Researchers use ForgeRock flaws to remotely control cars at two automakers
Inconsistent URL parsing and default console credentials enabled production RCE; fixes landed about two hours after disclosure.
Stories per day · 30 days
3 RSS
10 stories, newest first · one card per story
Stories tagged #waf-bypass
FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach
The FBI removed an Accenture contractor after a missed PeopleSoft patch let ShinyHunters steal thousands of employees' data.
4
Despite ShinyHunters arrests after FBI jobs data breach, enterprises still have no answers about PeopleSoft risks
PeopleSoft customers lack vendor guidance as ShinyHunters claims a second zero-day after the confirmed FBI breach.
5
Multiple ModSecurity Vulnerabilities Let Attackers Bypass WAF Rules and Execute Malicious Requests
ModSecurity flaws let attackers bypass WAF filename, transformation, and response-body checks.
2
FBI job portals remain offline after ShinyHunters claims breach via PeopleSoft zero-day
FBI job portals stay offline after ShinyHunters claimed a PeopleSoft zero-day breach of personnel data.
3
Oracle PeopleSoft Servers Targeted Again as ShinyHunters Expands Extortion Operations
ShinyHunters-linked UNC6240 is mass-exploiting Oracle PeopleSoft CVE-2026-35273, bypassing WAF path filters for extortion.
2
Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign
ShinyHunters (UNC6240) resumed mass-exploiting Oracle PeopleSoft via a WAF-bypassing variant of CVE-2026-35273, deploying web shells and SideEye to extort victims.
4
ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks
ShinyHunters bypasses WAF rules blocking PeopleSoft CVE-2026-35273 via percent-encoding, resuming RCE attacks deploying web shells and SIDEEYE backdoors.
4
Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells
UNC6240 bypasses WAFs to mass-exploit Oracle PeopleSoft CVE-2026-35273 and deploy web shells and SIDEEYE.
5
ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft
ShinyHunters is mass-exploiting Oracle PeopleSoft CVE-2026-35273, bypassing WAF rules to plant web shells.
3