41049 matches found
EUVD-2026-79397
Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware component: Framework. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2026-83049
CVE-2026-83049 affects the Security Framework component of Oracle WebCenter Portal (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction, leading to a scope change where addit...
EUVD-2026-79377
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Security Framework. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CLSA-2026-1789496607 TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 23 org.springframework packages to address 2 CVEs. Fixed in 5.2.7.RELEASE-tuxcare.1...
CVE-2026-89026
The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a hard-coded HS256 JWT signing key in the pbxapi index.php file that is identical across every installation, allowing unauthenticated remote attackers to forge valid bearer tokens. Attackers c...
EUVD-2026-78838
The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a hard-coded HS256 JWT signing key in the pbxapi index.php file that is identical across every installation, allowing unauthenticated remote attackers to forge valid bearer tokens. Attackers c...
CVE-2026-89026 Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originate
The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a hard-coded HS256 JWT signing key in the pbxapi index.php file that is identical across every installation, allowing unauthenticated remote attackers to forge valid bearer tokens. Attackers c...
CVE-2026-89026 Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originate
The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a hard-coded HS256 JWT signing key in the pbxapi index.php file that is identical across every installation, allowing unauthenticated remote attackers to forge valid bearer tokens. Attackers c...
CVE-2026-89026 Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originate
The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a hard-coded HS256 JWT signing key in the pbxapi index.php file that is identical across every installation, allowing unauthenticated remote attackers to forge valid bearer tokens. Attackers c...
CVE-2026-89026
Issabel Framework (web framework for Issabel PBX) contained a hard-coded HS256 JWT signing key in pbxapi/index.php, identical across all installations. Unauthenticated attackers could forge valid bearer tokens and call /pbxapi/manager/originate with the System application parameter, causing Aster...
Security Bulletin: Multiple Security Vulnerabilities in Spring Framework Affect IBM Sterling B2B Integrator and IBM Sterling File Gateway
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the security vulnerabilities Vulnerability Details CVEID:CVE-2026-22745 DESCRIPTION: Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources. More precisely, an...
CobraAudit
CobraAudit 버그 바운티 감사 프레임워크 — 일반적인 취약점 클래스를 대상으로 하는 세 가지 집중 모듈. root@kitploit: ╔═╗╔═╗╔╗ ╦═╗╔═╗ ╔═╗╦ ╦╔╦╗╦╔╦╗ ║ ║ ║╠╩╗╠╦╝╠═╣ ╠═╣║ ║ ║║║ ║ ╚═╝╚═╝╚═╝╩╚═╩ ╩ ╩ ╩╚═╝═╩╝╩ ╩ 모듈...
[SECURITY] Fedora 43 Update: perl-Dancer2-1.1.2-4.fc43
Dancer2 is the new generation of Dancer, the lightweight web-framework for Perl. It is a complete rewrite based on Moo and is meant to be easy and fun...
[SECURITY] Fedora 44 Update: perl-Dancer2-2.0.1-4.fc44
Dancer2 is the new generation of Dancer, the lightweight web-framework for Perl. It is a complete rewrite based on Moo and is meant to be easy and fun...
[SECURITY] Fedora 45 Update: perl-Dancer2-2.1.0-3.fc45
Dancer2 is the new generation of Dancer, the lightweight web-framework for Perl. It is a complete rewrite based on Moo and is meant to be easy and fun...
CVE-2026-83329: Improper Privilege Management
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...
CVE-2026-83332: Improper Access Control
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...
CVE-2026-83176: Improper Privilege Management
Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite component: CRM User Management Framework. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...
PT-2026-92868
Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware component: Framework. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
PT-2026-92708
Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite component: CRM User Management Framework. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...