CVE-2020-3956

CVE-2020-3956 PoC exploit for VMware Cloud Director RCE CVE-2020-3956 Technical advisory is available here: https://citadelo.com/en/blog/full-infrastructure-takeover-of-vmware-cloud-director-CVE-2020-3956/...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM Deployment has security vulnerabilities from version 17.0 to 26.9. These vulnerabilities stem from issues with the Server Infrastructure component, which may allow high-privilege attackers to log in and perform infrastructure takeover of Siebel CRM Deployment...

Oracle Enterprise Manager Base Platform security vulnerabilities

Versions 13.5 and 24.1 of Oracle Enterprise Manager Base Platform contain a security vulnerability stemming from issues within the Enterprise Manager Install component. This vulnerability may allow low-privilege attackers to log in and take over the infrastructure of Oracle Enterprise Manager Bas...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Installation Security component and may allow low-privilege attackers to log in, gain control of the infrastructure, and take over JD Edwards...

Oracle Application Object Library security vulnerabilities

Oracle Application Object Library versions 12.2.3 through 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the DB Privileges component, which may allow low-privilege attackers to log in and perform infrastructure takeover attacks on the Oracle Application Object...

Oracle Applications DBA security vulnerabilities

Oracle Applications DBA versions 12.2.3 to 12.2.15 have a security vulnerability. This vulnerability stems from issues with the AD Utilities component, and it could allow low-privilege attackers to log in and perform infrastructure takeover attacks on Applications DBA systems...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Versions 8.2.0.0.0 and 12.2.1.4.0 of Oracle Business Intelligence Enterprise Edition contain a security vulnerability stemming from issues in the Platform Security component. This vulnerability may allow unauthenticated attackers to log in and gain control over the infrastructure, subsequently...

Oracle VM VirtualBox security vulnerabilities

Oracle VM VirtualBox 7.2.20 has a security vulnerability. This vulnerability stems from issues with the Core component and could allow low-privilege attackers to log in and perform infrastructure takeover of Oracle VM VirtualBox...

CVE-2026-41012

Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned between BOSH Director and vCenter to impersonate vCenter REST API and capture administrator credentials via HTTP Basic auth, leading to complete virtualization infrastructure takeover. An attacker who can...

CVE-2026-41012

Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned between BOSH Director and vCenter to impersonate vCenter REST API and capture administrator credentials via HTTP Basic auth, leading to complete virtualization infrastructure takeover. An attacker who can...

PT-2026-77608

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description A flaw in the Installation and Configuration component allows a low privileged attacker with access to the infrastructure where the software executes to compromise the...

PT-2026-77697

Name of the Vulnerable Software and Affected Versions Oracle Agile Engineering Data Management version 6.2.1 Description An issue exists in the Install component of the Oracle Agile Engineering Data Management product. A high privileged attacker with access to the infrastructure where the softwar...

Linux Distros Unpatched Vulnerability : CVE-2022-35583

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP...

CVE-2024-21114

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

DEBIAN-CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

UBUNTU-CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

CVE-2022-35583: Server-Side Request Forgery (SSRF)

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...