Vulnerabilities in Oracle Analytics

Oracle has identified 33 vulnerabilities in various Oracle Analytics products, including Oracle Business Intelligence Enterprise Edition and Oracle BI Publisher. The patch notes list these 33 vulnerabilities, among which 14 can be exploited remotely without the need for authentication. Depending ...

exploits

exploits Published PoCs can be found at exploitdb.com Patient Appointment Scheduler System v1.0: Inbit Messenger v4.6.0:...

K000163821: PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619

Security Advisory Description CVE-2026-109618 also known as php2shell PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before...

gxv3175-remote-code-exec

Remote code execution for Grandstream GXV3175 VOIP phone. === INSTALLATION === copy the files to the same directory structure under the metasploit top level dir === USE === in msfconsole use exploits/linux/http/grandstreamgxv3175cmdexec set RHOST 192.168.0.1 set USERNAME & PASSWORD if required...

-WinVerifyTrust-Signature-Validation-CVE-2013-3900-Mitigation

CVE-2013-3900 is a remote code execution vulnerability in the way Microsoft's WinVerifyTrust function handles Windows Authenticode signature verification. This flaw allows an attacker to modify a signed executable file by adding malicious code to an unverified portion of the file without...

Security Bulletin: Sensitive Information in Log files affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-81209)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed these security vulnerabilities Vulnerability Details CVEID:CVE-2026-81209 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow a remote authenticated attacker to obtain sensitive information due to...

CVE-2026-24061---telnetd

CVE-2026-24061 – telnetd 🔥 Description CVE-2026-24061 is a critical vulnerability affecting certain implementations of telnetd , allowing an authentication bypass and the obtainment of a remote root shell without valid credentials. This repository provides a Proof of Concept PoC for detecting...

CVE-2026-114251 itsourcecode Sales-and-Inventory-System cust_del.php sql injection

A vulnerability has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. Impacted is an unknown function of the file /pages/custdel.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit h...

EUVD-2026-107285

A vulnerability has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. Impacted is an unknown function of the file /pages/custdel.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit h...

CVE-2026-114251

A SQL injection vulnerability exists in the itsourcecode Sales-and-Inventory-System (up to commit 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac). The flaw is located in an unknown function within the /pages/cust_del.php file, where manipulation of the ID argument allows for remote execution of unautho...

CVE-2026-114251 itsourcecode Sales-and-Inventory-System cust_del.php sql injection

A vulnerability has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. Impacted is an unknown function of the file /pages/custdel.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit h...

CVE-2026-5027

This post is a research article published by EQSTLab. Thanks toYahia Hamza, who reported and analyzed this vulnerability. CVE-2026-5027 ★ CVE-2026-5027 Langflow Path Traversal / Arbitrary File Write PoC ★ Description CVE-2026-5027 : Langflow Arbitrary File Write Vulnerability description: A path...

Exploit for CVE-2026-109618

CVE-2026-109618 Affected-Version Checker Non-destructive chec...

CVE-2019-7609

CVE-2019-7609 exploit CVE-2019-7609kibana RCE on right way by python2 scripts snapshot usage python2 CVE-2019-7609-kibana-rce.py -h usage: CVE-2019-7609-kibana-rce.py -h -u URL -host REMOTEHOST -port REMOTEPORT --shell optional arguments: -h, --help show this help message and exit -u URL such as:...

zencart_auth_rce_poc

zencartauthrcepoc CVE-2021-3291 1- login as admin 2- get any modules edit page 3- inspect element any true radiobox 4- change true to true','MODULEORDERTOTALTOTALSTATUS'; echo id; // 5- click update 6- to trig command go again edit page CVE-2021-3291 https://vulners.com/cve/CVE-2021-3291 POC...

CVE-2026-114249

A vulnerability was detected in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. This vulnerability affects unknown code of the file /Agent/includes/UpdatePolicyHolder-inc.php of the component Policy Holder Update Form. Th...

CVE-2026-109618

PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may re...

CVE-2026-109619

PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on...

EUVD-2026-107284

A flaw has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. This issue affects some unknown processing of the file /pages/custedit.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit...

CVE-2026-114250

A flaw in the itsourcecode Sales-and-Inventory-System (up to commit 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac) allows for a SQL injection via the ID argument during processing of the /pages/cust_edit.php file. This vulnerability can be exploited remotely to interact with the database. While the ex...