Lucene search
+L
PtsecurityRecent

200742 matches found

Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•7 views

PT-2026-77058

Unauthenticated SQL Injection in Depicter Slider = 4.8.0 versions...

7.5CVSS5.8AI score0.00247EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•7 views

PT-2026-77694

Vulnerability in the Oracle Payments product of Oracle E-Business Suite component: File Transmission. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Payments. While the...

7.7CVSS5.1AI score0.00304EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•8 views

PT-2026-77774

Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupplier...

7.4CVSS5.2AI score0.00341EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•6 views

PT-2026-77117

Unauthenticated Deserialization of untrusted data in Youzify = 1.3.7 versions...

9.8CVSS5.2AI score0.00386EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•11 views

PT-2026-77074

Unauthenticated Broken Access Control in MultiVendorX = 5.0.14 versions...

6.5CVSS5.1AI score0.00194EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•8 views

PT-2026-77119

Unauthenticated Broken Authentication in Flutterwave WooCommerce = 3.3.0 versions...

6.5CVSS5.2AI score0.00399EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•6 views

PT-2026-77107

Unauthenticated Cross Site Scripting XSS in Contact Form by Supsystic 1.10.0 versions...

7.1CVSS5AI score0.00237EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•6 views

PT-2026-77789

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion component: Server. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial...

4.7CVSS5.2AI score0.00093EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•5 views

PT-2026-77590

Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Installation and Configuration. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Orac...

5.5CVSS5.2AI score0.00145EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•8 views

PT-2026-77229

Improper input validation in the capabilities route handler in OpenSearch Dashboards - the size of the request payload is not bounded - might allow remote attackers to cause a denial of service via a crafted HTTP request...

8.7CVSS5.4AI score0.00504EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•7 views

PT-2026-77313

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio exposed administrator-intended backend API actions to any authenticated Home Assistant user because the backend did not consistently enforce the panel's admin-only authorization...

8.7CVSS5.5AI score0.00338EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•6 views

PT-2026-77032

Subscriber Privilege Escalation in The Grid = 2.7.9.1 versions...

8.8CVSS5.2AI score0.00315EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•6 views

PT-2026-77575

Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via SQL to compromise Oracle Hyperion Calculation...

3.8CVSS5.5AI score0.00257EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•9 views

PT-2026-77118

Unauthenticated Broken Authentication in Piraeus Bank WooCommerce Payment Gateway 3.2.0 versions...

6.5CVSS5.2AI score0.00295EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•6 views

PT-2026-78199

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

5.3CVSS5.1AI score0.00228EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•11 views

PT-2026-78143

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

5.3CVSS5.1AI score0.00299EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•10 views

PT-2026-78151

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

9.4CVSS5.2AI score0.00403EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•4 views

PT-2026-78196

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

7.5CVSS5.2AI score0.00377EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•5 views

PT-2026-78193

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

6.5CVSS5.1AI score0.00194EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•7 views

PT-2026-78203

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

6.5CVSS5.1AI score0.00257EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•5 views

PT-2026-78205

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

9.1CVSS5.2AI score0.00377EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•9 views

PT-2026-78210

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 1.4.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

9.8CVSS5.3AI score0.00331EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•6 views

PT-2026-78216

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is in...

7.2CVSS5.2AI score0.00255EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•5 views

PT-2026-78217

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is in...

8.3CVSS5.2AI score0.00301EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•8 views

PT-2026-78215

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 3.2.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

7.5CVSS5.1AI score0.00407EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•3 views

PT-2026-78224

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

7.5CVSS5.1AI score0.00407EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•6 views

PT-2026-78226

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

7.5CVSS5.2AI score0.00377EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•5 views

PT-2026-78221

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

7.3CVSS5.2AI score0.00219EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•10 views

PT-2026-77422

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

7.4CVSS5.2AI score0.00318EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•12 views

PT-2026-77072

Contributor Cross Site Scripting XSS in Table Of Contents Block = 1.5.0 versions...

6.5CVSS5AI score0.00211EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•4 views

PT-2026-78127

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

7.7CVSS5.3AI score0.0014EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•8 views

PT-2026-78113

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle...

7.8CVSS5.3AI score0.00122EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•10 views

PT-2026-77142

Oh My Zsh is a community-driven framework for managing Zsh configuration. Prior to 2026-05-28, the dotenv plugin in plugins/dotenv/dotenv.plugin.zsh passes ZSH DOTENV FILE to source after a directory change into a folder containing a .env file, allowing syntactically valid shell commands in the...

8.8CVSS5.5AI score0.00494EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•8 views

PT-2026-76914

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd. AKINSOFT Wolvox9 ERP / KontrolPanel.exe allows Path Traversal. This issue affects AKINSOFT Wolvox9 ERP / KontrolPanel.exe: from s26.02.17 befo...

7.5CVSS5.3AI score0.00373EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•6 views

PT-2026-78209

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

9.4CVSS5.2AI score0.00306EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•9 views

PT-2026-77173

MyBB is free and open source forum software. Prior to 1.8.40, the Admin CP UTF-8 Conversion module does not validate certain requests correctly, allowing same-site attackers to alter table encoding and deny service with a specially crafted URL. The do=all control flow in admin/modules/tools/syste...

4.6CVSS5.3AI score0.00128EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•7 views

PT-2026-77337

Koha before 26.05.02, 25.11.07, and 25.05.13 contains a stored cross-site scripting vulnerability in the purchase suggestion handler that allows authenticated staff users to inject malicious scripts by submitting unsanitized input through the suggestion save operation. Attackers can supply crafte...

5.4CVSS5.1AI score0.00298EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•12 views

PT-2026-76987

Information disclosure due to side-channel in the Storage: Cache API component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1...

5.3AI score0.00256EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•9 views

PT-2026-78232

Name of the Vulnerable Software and Affected Versions Confidential Containers Guest Components versions 0.16.0 through 0.19.0 Description A crafted OCI image layer can cause the image rs::stream::unpack::unpack function to create a hardlink outside its intended destination directory. This occurs...

6.4CVSS5.5AI score0.0029EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•7 views

PT-2026-77303

Froxlor is open source server administration software. From 2.3.7 until 2.3.8, the Customers.get, Customers.listing, Admins.get, Admins.listing, Ftps.get, and Ftps.listing API commands in lib/Froxlor/Api/Commands/Customers.php, lib/Froxlor/Api/Commands/Admins.php, and...

9CVSS5.4AI score0.00585EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•9 views

PT-2026-76989

Same-origin policy bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1...

5.2AI score0.00282EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•8 views

PT-2026-76991

Information disclosure in the WebRTC component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1...

5.2AI score0.00264EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•8 views

PT-2026-77003

Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 154 and Firefox ESR 153.1...

5.2AI score0.00168EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•10 views

PT-2026-78027

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Experience Manager. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

9.1CVSS5.2AI score0.00303EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•13 views

PT-2026-77158

CodeWhale versions = 0.8.41 and 0.8.64 contain a vulnerability in the exec shell interact alias exec interact tool, whose approval requirement returns ApprovalRequirement::Auto. This overrides the default Required approval for code-executing tools, so LLM-controlled stdin is written into an...

7.3CVSS5.4AI score0.00121EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•9 views

PT-2026-76961

A Zabbix administrator is able to read out of bounds memory by utilizing a flaw in script item/preprocessing JavaScript HttpRequest logic, leading to potential confidentiality loss...

6.8CVSS5.3AI score0.00174EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•5 views

PT-2026-78126

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

3.4CVSS5.1AI score0.00106EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•8 views

PT-2026-78100

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via RDP to compromise Oracle VM VirtualBox. Successful attacks of this...

7.5CVSS5.1AI score0.00407EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•9 views

PT-2026-78102

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

6CVSS5.2AI score0.00147EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•12 views

PT-2026-77483

Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Learning...

6.5CVSS5.1AI score0.00269EPSS
SaveExploits0References2
Total number of security vulnerabilities200742