EUVD-2026-79721

Vulnerability in the PeopleSoft Enterprise FIN Engineering Brazil product of Oracle PeopleSoft component: Engineering. The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN...

CVE-2026-83420

Oracle PeopleSoft Enterprise FIN Engineering Brazil (component: Engineering, version 9.1) is affected by a local vulnerability that is easily exploitable by a low-privileged attacker with logon access to the host infrastructure. Successful exploitation results in full takeover of the affected sys...

CVE-2026-83147

A vulnerability in Oracle PeopleSoft Enterprise FIN Inventory Brazil (component: Inventory , affected version 9.1 ) allows a low-privileged local attacker to take over the application, resulting in high impact to confidentiality, integrity, and availability . The CVSS 3.1 base score is 7.8 (High)...

EUVD-2026-79474

Vulnerability in the PeopleSoft Enterprise FIN Inventory Brazil product of Oracle PeopleSoft component: Inventory. The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN...

Out-FINcodedCommand

Out-FINcodedCommand v1.0 Introducción Out-FINcodedCommand es un script POC compatible con PowerShell v2.0+ diseñado para resaltar varias técnicas de ofuscación utilizadas por actores de amenazas FIN. Las principales técnicas de ofuscación destacadas en esta herramienta son: 1. la funcionalidad de...

Linux Distros Unpatched Vulnerability : CVE-2026-57226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - suricata - None Ubuntu Linux - detect/filedata: heap buffer overflow in SWF decompression depth handling CVE-2026-57226 Note that Nessus relies o...

CVE-2026-33555

HAProxy H3/QUIC 独立 FIN 请求体校验绕过导致的 HTTP 请求走私 完整文章请见：https://r3verii.github.io/cve/2026/04/14/haproxy-h3-standalone-fin-smuggling.html 摘要 HAProxy 的 HTTP/3 实现中存在一个漏洞，允许攻击者发送一个 Content-Length 头与实际请求体大小不匹配的 HTTP 请求。HAProxy 会将该畸形请求以声明的 Content-Length 但零请求体字节的形式，通过 HTTP/1.1 转发到后端。当后端发送早期响应（例如 301 重定向）并从...

CVE-2025-61480

An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via spoofed TCP FIN packets without validating the sequence or acknowledgment numbers...

EUVD-2025-210802

An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via spoofed TCP FIN packets without validating the sequence or acknowledgment numbers...

CVE-2025-61480

CVE-2025-61480 affects the Vanderbilt Industries, Acre Security SPC5300.000 Main Board (version 3.14.1 ). A physically proximate attacker can trigger a denial of service by sending spoofed TCP FIN packets that are accepted without validating the sequence or acknowledgment numbers, leading to a Hi...

CVE-2026-71112

Vulnerability in the PeopleSoft Enterprise FIN Common Objects product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN...

CVE-2026-70861

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft component: Common Objects. The supported version that is affected is 9.1. Easily exploitable vulnerability allows high privileged attacker with network access via T3, IIOP to compromise PeopleSoft...

EUVD-2026-62055

Vulnerability in the PeopleSoft Enterprise FIN Common Objects product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN...

EUVD-2026-61811

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft component: Common Objects. The supported version that is affected is 9.1. Easily exploitable vulnerability allows high privileged attacker with network access via T3, IIOP to compromise PeopleSoft...

PT-2026-78080

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise FIN Lease Administration version 9.2 Description An issue exists in the Lease Administration component that allows a low-privileged attacker with access to the infrastructure where the software executes to compromi...

PT-2026-78099

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise FIN Common Objects version 9.2 Description A security flaw in the Security component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can...

Netty: [SpdyHttpDecoder] ByteBuf Reference Leak on RST_STREAM Leads to Native Memory Exhaustion

The SpdyHttpDecoder handler in Netty's SPDY-to-HTTP codec allocates a pooled ByteBuf when processing a client-initiated SYNSTREAM frame with FLAGFIN=0, storing the partially-constructed FullHttpRequest in an internal map messageMap to accumulate subsequent DATA frames. When the remote peer sends ...

EUVD-2026-47436

Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Brazil product of Oracle PeopleSoft component: Integration. The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise PeopleSoft Enterpris...

EUVD-2026-47429

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft component: Integration. The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

EUVD-2026-47408

Vulnerability in the PeopleSoft Enterprise FIN Program Management product of Oracle PeopleSoft component: Primavera Integration. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...