badsecrets

badsecrets A pure python library for identifying the use of known or very weak cryptographic secrets across a variety of platforms. The project is designed to be both a repository of various "known secrets" for example, ASP.NET machine keys found in examples in tutorials, and to provide a...

Oracle PeopleSoft PeopleTools PSEMHUB - Pre-Auth Java Deserialization RCE

Oracle PeopleSoft PeopleTools 8.61 and 8.62 contain a remote code execution vulnerability in Updates Environment Management, letting unauthenticated network attackers fully compromise the system, exploit requires network access via HTTP. id: CVE-2026-35273 info: name: Oracle PeopleSoft PeopleTool...

CVE-2023-22047---Oracle-PeopleSoft-LFI

CVE-2023-22047---Oracle-PeopleSoft-LFI CVE-2023-22047 是 Oracle PeopleSoft Enterprise PeopleTools 中的一个严重的未认证本地文件包含（LFI）漏洞。该漏洞利用程序允许攻击者在无需任何身份验证的情况下读取目标服务器上的任意文件。...

CVE-2023-22047

説明: CVE-2023-22047 は、Oracle PeopleSoft における認証なしのファイル読み取り脆弱性です。ただし、高度なエクスプロイトにより、攻撃者はこの脆弱性を利用してリモートコード実行 RCE を実行できます。 PeopleSoft アプリケーションの「Portal.war」内のサーブレット「WSRP Consumer ResourceProxy」は、ファイルの読み取りと任意のホストへのリクエスト送信 SSRF を可能にします。 この脆弱性により、攻撃者は影響を受けるサーバー上で容易にリモートコード実行 RCE を達成でき、実際の深刻度は割り当てられた CVSS...

CVE-2023-22047-Oracle-PeopleSoft-LFI

🚀 CVE-2023-22047 - PeopleSoft LFI エクスプロイト Oracle PeopleSoft Enterprise PeopleTools における未認証のローカルファイルインクルージョン LFI 👨‍💻 著者 0xTerror セキュリティ研究者 | エクスプロイト開発者 📋 説明 CVE-2023-22047 は、Oracle PeopleSoft Enterprise PeopleTools で発見された深刻な未認証のローカルファイルインクルージョン LFI...

CVE-2017-10366_peoplesoft

CVE-2017-10366: Oracle PeopleSoft 8.54, 8.55, 8.56 Javaデシリアライゼーションエクスプロイト このスクリプトは、Vahagn Vardanyanによって発見されたOracle PeopleSoftのJavaデシリアライゼーション脆弱性の悪用を自動化します。 このエクスプロイトでは、クロスプラットフォームのシリアライズされたJavaペイロードを生成するためにysoserial.jarが必要です。ysoserialは、このスクリプトと同じディレクトリに配置する必要があります。 追記:...

Oracle Peoplesoft - Unauthenticated File Read

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component- Portal. Supported versions that are affected are 8.59 and 8.60. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2026-35273

🚨 CVE-2026-35273 - Oracle PeopleSoft PeopleTools 未認証リモートコード実行 ⚠️ Oracle PeopleSoft PeopleTools における重大な未認証RCE Oracle PeopleSoft Enterprise PeopleTools に影響を与える脆弱性であり、リモートの攻撃者が認証なしで脆弱なシステムを侵害することを可能にします。 📖 概要 CVE-2026-35273 は、Oracle PeopleSoft Enterprise PeopleTools の Updates Environment Management...

CVE-2026-35273

CVE-2026-35273 このセキュリティアラートは、Oracle PeopleSoft PeopleTools の脆弱性 CVE-2026-35273 に対処するものです。Oracle PeopleSoft Enterprise Applications のお客様もこの脆弱性の影響を受ける可能性があります。この脆弱性は認証なしでリモートから悪用可能です。悪用に成功した場合、リモートでコードが実行される可能性があります。 ⚡ 基本的な使い方 このプロジェクトは、安全かつ許可された環境でのみ使用してください。例： ローカル仮想マシン Docker コンテナ 隔離されたラボ環境...

jsp-webshell-scanner

JSP Webshell Scanner for SAP CVE-2025-31324 and PeopleSoft IOC Triage（日本語版） JSPベースのWebシェルに関連する不審なパターン（特にSAP NetWeaver CVE-2025-31324 を悪用した攻撃で観測されたもの）をスキャンするための軽量スクリプトです。 また、本スキャナーはCVE-2026-35273 に関連するOracle PeopleSoft / ShinyHunters / UNC6240...

ShinyHunters Bypass WAF Rules to Resume Oracle PeopleSoft Attacks

ShinyHunters exploit CVE-2026-35273 in Oracle PeopleSoft using URL encoding to bypass WAF rules, deploy web shells and spread the SIDEEYE backdoor...

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting multiple sectors globally. The ShinyHunters-linked activity involves the weaponization of CVE-2026-35273 CVSS score: 9.8, a critical security flaw that could resul...

ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants

The cyber extortion group known as ShinyHunters on Tuesday claimed it had breached the U.S. Federal Bureau of Investigation and stolen data belonging to current and former employees at the agency. "We have compromised the FBI. We hold very sensitive data on almost ALL FBI Agents and individuals w...

Vulnerabilities in Oracle PeopleSoft Enterprise

Oracle has identified 16 vulnerabilities in various Oracle PeopleSoft products, including PeopleSoft Enterprise PeopleTools, PeopleSoft Enterprise P RTL Interaction Hub, and PeopleSoft Enterprise CC Common Application Objects. These vulnerabilities concern various security issues within Oracle...

The vulnerability of the Common Application Objects component in the PeopleSoft Enterprise business process management tool allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Common Application Objects in the PeopleSoft Enterprise Business Process Management tool relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP...

The vulnerability of the Security component of the Oracle PeopleSoft Enterprise Campus Solutions platform allows a hacker to gain full control over the application.

The vulnerability of Oracle PeopleSoft Enterprise Campus Solutions’ Security component is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to gain full control over the application using the HTTPS protocol...

CVE-2026-87264

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Integration Broker. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2026-83420

Vulnerability in the PeopleSoft Enterprise FIN Engineering Brazil product of Oracle PeopleSoft component: Engineering. The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN...

CVE-2026-83147

Vulnerability in the PeopleSoft Enterprise FIN Inventory Brazil product of Oracle PeopleSoft component: Inventory. The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN...

CVE-2026-83070

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub product of Oracle PeopleSoft component: Enterprise Portal. The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterpris...