3165 matches found
CVE-2022-30515
ZKTeco BioTime 8.5.4 is missing authentication on folders containing employee photos, allowing an attacker to view them through filename enumeration...
CVE-2022-30515: Missing Authentication for Critical Function
ZKTeco BioTime 8.5.4 is missing authentication on folders containing employee photos, allowing an attacker to view them through filename enumeration...
Intel® PROSet/Wireless WiFi Software Advisory
Summary: A potential security vulnerability in some Intel® PROSet/Wireless WiFi software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-28667 Description: Out-of-bounds write for some IntelR...
CVE-2022-30515
ZKTeco BioTime 8.5.4 is affected by an authentication bypass issue where folders containing employee photos are not required to authenticate, enabling an attacker to view photos via filename enumeration. This vulnerability is corroborated by multiple sources in the connected set (including NVD an...
How to Teach Colleagues About the Dangers of Phishing
Every day worldwide, tens of thousands of employees fall prey to phishing scams. In the second quarter of 2022, the Anti-Phishing Working Group APWG saw 1,097,811 total phishing attacks, the worst quarter on record. The results can be devastating: from lost data and identity theft to compromised...
CVE-2021-37782
Employee Record Management System v 1.2 is vulnerable to SQL Injection via editempprofile.php...
CVE-2021-37782
Employee Record Management System v 1.2 is vulnerable to SQL Injection via editempprofile.php...
CVE-2021-37781
Employee Record Management System v 1.2 is vulnerable to Cross Site Scripting XSS via editempprofile.php...
CVE-2021-37781
Employee Record Management System v 1.2 is vulnerable to Cross Site Scripting XSS via editempprofile.php...
Sql injection
Employee Record Management System v 1.2 is vulnerable to SQL Injection via editempprofile.php...
Cross site scripting
Employee Record Management System v 1.2 is vulnerable to Cross Site Scripting XSS via editempprofile.php...
PT-2022-10669 · Unknown · Employee Record Management System
Name of the Vulnerable Software and Affected Versions: Employee Record Management System version 1.2 Description: The issue is related to SQL Injection via the editempprofile.php file. Recommendations: For Employee Record Management System version 1.2, consider restricting access to the...
CVE-2021-37782
Employee Record Management System v 1.2 is vulnerable to SQL Injection via editempprofile.php...
CVE-2021-37781
CVE-2021-37781 affects Employee Record Management System v1.2. The issue is a Cross-Site Scripting (XSS) vulnerability via editempprofile.php. CVSS v3.1 base score 5.4 (Medium): AV:N, AC:L, PR:L, UI:R, S:C, C:L, I:L, A:N. Impact is Low for confidentiality and integrity, none for availability; exp...
CVE-2021-37782: Improper Neutralization of Special Elements used in an SQL Command
Employee Record Management System v 1.2 is vulnerable to SQL Injection via editempprofile.php...
CVE-2021-37781: Improper Neutralization of Input During Web Page Generation
Employee Record Management System v 1.2 is vulnerable to Cross Site Scripting XSS via editempprofile.php...
CVE-2021-37782
Employee Record Management System v 1.2 is vulnerable to SQL Injection via editempprofile.php...
Employee Record Management System SQL注入漏洞
PHPGurukul Phpgurukul Employee Record Management System is an Employee Record Management System from PHPGurukul, Inc. An SQL injection vulnerability exists in Employee Record Management System version 1.2, which stems from an SQL injection issue in editempprofile.php...