Liferay Portal Username Enumeration Vulnerability

Username enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows attackers to determine if an account exist in the...

Edge Orchestrator for Intel® Tiber™ Edge Platform Security Advisory

Summary: Potential security vulnerabilities in some Edge Orchestrator software for Intel® Tiber™ Edge Platform may allow escalation of privilege, denial of service or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details:...

CVE-2016-0957

creationtimestamp| type| source ---|---|--- 2025-08-03 21:02:16+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lvjlb5x4xd2f...

CVE-2025-54138

creationtimestamp| type| source ---|---|--- 2025-07-23 16:47:07+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3lunhurzsib2x...

The vulnerability of the Platform Security component of the Oracle Business Intelligence Enterprise Edition software platform allows a perpetrator to gain access to read, modify, and delete data.

The vulnerability of the Platform Security component of the Oracle Business Intelligence Enterprise Edition software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain read, modify, and delete privileges on data...

PT-2025-29609 · Oracle · Oracle Business Intelligence Enterprise Edition

Name of the Vulnerable Software and Affected Versions: Oracle Business Intelligence Enterprise Edition versions 7.6.0.0.0 through 12.2.1.4.0 Description: A vulnerability exists in the Oracle Business Intelligence Enterprise Edition component, Platform Security, that allows an unauthenticated...

Touge Practical Teaching Platform 安全漏洞

Touge Practical Teaching Platform is an intelligent educational platform from China's Touge Corporation. A security vulnerability exists in Touge Practical Teaching Platform, which stems from an inadequate container security mechanism that could lead to the execution of arbitrary code...

CVE-2025-52487

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. In versions 7.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted request or proxy to be created that could bypass the design of DNN Login IP Filters allowing login attempts from IP...

CVE-2025-52485

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted request to inject scripts in the Activity Feed Attachments endpoint which will then render in the feed. This issue...

CVE-2025-6286

creationtimestamp| type| source ---|---|--- 2025-06-19 23:40:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18890 2025-06-20 00:13:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lryqx3knqn2r...

CVE-2025-5141

creationtimestamp| type| source ---|---|--- 2025-06-17 21:57:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrtih2lb6s2a...

CVE-2025-48866

ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. Versions prior to 2.9.10 contain a denial of service vulnerability similar to GHSA-859r-vvv8-rm8r/CVE-2025-47947. The sanitiseArg and sanitizeArg - this is the same action but an alias is...

CVE-2023-27270

SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, has multiple vulnerabilities in a class for test purposes in which an attacker authenticated as a non-administrative user can craft a request with certain...

CVE-2021-2302

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: OPSS. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2021-2005

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: BI Platform Security. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT...

CVE-2021-29441

Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, when configured to use authentication -Dnacos.core.auth.enabled=true Nacos uses the AuthFilter servlet filter to enforce authentication. This filter has a backdoor...

CVE-2020-15390

pyActivity in Pega Platform 8.4.0.237 has a security misconfiguration that leads to an improper access control vulnerability via =GetWebInfo...

A Bootiful Podcast: V Körbes on security from the platform on up

Hi, Spring fans! In today's extra special installment I talk to Broadcom's V Körbes who works on security above and below the application...

CVE-2025-4311

creationtimestamp| type| source ---|---|--- 2025-05-06 04:20:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15044 2025-05-06 06:21:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loiajoerph2h 2025-05-06 07:00:55+00:00| published-proof-of-concept|...

CVE-2025-32973 org.xwiki.platform:xwiki-platform-component-wiki provides no warning when granting XWiki.ComponentClass programming right

XWiki is a generic wiki platform. In versions starting from 15.9-rc-1 to before 15.10.12, from 16.0.0-rc-1 to before 16.4.3, and from 16.5.0-rc-1 to before 16.8.0-rc-1, when a user with programming rights edits a document in XWiki that was last edited by a user without programming rights and...