CVE-2026-12380 Reflected XSS in Akıllı Ticaret's E-Commerce Pack

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Akıllı Ticaret Software Technologies Ltd. Co. E-Commerce Pack allows Reflected XSS. This issue affects E-Commerce Pack: through 2026-10-06. NOTE: The vendor was contacted early about this disclosur...

EUVD-2026-93413

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Akıllı Ticaret Software Technologies Ltd. Co. E-Commerce Pack allows Reflected XSS. This issue affects E-Commerce Pack: through 2026-10-06. NOTE: The vendor was contacted early about this disclosur...

Oracle-E-BS-CVE-2022-21587-Exploit

Oracle E-BS CVE-2022-21587 Exploit Introduction Oracle E-BS CVE-2022-21587 Exploit Plugin for woodpecker-framwork Disclaimer This tool is only intended for legally authorized enterprise security construction activities. If you need to test the tool's availability, please set up your own target...

CVE-2026-46817

🚨 CVE-2026-46817 - Ejecución Remota de Código Crítica Oracle E-Business Suite – Oracle Payments Transmisión de Archivos Vulnerabilidad remota crítica sin autenticación que afecta a Oracle Payments Transmisión de Archivos que puede permitir el compromiso total de la aplicación a través de HTTP. 📌...

Welcart eCommerce <=2.7.7 - Local File Inclusion

Welcart eCommerce 2.7.7 and before are vulnerable to unauthenticated local file inclusion. id: CVE-2022-41840 info: name: Welcart eCommerce =2.7.8 or apply the provided patch to fix the LFI vulnerability. reference: -...

WordPress Welcart e-Commerce <2.8.5 - Arbitrary File Access

WordPress Welcart e-Commerce plugin before 2.8.5 is susceptible to arbitrary file access. The plugin does not validate user input before using it to output the content of a file, which can allow an attacker to read arbitrary files on the server, obtain sensitive information, modify data, and/or...

Diary Management System 1.0 - Cross-Site Scripting

Diary Management System 1.0 contains a cross-site scripting vulnerability via the Name parameter in search-result.php. id: CVE-2022-29004 info: name: Diary Management System 1.0 - Cross-Site Scripting author: TenBird severity: medium description: | Diary Management System 1.0 contains a cross-sit...

WordPress e-search <=1.0 - Cross-Site Scripting

Wordpress plugin e-search 1.0 and before contains a cross-site scripting vulnerability via dateselect.php which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

Oracle E-Business Suite <=12.2 - Authentication Bypass

Oracle E-Business Suite component: Manage Proxies 12.1 and 12.2 are susceptible to an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise it by self-registering for an account. Successful attacks of this vulnerability can result in...

Oracle E-Business Suite - Blind SSRF

Oracle E-Business Suite, Application Management Pack component User Monitoring subcomponent, is susceptible to blind server-side request forgery. An attacker with network access via HTTP can gain read access to a subset of data, connect to internal services like HTTP-enabled databases, or perform...

PT-2026-106720

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Akıllı Ticaret Software Technologies Ltd. Co. E-Commerce Pack allows Reflected XSS. This issue affects E-Commerce Pack: through 2026-10-06. NOTE: The vendor was contacted early about this disclosur...

CVE-2025-29722

🛡️ CVE-2025-29722 – Cross Site Request Forgery CSRF en Commercify v1.0 Descubierto por: David P.S Abraham alias Davycipher ID de CVE CVE-2025-29722 ha sido asignado a esta vulnerabilidad por MITRE Corporation. Resumen Se identificó una vulnerabilidad CSRF en Commercify v1.0 , una plataforma de...

CVE-2020-23591

CVE-2020-23591 OPTILINK E-PON "N.º DE MODELO: OP-XT71000N" con "VERSIÓN DE HARDWARE: V2.2"; & "VERSIÓN DE FIRMWARE: OPV3.3.1-191028" Vulnerabilidad encontrada en "OPTILINK OP-XT71000N Versión de Hardware: V2.2, Versión de Firmware: OPV3.3.1-191028" que permite a un atacante subir un archivo...

e-cology

Weaver e-cology OA Beanshell Component Remote Code Execution Windows Linux Notes Detect the target system's os.name if the target system is Windows, executing commands such as set requires manually typing cmd.exe /c set Use Unicode to bypass the exec filter on some sites. Payload...

CVE-2022-4140

CVE-2022-4140 - WordPress plugin Welcart e-Commerce 2.8.5 - Arbitrary File Read This repo contains a Proof of ConceptPoC exploit for CVE-2022-4140. Disclaimer This project is provided for educational purposes and authorized security testing only. Do not use it against systems that you do not own ...

CVE-2020-23585

CVE-2020-23585 OPTILINK E-PON "MODEL NO: OP-XT71000N" con "HARDWARE VERSION: V2.2"; y "FIRMWARE VERSION: OPV3.3.1-191028" Un atacante remoto puede realizar un ataque de falsificación de petición en sitios cruzados CSRF en "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version:...

CVE-2021-39475

CVE-2021-39475 XSS on admin reviews page https://www.warcloudsecurity.com/ecommerce/admin/reviews.php?action=preview&rID=1&page=0...

CVE-2025-53072-CVE-2025-62481

CVE-2025-53072 & CVE-2025-62481 Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Marketing Administration. How does this detection method work? This Nuclei template detects Oracle E-Business Suite instances vulnerable to CVE-2025-53072 and CVE-2025-62481 by...

Cappriciosec-University

📚 Cappriciosec University – India’s First Hacker E-Learning Platform Cappriciosec University is India’s first e-learning platform for hackers, cybersecurity beginners, and bug bounty hunters. We are focused on ethical hacking, penetration testing, IoT hacking, cyber crime investigation, and...

Enterprise-Information-Security-Risk-Assessment-Oracle-E-Business-Suite-Case-Study

Information Security: GDPR Compliance & Incident Response A comprehensive security and privacy compliance framework for high-risk biometric surveillance systems CCTV, Facial Recognition Technology, and centralised contact tracing, including comparative framework analysis ISO 27001, Cyber...