The vulnerability of the Internal Operations component of the Oracle Enterprise Asset Management application, a part of the Oracle E-Business Suite automation system for enterprise activities, allows a perpetrator to gain full control over the application.

The vulnerability of the Internal Operations component of the Oracle Enterprise Asset Management application, a part of the Oracle E-Business Suite automation system for enterprise activities, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker...

EUVD-2026-46934

Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite component: Web Service Provider. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi...

CVE-2026-62561

Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HRMS US executes to...

CVE-2026-60176

Vulnerability in the Oracle Payments product of Oracle E-Business Suite component: File Transmission. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payments. Successful...

CVE-2026-46941

Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite component: Cost Maintenance. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cost Management...

CVE-2026-62524

Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: US Payroll - General. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS US. Successful...

Oracle E-Business Suite 12.2.14 Vulnerability Detection Scanner

This is a scanner designed to assess Oracle E-Business Suite web environments affected by CVE-2025-61882. It performs basic connectivity checks, fingerprints Oracle EBS-specific paths such as /OAHTML/ endpoints, and verifies the accessibility of common application endpoints without sending...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: eks-distro, kube-arangodb, kserve-modelmesh-serving, crossplane-provider-keycloak-fips, kubevela-fips, aws-flb-firehose, crossplane-provider-aws-cognitoidentity, cue, virt-api, yace, k3d, request-1279-14, seaweedfs-fips, dfc, nri-discovery-kubernetes-fips,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: eks-distro, kube-arangodb, kubevela-fips, packer-fips, terragrunt-fips, k3d, external-secrets-operator, k8s-agents-operator, vcluster, dgraph, falcosidekick, cloud-provider-vsphere, azurefile-csi, terraform-provider-grafana-fips, sftpgo-plugin-kms, conftest-fips,...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: k3d, nri-discovery-kubernetes-fips, terraform-provider-tls-fips, cluster-proportional-autoscaler-fips, actions-runner-controller-fips, gitea, tetragon-fips, terraform-provider-random-fips, kubernetes-dashboard-web, sftpgo-plugin-kms, velero-plugin-for-csi-fips,...

Exploit for Missing Authentication for Critical Function in Oracle Marketing

✨ CVE-2025-62481 — Oracle Marketing Administration EBS Cri...

Exploit for Improper Authentication in Oracle Concurrent_Processing

CVE‑2025‑61882 Scan/Exploit ⚠️Legal Disclaimer Legal...

CVE-2025-61753

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite component: Miscellaneous. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Scripting. Successful...

Five New Exploited Bugs Land in CISA's Catalog — Oracle and Microsoft Among Targets

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added five security flaws to its Known Exploited Vulnerabilities KEV Catalog, officially confirming a recently disclosed vulnerability impacting Oracle E-Business Suite EBS has been weaponized in real-world attacks. The...

⚡ Weekly Recap: WhatsApp Worm, Critical CVEs, Oracle 0-Day, Ransomware Cartel & More

Every week, the cyber world reminds us that silence doesn't mean safety. Attacks often begin quietly — one unpatched flaw, one overlooked credential, one backup left unencrypted. By the time alarms sound, the damage is done. This week's edition looks at how attackers are changing the game — linki...

⚡ Weekly Recap: WhatsApp Worm, Critical CVEs, Oracle 0-Day, Ransomware Cartel & More

Every week, the cyber world reminds us that silence doesn’t mean safety. Attacks often begin quietly — one unpatched flaw, one overlooked credential, one backup left unencrypted. By the time alarms sound, the damage is done. This week’s edition looks at how attackers are changing the game — linki...

EUVD-2017-18214

Malware in sbrugna...

Oracle E-Business Suite CVE-2025-61882 RCE

This module exploits CVE-2025-61882 in Oracle E-Business Suite by combining SSRF, Path Traversal, HTTP request smuggling and XSLT injection. The exploit hosts a malicious XSL file that the target will fetch and process, leading to RCE. This module provides an interactive shell session. Vulnerable...

CVE-2025-30731

Vulnerability in the Oracle Applications Technology Stack product of Oracle E-Business Suite component: Configuration. Supported versions that are affected are 12.2.3-12.2.14. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: k8sgpt, tfsec, go-licenses, dockerize, rekor, gitness, kube-state-metrics, prometheus-operator, neuvector-dbgen, hivemind, libnvidia-container, hey, cri-tools, kpt, flux-notification-controller, q, flannel-cni-plugin, crane, dgraph, gitleaks,...