intel471-threat-hunting-cve-2023-46604

Intel 471 Threat Hunting Workshop – CVE-2023-46604 Investigation Overview This repository documents my first hands-on experience with Intel 471’s Intelligence-Driven Threat Hunting Workshop focused on CVE-2023-46604. Through this practical workshop, I investigated how attackers leveraged a critic...

Elasticsearch 7.10.0-7.13.3 - Information Disclosure

ElasticSsarch 7.10.0 to 7.13.3 is susceptible to information disclosure. A user with the ability to submit arbitrary queries can submit a malformed query that results in an error message containing previously used portions of a data buffer. This buffer can contain sensitive information such as...

Kibana - Local File Inclusion

Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute JavaScript which could possibly lead to an attacker executing arbitrary commands with...

elastic-search-email-extractor

Email Extractor This Go program is designed to extract email addresses from a list of Elastic Search Databases. It takes in a list of URLs and will search the Database of each URL to find email addresses. Install go install github.com/RandomRobbieBF/elastic-search-email-extractor@latest Usage To...

GHSA-6Q48-6C7W-9GW2 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1-fips, openstack-kolla-toolbox-2025.2-fips, opentelemetry-python-instrumentation, openstack-glance-2026.1-fips, kserve-xgbserver, openstack-nova-2026.1, py3-opentelemetry-exporter-otlp, openstack-kolla-toolbox-2025.1-fips,...

EUVD-2026-106192

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Security. The supported version that is affected is 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via TLS to compromise Oracle...

EUVD-2026-106193

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Security. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with access...

EUVD-2026-106191

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Security. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to...

EUVD-2026-106194

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Core. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the...

EUVD-2026-106164

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Cloud native deployment. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows unauthenticated attacke...

CVE-2026-101793

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Core. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the...

CVE-2026-101792

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Security. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with access...

CVE-2026-101790

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Security. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to...

CVE-2026-101791

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Security. The supported version that is affected is 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via TLS to compromise Oracle...

CVE-2026-101763

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Cloud native deployment. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows unauthenticated attacke...

CVE-2026-101793

A vulnerability exists in the Core component of Oracle Communications BRM - Elastic Charging Engine affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 . A low privileged attacker with local access to the infrastructure can exploit this issue to compromise the product, potential...

CVE-2026-101791

A vulnerability exists in the Security component of Oracle Communications BRM - Elastic Charging Engine version 15.2.0.0.0 . A low-privileged attacker with network access via TLS can exploit this flaw to compromise the system, potentially gaining unauthorized access to, or modifying, critical dat...

CVE-2026-101792

A vulnerability exists in the Security component of Oracle Communications BRM - Elastic Charging Engine affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 . This difficult-to-exploit flaw allows an unauthenticated attacker with access to the physical communication segment attac...

CVE-2026-101790

A vulnerability exists in the Security component of Oracle Communications BRM - Elastic Charging Engine affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 . A low privileged attacker with logon access to the infrastructure can exploit this flaw to compromise the product, potent...

CVE-2026-101763

A critical vulnerability exists in the Oracle Communications BRM - Elastic Charging Engine (component: Cloud native deployment ) affecting versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 . An unauthenticated attacker with network access via RMI can easily exploit this flaw to compromi...