ophcrack

OPHCRACK 3.6.0 Time-Memory-Trade-Off-Crack A windows password cracker based on the faster time-memory trade-off using rainbow tables. This is an evolution of the original ophcrack 1.0 developed at EPFL http://lasecwww.epfl.ch/oechslin/projects/ophcrack Ophrack 3.6.0 comes with a Qt Graphical User...

CVE-2026-120319

A vulnerability exists in Sanluan PublicCMS versions 4.x/5.x/6.x within the publiccms-trade component. The flaw resides in the TradeRefundService.updateAmound function, specifically located in the file publiccms-parent/publiccms-trade/src/main/java/com/publiccms/logic/service/trade/TradeRefundSer...

EUVD-2026-114922

A vulnerability was found in Sanluan PublicCMS 4.x/5.x/6.x. This affects the function TradeRefundService.updateAmound of the file publiccms-parent/publiccms-trade/src/main/java/com/publiccms/logic/service/trade/TradeRefundService.java of the component publiccms-trade. Performing a manipulation of...

Cheap AI-Assisted Reverse Engineering and What It Will Do

Generative AI is putting the law of reverse engineering RE under severe strain. Existing IP and technology laws assume that RE is expensive and time-consuming, and that it requires specialized expertise. They generally allow it, but they rely on its difficulty as a filter to separate permissible ...

CVE-2026-116015

yudao-cloud through 2026.09 contains an insecure direct object reference vulnerability in the mall trade module that allows authenticated members to read other members' after-sale operation logs by supplying arbitrary afterSaleId values. Attackers can enumerate sequential after-sale IDs against G...

CVE-2026-116015 yudao-cloud through 2026.09 IDOR via after-sale-log list endpoint

yudao-cloud through 2026.09 contains an insecure direct object reference vulnerability in the mall trade module that allows authenticated members to read other members' after-sale operation logs by supplying arbitrary afterSaleId values. Attackers can enumerate sequential after-sale IDs against G...

CVE-2026-116015

The yudao-cloud platform (versions through 2026.09 ) contains an Insecure Direct Object Reference (IDOR) vulnerability within the mall trade module . The root cause is the lack of proper authorization checks when accessing the after-sale-log list endpoint . Authenticated members can bypass securi...

CVE-2026-116015 yudao-cloud through 2026.09 IDOR via after-sale-log list endpoint

yudao-cloud through 2026.09 contains an insecure direct object reference vulnerability in the mall trade module that allows authenticated members to read other members' after-sale operation logs by supplying arbitrary afterSaleId values. Attackers can enumerate sequential after-sale IDs against G...

EUVD-2026-109273

yudao-cloud through 2026.09 contains an insecure direct object reference vulnerability in the mall trade module that allows authenticated members to read other members' after-sale operation logs by supplying arbitrary afterSaleId values. Attackers can enumerate sequential after-sale IDs against G...

CVE-2026-116015 yudao-cloud through 2026.09 IDOR via after-sale-log list endpoint

yudao-cloud through 2026.09 contains an insecure direct object reference vulnerability in the mall trade module that allows authenticated members to read other members' after-sale operation logs by supplying arbitrary afterSaleId values. Attackers can enumerate sequential after-sale IDs against G...

PT-2026-122596

yudao-cloud through 2026.09 contains an insecure direct object reference vulnerability in the mall trade module that allows authenticated members to read other members' after-sale operation logs by supplying arbitrary afterSaleId values. Attackers can enumerate sequential after-sale IDs against G...

YunaiV yudao-cloud authorization issue vulnerability

Versions 2026.09 and earlier of YunaiV yudao-cloud contain an authorization issue vulnerability. This vulnerability stems from unsafe direct object references within the mall trade module. Authentication members can exploit this by providing any valid afterSaleId value and enumerating subsequent...

EUVD-2026-106070

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Claim LOV. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trade Management...

EUVD-2026-106071

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Claim LOV. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trade Management...

CVE-2026-101666

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Claim LOV. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trade Management...

CVE-2026-101667

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Claim LOV. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trade Management...

CVE-2026-101666

A vulnerability exists in the Claim LOV component of the Oracle Trade Management product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can exploit this issue to compromise Oracle Trade Management, potentially gaining una...

CVE-2026-101667

The Oracle Trade Management product within Oracle E-Business Suite (specifically the Claim LOV component) is vulnerable in supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the system, provided they can trigger ...

Oracle E-Business Suite: CVE-2026-101666: Critical Patch Update

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Claim LOV. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trade Management...

PT-2026-119342

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Claim LOV. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trade Management...