CVE-2023-7028

CVE-2023-7028 ⚠️ This exploit is for defensive purposes and should be used by cybersecurity professionals to identify possible vulnerable GitLab servers. Description CVE-2023-7028 - Account Takeover via Password Reset without user interactions in GitLab Community Edition and Enterprise Edition...

TOTPAuthenticate

TOTP Authenticate Uses session handling rules to add a TOTP token to outgoing requests. For Burp Suite Enterprise Edition Please note that extensions are written by third party users of Burp, and PortSwigger makes no warranty about their quality or usefulness for any particular purpose. Usage 1...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-97229 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound vulnerability CVE-2026-76418 Cisco Secure Firewall ASA Software and...

CVE-2026-114820

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle Graal...

GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability

GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expressio...

Oracle Java SE Multiple Vulnerabilities (October 2026 CPU)

The 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 26.0.2 and 27 releases of Oracle Java SE installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the Oracle Java SE, Oracle JavaFX product of Oracle...

Amazon Linux 2023 : java-21-amazon-corretto, java-21-amazon-corretto-devel, java-21-amazon-corretto-headless (ALAS2023-2026-3319)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3319 advisory. Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updat...

Amazon Linux 2023 : java-17-amazon-corretto, java-17-amazon-corretto-devel, java-17-amazon-corretto-headless (ALAS2023-2026-3318)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3318 advisory. Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updat...

Amazon Linux 2023 : java-11-amazon-corretto, java-11-amazon-corretto-devel, java-11-amazon-corretto-headless (ALAS2023-2026-3317)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3317 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle...

Amazon Linux 2023 : java-27-amazon-corretto, java-27-amazon-corretto-devel, java-27-amazon-corretto-headless (ALAS2023-2026-3316)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3316 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle...

CVE-2026-114820

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle Graal...

Oracle Java SE security vulnerabilities

Versions 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, and 27.0.1.0.2 of Oracle Java SE; versions 17.0.21.0.2 and 21.0.13.0.2 of Oracle GraalVM for JDK; and version 21.3.20.0.2 of Oracle GraalVM Enterprise Edition contain a security vulnerability stemming from issu...

Oracle Java SE Critical Certificate Trust (CVE-2026-91403 Security Alert)

The 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, or 27.0.1 versions of Java installed on the remote host are affected by a vulnerability as referenced in the CVE-2026-91403 Oracle Security Alert advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM...

Several vulnerabilities exist in Oracle Java.

Oracle has identified several vulnerabilities in Oracle Java. In Oracle Java SE, JavaFX, and GraalVM Enterprise Edition, there are various vulnerabilities that can be exploited by unauthorized network attackers through exposed APIs or sandboxed Java applications. These vulnerabilities enable the...

Vulnerabilities are handled in GitLab through GitLab Inc.

GitLab has identified 12 vulnerabilities in the GitLab Community Edition and Enterprise Edition. One of these vulnerabilities is classified as critical. GitLab has addressed this vulnerability in both the GitLab Community Edition and Enterprise Edition, starting from version 7.0 up to certain 19....

EUVD-2026-107578

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1; Oracle GraalVM for JDK: 17.0.21 and...

Linux Distros Unpatched Vulnerability : CVE-2026-91402

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JavaFX. Supported versions that are...

Linux Distros Unpatched Vulnerability : CVE-2026-101516

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported version...

Linux Distros Unpatched Vulnerability : CVE-2026-91382

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that...

Linux Distros Unpatched Vulnerability : CVE-2026-91385

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JavaFX. Supported versions that are...