mitaka

Mitaka Mitaka is a browser extension that makes your OSINT Open Source Intelligence search & scan easier. Key features: Auto IoC indicators of compromise selection with refanging. E.g. example.com to example.com, testatexample.com to [email protected], hxxp://example.com to , etc...

CVE-2026-13001

CVE-2026-13001 Podlove Podcast Publisher CVSS 9.8 Critico | Caricamento arbitrario di file non autenticato che porta all'esecuzione remota di codice Panoramica Vulnerabilità critica nel plugin WordPress Podlove Podcast Publisher versioni fino alla 4.5.1 inclusa che consente ad aggressori non...

cve-2025-61882-oracle_ebs_rce_reproduction

CVE-2025-61882 — Esecuzione remota di codice non autenticata in Oracle E-Business Suite CVSS 9.8 CRITICAL Panoramica CVE-2025-61882 è una vulnerabilità di esecuzione remota di codice non autenticata in Oracle E-Business Suite EBS che interessa i componenti Concurrent Processing e BI Publisher. La...

CVE-2025-61882-Oracle-BI-Publisher-RCE

Betroffene Software: Oracle BI Publisher Versionen 12.2.1.4.0, 12.2.1.3.0. Schwachstellentyp: Remote-Codeausführung durch unsichere Deserialisierung in der BI-Publisher-Integrationskomponente. Beschreibung: Die BI-Publisher-Integrationskomponente deserialisiert nicht vertrauenswürdige Daten ohne...

WordPress GN Publisher <1.5.6 - Cross-Site Scripting

WordPress GN Publisher plugin before 1.5.6 is susceptible to cross-site scripting via the tab parameter due to insufficient input sanitization and output escaping. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow th...

Podlove Podcast Publisher <= 4.5.1 - Arbitrary File Upload

Podlove Podcast Publisher plugin for WordPress through 4.5.1 is vulnerable to arbitrary file uploads due to missing file type validation in the podlovehandlecachefiles function. The image cache derives the stored file extension from the path of the attacker supplied source URL, while the image...

Oracle Business Intelligence Publisher - XML External Entity Injection

Oracle Business Intelligence Publisher is vulnerable to an XML external entity injection attack. The supported versions affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. This easily exploitable vulnerability allows unauthenticated attackers with network access via HTTP to compromise BI Publishe...

gryffin

ARCHIVED Gryffin beta Gryffin is a large scale web security scanning platform. It is not yet another scanner. It was written to solve two specific problems with existing scanners: coverage and scale. Better coverage translates to fewer false negatives. Inherent scalability translates to capabilit...

CVE-2026-13001

CVE-2026-13001 — Podlove Podcast Publisher Caricamento File Non Autenticato RCE Discrepanza tra isimage e extractfileextension → Caricamento Polyglot PHP Panoramica CVE-2026-13001 è una vulnerabilità critica CVSS 9.8 di caricamento arbitrario di file non autenticato nel plugin WordPress Podlove...

CVE-2015-8277-Exploit

CVE-2015-8277 Exploit POC Dies ist ein Proof-of-Concept-Exploit für Version 11.12.1.2 von lmgrdFlexera Licence Manager, der im Rahmen von Flexnet Publisher bei der Bereitstellung von ArcGIS 10.3.1 gebündelt wurde. Weitere Informationen finden Sie unter...

Oracle Business Intelligence - Path Traversal

Oracle Business Intelligence versions 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0 are vulnerable to path traversal in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. id: CVE-2019-2588 info: name: Oracle Business Intelligence - Path...

CVE-2025-10147

CVE-2025-10147 Podlove Podcast Publisher = 4.2.6 - Caricamento Arbitrario di File Non Autenticato Il plugin Podlove Podcast Publisher per WordPress è vulnerabile a caricamenti arbitrari di file a causa della mancanza di validazione del tipo di file nella funzione 'moveasoriginalfile' in tutte le...

Oracle Business Intelligence Publisher (August 2026 CSPU)

The 8.2.0.0.0 and 26.01.0.0.0 versions of Oracle Business Intelligence Publisher installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory. - Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API...

CVE-2026-66615

Unauthenticated Cross Site Scripting XSS in Podlove Podcast Publisher = 4.5.4 versions...

CVE-2026-66615 WordPress Podlove Podcast Publisher plugin <= 4.5.4 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Podlove Podcast Publisher = 4.5.4 versions...

EUVD-2026-63299

Unauthenticated Cross Site Scripting XSS in Podlove Podcast Publisher = 4.5.4 versions...

CVE-2026-66615

Podlove Podcast Publisher WordPress plugin versions ≤ 4.5.4 has an unauthenticated reflected/stored XSS flaw (CVSS 7.1 HIGH, network-exploitable, no auth required). No exploitation data is provided. Update to a patched version beyond 4.5.4; see the Patchstack advisory for details.

Vulnerabilities in Oracle Business Intelligence Enterprise Edition and Oracle BI Publisher

Oracle has identified several vulnerabilities in Oracle Business Intelligence Enterprise Edition and Oracle BI Publisher. These vulnerabilities exist in various versions of Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 and Oracle BI Publisher...

CVE-2026-71057

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.1.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI...

CVE-2026-71058

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI...