CVE-2017-10366_peoplesoft

CVE-2017-10366: Oracle PeopleSoft 8.54, 8.55, 8.56 Java 역직렬화 익스플로잇 이 스크립트는 Vahagn Vardanyan이 최초로 발견한 Oracle PeopleSoft의 Java 역직렬화 취약점을 자동으로 익스플로잇합니다. 이 익스플로잇은 크로스 플랫폼 직렬화 Java 페이로드를 생성하기 위해 ysoserial.jar가 필요합니다. ysoserial은 이 스크립트와 동일한 디렉터리에 있어야 합니다. PS: ysoserial-modified.jar를 사용하며, 이는...

Oracle Peoplesoft - Unauthenticated File Read

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component- Portal. Supported versions that are affected are 8.59 and 8.60. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

Oracle PeopleSoft PeopleTools PSEMHUB - Pre-Auth Java Deserialization RCE

Oracle PeopleSoft PeopleTools 8.61 and 8.62 contain a remote code execution vulnerability in Updates Environment Management, letting unauthenticated network attackers fully compromise the system, exploit requires network access via HTTP. id: CVE-2026-35273 info: name: Oracle PeopleSoft PeopleTool...

CVE-2026-35273

🚨 CVE-2026-35273 - Ejecución Remota de Código Sin Autenticación en Oracle PeopleSoft PeopleTools ⚠️ RCE Crítica Sin Autenticación en Oracle PeopleSoft PeopleTools Una vulnerabilidad que afecta a Oracle PeopleSoft Enterprise PeopleTools y permite a atacantes remotos comprometer sistemas vulnerables...

badsecrets

badsecrets A pure python library for identifying the use of known or very weak cryptographic secrets across a variety of platforms. The project is designed to be both a repository of various "known secrets" for example, ASP.NET machine keys found in examples in tutorials, and to provide a...

CVE-2023-22047-Oracle-PeopleSoft-LFI

🚀 CVE-2023-22047 - PeopleSoft LFI エクスプロイト Oracle PeopleSoft Enterprise PeopleTools における未認証のローカルファイルインクルージョン LFI 👨‍💻 著者...

jsp-webshell-scanner

SAP CVE-2025-31324 및 PeopleSoft IOC 분류Triage를 위한 JSP 웹셸 스캐너 .jsp 및 .jspx 파일에서 JSP 기반 웹셸과 일반적으로 연관된 의심스러운 패턴을 스캔하는 경량 스크립트입니다. 여기에는 SAP NetWeaver CVE-2025-31324 를 악용한 공격에서 관찰된 패턴도 포함됩니다. 이 스캐너는 또한 CVE-2026-35273 과 연관된 Oracle PeopleSoft / ShinyHunters / UNC6240 지표에 대한 분류triage 검사로 확장되었으며, 의심스러운...

Vulnerabilities in Oracle PeopleSoft Enterprise

Oracle has identified several vulnerabilities in Oracle PeopleSoft Enterprise PeopleTools, including the Integration Broker, Data Mover, Configuration Manager, FIN Common Objects, FIN Lease Administration, and CC Common Application Objects, specifically in versions 8.61 through 8.63 and 9.1 throu...

CVE-2023-22047

説明: CVE-2023-22047 は、Oracle PeopleSoft における認証なしのファイル読み取り脆弱性です。ただし、高度なエクスプロイトにより、攻撃者はこの脆弱性を利用してリモートコード実行 RCE を実行できます。 PeopleSoft アプリケーションの「Portal.war」内のサーブレット「WSRP Consumer ResourceProxy」は、ファイルの読み取りと任意のホストへのリクエスト送信 SSRF を可能にします。 この脆弱性により、攻撃者は影響を受けるサーバー上で容易にリモートコード実行 RCE を達成でき、実際の深刻度は割り当てられた CVSS...

CVE-2026-71112

Vulnerability in the PeopleSoft Enterprise FIN Common Objects product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN...

CVE-2026-71092

Vulnerability in the PeopleSoft Enterprise FIN Lease Administration product of Oracle PeopleSoft component: Lease Administration. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft...

CVE-2026-70861

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft component: Common Objects. The supported version that is affected is 9.1. Easily exploitable vulnerability allows high privileged attacker with network access via T3, IIOP to compromise PeopleSoft...

CVE-2026-61307

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft component: Common Application Objects. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to...

CVE-2026-60975

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Security. Supported versions that are affected are 8.61 and 8.62. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleToo...

CVE-2026-60967

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: nVision. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools...

CVE-2026-60883

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: PeopleCode. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2026-60873

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Data Mover. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTool...

CVE-2026-60884

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Panel Processor. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2026-60879

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Configuration Manager. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise PeopleSoft Enterprise...

CVE-2026-60902

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Tuxedo. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools...