Lucene search
+L
PtsecurityRecent

200725 matches found

Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•6 views

PT-2026-77575

Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via SQL to compromise Oracle Hyperion Calculation...

3.8CVSS5.5AI score0.00257EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•9 views

PT-2026-77118

Unauthenticated Broken Authentication in Piraeus Bank WooCommerce Payment Gateway 3.2.0 versions...

6.5CVSS5.2AI score0.00295EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•6 views

PT-2026-78199

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

5.3CVSS5.1AI score0.00228EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•11 views

PT-2026-78143

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

5.3CVSS5.1AI score0.00299EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•10 views

PT-2026-78151

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

9.4CVSS5.2AI score0.00403EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•4 views

PT-2026-78196

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

7.5CVSS5.2AI score0.00377EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•5 views

PT-2026-78193

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

6.5CVSS5.1AI score0.00194EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•7 views

PT-2026-78203

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

6.5CVSS5.1AI score0.00257EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•5 views

PT-2026-78205

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

9.1CVSS5.2AI score0.00377EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•9 views

PT-2026-78210

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 1.4.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

9.8CVSS5.3AI score0.00331EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•6 views

PT-2026-78216

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is in...

7.2CVSS5.2AI score0.00255EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•5 views

PT-2026-78217

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is in...

8.3CVSS5.2AI score0.00301EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•8 views

PT-2026-78215

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 3.2.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

7.5CVSS5.1AI score0.00407EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•3 views

PT-2026-78224

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

7.5CVSS5.1AI score0.00407EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•6 views

PT-2026-78226

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

7.5CVSS5.2AI score0.00377EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•5 views

PT-2026-78221

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

7.3CVSS5.2AI score0.00219EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•10 views

PT-2026-77422

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

7.4CVSS5.2AI score0.00318EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•12 views

PT-2026-77072

Contributor Cross Site Scripting XSS in Table Of Contents Block = 1.5.0 versions...

6.5CVSS5AI score0.00211EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•4 views

PT-2026-78127

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

7.7CVSS5.3AI score0.0014EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•8 views

PT-2026-78113

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle...

7.8CVSS5.3AI score0.00122EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•10 views

PT-2026-77142

Oh My Zsh is a community-driven framework for managing Zsh configuration. Prior to 2026-05-28, the dotenv plugin in plugins/dotenv/dotenv.plugin.zsh passes ZSH DOTENV FILE to source after a directory change into a folder containing a .env file, allowing syntactically valid shell commands in the...

8.8CVSS5.5AI score0.00494EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•8 views

PT-2026-76914

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd. AKINSOFT Wolvox9 ERP / KontrolPanel.exe allows Path Traversal. This issue affects AKINSOFT Wolvox9 ERP / KontrolPanel.exe: from s26.02.17 befo...

7.5CVSS5.3AI score0.00373EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•6 views

PT-2026-78209

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

9.4CVSS5.2AI score0.00306EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•9 views

PT-2026-77173

MyBB is free and open source forum software. Prior to 1.8.40, the Admin CP UTF-8 Conversion module does not validate certain requests correctly, allowing same-site attackers to alter table encoding and deny service with a specially crafted URL. The do=all control flow in admin/modules/tools/syste...

4.6CVSS5.3AI score0.00128EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•7 views

PT-2026-77337

Koha before 26.05.02, 25.11.07, and 25.05.13 contains a stored cross-site scripting vulnerability in the purchase suggestion handler that allows authenticated staff users to inject malicious scripts by submitting unsanitized input through the suggestion save operation. Attackers can supply crafte...

5.4CVSS5.1AI score0.00298EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•12 views

PT-2026-77328

Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: High...

5.3AI score0.00345EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•7 views

PT-2026-76975

Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, and Firefox ESR 153.1...

5.3AI score0.00304EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•8 views

PT-2026-76970

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1...

5.2AI score0.00292EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•12 views

PT-2026-76987

Information disclosure due to side-channel in the Storage: Cache API component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1...

5.3AI score0.00256EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•8 views

PT-2026-76974

Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1...

5.2AI score0.00323EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•5 views

PT-2026-76995

Site isolation issue in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1...

5.2AI score0.00164EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•11 views

PT-2026-77020

Internally found bugs present in Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firef...

5.5AI score0.00523EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•9 views

PT-2026-77009

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1...

5.2AI score0.0032EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•9 views

PT-2026-77023

Internally found bugs present in Firefox ESR 115.38, Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerabilit...

5.5AI score0.00523EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•8 views

PT-2026-76996

Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1...

5.2AI score0.00124EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•9 views

PT-2026-78232

Name of the Vulnerable Software and Affected Versions Confidential Containers Guest Components versions 0.16.0 through 0.19.0 Description A crafted OCI image layer can cause the image rs::stream::unpack::unpack function to create a hardlink outside its intended destination directory. This occurs...

6.4CVSS5.5AI score0.0029EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•7 views

PT-2026-77303

Froxlor is open source server administration software. From 2.3.7 until 2.3.8, the Customers.get, Customers.listing, Admins.get, Admins.listing, Ftps.get, and Ftps.listing API commands in lib/Froxlor/Api/Commands/Customers.php, lib/Froxlor/Api/Commands/Admins.php, and...

9CVSS5.4AI score0.00585EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•14 views

PT-2026-77326

Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

5.3AI score0.00541EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•4 views

PT-2026-77331

Race condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

5.9AI score0.00434EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•9 views

PT-2026-76989

Same-origin policy bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1...

5.2AI score0.00282EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•6 views

PT-2026-76981

Information disclosure in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, and Firefox ESR 153.1...

5.2AI score0.0016EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•8 views

PT-2026-76991

Information disclosure in the WebRTC component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1...

5.2AI score0.00264EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•7 views

PT-2026-77016

Mitigation bypass in the Data Loss Prevention component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, and Firefox ESR 153.1...

5.2AI score0.00328EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•8 views

PT-2026-77003

Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1...

5.2AI score0.00168EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•10 views

PT-2026-78027

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Experience Manager. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

9.1CVSS5.2AI score0.00303EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•13 views

PT-2026-77158

CodeWhale versions = 0.8.41 and 0.8.64 contain a vulnerability in the exec shell interact alias exec interact tool, whose approval requirement returns ApprovalRequirement::Auto. This overrides the default Required approval for code-executing tools, so LLM-controlled stdin is written into an...

7.3CVSS5.4AI score0.00121EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•14 views

PT-2026-77041

Contributor Arbitrary File Upload in Sync Post With Other Site = 1.9.3 versions...

9.9CVSS5.2AI score0.00266EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•9 views

PT-2026-76961

A Zabbix administrator is able to read out of bounds memory by utilizing a flaw in script item/preprocessing JavaScript HttpRequest logic, leading to potential confidentiality loss...

6.8CVSS5.3AI score0.00174EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•5 views

PT-2026-78126

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

3.4CVSS5.1AI score0.00106EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•8 views

PT-2026-78100

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via RDP to compromise Oracle VM VirtualBox. Successful attacks of this...

7.5CVSS5.1AI score0.00407EPSS
SaveExploits0References2
Total number of security vulnerabilities200725