dnsobserver

DNSObserver A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band DNS interactions and sends notifications with the received request's details via Slack. DNSObserver can help you find bugs such as blin...

There’s a Security Deal Hiding in Your Customer’s Browser

Discover how the Akamai Workforce Protector Partner Playbook helps you secure browser AI interactions, eliminate data visibility gaps, and close deals...

classy-core (>=0.2.0.dev20211228, <=0.2.0.dev20211230), discord-py-interactions (>=4.0.0, <=4.0.1) +2 more potentially affected by CVE-2026-114134 +1 more via black (21.11.0b1)

black PYPI version 21.11.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - classy-core =0.2.0.dev20211228, =4.0.0, =0.0.4, =0.0.8 Source cves: CVE-2026-114134, CVE-2026-31900 Source advisory: OSV:GHSA-CG8M-R9F2-5WM2...

Oracle WebCenter Portal security vulnerabilities

Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Runtime Tools component. Unauthorized attackers may gain access through HTTP network interactions, allowing them to access critical data or all accessible data...

Oracle Demand Planning security vulnerability

Versions 12.1 and 12.2 of Oracle Demand Planning contain a security vulnerability stemming from an issue in the Internal Operations component. This vulnerability may allow unauthenticated attackers to gain HTTP access via network interactions requiring user interaction. It affects other products,...

Oracle General Ledger security vulnerabilities

Oracle General Ledger versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the ADADMIN component, and they could allow low-privilege attackers to gain access to and control of Oracle General Ledger through network interactions...

Oracle JDeveloper security vulnerabilities

Oracle JDeveloper versions 12.2.1.4.0 and 14.1.2.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Security Framework component. Unauthorized attackers may gain access through HTTP network interactions, allowing them to access critical data or all accessible dat...

Vulnerability related to permission and access control issues in Oracle PeopleSoft Enterprise PeopleTools

Versions 8.61 through 8.63 of Oracle PeopleSoft Enterprise PeopleTools contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Report Distribution component, potentially allowing unauthenticated attackers to gain unauthorized acce...

Oracle One-to-One Fulfillment security vulnerabilities

Oracle One-to-One Fulfillment versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Admin Console UI components. Unauthorized attackers may gain access through HTTP network interactions that require user interaction. This allows unauthorized...

Oracle Primavera P6 Enterprise Project Portfolio Management: Vulnerabilities in Permissions and Access Control

Versions of Oracle Primavera P6 Enterprise Project Portfolio Management from 21.12.0.0 to 21.12.21.9 and from 22.12.0.0 to 22.12.21.4, as well as versions from 23.12.0 to 23.12.20, 24.12.0 to 24.12.16, and 25.12.0 to 25.12.8, have vulnerabilities related to permission licensing and access control...

Oracle JD Edwards EnterpriseOne Orchestrator security vulnerabilities

The Oracle JD Edwards EnterpriseOne Orchestrator versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the E1 IOT Orchestrator Security component. Unauthorized attackers may gain access through HTTP network interactions and user interactions,...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-cors component. Unauthorized attackers may gain access through HTTP network interactions and exploit user interactions, resulting in unauthorized updates, insertions, or...

CLSA-2026-1792389922 TuxCare security update for @storybook/addon-interactions (1 CVE)

TuxCare rebuilt @storybook/addon-interactions to address 1 CVE. Fixed in 7.0.7-tuxcare.1...

PT-2026-132024

TuxCare rebuilt @storybook/addon-interactions to address 1 CVE. Fixed in 7.0.7-tuxcare.1...

Astra Linux – vulnerability in Chromium

Prior to version 153.0.8010.36, using “After Free” in Passwords in Google Chrome allowed a remote attacker to exploit social engineering techniques to potentially execute arbitrary code outside the sandbox via UI interaction. Chromium security severity: Medium...

CVE-2026-96747

A flaw was found in pymongo. When client-side field-level encryption is configured, the driver misinterprets Key Management Service KMS endpoint addresses ending in '.sock' as local Unix domain socket files rather than remote network hosts. An authenticated database user with permission to modify...

Astra Linux – Vulnerability in Chromium

Before version 97.0.4692.99, using Omnibox in Google Chrome allowed attackers to potentially exploit heap corruption by using a crafted HTML page, as long as those attackers could convince users to engage in certain user interactions...

Astra Linux – Vulnerability in Chromium

Before version 104.0.5112.79, using “After Free” in Google Chrome extensions allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption through specific UI interactions...

Astra Linux – Vulnerability in Chromium

Before version 103.0.5060.53, using free after in the WebApp Provider in Google Chrome allowed a remote attacker who convinced the user to engage in certain user interactions to potentially exploit heap corruption through specific UI interactions...

Astra Linux – Vulnerability in Chromium

Before version 105.0.5195.52, using “after free” in the Sign-In Flow in Google Chrome allowed a remote attacker who convinced a user to engage in certain UI interactions to potentially exploit heap corruption through crafted UI interactions...