CVE-2026-70819

...

CVE-2026-70720

CVE-2026-70720 affects Oracle E-Business Suite Production Scheduling (Internal Operations component), versions 12.2.3–12.2.15. A low-privileged, network-accessible attacker can exploit it to read all accessible data (CVSS 6.5, confidentiality-only). Oracle released August 2026 CPU patches; apply ...

CVE-2026-70695

CVE-2026-70695 affects the File Transmission component of Oracle Payments within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A high-privileged attacker with network access via HTTP can exploit this vulnerability to perform unauthorized creation, deletion, or modification of critic...

CVE-2026-62633

Oracle Fusion Middleware's Oracle Reports Developer 14.1.2.0.0 (Security and Authentication component) has an easily exploitable unauthenticated HTTP vulnerability rated CVSS 9.8 (C/I/A High), enabling full product takeover. Oracle's August 2026 security advisory (cspuaug2026.html) addresses this...

CVE-2026-61313

The Security component of Oracle Hyperion Calculation Manager version 11.2.25.0.000 is affected by a local, easily exploitable vulnerability requiring high privileges, rated CVSS 3.1 6.7 (MEDIUM). Successful exploitation can grant unauthorized access to critical data and cause scope change impact...

CVE-2026-61227

...

CVE-2026-61038

Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0 are vulnerable to an unauthenticated, network-accessible HTTP exploit (CVSS 8.2 HIGH) enabling unauthorized data access and partial data modification. Oracle's August 2026 CPU advisory (linked in references) is the primary source for patch details....

Incomplete Fix in MONAI: algo_from_pickle() pickle.loads() RCE still present in v1.5.2 despite GHSA-89gg-p5r5-q6r4 claiming patch

Summary GHSA-89gg-p5r5-q6r4 claims the pickle deserialization vulnerability in algofrompickle was fixed in v1.5.2. However, monai/auto3dseg/utils.py has not been modified since 2024-07-12 — 18 months before v1.5.2 was released 2026-01-29. All three pickle.loads calls remain unchanged. The fix was...

CLSA-2026-1787070801 TuxCare security update for org.springframework (7 CVEs)

TuxCare rebuilt 22 org.springframework packages to address 7 CVEs. Fixed in 5.1.20.RELEASE-tuxcare.4...

Important: Red Hat Security Advisory: kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_126_1, kpatch-patch-5_14_0-427_68_2, and kpatch-patch-5_14_0-427_84_1 security update

An update for multiple packages is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

diaphora v3.4.2

δiaphora Installation Install with the Hex-Rays plugin manager: root@kitploit: hcli plugin install https://github.com/joxeankoret/diaphora/archive/refs/tags/3.4.2.zip Manual install instructions are below. Diaphora διαφορά, Greek for 'difference' version 3.4 is the most advanced program diffing...

CVE-2026-71556 affecting package packer for versions less than 1.9.5-19

CVE-2026-71556 affecting package packer for versions less than 1.9.5-19. A patched version of the package is available...

MINI-8W8R-3P4V-2RFR

Bulletin has no description...

MINI-V835-2RJG-RJ7M

Bulletin has no description...

CVE-2026-74977

Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

ROOT-APP-NPM-CVE-2026-53550 CVE-2026-53550 in js-yaml - Patched by Root

Root has patched CVE-2026-53550 in the js-yaml package for Root:npm. Multiple fixed versions available...

EUVD-2024-55726

A security vulnerability has been detected in OpenBoxes up to 0.9.1. This issue affects the function DocumentController of the file grails-app/controllers/org/pih/warehouse/core/DocumentController.groovy of the component Document Upload Controller. The manipulation leads to unrestricted upload. I...

RHSA-2026:55862 Red Hat Security Advisory: haproxy security update

Bulletin has no description...

RHSA-2026:55859 Red Hat Security Advisory: haproxy security update

Bulletin has no description...

RHSA-2026:55837 Red Hat Security Advisory: kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, kpatch-patch-5_14_0-284_158_1, and kpatch-patch-5_14_0-284_172_1 security update

Bulletin has no description...