cve-2018-12798

Adobe Acrobat Reader 힙 오버플로 원격 코드 실행 취약점 취약점 메모리 버퍼 범위 내 작업 제한 부적절 취약점 취약점 설명 이 취약점을 통해 원격 공격자는 취약한 Adobe Acrobat Pro DC 설치 환경에서 임의 코드를 실행할 수 있습니다. 이 취약점을 악용하려면 사용자 상호작용이 필요하며, 대상이 악성 페이지를 방문하거나 악성 파일을 열어야 합니다. 구체적인 결함은 유니코드 문자열 처리 과정에 존재합니다. 구문 분석 시 프로세스는 사용자 제공 데이터를 고정 길이 힙 기반 버퍼에 복사하기 전에 데이터 길...

CVE-2017-8759

CVE-2017-8759 武器化 PoC このリポジトリには、CVE-2017-8759 の脆弱性を武器化するために使用できるデータが含まれています。 詳細については、https://www.mdsec.co.uk/blog/ にアクセスし、この脆弱性に関連する投稿を参照してください。 いつものように、私の研究は、コミュニティが増大する脅威をより認識できるように支援することと、 adversary simulation...

CVE-disclosures

CVE-2026-3171 & CVE-2026-3170 – Archana M Archana M의 공식 취약점 공개 자료. 🔹 CVE-2026-3171 제품: SourceCodester / Patrick Mvuma Patients Waiting Area Queue Management System 1.0 취약점 유형: 크로스 사이트 스크립팅 CWE-79 영향 파일: /queue.php 공격 경로: 원격 사용자 상호작용: 필요 CVSS v3.1: 3.5 AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N 상태: 공개 공개...

CVE-2025-60656

CVE-2025-60656 - 저장된 크로스사이트 스크립팅 XSS 취약점 홈페이지 | ---|--- 연구자| DotAdrien 심각도| 8.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N 소프트웨어| Script Pag 설명 홈페이지의 "최근 광고" 모듈을 통해 저장형 XSS 취약점이 존재합니다. 이미지 URL 필드에서 큰따옴표"를 제대로 처리하지 않습니다. 공격자는 https://google.com/image.png"와 같은 페이로드를 주입할 수 있으며, 이는 사용자가 홈페이지를...

CVE-2015-3073

CVE-2015-3073 이 취약점은 원격 공격자가 취약한 Adobe Reader 설치 환경에서 API 제한을 우회할 수 있도록 합니다. 이 취약점을 악용하려면 사용자 상호작용이 필요하며, 대상자가 악성 페이지를 방문하거나 악성 파일을 열어야 합니다. 구체적인 결함은 AFParseDate에 존재합니다. 특정 JavaScript 명령어를 포함한 특수 제작된 PDF를 생성하면 JavaScript API 제한을 우회할 수 있습니다. 원격 공격자는 이 취약점을 악용하여 임의 코드를 실행할 수 있습니다. Windows 및 OS X에서...

code-ollama: `grep_search` Command Injection via Unescaped `$()` Shell Substitution (CWE-78)

grepsearch Command Injection via Unescaped $ Shell Substitution CWE-78 Summary The grepsearch tool in code-ollama constructs a shell command string by interpolating attacker-controlled pattern and path arguments, then executes it via childprocess.exec. The sanitization only escapes backslashes an...

CVE-2026-87137

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83247

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle...

CVE-2026-83206

Vulnerability in the Oracle Banking Corporate Lending Process Management product of Oracle Financial Services Applications component: Base. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT...

CVE-2026-83190

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Deployment executes to...

CVE-2026-83143

Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM component: eDetailing. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Life Sciences...

EUVD-2026-79932

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

EUVD-2026-79838

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Financial...

CVE-2026-83294

CVE-2026-83294 affects Oracle Business Intelligence Enterprise Edition (component: Platform Security ) in Oracle Analytics. Supported versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 are impacted. The vulnerability is easily exploitable by an unauthenticated attacker with local logon to the infr...

CVE-2026-83253

CVE-2026-83253 affects the Endeca Application Controller component within Oracle Commerce Guided Search / Oracle Commerce Experience Manager (version 11.4.0 ). This easily exploitable vulnerability allows an unauthenticated attacker with local access to the infrastructure where the product execut...

EUVD-2026-79558

Vulnerability in the Oracle Banking Corporate Lending Process Management product of Oracle Financial Services Applications component: Base. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT...

CVE-2026-83185

CVE-2026-83185 affects the CRM User Management Framework component of Oracle E-Business Suite , specifically supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though user interaction is required. Successful exploitat...

EUVD-2026-79486

Vulnerability in the Applications DBA product of Oracle E-Business Suite component: ADPatch. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Applications DBA executes to compromise...

CVE-2026-83150

CVE-2026-83150 affects Oracle Application Testing Suite version 13.3.0.1 . The vulnerability allows an unauthenticated attacker with local access to the infrastructure where the suite executes to achieve full takeover of the application, impacting confidentiality, integrity, and availability. Exp...

EUVD-2026-79408

Vulnerability in the Oracle Banking Branch product of Oracle Financial Services Applications component: Reports. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...