CVE-2023-22047

Description: CVE-2023-22047 is unauthentication read file on oracle-peoplesoft. However, advance exploit attacker can use this vulnerability to execute remote code execution. In the peoplesoft application "Portal.war"," Serlet "WSRP Consumer ResourceProxy" enables the ability to read files and ma...

badsecrets

badsecrets A pure python library for identifying the use of known or very weak cryptographic secrets across a variety of platforms. The project is designed to be both a repository of various "known secrets" for example, ASP.NET machine keys found in examples in tutorials, and to provide a...

CVE-2023-22047---Oracle-PeopleSoft-LFI

CVE-2023-22047---Oracle-PeopleSoft-LFI CVE-2023-22047 is a critical unauthenticated Local File Inclusion LFI vulnerability in Oracle PeopleSoft Enterprise PeopleTools. This exploit allows an attacker to read arbitrary files from the target server without any authentication...

CVE-2017-10366_peoplesoft

CVE-2017-10366: Oracle PeopleSoft 8.54, 8.55, 8.56 Java deserialization exploit This script automates the exploitation of a Java deserialization vulnerability in Oracle PeopleSoft, originally discovered by Vahagn Vardanyan. This exploit requires ysoserial.jar to generate cross-platform serialized...

Oracle Peoplesoft - Unauthenticated File Read

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component- Portal. Supported versions that are affected are 8.59 and 8.60. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

Oracle PeopleSoft PeopleTools PSEMHUB - Pre-Auth Java Deserialization RCE

Oracle PeopleSoft PeopleTools 8.61 and 8.62 contain a remote code execution vulnerability in Updates Environment Management, letting unauthenticated network attackers fully compromise the system, exploit requires network access via HTTP. id: CVE-2026-35273 info: name: Oracle PeopleSoft PeopleTool...

CVE-2026-35273

🚨 CVE-2026-35273 - Oracle PeopleSoft PeopleTools Unauthenticated Remote Code Execution ⚠️ Critical Unauthenticated RCE in Oracle PeopleSoft PeopleTools A vulnerability affecting Oracle PeopleSoft Enterprise PeopleTools that allows remote attackers to compromise vulnerable systems without...

CVE-2026-35273

CVE-2026-35273 This Security Alert addresses vulnerability CVE-2026-35273 in Oracle PeopleSoft PeopleTools. Oracle PeopleSoft Enterprise Applications customers may also be affected by this vulnerability. This vulnerability is remotely exploitable without authentication. If successfully exploited,...

CVE-2023-22047-Oracle-PeopleSoft-LFI

🚀 CVE-2023-22047 - PeopleSoft LFI Exploit Unauthenticated Local File Inclusion LFI in Oracle PeopleSoft Enterprise PeopleTools 👨‍💻 Author 0xTerror Security Researcher | Exploit Developer 📋 Description CVE-2023-22047 is a critical unauthenticated Local File Inclusion LFI vulnerability discovered in...

jsp-webshell-scanner

JSP Webshell Scanner for SAP CVE-2025-31324 and PeopleSoft IOC Triage A lightweight script to scan .jsp and .jspx files for suspicious patterns typically associated with JSP-based webshells, including those observed in attacks exploiting SAP NetWeaver CVE-2025-31324. This scanner has also been...

FBI Removes Accenture Contractor Over ShinyHunters Job Site Data Breach

The FBI removed a contractor over a ShinyHunters-linked breach. Reuters sources identified Accenture and an unpatched Oracle PeopleSoft system...

FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach

The U.S. Federal Bureau of Investigation FBI has removed an Accenture contractor for their alleged role in a ShinyHunters-breach that led to the theft of personal details of thousands of bureau employees. That's according to a report from Reuters, citing two sources familiar with the matter. "To...

ShinyHunters Bypass WAF Rules to Resume Oracle PeopleSoft Attacks

ShinyHunters exploit CVE-2026-35273 in Oracle PeopleSoft using URL encoding to bypass WAF rules, deploy web shells and spread the SIDEEYE backdoor...

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting multiple sectors globally. The ShinyHunters-linked activity involves the weaponization of CVE-2026-35273 CVSS score: 9.8, a critical security flaw that could resul...

ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants

The cyber extortion group known as ShinyHunters on Tuesday claimed it had breached the U.S. Federal Bureau of Investigation and stolen data belonging to current and former employees at the agency. "We have compromised the FBI. We hold very sensitive data on almost ALL FBI Agents and individuals w...

Vulnerabilities in Oracle PeopleSoft Enterprise

Oracle has identified 16 vulnerabilities in various Oracle PeopleSoft products, including PeopleSoft Enterprise PeopleTools, PeopleSoft Enterprise P RTL Interaction Hub, and PeopleSoft Enterprise CC Common Application Objects. These vulnerabilities concern various security issues within Oracle...

PeopleSoft Enterprise Common Application Objects Unauthorized Access

The vulnerability of Common Application Objects in the PeopleSoft Enterprise Business Process Management tool relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP...

Security Component Full Control

The vulnerability of Oracle PeopleSoft Enterprise Campus Solutions’ Security component is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to gain full control over the application using the HTTPS protocol...

CVE-2026-87264

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Integration Broker. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2026-83420

Vulnerability in the PeopleSoft Enterprise FIN Engineering Brazil product of Oracle PeopleSoft component: Engineering. The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN...