SecurityWeek

Exploitation of Recent Oracle E-Business Suite Vulnerability Begins

Threat actors have started exploiting CVE-2026-46817, a critical-severity vulnerability in Oracle E-Business Suite’s Payments ...

CISA Flags 2-Year-Old Oracle WebLogic Vulnerability as Actively Exploited

CISA added Oracle WebLogic flaw CVE-2024-21182 to its KEV catalog, giving federal agencies until June 4 to patch exposed servers.
SecurityWeek

Exploitable CI/CD Vulnerabilities Expose Millions of Repositories to Hijacking

Cordyceps, a systemic class of exploitable CI/CD vulnerabilities, allows unauthenticated attackers to hijack developer ...
GitHub

web-brute-common.txt

admin/fckeditor/editor/filemanager/browser/default/connectors/asp/connector.asp admin/fckeditor/editor/filemanager/browser/default/connectors/aspx/connector.aspx ...
GitHub

mehd-io/duckdb-extension-radar

This is a bit hacky and searches for repos containing the string .duckdb_extension, so it's not 100% reliable. Extensions that are not included in the DuckDB core (and are not listed in the output ...