17 matches found
CVE-2025-55182-GUI
CVE-2025-55182 漏洞检测与利用工具(GUI版) 项目简介 本项目是一款针对 CVE-2025-55182 高危漏洞的可视化检测与利用工具,基于 Python + tkinter 开发全图形化操作界面,无需复杂命令行操作,兼顾易用性与实用性。 CVE-2025-55182 漏洞存在于 React Server Components(RSC)生态的 Next.js 框架中,攻击者可通过构造恶意 multipart/form-data 请求实现远程命令执行,进而接管服务器权限。本工具仅用于 授权安全研究 与 合规渗透测试...
CVE-2026-87240
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial...
CVE-2026-82998
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Servi...
CVE-2026-87269
CVE-2026-87269 affects Oracle VM VirtualBox 7.2.16 (component: Core ), applying to Windows hosts only . An easily exploitable vulnerability allows a low-privileged local attacker with logon to the host to achieve full takeover of VirtualBox, impacting confidentiality, integrity, and availability ...
EUVD-2026-79653
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Service Administration UI. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
EUVD-2026-79620
Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle ...
CVE-2026-83164
Oracle E-Business Suite 's Customer Interaction History product (component: Outcome-Result ) is affected in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve take...
EUVD-2026-79449
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Audience. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of...
EUVD-2026-79303
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Portlet Services. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2026-60396
Vulnerability in Oracle GoldenGate component: Distribution Server executable. Supported versions that are affected are 21.3-21.21 and 23.4-23.26.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise Oracle GoldenGate. Successful attacks of...
Linux Distros Unpatched Vulnerability : CVE-2022-21571
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.36. Easily...
Linux Distros Unpatched Vulnerability : CVE-2020-14675
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.44, prior to...
Linux Distros Unpatched Vulnerability : CVE-2023-22098
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.12. Easily...
Linux Distros Unpatched Vulnerability : CVE-2020-2698
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.36, prior to...
Linux Distros Unpatched Vulnerability : CVE-2022-39422
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.38. Difficult ...
CVE-2022-21307
Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physica...
CVE-2020-13169
Stored XSS Cross-Site Scripting exists in the SolarWinds Orion Platform before before 2020.2.1 on multiple forms and pages. This vulnerability may lead to the Information Disclosure and Escalation of Privileges takeover of administrator account...