ShinyHunters leverages a zero-day Oracle PeopleSoft exploit to compromise higher education systems, exposing sensitive data via the CVE-2026-35273 flaw.

Google says ShinyHunters exploited Oracle PeopleSoft zero-day to steal data from 100+ organisations, with universities making up most victims.

ShinyHunters exploited a critical Oracle PeopleSoft zero-day flaw. Discover how CVE-2026-35273 impacts global universities and enterprise security.

This weekly CVE report covers 2,060 new vulnerabilities from June 15-21, including 358 critical flaws and 4 actively exploited CVEs now in CISA KEV.

Error-based SQL Injection

Oracle has provided a new tool to assess the security configuration and advise on it. It is a lightweight utility and the most important…

TL;DR The CISA KEV catalog gained two entries on July 15, 2026. The agency confirmed active exploitation of CVE-2026-46817 in Oracle E-Business Suite and CVE-2023-4346 in KNX building automation d…

TL;DR Oracle patched 11 flaws in the WebLogic Server Core component this July. Most allow a full Oracle WebLogic Server takeover. The top issue, CVE-2026-60206, carries a CVSS score of 9.9 and can…

 The cyber threat landscape is becoming highly unstable. Specifically, our weekly threat intelligence briefing reveals an unprecedented surge in critical security flaws. Between July 20 and July 2…

Dalam dunia cybersecurity, khususnya Network Penetration Testing, lingkungan kerja yang aman sangat penting. Oleh karena itu, penggunaan…

Let us say we have a requirement to sort the result set based on the given input parameter . In most of the system , the developers…

Portswigger Lab

How a classic SQL injection flaw led to SYSTEM-level compromise through Oracles Java engine