Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Search

News

Rust-proof your code with our new Testing Handbook chapter via Trail of Bits Blog
Introducing Patch the Planet via Trail of Bits Blog
Evolution of Web3 in Cloud Supply Chain Attacks via Unit 42 (Palo Alto Networks)
Malicious Claude Code Extension Served in Cursor Supply Chain Attack via SecurityWeek
Cursor removes malicious Claude Code extension after SSH backdoor attempt via CSO Online
$2 Million+ Drained From Polymarket Traders in New Supply Chain Attack via SecurityWeek
GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHub via Dark Reading
PHP2Shell will persist in enterprise environments for years via CSO Online

Vulnerabilities

CVE-2020-8203 Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.
CVE-2026-101593 Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Orac...
CVE-2026-101474 Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Orac...
CVE-2026-101471 Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (co...
CVE-2026-87362 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders,...
CVE-2026-83394 Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Int...
CVE-2026-91625 Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Orac...
CVE-2026-91623 Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Orac...

Tools

OWASP Dependency-Track