Oracle WebLogic

Search everything

Mentions · 7d0
Mentions · 30d0
All mentions3
First seenSep 26, 2026
Last mentionedOct 9, 2026

Timeline

3 articles · newest first

US Disrupts Chinese State-Sponsored Hacking Tools

The US seized domains for Chinese state-sponsored tools MicroScan and FishHub used against critical infrastructure.

SecurityWeekOct 9, 08:36 UTC · Oct 9, 2026Threat actorExploited5 · 2 reads

FBI disrupts Chinese hacking tools used to breach critical infrastructure

FBI seized Flax Typhoon domains for tools used in critical-infrastructure intrusions.

BleepingComputerOct 8, 21:42 UTC · Oct 8, 2026Threat actorExploitedCVE-2015-3306 CVE-2015-5477 CVE-2016-3081+53 · 2 reads

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

UNC6240 bypasses WAFs to mass-exploit Oracle PeopleSoft CVE-2026-35273 and deploy web shells and SIDEEYE.

The Hacker NewsSep 26, 11:46 UTC · Sep 26, 2026Exploit / PoCExploitedCVE-2026-352735 · 2 reads

Related CVEs

by mentions

CVE-2015-330699%10.0
Arbitrary file read/write via ProFTPD 1.3.5 mod_copy
published May 18, 2015ProFTPDKEVPoC ×5
CVE-2019-11510100%10.0
Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN
published May 8, 2019Ivanti Pulse Connect SecureKEVRansomwarePoC ×2
CVE-2021-22205100%10.0
Unauthenticated RCE in GitLab CE/EE via ExifTool Image Parsing (CVE-2021-22205)
published Apr 23, 2021GitLab Community Edition (CE) and Enterprise Edition (EE), self-managedKEVRansomwarePoC ×2
CVE-2021-319930%9.8
Path Traversal RCE in ONLYOFFICE Document Server
published Jan 26, 2021ONLYOFFICE Document Server (ONLYOFFICE Docs)KEVPoC ×2
CVE-2026-3527397%9.8
Unauthenticated Takeover Flaw in Oracle PeopleSoft Enterprise PeopleTools
published Jun 11, 2026Oracle PeopleSoft Enterprise PeopleTools (Updates Environment Management component)KEVRansomwarePoC
CVE-2016-308197%8.1
Command injection RCE in Apache Struts Dynamic Method Invocation
published Apr 26, 2016Apache StrutsKEVPoC ×2
CVE-2015-5477100%7.5
Remote denial of service in ISC BIND via TKEY queries
published Jul 29, 2015ISC BINDKEV
CVE-2023-228944%4.9
Sensitive-data leak in Strapi admin query filters (through 4.5.5)
published Apr 19, 2023StrapiKEVPoC ×2
CVE-2014-6278100%—
Remote OS Command Injection in GNU Bash via Crafted Environment (Shellshock-family)
published —GNU BashKEV

Appears with

Integrity Technology Groupvendor · 2
Apache Strutsproduct · 2
Ethereal Pandathreat actor · 2
Integrity Technology Grouporganization · 2
Red Juliettthreat actor · 2
Oraclevendor · 2
Flax Typhoonthreat actor · 2
FishHubproduct · 2
MicroScanproduct · 2
Miraimalware · 2
MeshCentralproduct · 1
Microsoft Exchangeproduct · 1
National Security Agencyorganization · 1
Jenkinsproduct · 1
SoftEther VPNproduct · 1
Mandiantorganization · 1

Entities are extracted by the model from each article. First seen Sep 26, 2026, last mentioned Oct 9, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.