CVE-2026-46908

Vulnerability in the JD Edwards EnterpriseOne Accounts Payable product of Oracle JD Edwards component: Accounts Payable. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseO...

CVE-2026-46891

Vulnerability in the JD Edwards EnterpriseOne Accounts Payable product of Oracle JD Edwards component: Accounts Payable. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseO...

Vulnerabilities in Oracle JD Edwards EnterpriseOne

Oracle has identified several vulnerabilities in Oracle JD Edwards EnterpriseOne, including the modules Tools, Accounts Payable, Human Resources Management, General Ledger, Order Promising, and Project Costing, specifically for versions 9.2.0.0 to 9.2.26.2. These vulnerabilities enable attackers ...

PT-2026-50015

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Accounts Payable version 9.2 Description A flaw in the Accounts Payable component allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a ful...

PT-2026-49998

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Accounts Payable version 9.2 Description A flaw in the Accounts Payable component allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to...

Purchase order attachment isn’t a PDF. It’s phishing for your password

An attachment named New PO 500PCS.pdf.hTM, posing as a purchase order in PDF form, turned out to be something entirely different: a credential-harvesting web page that quietly sent passwords and IP/location data straight to a Telegram bot controlled by an attacker. Imagine you’re in accounts...

EUVD-2025-89495

Malicious code in payableswiftz3n npm...

EUVD-2025-76050

Malicious code in payablealligator-appteadev npm...

EUVD-2025-78631

Malicious code in payableleoponz3n npm...

Malicious code in payable_leopon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d9ad83846ddc35cd0882a419e4c767417fedeb652a5e3cd7f149de7b10c3a7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107000 Malicious code in payable_cattle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 916a09a71cd91bd4eccd4c39416f5b6055572332511dc246e61022b84581c119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80960

Malicious code in payablecattle0xrequest npm...

EUVD-2025-62687

Malicious code in payablesalamanderz3n npm...

EUVD-2025-52802

Malicious code in payable-plum-marmoset npm...

Malicious code in payable-plum-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 881d1e9cc33a27b6fc356682b5f0db8d80e297e364c777afba0cc9c0ef058568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52803

Malicious code in payable-blue-nightingale npm...

EUVD-2025-52801

Malicious code in payable-salmon-piranha npm...

EUVD-2025-52800

Malicious code in payable-turquoise-deer npm...

Malicious code in payable-salmon-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7536737b1f08db227ce6ea8fab6eedc8ca99ab4f17b0ec66f0d9a051ea550e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69846 Malicious code in payable-blue-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4a4d91cc8c0c8a0eebc4c4b5181194a80bd20640819dbd2bee83bcf6741a4cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...