Lucene search
+L

381 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/22 12:00 a.m.•2 views

CVE-2023-3826: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /?r=recruit/resume/edit&op=status of the component Interview Handler. The manipulation of the argument resumeid leads to sql injection. The attack can...

9.8CVSS6.6AI score0.0068EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/07/22 12:00 a.m.•16 views

PT-2023-26338 · Ibos Oa · Ibos Oa

Name of the Vulnerable Software and Affected Versions: IBOS OA version 4.5.5 Description: A critical issue has been found in the Interview Handler component, specifically in the file /api/v1/recruit/resume/edit&op=status. The manipulation of the resumeid argument leads to SQL injection. This issu...

9.8CVSS7.2AI score0.0068EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2023/07/22 12:00 a.m.•15 views

IBOS SQL注入漏洞

IBOS is a collaborative office management system. A SQL injection vulnerability exists in IBOS OA version 4.5.5, which originates from the presence of an unknown function in the file /?r=recruit/resume/edit&op=status in the component Interview Handler, which leads to a sql injection via the...

9.8CVSS7AI score0.0068EPSS
SaveExploits0References4
HackRead
HackRead
•added 2023/07/07 10:45 p.m.•21 views

Nickelodeon Data Leak Labeled ‘Old’: Interview with @GhostyTongue Reveals Inside Info

By Waqas @GhostyTongue is a Twitter handle with inside information about the latest Nickelodeon data leak and has been posting clips and screenshots from the leaked data for the past couple of days. This is a post from HackRead.com Read the original post: Nickelodeon Data Leak Labeled Old:...

6.8AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
•added 2023/07/04 12:00 a.m.•26 views

This Week in Spring - July 4th, 2023

Hi, Spring fans! Welcome to another installment of This Week in Spring! This week I am in sweltering, but lovely, Singapore, where I'm meeting with customers and just finished presenting at the SpringOne Tour Singapore stop. If you're in Singapore, I hope you'll join me tonight for Bootiful Sprin...

6.5AI score
SaveExploits0
OSV
OSV
•added 2023/06/28 6:15 p.m.•13 views

CVE-2023-3449

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects the function actionExport of the file ?r=recruit/interview/export&interviews=x of the component Interview Management Export. The manipulation of the argument interviews leads to sql injection. T...

7.2CVSS6.1AI score0.00882EPSS
SaveExploits1References3
NVD
NVD
•added 2023/06/28 6:15 p.m.•33 views

CVE-2023-3449

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects the function actionExport of the file ?r=recruit/interview/export&interviews=x of the component Interview Management Export. The manipulation of the argument interviews leads to sql injection. T...

7.2CVSS6.4AI score0.00882EPSS
SaveExploits1References3
Prion
Prion
•added 2023/06/28 6:15 p.m.•32 views

Sql injection

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects the function actionExport of the file ?r=recruit/interview/export&interviews=x of the component Interview Management Export. The manipulation of the argument interviews leads to sql injection. T...

5.2CVSS7.2AI score0.00882EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/06/28 5:31 p.m.•44 views

CVE-2023-3449 IBOS OA Interview Management Export export&interviews=x actionExport sql injection

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects the function actionExport of the file ?r=recruit/interview/export&interviews=x of the component Interview Management Export. The manipulation of the argument interviews leads to sql injection. T...

5.5CVSS7.5AI score0.00882EPSS
SaveExploits1References3
CVE
CVE
•added 2023/06/28 5:31 p.m.•56 views

CVE-2023-3449

CVE-2023-3449 affects IBOS OA 4.5.5, specifically the Interview Management Export component via actionExport in ?r=recruit/interview/export&interviews=x. The root cause is that manipulating the interviews parameter enables SQL injection. Public disclosures exist, vendor unresponsive. Connected so...

7.2CVSS6.5AI score0.00882EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2023/06/28 12:00 a.m.•15 views

IBOS SQL注入漏洞

IBOS is a collaborative office management system. A SQL injection vulnerability exists in IBOS OA version 4.5.5, which originates from a SQL injection vulnerability in the component Interview Management Export...

7.2CVSS6.2AI score0.00882EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/28 12:00 a.m.•3 views

CVE-2023-3449: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects the function actionExport of the file ?r=recruit/interview/export&interviews=x of the component Interview Management Export. The manipulation of the argument interviews leads to sql injection. T...

7.2CVSS6AI score0.00882EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/06/28 12:00 a.m.•14 views

PT-2023-24906 · Ibos Oa · Ibos Oa

Name of the Vulnerable Software and Affected Versions: IBOS OA version 4.5.5 Description: A critical issue has been found in the Interview Management Export component, specifically affecting the actionExport function of the file ?r=recruit/interview/export&interviews=x. The manipulation of the...

7.2CVSS6.3AI score0.00882EPSS
SaveExploits1References5
Malwarebytes
Malwarebytes
•added 2023/06/20 8:15 a.m.•32 views

Why businesses need a disinformation defense plan, with Lisa Kaplan: Lock and Code S04E13

When you think about the word "cyberthreat," what first comes to mind? Is it ransomware? Is it spyware? Maybe it's any collection of the infamous viruses, worms, Trojans, and botnets that have crippled countless companies throughout modern history. In the future, though, what many businesses migh...

10AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
•added 2023/06/15 12:00 a.m.•18 views

A Bootiful Podcast: Angular Google Developer Expert Santosh Yadav

Hi, Spring fans! In this installment Josh Long @coffesoftware talks to Angular Google Developer Expert Santosh Yadav @santoshyadavdev about the latest and greatest in the JavaScript and Angular ecosystem...

6.8AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
•added 2023/06/02 12:00 a.m.•20 views

A Bootiful Podcast: Spring Boot team member Moritz Halbritter (@m_halbritter)

Hi, Spring fans! In this installment Josh Long YouTube.com/@coffeesoftware.com talks to Spring Boot team member Moritz Halbritter @mhalbritter...

6.9AI score
SaveExploits0
Ivan 'd0znpp' Novikov
Ivan 'd0znpp' Novikov
•added 2023/05/14 6:55 a.m.•29 views

The Hand-y Etiquette of Modern All-Remote Culture

In today’s fast-paced digital world, remote work has become the new normal. With the rise of video conferencing platforms like Zoom and Microsoft Teams, we have adapted to an all-remote culture where communication is largely virtual. One aspect of this culture that has become increasingly importa...

6.7AI score
SaveExploits0
hivepro
hivepro
•added 2023/05/11 5:34 a.m.•17 views

Immediate Threat Reduction for a Telecom Company

In this video, Anand Choudha, CEO at Hive Pro, and Jeelan Poola, CPO at Hive Pro, introduce the HivePro Uni5 Threat Exposure Management Platform. HivePro Uni...

7AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
•added 2023/05/11 12:00 a.m.•20 views

A Bootiful Podcast: James Ward, Kotlin Product Manager at Google

Hi, Spring fans! In this installment Josh Long talks to James Ward, Kotlin Product Manager at Google...

6.9AI score
SaveExploits0
Schneier on Security
Schneier on Security
•added 2023/02/10 8:03 p.m.•23 views

A Hacker’s Mind Is Now Published

Tuesday was the official publication date of A Hackers Mind: How the Powerful Bend Societys Rules, and How to Bend them Back. It broke into the 2000s on the Amazon best-seller list. Reviews in the New York Times, Cory Doctorows blog, Science, and the Associated Press. I wrote essays related to th...

1.2AI score
SaveExploits0
Rows per page
Query Builder