CVE-2023-22047

Описание: CVE-2023-22047 — это неаутентифицированное чтение файлов в Oracle PeopleSoft. Однако при продвинутой эксплуатации атакующий может использовать эту уязвимость для выполнения удалённого кода RCE. В приложении PeopleSoft в "Portal.war" сервлет "WSRP Consumer ResourceProxy" позволяет читать...

CVE-2017-10366_peoplesoft

CVE-2017-10366: Эксплойт десериализации Java для Oracle PeopleSoft 8.54, 8.55, 8.56 Этот скрипт автоматизирует эксплуатацию уязвимости десериализации Java в Oracle PeopleSoft, изначально обнаруженной Ваагном Варданяном. Для генерации кросс-платформенных сериализованных Java-пейлоадов этому...

Oracle Peoplesoft - Unauthenticated File Read

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component- Portal. Supported versions that are affected are 8.59 and 8.60. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

Oracle PeopleSoft PeopleTools PSEMHUB - Pre-Auth Java Deserialization RCE

Oracle PeopleSoft PeopleTools 8.61 and 8.62 contain a remote code execution vulnerability in Updates Environment Management, letting unauthenticated network attackers fully compromise the system, exploit requires network access via HTTP. id: CVE-2026-35273 info: name: Oracle PeopleSoft PeopleTool...

CVE-2026-35273

🚨 CVE-2026-35273 - Ejecución Remota de Código Sin Autenticación en Oracle PeopleSoft PeopleTools ⚠️ RCE Crítica Sin Autenticación en Oracle PeopleSoft PeopleTools Una vulnerabilidad que afecta a Oracle PeopleSoft Enterprise PeopleTools y permite a atacantes remotos comprometer sistemas vulnerables...

badsecrets

badsecrets A pure python library for identifying the use of known or very weak cryptographic secrets across a variety of platforms. The project is designed to be both a repository of various "known secrets" for example, ASP.NET machine keys found in examples in tutorials, and to provide a...

CVE-2023-22047---Oracle-PeopleSoft-LFI

CVE-2023-22047---Oracle-PeopleSoft-LFI CVE-2023-22047 — это критическая уязвимость локального включения файлов Local File Inclusion, LFI без аутентификации в Oracle PeopleSoft Enterprise PeopleTools. Этот эксплойт позволяет злоумышленнику читать произвольные файлы с целевого сервера без какой-либ...

CVE-2023-22047-Oracle-PeopleSoft-LFI

🚀 CVE-2023-22047 - Эксплойт LFI PeopleSoft Неаутентифицированное локальное включение файлов LFI в Oracle PeopleSoft Enterprise PeopleTools...

jsp-webshell-scanner

SAP CVE-2025-31324 및 PeopleSoft IOC 분류Triage를 위한 JSP 웹셸 스캐너 .jsp 및 .jspx 파일에서 JSP 기반 웹셸과 일반적으로 연관된 의심스러운 패턴을 스캔하는 경량 스크립트입니다. 여기에는 SAP NetWeaver CVE-2025-31324 를 악용한 공격에서 관찰된 패턴도 포함됩니다. 이 스캐너는 또한 CVE-2026-35273 과 연관된 Oracle PeopleSoft / ShinyHunters / UNC6240 지표에 대한 분류triage 검사로 확장되었으며, 의심스러운...

Vulnerabilities in Oracle PeopleSoft Enterprise

Oracle has identified several vulnerabilities in Oracle PeopleSoft Enterprise PeopleTools, including the Integration Broker, Data Mover, Configuration Manager, FIN Common Objects, FIN Lease Administration, and CC Common Application Objects, specifically in versions 8.61 through 8.63 and 9.1 throu...

CVE-2026-71112

Vulnerability in the PeopleSoft Enterprise FIN Common Objects product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN...

CVE-2026-71092

Vulnerability in the PeopleSoft Enterprise FIN Lease Administration product of Oracle PeopleSoft component: Lease Administration. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft...

CVE-2026-70861

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft component: Common Objects. The supported version that is affected is 9.1. Easily exploitable vulnerability allows high privileged attacker with network access via T3, IIOP to compromise PeopleSoft...

CVE-2026-61307

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft component: Common Application Objects. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to...

CVE-2026-60967

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: nVision. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools...

CVE-2026-60975

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Security. Supported versions that are affected are 8.61 and 8.62. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleToo...

CVE-2026-60873

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Data Mover. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTool...

CVE-2026-60883

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: PeopleCode. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2026-60884

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Panel Processor. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2026-60879

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Configuration Manager. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise PeopleSoft Enterprise...