CVE-2025-61882-CVE-2025-61884

CVE-2025-61882 & CVE-2025-61884 EDIT: Oracle just disclosed a new vulnerability CVE-2025-61884, the detection script for that vuln can be found in this repo or originally here:https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550. As quoted from Oracle's security advisory: This Securit...

watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882

watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882 Generador de artefactos de detección para Oracle E-Business Suite CVE-2025-61882 Consulte nuestra publicación en el blog para obtener detalles técnicos Detección en acción root@kitploit: python3...

CVE-2025-61882-Oracle-EBS

Oracle E-Business Suite — CVE-2025-61882 This repository contains ZeroZenX’s research artifacts and a fully operational exploit implementation for CVE-2025-61882, provided to support defensive research, incident response, detection engineering, and patch verification in authorized environments...

Oracle E-Business Suite 12.1.3/12.2.x - Open Redirect

The Oracle Applications Framework component of Oracle E-Business Suite subcomponent: Popup windows lists of values, datepicker, etc. is impacted by open redirect issues in versions 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. These easily exploitable vulnerabilities allow unauthenticated attackers...

Oracle E-Business Suite <=12.2 - Authentication Bypass

Oracle E-Business Suite component: Manage Proxies 12.1 and 12.2 are susceptible to an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise it by self-registering for an account. Successful attacks of this vulnerability can result in...

CVE-2025-61882-Oracle-E-Business-Suite-Pre-Auth-RCE-Exploit

CVE-2025-61882 - Oracle E-Business Suite Pre-Auth RCE Exploit A critical pre-authentication Remote Code Execution RCE flaw in Oracle E-Business Suite versions 12.2.3–12.2.14 allows attackers to gain full control over vulnerable servers via malicious HTTP requests — now actively exploited in the...

http-oracle-ebs-cve-2025-61882.nse

http-oracle-ebs-cve-2025-61882.nse Detects Oracle E-Business Suite CVE-2025-61882. Detection: multi-tier checks — fingerprinting, version checks, endpoint & SSRF tests, timing analysis & controlled exploitation 4 high-confidence results. Default = safe fingerprinting only. Set aggressive=true 2...

Blackash-CVE-2025-61882

🛡️🚨 CVE‑2025‑61882 — Critical Pre‑Auth Remote Code Execution in Oracle E‑Business Suite EBS 🚨🛡️ Short summary: Critical pre‑auth remote code execution in Oracle E‑Business Suite EBS — affects 12.2.3 → 12.2.14, CVSS 9.8 , actively exploited in the wild ransom/ extortion activity reported...

Blackash-CVE-2025-61884

CVE-2025-61884 New Oracle E-Business Suite Bug Could Let Hackers Access Data Without Login 💀 CVE-2025-61884 — Complete summary 🧾💥...

CVE-2025-61882-CVE-2025-61884

CVE-2025-61882 & CVE-2025-61884 EDIT: Oracle just disclosed a new vulnerability CVE-2025-61884, the detection script for that vuln can be found in this repo or originally here:https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550. As quoted from Oracle's security advisory: This Securit...

CVE-2025-61882

Oracle E-Business Suite RCE 扫描器 CVE-2025-61882 一个快速、多线程的批量扫描器，用于检测 Oracle E-Business Suite 安装中的 CVE-2025-61882。该严重漏洞允许未经身份验证的远程代码执行。 🎯 功能特性 批量扫描 - 从文件中处理数百或数千个目标 多线程 - 可配置的并发扫描（默认：20 个线程） 自动检测 - 通过执行 id 命令并解析输出来验证 RCE 实时结果 - 易受攻击的目标会立即写入 vuln-output.txt 随机端口 - 为每个目标使用随机端口（2000-9999）以避免冲突 简洁输出...

CVE-2026-46817

🚨 CVE-2026-46817 - Ejecución Remota de Código Crítica Oracle E-Business Suite – Oracle Payments Transmisión de Archivos Vulnerabilidad remota crítica sin autenticación que afecta a Oracle Payments Transmisión de Archivos que puede permitir el compromiso total de la aplicación a través de HTTP. 📌...

CVE-2025-53072-CVE-2025-62481

CVE-2025-53072 & CVE-2025-62481 Oracle E-Business Suite 的 Oracle Marketing 产品中存在漏洞（组件：Marketing Administration）。 这种检测方法是如何工作的？ 此 Nuclei 模板通过检查服务器的 Last-Modified 响应头是否表明构建日期早于 2025 年 10 月 21 日（补丁发布日期），并结合识别 E-Business Suite 主页内容以及 200 状态响应，来检测易受 CVE-2025-53072 和 CVE-2025-62481 影响的 Oracle E-Busines...

Enterprise-Information-Security-Risk-Assessment-Oracle-E-Business-Suite-Case-Study

Seguridad de la Información: Cumplimiento del RGPD y Respuesta a Incidentes Un marco integral de seguridad y cumplimiento de privacidad para sistemas de vigilancia biométrica de alto riesgo CCTV, tecnología de reconocimiento facial y rastreo de contactos centralizado, que incluye análisis...

cve-2025-61882-oracle_ebs_rce_reproduction

CVE-2025-61882 — Oracle E-Business Suite Unauthenticated Remote Code Execution CVSS 9.8 CRITICAL Overview CVE-2025-61882 is an unauthenticated remote code execution vulnerability in Oracle E-Business Suite EBS, affecting the Concurrent Processing and BI Publisher components. The flaw allows an...

Oracle E-Business Suite 12.2.3 -12.2.11 - Remote Code Execution

Oracle E-Business Suite 12.2.3 through 12.2.11 is susceptible to remote code execution via the Oracle Web Applications Desktop Integrator product, Upload component. An attacker with HTTP network access can execute malware, obtain sensitive information, modify data, and/or gain full control over a...

Oracle E-Business Suite (August 2026 CSPU)

The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory. - Vulnerability in the Oracle Payments product of Oracle E-Business Suite component: File Transmission. Supported versions that are affecte...

CVE-2026-61231

creationtimestamp| type| source ---|---|--- 2026-08-19 17:18:55+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-23 01:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtplyjd3a62y...

vulnerabilities present in Oracle E-Business Suite

Oracle has identified vulnerabilities in various components of the Oracle E-Business Suite, including General Ledger, Payments, Workflow, Sales, Purchasing, Call Center Technology, and other modules within versions 12.2.3 through 12.2.15. These vulnerabilities enable attackers with low to high...

CVE-2026-71104

Vulnerability in the Oracle HRMS Netherlands product of Oracle E-Business Suite component: Netherlands Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle HRMS...