36 matches found
EUVD-2026-106517
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Notification Configuration. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...
CVE-2026-91263
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Notification Configuration. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...
CVE-2026-91263
A vulnerability exists in the Notification Configuration component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). A low-privileged attacker with network access via HTTP can exploit this difficult-to-trigger vulnerability to compromise the PeopleTools product. Successf...
PT-2026-119794
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Notification Configuration. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...
Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities
Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Notification Configuration component. Attackers with low privileges can exploit these vulnerabilities through HTTP network access. This may affect other...
CVE-2026-74242
A flaw was found in Red Hat Quay. An administrator of any repository, by knowing or guessing a target notification's Universally Unique Identifier UUID, can read the notification configuration, including sensitive details like webhook URLs, Slack tokens, and email addresses. This vulnerability al...
CVE-2026-74242
A flaw was found in Red Hat Quay. An administrator of any repository, by knowing or guessing a target notification's Universally Unique Identifier UUID, can read the notification configuration, including sensitive details like webhook URLs, Slack tokens, and email addresses. This vulnerability al...
CVE-2026-74242: Authorization Bypass Through User-Controlled Key
A flaw was found in Red Hat Quay. An administrator of any repository, by knowing or guessing a target notification's Universally Unique Identifier UUID, can read the notification configuration, including sensitive details like webhook URLs, Slack tokens, and email addresses. This vulnerability al...
CVE-2026-18146
The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Notification Smartcode Values in all versions up to, and including, 6.2.11 due to insufficient input sanitization and output escaping...
CVE-2026-21724
A flaw was found in Grafana OSS. An authorization bypass vulnerability in the provisioning contact points API allows users with an Editor role to modify protected webhook URLs. This can lead to unauthorized changes to notification configurations, potentially resulting in information disclosure or...
EUVD-2025-150406
The SureForms plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.13.1 via the 'srfmemailnotification' post meta registration. This is due to setting the 'authcallback' parameter to 'returntrue', which allows unauthenticated access to the...
EUVD-2021-12145
Malware in sbrugna...
EUVD-2023-29370
Malicious code in bioql PyPI...
CVE-2025-20893
Improper access control in NotificationManager prior to SMR Jan-2025 Release 1 allows local attackers to change the configuration of notifications...
CVE-2025-20893
CVE-2025-20893 affects Samsung Mobile devices via an improper access control flaw in NotificationManager, enabling local attackers to modify notification configurations. The issue is described across multiple sources (NVD, Red Hat, CIRCL, CNNVD, and NCSC) as a local-privilege-like impact with low...
CVE-2025-20893
Improper access control in NotificationManager prior to SMR Jan-2025 Release 1 allows local attackers to change the configuration of notifications...
PT-2025-4175
Name of the Vulnerable Software and Affected Versions NotificationManager versions prior to SMR Jan-2025 Release 1 Description The issue is related to improper access control in the NotificationManager, which allows local attackers to change the notification configuration. This can be exploited b...
Adlisting Classified Ads 2.14.0 - WebPage Content Information Disclosure Vulnerability
Exploit Title: Adlisting Classified Ads 2.14.0 - WebPage Content Information Disclosure Exploit Author: CraCkEr Vendor: Templatecookie Vendor Homepage: https://templatecookie.com/ Software Link: https://templatecookie.com/demo/adlisting-classified-ads-script Version: 2.14.0 Tested on: Windows 10...
Adlisting Classified Ads 2.14.0 Information Disclosure
Exploit Title: Adlisting Classified Ads 2.14.0 - WebPage Content Information Disclosure Exploit Author: CraCkEr Date: 25/07/2023 Vendor: Templatecookie Vendor Homepage: https://templatecookie.com/ Software Link: https://templatecookie.com/demo/adlisting-classified-ads-script Tested on: Windows 10...