EUVD-2026-46934

Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite component: Web Service Provider. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi...

CVE-2026-62561

Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HRMS US executes to...

CVE-2026-60176

Vulnerability in the Oracle Payments product of Oracle E-Business Suite component: File Transmission. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payments. Successful...

CVE-2026-46941

Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite component: Cost Maintenance. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cost Management...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch-fips, kyverno-policy-reporter-plugins-kyverno-fips, terraform-provider-time, amazon-ecs-agent-fips, grafana-pyroscope, etcd, consul-k8s-fips, k3d, oauth2-proxy-fips, pulumi-language-java, rabbitmq-messaging-topology-operator-fips,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-plugins-kyverno-fips, grafana-pyroscope, etcd, k3d, spicedb-operator, cluster-api-gcp-controller-fips, conftest-fips, rke2-runtime-fips, grafana-fips, kserve, datadog-operator, rke2-cloud-provider, syft-fips, docker, skaffold-fips,...

Oracle E-Business Suite CVE-2025-61882 RCE

This module exploits CVE-2025-61882 in Oracle E-Business Suite by combining SSRF, Path Traversal, HTTP request smuggling and XSLT injection. The exploit hosts a malicious XSL file that the target will fetch and process, leading to RCE. This module provides an interactive shell session. Vulnerable...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch-fips, kyverno-policy-reporter-plugins-kyverno-fips, terraform-provider-time, grafana-pyroscope, etcd, consul-k8s-fips, k3d, spicedb-operator, portieris, secrets-store-csi-driver, cluster-api-gcp-controller-fips, conftest-fips,...

Exploit for Missing Authentication for Critical Function in Oracle Marketing

✨ CVE-2025-62481 — Oracle Marketing Administration EBS Cri...

Exploit for Improper Authentication in Oracle Concurrent_Processing

CVE‑2025‑61882 Scan/Exploit ⚠️Legal Disclaimer Legal...

CVE-2025-61753

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite component: Miscellaneous. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Scripting. Successful...

Five New Exploited Bugs Land in CISA's Catalog — Oracle and Microsoft Among Targets

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added five security flaws to its Known Exploited Vulnerabilities KEV Catalog, officially confirming a recently disclosed vulnerability impacting Oracle E-Business Suite EBS has been weaponized in real-world attacks. The...

⚡ Weekly Recap: WhatsApp Worm, Critical CVEs, Oracle 0-Day, Ransomware Cartel & More

Every week, the cyber world reminds us that silence doesn't mean safety. Attacks often begin quietly — one unpatched flaw, one overlooked credential, one backup left unencrypted. By the time alarms sound, the damage is done. This week's edition looks at how attackers are changing the game — linki...

EUVD-2017-18214

Malware in sbrugna...

CVE-2025-30731

Vulnerability in the Oracle Applications Technology Stack product of Oracle E-Business Suite component: Configuration. Supported versions that are affected are 12.2.3-12.2.14. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: redka, lazygit, skaffold, bank-vaults, confluent-common-docker, local-static-provisioner, render-template, grpcurl, newrelic-nri-statsd, kustomize, weaviate, sops, gitsign, bom, nvidia-container-toolkit, fq, cortex, falcoctl, fuse-overlayfs-snapshotter, kubeflow-kati...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: lazygit, stakater-reloader, skaffold, secrets-store-csi-driver-provider-aws, nri-kafka, up, newrelic-prometheus-configurator, wire-go, render-template, grpcurl, dask-gateway, kubeflow-pipelines, cass-operator, cue, kustomize, govulncheck, s5cmd, docker-cli,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: lazygit, stakater-reloader, skaffold, secrets-store-csi-driver-provider-aws, nri-kafka, up, newrelic-prometheus-configurator, wire-go, render-template, grpcurl, dask-gateway, kubeflow-pipelines, cass-operator, cue, kustomize, govulncheck, s5cmd, docker-cli,...

GHSA-PXHW-596R-RWQ5 vulnerabilities

Vulnerabilities for packages: local-static-provisioner, spark-operator, argocd-image-updater, kubernetes-dns-node-cache, kubeflow-pipelines, aws-efs-csi-driver, kubernetes, nodetaint, kubernetes-csi-driver-hostpath, ip-masq-agent...

CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: local-static-provisioner, spark-operator, argocd-image-updater, kubernetes-dns-node-cache, kubeflow-pipelines, aws-efs-csi-driver, kubernetes, nodetaint, kubernetes-csi-driver-hostpath, ip-masq-agent...