The vulnerability of the Internal Operations component of the Oracle Enterprise Asset Management application, a part of the Oracle E-Business Suite automation system for enterprise activities, allows a perpetrator to gain full control over the application.

The vulnerability of the Internal Operations component of the Oracle Enterprise Asset Management application, a part of the Oracle E-Business Suite automation system for enterprise activities, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker...

EUVD-2026-46934

Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite component: Web Service Provider. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi...

CVE-2026-62561

Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HRMS US executes to...

CVE-2026-60176

Vulnerability in the Oracle Payments product of Oracle E-Business Suite component: File Transmission. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payments. Successful...

CVE-2026-46941

Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite component: Cost Maintenance. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cost Management...

CVE-2026-62524

Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: US Payroll - General. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS US. Successful...

Oracle E-Business Suite 12.2.14 Vulnerability Detection Scanner

This is a scanner designed to assess Oracle E-Business Suite web environments affected by CVE-2025-61882. It performs basic connectivity checks, fingerprints Oracle EBS-specific paths such as /OAHTML/ endpoints, and verifies the accessibility of common application endpoints without sending...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: local-path-provisioner, longhorn-cli-fips, promxy, chart-testing, flux-helm-controller, crossplane-provider-aws-cloudwatchlogs-fips, grafana-agent-operator, cluster-api-gcp-controller-fips, kube-logging-logging-operator, prometheus-operator-fips, kubernetes-fips,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: ratify-fips, cluster-api-gcp-controller-fips, kubernetes-fips, docker-compose-fips, seaweedfs, boring-registry, cluster-api-helm-controller-fips, kubernetes-csi-external-provisioner-fips, witness, cloudflared-fips, keda, beats, livekit-cli, descheduler-fips,...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-12.9, opa-fips, promxy, ratify-fips, cluster-api-gcp-controller-fips, seaweedfs, kubeflow, kubernetes-csi-external-provisioner-fips, osv-scanner, runc, paranoia, keda, beats, newrelic-infrastructure-agent-fips, pulumi-kubernetes-operator,...

Exploit for Missing Authentication for Critical Function in Oracle Marketing

✨ CVE-2025-62481 — Oracle Marketing Administration EBS Cri...

Exploit for Improper Authentication in Oracle Concurrent_Processing

CVE‑2025‑61882 Scan/Exploit ⚠️Legal Disclaimer Legal...

CVE-2025-61753

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite component: Miscellaneous. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Scripting. Successful...

Five New Exploited Bugs Land in CISA's Catalog — Oracle and Microsoft Among Targets

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added five security flaws to its Known Exploited Vulnerabilities KEV Catalog, officially confirming a recently disclosed vulnerability impacting Oracle E-Business Suite EBS has been weaponized in real-world attacks. The...

⚡ Weekly Recap: WhatsApp Worm, Critical CVEs, Oracle 0-Day, Ransomware Cartel & More

Every week, the cyber world reminds us that silence doesn't mean safety. Attacks often begin quietly — one unpatched flaw, one overlooked credential, one backup left unencrypted. By the time alarms sound, the damage is done. This week's edition looks at how attackers are changing the game — linki...

⚡ Weekly Recap: WhatsApp Worm, Critical CVEs, Oracle 0-Day, Ransomware Cartel & More

Every week, the cyber world reminds us that silence doesn’t mean safety. Attacks often begin quietly — one unpatched flaw, one overlooked credential, one backup left unencrypted. By the time alarms sound, the damage is done. This week’s edition looks at how attackers are changing the game — linki...

EUVD-2017-18214

Malware in sbrugna...

Oracle E-Business Suite CVE-2025-61882 RCE

This module exploits CVE-2025-61882 in Oracle E-Business Suite by combining SSRF, Path Traversal, HTTP request smuggling and XSLT injection. The exploit hosts a malicious XSL file that the target will fetch and process, leading to RCE. This module provides an interactive shell session. Vulnerable...

CVE-2025-30731

Vulnerability in the Oracle Applications Technology Stack product of Oracle E-Business Suite component: Configuration. Supported versions that are affected are 12.2.3-12.2.14. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: mkcert, yq, petname, rekor, grpcurl, step-issuer, helm-operator, wazero, skopeo, zarf, nri-cassandra, dockerize, tflint, ytt, wait-for-port, crane, controller-gen, certificate-transparency, litefs, doppler-kubernetes-operator, gomplate, golangci-lint, nats-server,...