Security news
Latest security news
Mon, 7 Sept 2026
- Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released
A TantoSec proof-of-concept turns an AES-CBC "padding oracle" in Telerik UI for ASP.NET AJAX into unauthenticated remote code execution — but only against applications in a specific non-default configuration, and Progress patched the chain in July. There are no confirmed reports of exploitation in the wild. Security firm TantoSec has published a working exploit chain targeting vulnerabilities
The Hacker NewsOracle, Progress
Thu, 6 Aug 2026
- Toolkit Hidden Inside Oracle Database Evades Endpoint Tools
Attackers used SQL injection to compile a post-exploitation toolkit inside an Oracle database
Infosecurity MagazineOracle
About this news
- 1,259
- Stories
- 33
- Added in the last 24 hours
- 17
- Critical in the last 7 days
- 4
- Reported by several outlets