CVE-2017-10366_peoplesoft

CVE-2017-10366: Exploit de deserialización Java de Oracle PeopleSoft 8.54, 8.55, 8.56 Este script automatiza la explotación de una vulnerabilidad de deserialización Java en Oracle PeopleSoft, descubierta originalmente por Vahagn Vardanyan. Este exploit requiere ysoserial.jar para generar payloads...

FBI Removes Accenture Contractor Over ShinyHunters Job Site Data Breach

The FBI removed a contractor over a ShinyHunters-linked breach. Reuters sources identified Accenture and an unpatched Oracle PeopleSoft system...

badsecrets

badsecrets A pure python library for identifying the use of known or very weak cryptographic secrets across a variety of platforms. The project is designed to be both a repository of various "known secrets" for example, ASP.NET machine keys found in examples in tutorials, and to provide a...

CVE-2026-35273

🚨 CVE-2026-35273 - Oracle PeopleSoft PeopleTools 未经身份验证的远程代码执行 ⚠️ Oracle PeopleSoft PeopleTools 中的严重未认证远程代码执行 一个影响 Oracle PeopleSoft Enterprise PeopleTools 的漏洞，允许远程攻击者在无需身份验证的情况下入侵易受攻击的系统。 📖 概述 CVE-2026-35273 是一个影响 Oracle PeopleSoft Enterprise PeopleTools 的 Updates Environment Management 组件的严重漏洞。...

CVE-2026-35273

CVE-2026-35273 此安全警报涉及 Oracle PeopleSoft PeopleTools 中的漏洞 CVE-2026-35273。Oracle PeopleSoft Enterprise Applications 客户也可能受到此漏洞的影响。该漏洞可在无需身份验证的情况下远程利用。如果成功利用，此漏洞可能导致远程代码执行 ⚡ 简单使用 仅在安全且授权的环境中使用本项目，例如： 本地虚拟机 Docker 容器 隔离的实验环境 授权的渗透测试环境 示例设置： git clone cd 项目使用 python，请参考以下步骤 创建虚拟环境 python -m venv venv...

FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach

The U.S. Federal Bureau of Investigation FBI has removed an Accenture contractor for their alleged role in a ShinyHunters-breach that led to the theft of personal details of thousands of bureau employees. That's according to a report from Reuters, citing two sources familiar with the matter. "To...

Oracle PeopleSoft PeopleTools PSEMHUB - Pre-Auth Java Deserialization RCE

Oracle PeopleSoft PeopleTools 8.61 and 8.62 contain a remote code execution vulnerability in Updates Environment Management, letting unauthenticated network attackers fully compromise the system, exploit requires network access via HTTP. id: CVE-2026-35273 info: name: Oracle PeopleSoft PeopleTool...

CVE-2023-22047

Descripción: CVE-2023-22047 es una lectura de archivos sin autenticación en Oracle PeopleSoft. Sin embargo, un atacante avanzado puede usar esta vulnerabilidad para ejecutar código remoto. En la aplicación PeopleSoft "Portal.war", el servlet "WSRP Consumer ResourceProxy" permite leer archivos y...

jsp-webshell-scanner

JSP Webshell 扫描器：用于 SAP CVE-2025-31324 和 PeopleSoft IOC 分类 一个轻量级脚本，用于扫描 .jsp 和 .jspx 文件中与 JSP 网页后门相关的可疑模式，包括在利用 SAP NetWeaver CVE-2025-31324 的攻击中观察到的模式。 该扫描器还扩展了针对 Oracle PeopleSoft / ShinyHunters / UNC6240 在 CVE-2026-35273 中相关指标的分类检查，包括可疑的 PeopleSoft 路径、文件名、哈希值和 C2 字符串。...

CVE-2023-22047---Oracle-PeopleSoft-LFI

CVE-2023-22047---Oracle-PeopleSoft-LFI CVE-2023-22047 es una vulnerabilidad crítica de inclusión local de archivos LFI no autenticada en Oracle PeopleSoft Enterprise PeopleTools. Este exploit permite a un atacante leer archivos arbitrarios del servidor de destino sin ninguna autenticación...

CVE-2023-22047-Oracle-PeopleSoft-LFI

🚀 CVE-2023-22047 - Exploit LFI de PeopleSoft Inclusión de Archivos Locales LFI sin autenticación en Oracle PeopleSoft Enterprise PeopleTools 👨‍💻 Autor 0xTerror Investigador de Seguridad | Desarrollador de Exploits 📋 Descripción CVE-2023-22047 es una vulnerabilidad crítica de Inclusión de Archivos...

Oracle Peoplesoft - Unauthenticated File Read

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component- Portal. Supported versions that are affected are 8.59 and 8.60. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

ShinyHunters Bypass WAF Rules to Resume Oracle PeopleSoft Attacks

ShinyHunters exploit CVE-2026-35273 in Oracle PeopleSoft using URL encoding to bypass WAF rules, deploy web shells and spread the SIDEEYE backdoor...

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting multiple sectors globally. The ShinyHunters-linked activity involves the weaponization of CVE-2026-35273 CVSS score: 9.8, a critical security flaw that could resul...

ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants

The cyber extortion group known as ShinyHunters on Tuesday claimed it had breached the U.S. Federal Bureau of Investigation and stolen data belonging to current and former employees at the agency. "We have compromised the FBI. We hold very sensitive data on almost ALL FBI Agents and individuals w...

Vulnerabilities in Oracle PeopleSoft Enterprise

Oracle has identified 16 vulnerabilities in various Oracle PeopleSoft products, including PeopleSoft Enterprise PeopleTools, PeopleSoft Enterprise P RTL Interaction Hub, and PeopleSoft Enterprise CC Common Application Objects. These vulnerabilities concern various security issues within Oracle...

The vulnerability of the Security component of the Oracle PeopleSoft Enterprise Campus Solutions platform allows a hacker to gain full control over the application.

The vulnerability of Oracle PeopleSoft Enterprise Campus Solutions’ Security component is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to gain full control over the application using the HTTPS protocol...

The vulnerability of the Common Application Objects component in the PeopleSoft Enterprise business process management tool allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Common Application Objects in the PeopleSoft Enterprise Business Process Management tool relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP...

CVE-2026-87264

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Integration Broker. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2026-83420

Vulnerability in the PeopleSoft Enterprise FIN Engineering Brazil product of Oracle PeopleSoft component: Engineering. The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN...