A security advisory from MyCERT (reference number MA-1475.072026), published on July 22, 2026, has flagged a vulnerability in Oracle E-Business Suite, a software platform.
The issue is categorized as an improper privilege management flaw. This means there is a potential for the system to grant users access to restricted features, sensitive data, ...
Continue reading
A serious security vulnerability has been found in the Apache Plugin component of Oracle HTTP Server, part of Oracle Fusion Middleware. The only confirmed affected versions are 12.2.1.4.0 and 14.1.2.0.0.This flaw is very easy for attackers to exploit, and does not require any login credentials or prior access to your server. Any unauthenticated ...
Continue reading
A vulnerability affects the NGINX JavaScript feature, but only for setups that use the js_fetch_proxy setting with user-controlled NGINX variables (these include variables tied to visitor-provided data like HTTP headers, URL arguments, or cookies) and have website locations that use the ngx.fetch() operation from NGINX JavaScript.Unauthenticated ...
Continue reading
A security flaw, tracked as CVE-2026-44172, has been identified in specific versions of MariaDB, a popular open-source database tool used by many websites to store content, user information, and other site data. The affected versions are 3.3.18 and 3.4.8.The flaw creates a gap in a common security measure designed to block SQL injection attacks, a ...
Continue reading
