterprise Command Center Framework, Core component, in the V16 line. The vulnerability enables a low-privileged, network-accessible attacker (via HTTP) to compromise the Enterprise Command Center Framework, potentially granting unauthorize...

CVE-2026-60578

CVE-2026-60578 is a vulnerability in the Oracle Enterprise Command Center Framework (Oracle E-Business Suite, Core). Affected product version is V16. The flaw allows a high-privileged attacker with network access over HTTP to compromise the Oracle Enterprise Command Center Framework, with potenti...

CVE-2026-60576

The CVE-2026-60576 entry describes a vulnerability in Oracle E-Business Suite's Oracle Enterprise Command Center Framework (component: Core), affected in version V16. An attacker with high privileges can exploit it over HTTP with network access to potentially take over the Oracle Enterprise Comma...

CVE-2026-60340

The CVE-2026-60340 entry applies to Oracle E-Business Suite, specifically the Oracle Project Costing component (Enterprise Command Center). Affected versions are 12.2.3–12.2.15. The vulnerability, described across NVD/Oracle sources, permits a high-privilege attacker with network access over HTTP...

CVE-2026-60339

The CVE-2026-60339 entry concerns Oracle E-Business Suite, specifically the Oracle Project Manufacturing (PJM Command Center) component. Affected product: Oracle E-Business Suite PJM Command Center in version V16. Root cause details are not explicitly stated beyond the vulnerability permitting a ...

CVE-2026-60338

The CVE-2026-60338 entry concerns Oracle E-Business Suite’s Oracle Project Manufacturing with the PJM Command Center component (affected: V16). The vulnerability description indicates a low-privilege attacker who can log on to the infrastructure where Oracle Project Manufacturing runs could poten...