CVE-2026-35273

🚨 CVE-2026-35273 - Oracle PeopleSoft PeopleTools 未经身份验证的远程代码执行 ⚠️ Oracle PeopleSoft PeopleTools 中的严重未认证远程代码执行 一个影响 Oracle PeopleSoft Enterprise PeopleTools 的漏洞，允许远程攻击者在无需身份验证的情况下入侵易受攻击的系统。 📖 概述 CVE-2026-35273 是一个影响 Oracle PeopleSoft Enterprise PeopleTools 的 Updates Environment Management 组件的严重漏洞。...

CVE-2023-22047

描述： CVE-2023-22047 是 Oracle PeopleSoft 上的一个未授权文件读取漏洞。然而，高级攻击者可以利用此漏洞执行远程代码。 在 PeopleSoft 应用 "Portal.war" 中，Servlet "WSRP Consumer ResourceProxy" 允许读取文件并向任意主机发起请求（SSRF）。 借助此漏洞，攻击者可以轻松在受影响的服务器上实现远程代码执行（RCE），这表明其实际严重程度超过了分配的 CVSS 评分。 利用步骤 root@kitploit:...

CVE-2026-35273

CVE-2026-35273 Esta alerta de seguridad aborda la vulnerabilidad CVE-2026-35273 en Oracle PeopleSoft PeopleTools. Los clientes de Oracle PeopleSoft Enterprise Applications también pueden verse afectados por esta vulnerabilidad. Esta vulnerabilidad es explotable de forma remota sin autenticación. ...

badsecrets

badsecrets A pure python library for identifying the use of known or very weak cryptographic secrets across a variety of platforms. The project is designed to be both a repository of various "known secrets" for example, ASP.NET machine keys found in examples in tutorials, and to provide a...

CVE-2017-10366_peoplesoft

CVE-2017-10366: Oracle PeopleSoft 8.54、8.55、8.56 Java 反序列化漏洞利用程序 此脚本自动化利用 Oracle PeopleSoft 中的一个 Java 反序列化漏洞，该漏洞最初由 Vahagn Vardanyan 发现。 此漏洞利用工具需要 ysoserial.jar 来生成跨平台的序列化 Java 载荷。ysoserial 必须与本脚本位于同一目录中。 附注：它使用 ysoserial-modified.jar，可从 https://github.com/pimps/ysoserial-modified/ 获取 版权所有...

jsp-webshell-scanner

JSP Webshell 扫描器：用于 SAP CVE-2025-31324 和 PeopleSoft IOC 分类 一个轻量级脚本，用于扫描 .jsp 和 .jspx 文件中与 JSP 网页后门相关的可疑模式，包括在利用 SAP NetWeaver CVE-2025-31324 的攻击中观察到的模式。 该扫描器还扩展了针对 Oracle PeopleSoft / ShinyHunters / UNC6240 在 CVE-2026-35273 中相关指标的分类检查，包括可疑的 PeopleSoft 路径、文件名、哈希值和 C2 字符串。...

Oracle Peoplesoft - Unauthenticated File Read

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component- Portal. Supported versions that are affected are 8.59 and 8.60. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2023-22047---Oracle-PeopleSoft-LFI

CVE-2023-22047---Oracle-PeopleSoft-LFI CVE-2023-22047 es una vulnerabilidad crítica de inclusión local de archivos LFI no autenticada en Oracle PeopleSoft Enterprise PeopleTools. Este exploit permite a un atacante leer archivos arbitrarios del servidor de destino sin ninguna autenticación...

CVE-2023-22047-Oracle-PeopleSoft-LFI

🚀 CVE-2023-22047 - PeopleSoft LFI 漏洞利用 Oracle PeopleSoft Enterprise PeopleTools 中的未认证本地文件包含（LFI）漏洞 👨‍💻 作者...

Oracle PeopleSoft PeopleTools PSEMHUB - Pre-Auth Java Deserialization RCE

Oracle PeopleSoft PeopleTools 8.61 and 8.62 contain a remote code execution vulnerability in Updates Environment Management, letting unauthenticated network attackers fully compromise the system, exploit requires network access via HTTP. id: CVE-2026-35273 info: name: Oracle PeopleSoft PeopleTool...

Vulnerabilities in Oracle PeopleSoft Enterprise

Oracle has identified several vulnerabilities in Oracle PeopleSoft Enterprise PeopleTools, including the Integration Broker, Data Mover, Configuration Manager, FIN Common Objects, FIN Lease Administration, and CC Common Application Objects, specifically in versions 8.61 through 8.63 and 9.1 throu...

CVE-2026-71112

Vulnerability in the PeopleSoft Enterprise FIN Common Objects product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN...

CVE-2026-71092

Vulnerability in the PeopleSoft Enterprise FIN Lease Administration product of Oracle PeopleSoft component: Lease Administration. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft...

CVE-2026-70861

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft component: Common Objects. The supported version that is affected is 9.1. Easily exploitable vulnerability allows high privileged attacker with network access via T3, IIOP to compromise PeopleSoft...

CVE-2026-61307

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft component: Common Application Objects. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to...

CVE-2026-60975

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Security. Supported versions that are affected are 8.61 and 8.62. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleToo...

CVE-2026-60967

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: nVision. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools...

CVE-2026-60883

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: PeopleCode. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2026-60873

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Data Mover. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTool...

CVE-2026-60884

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Panel Processor. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...