other

SIDEEYE

Windows backdoor tracked by Mandiant that steals credentials, manages files and processes, opens a reverse shell and proxies traffic into internal networks.

Known aliases

Ple64.exe

Relationships

No evidence-backed relationships are recorded.

Current clusters

build1 publisher

ShinyHunters percent-encode one letter to slip PeopleSoft's 9.8 RCE past the WAF

ShinyHunters is exploiting an unpatched CVSS 9.8 pre-login flaw in Oracle PeopleSoft, encoding one URL character to slip past WAF rules matching the raw path. Mandiant has confirmed JSP web shells on dozens of systems.

Publishers:dev.to

Reality

Evidence55
Adoption: Insufficient
Hype gap0
Incentives: Insufficient
Confidence50

security5 publishers

ShinyHunters slips past PeopleSoft firewall rules by encoding one character

ShinyHunters is again mass-exploiting Oracle PeopleSoft flaw CVE-2026-35273, defeating firewall rules by URL-encoding a single character. Anyone who filtered the endpoint instead of applying Oracle's June 10 patch should assume exposure.

Publishers:bleepingcomputer.comcyberinsider.comhackread.comthehackernews.comyahoo.com

Perspective Coverage

5 publishers

Builder: Builder 31%
Operator: Operator 57%
Investor: Investor 12%

Reality

Evidence78
Adoption: Insufficient
Hype gap+10
Incentives40
Confidence75