PT-2026-77857

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite version 13.3.0.1 Description A flaw exists that allows a low-privileged attacker with Load Testing for Web Apps privileges and network access via HTTPS to compromise the system. Successful exploitation can lead...

PT-2026-77858

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Load Testing for Web Apps privilege with network access via HTTP to compromise Oracle Application Testing Suite. Successful...

CVE-2026-70865: Improper Access Control

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Difficult to exploit vulnerability allows low privileged attacker having Load Testing for Web Apps privilege with network access via HTTPS to compromise Oracle Application Testing Suite...

CVE-2026-70864: Improper Access Control

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privileged attacker having Load Testing for Web Apps privilege with network access via HTTP to compromise Oracle Application Testing Suite. Successful...

CVE-2026-70862: Improper Access Control

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can result ...

PT-2026-77862

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite version 13.3.0.1 Description An unauthenticated attacker with network access via HTTP can compromise the Oracle Application Testing Suite. Successful exploitation of this issue can result in a complete takeover...

PT-2026-77860

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite version 13.3.0.1 Description A flaw exists that allows a low privileged attacker with Load Testing for Web Apps privileges and logon access to the infrastructure where the software executes to compromise the...

CVE-2026-70802: Improper Access Control

Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite component: Regression Testing. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

GO-2025-3602 vulnerabilities

Vulnerabilities for packages: helm-push, pluto, cilium-cli, kots, zot, chart-testing, k9s, helm-docs, k8ssandra-client, helm-operator, trivy, tw, rancher-helm, zarf, chartmuseum, flux-source-controller, eksctl, cluster-api-helm-controller, kubescape, flux-helm-controller, flux, cert-manager-cmctl...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: helm-push, pluto, cilium-cli, kots, zot, k8sgpt, chart-testing, k9s, istio, helm-docs, kargo, k8ssandra-client, envoy-gateway, helm-operator, rancher-fleet, linkerd2, trivy, tw, rancher-helm, zarf, chartmuseum, flux-source-controller, eksctl,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: nri-apache, terraform-mcp-server, controller-gen, wait-for-port, tkn, libnvidia-container, k8sgpt, kapp, ip-masq-agent, k8sgateway, tflint, k3s, kubernetes-dashboard-auth, opa, yunikorn-k8shim, cluster-api-provider-vsphere, rancher-system-agent,...

The vulnerability of the OpenScript package in the Oracle Application Testing Suite allows a hacker to gain full control over the application.

The vulnerability of the OpenScript package in the Oracle Application Testing Suite software automation suite is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the TCP protocol...

The vulnerability of the installation service of the Oracle Application Testing Suite allows a perpetrator to gain full control over the application.

The vulnerability of the installation service Install of the Oracle Application Testing Suite relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the Oracle Net protocol...

The vulnerability of the Load Testing module for Web apps within the Oracle Application Testing Suite allows a hacker to gain full control over the application.

The vulnerability of the Load Testing module for web apps within the Oracle Application Testing Suite relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the TCP protocol...

internal-privesc-poc

Internal Privilege Escalation POC Library This library provid...

CVE-2026-72736

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, Dokploy passes user-controlled values directly into shell commands via unquoted template literal interpolation in the registry credential testing and Docker Swarm cluster management endbpoints. Both endpoints have a sa...

Exploit for Missing Authentication for Critical Function in Coreweave Marimo

CVE-2026-39987-Poc Proof o...

PT-2026-69881

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.13 Description Dokploy passes user-controlled values directly into shell commands through unquoted template literal interpolation. This occurs within the registry credential testing and Docker Swarm cluster...

CVE-2026-72736: Improper Neutralization of Special Elements used in a Command

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, Dokploy passes user-controlled values directly into shell commands via unquoted template literal interpolation in the registry credential testing and Docker Swarm cluster management endbpoints. Both endpoints have a sa...

MAL-2026-13666 Malicious code in cubesat-upstream-driver (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5f2cf32e29ec0daedda5112ca2c560e69b4c4cd77850d6dc52d7a448e343a2 The package is advertised as an 'Upstream driver interface for cubesat orbital command bus' but ships no driver, protocol, or telemetry code. Its sol...