3857 matches found
CVE-2026-87165
CVE-2026-87165 affects Oracle Contract Lifecycle Management for Public Sector (component: ECC For Award and IDV ), version 16 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the product, potentially resulting in full takeover with ...
CVE-2026-83264
Oracle Product Lifecycle Analytics (version 3.6.1 ), component Installation Issues , is affected by an easily exploitable vulnerability that allows a low-privileged attacker with local logon to the infrastructure to compromise the product. The scope change means attacks may significantly impact a...
CVE-2026-83262
Oracle Product Lifecycle Analytics (part of Oracle Supply Chain), version 3.6.1 , is affected by a vulnerability in its Installation Issues component. A low-privileged attacker with network access via HTTP can exploit this flaw, though it is rated as difficult to exploit (High Attack Complexity)....
CVE-2026-83263
Oracle Product Lifecycle Analytics (Oracle Supply Chain), version 3.6.1 , is affected by a vulnerability in the Installation Issues component. A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to achieve a takeover of the product, impacting confiden...
CVE-2026-83261
Oracle Product Lifecycle Analytics (component: Core), version 3.6.1 , is affected by an unauthenticated, network-accessible vulnerability exploitable via HTTP . The CVSS 3.1 score is 9.8 (Critical) with full impact on confidentiality, integrity, and availability, meaning a successful attack resul...
Nullify
Nullify Secure. Transparent. Nullified. Nullify is an open source, modular data retention, deletion, and lifecycle governance platform. It provides a centralized framework for discovering data, evaluating retention policies, executing controlled lifecycle actions, and maintaining verifiable audit...
sopa
sopa A practical client for ADWS in Golang. Sopa implements the ADWS protocol stack MS-NNS + MC-NMF + SOAP, exposing the following command-line features: Object search & retrieval query: runs LDAP-filter searches via WS-Enumeration Enumerate + Pull loop with attribute projection, scope control...
alibaba__one-java-agent_CVE-2022-25842_0-0-1
one-java-agent Goals 1. Provide plugin support to centrally manage multiple Java Agents. 2. Plugins support install/uninstall, requiring the plugin to implement interfaces. 3. Support traditional Java agents, i.e., already developed Java agents. Plugin System If a plugin wishes to be aware of the...
CVE-2026-54686-poc
CVE-2026-54686: Warp DCS Lifecycle Hook Spoofing PoC 日本語版はこちら Description This repository contains a safe local Proof of Concept for CVE-2026-54686 , based on Warp's public advisory GHSA-9w2v-jhww-vm85. Before the patched release, Warp accepted certain state-mutating DCS lifecycle hooks from the...
np-audit
np-audit — npm package auditor Static security analysis for npm packages — detects obfuscated lifecycle scripts, known vulnerabilities, and malicious patterns before they run. Drop-in replacement for npm install and...
attack-surface-framework
Attack Surface Framework Overview ASF aims to protect organizations acting as an attack surface watchdog, provided an “Object” which might be a: Domain, IP address or CIDR Internal or External, ASF will discover assets/subdomains, enumerate their ports and services, track deltas and serve as a...
CVE-2026-46590
CVE-2026-46590 — camel-pqc Key-Lifecycle Unsafe Deserialization Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime:...
secure-coding-practices-quick-reference-guide
Korean language ko-KR version We appreciate all kinds of suggestions and corrections on this translation of the Secure Coding Practices Quick Reference Guide During development manually create the PDF document from directory ko/kr: root@kitploit: pandoc -o OWASPSCPQuickReferenceGuide.ko-KR.pdf ...
postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle
A flaw was found in PostgreSQL. This vulnerability, caused by type confusion in the 'portal'/cursor lifecycle, allows a user to execute arbitrary code as the operating system user running the database. This can occur by re-creating a cursor or other portal with different types. Successful...
CVE-2026-45321-Tanstack
Simulasi Supply Chain Attack — CVE-2026-45321 TanStack Educational Lab for Understanding npm Supply Chain Attacks, CI/CD Abuse, and Install-Time Code Execution Disclaimer Project ini dibuat hanya untuk: pembelajaran keamanan siber, riset defensive security, simulasi local lab, memahami konsep...
TriSuElla-AIDLCA-Framework
🔱 TriSuElla-AIDLCA フレームワーク AI駆動開発ライフサイクル & 自律エージェントガバナンス LLMSecOps ソフトウェアバージョン : 3.2.0 | フレームワークバージョン : 3.2.0 | ステータス : 制度化済み 本番環境対応、DevSecOps対応 & CI検証済み 統合不変条件 : 305 チェック | ルール : 204 | ドメインファミリー : 26 -success.svg -blue.svg 🏛️ エグゼクティブ概要 TriSuElla-AIDLCA フレームワーク...
CVE-2026-45321-Tanstack
Supply Chain Attack Simulation — CVE-2026-45321 TanStack Educational Lab for Understanding npm Supply Chain Attacks, CI/CD Abuse, and Install-Time Code Execution Disclaimer This project is created only for: cybersecurity learning, defensive security research, local lab simulation, understanding t...
IntelligentProcessLifecycle
IntelligentProcessLifecycle アクティブサイバーディフェンダーのインテリジェントプロセスライフサイクル 説明 このGitHubリポジトリは、セキュリティ運用サービスにおける誤検知（false positive）とエラーカテゴリに関するポスター関連ファイルを公開しています。目的は、セキュリティオペレーションセンター（SOC）レポートのためのオープンソース報告標準を定義することです。ここで公開するKPIは、運用上のサイバー防御タスクの継続的改善に関連する統計を作成することに焦点を当てています。 この情報は、FIRST 2020で Eireann...
claude-project-scanner
Claude プロジェクトスキャナー サードパーティプロジェクトを開く前に既知のセキュリティリスクをスキャンする読み取り専用のClaude Codeスキルです。 以下の攻撃パターンを検出します： CVE-2025-59536 Claude Codeライフサイクルフックインジェクション CVE-2025-61260 OpenAI Codex CODEXHOMEインジェクション CVE-2025-54136 Cursorプラグイン検証バイパス...