CVE-2021-35541

CVE-2021-35541 affects Oracle PeopleSoft Enterprise SCM, Supplier Portal, version 9.2. The vulnerability is described as information disclosure/unauthorized data modification with low-privilege, network-accessible (HTTP) access requiring user interaction, and may impact additional PeopleSoft prod...

CVE-2021-35541: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise SCM product of Oracle PeopleSoft component: Supplier Portal. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM. Successful...

Plastic SCM 10.0.16.5622 Insecure Direct Object Reference

Exploit Title: Plastic SCM 10.0.16.5622 - WebAdmin Server Access Shodan Dork: title:"Plastic SCM" Date: 18.10.2021 Exploit Author: Basavaraj Banakar Vendor Homepage: https://www.plasticscm.com/ Software Link: https://www.plasticscm.com/download/releasenotes/10.0.16.5622 Version: Plastic SCM...

Plastic SCM 10.0.16.5622 - WebAdmin Server Access

Exploit Title: Plastic SCM 10.0.16.5622 - WebAdmin Server Access Shodan Dork: title:"Plastic SCM" Date: 18.10.2021 Exploit Author: Basavaraj Banakar Vendor Homepage: https://www.plasticscm.com/ Software Link: https://www.plasticscm.com/download/releasenotes/10.0.16.5622 Version: Plastic SCM...

Plastic SCM 10.0.16.5622 - WebAdmin Server Access Vulnerability

Exploit Title: Plastic SCM 10.0.16.5622 - WebAdmin Server Access Shodan Dork: title:"Plastic SCM" Exploit Author: Basavaraj Banakar Vendor Homepage: https://www.plasticscm.com/ Software Link: https://www.plasticscm.com/download/releasenotes/10.0.16.5622 Version: Plastic SCM 10.0.16.5622 Tested on...

CVE-2021-41382

Plastic SCM before 10.0.16.5622 mishandles the WebAdmin server management interface...

CVE-2021-41382

Plastic SCM before 10.0.16.5622 mishandles the WebAdmin server management interface...

Design/Logic Flaw

Plastic SCM before 10.0.16.5622 mishandles the WebAdmin server management interface...

CVE-2021-41382

Plastic SCM before 10.0.16.5622 mishandles the WebAdmin server management interface...

CVE-2021-41382

Plastic SCM before 10.0.16.5622 mishandles the WebAdmin server management interface, allowing improper access flow described in multiple sources (e.g., exploit scripts and vendor notes). Affected product: Plastic SCM WebAdmin (server management UI); vulnerable versions:

CVE-2021-41382

Plastic SCM before 10.0.16.5622 mishandles the WebAdmin server management interface...

Plastic Scm安全漏洞

Unity Technologies Plastic Scm is a version control from Unity Technologies, USA. A security vulnerability previously existed in Plastic SCM 10.0.16.5622, which stemmed from Plastic SCM incorrectly handling the WebAdmin server management interface...

CVE-2021-41382: Undefined Security Weakness

Plastic SCM before 10.0.16.5622 mishandles the WebAdmin server management interface...

Oracle PeopleSoft Enterprise SCM eProcurement输入验证错误漏洞

Oracle PeopleSoft Enterprise SCM eProcurement is an application from Oracle America, Inc. used for temporary user request items.Oracle PeopleSoft Enterprise SCM eProcurement is vulnerable to an input validation error that could be exploited by an attacker to update, insert, or delete accessible...

CVE-2021-2220

Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft component: Manage Requisition Status. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

Code injection

Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft component: Manage Requisition Status. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2021-2220

Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft component: Manage Requisition Status. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2021-2220

CVE-2021-2220 affects Oracle PeopleSoft Enterprise SCM eProcurement (component: Manage Requisition Status) in version 9.2. The underlying issue is described as an input validation error that could allow a low-privilege, network-accessible attacker (HTTP) to update/insert/delete data and read addi...

CVE-2021-2220

Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft component: Manage Requisition Status. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

MoveKit - Cobalt Strike Kit For Lateral Movement

Movekit is an extension of built in Cobalt Strike lateral movement by leveraging the executeassembly function with the SharpMove and SharpRDP .NET assemblies. The aggressor script handles payload creation by reading the template files for a specific execution type. IMPORTANT: To use the script a...