linkedin2username

linkedin2username OSINT Tool: Generate username lists from companies on LinkedIn. This is a pure web-scraper, no API key required. You use your valid LinkedIn username and password to login, it will create several lists of possible username formats for all employees of a company you point it at...

CVE-2025-67315

CSRF to Deactivate Any Employee Summary The Manage Employees functionality is vulnerable to Cross-Site Request Forgery CSRF. An attacker can trick a logged-in admin into sending a forged request that inactivates an employee e.g., inid=1 without the admin’s knowledge or consent. CVSS Base Score: 5...

emploleaks

EmploLeaks EmploLeaks is an OSINT Open Source Intelligence tool with a CLI interface, designed to discover and correlate information about employees of a target company. It allows collecting LinkedIn profiles, generating potential corporate emails, searching for leaked credentials in leak databas...

CVE-2026-112089

A security vulnerability has been detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This vulnerability affects the function mysqliquery of the file employees/delete.php. The manipulation of the argument epayrollno leads t...

CVE-2026-112089 Dav-ee dairy-management-system delete.php mysqli_query sql injection

A security vulnerability has been detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This vulnerability affects the function mysqliquery of the file employees/delete.php. The manipulation of the argument epayrollno leads t...

EUVD-2026-104094

A security vulnerability has been detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This vulnerability affects the function mysqliquery of the file employees/delete.php. The manipulation of the argument epayrollno leads t...

CVE-2026-112089

The Dav-ee dairy-management-system is vulnerable to a SQL injection flaw within the employees/delete.php file. The root cause is the improper handling of the e_payroll_no argument in the mysqli_query function. This vulnerability can be exploited remotely to potentially compromise the database. Al...

CVE-2026-112089 Dav-ee dairy-management-system delete.php mysqli_query sql injection

A security vulnerability has been detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This vulnerability affects the function mysqliquery of the file employees/delete.php. The manipulation of the argument epayrollno leads t...

CVE-2026-111716

Arkon through 0.9.2 contains a broken access control vulnerability that allows authenticated employees to read and modify other departments' sources because by-id routes in app/routers/sources.py skip canaccessdocument. Attackers can call the plan, progress, PATCH, retry and approve-extraction...

CVE-2026-111716 Arkon through 0.9.2 Broken Access Control via Sources By-ID Routes

Arkon through 0.9.2 contains a broken access control vulnerability that allows authenticated employees to read and modify other departments' sources because by-id routes in app/routers/sources.py skip canaccessdocument. Attackers can call the plan, progress, PATCH, retry and approve-extraction...

EUVD-2026-103008

Arkon through 0.9.2 contains a broken access control vulnerability that allows authenticated employees to read and modify other departments' sources because by-id routes in app/routers/sources.py skip canaccessdocument. Attackers can call the plan, progress, PATCH, retry and approve-extraction...

PT-2026-116116

Arkon through 0.9.2 contains a missing authorization vulnerability in list skill versions that allows authenticated employees to read other departments' skill version metadata by bypassing the can access skill check. Attackers holding the default skill:read permission can request GET...

PT-2026-116115

Arkon through 0.9.2 contains a broken access control vulnerability that allows authenticated employees to read and modify other departments' sources because by-id routes in app/routers/sources.py skip can access document. Attackers can call the plan, progress, PATCH, retry and approve-extraction...

CVE-2026-110229

Versions of QloApps through 1.7.0 are vulnerable to an improper access control flaw in the AdminSlipController component. This vulnerability allows hotel-restricted back-office employees to bypass restrictions and access credit slips from other hotels. An attacker can list, export as PDF, mark as...

CVE-2026-110229: Missing Authorization

QloApps through 1.7.0 contains an improper access control vulnerability in AdminSlipController that allows hotel-restricted back-office employees to access credit slips of all hotels. Attackers can list, export as PDF, mark as redeemed, and generate store-credit vouchers from other hotels' refund...

CVE-2026-109393 QloApps through 1.7.0 Insecure Direct Object Reference in Back-Office AJAX Handlers

QloApps through 1.7.0 contains an insecure direct object reference vulnerability in back-office AJAX handlers of AdminOrdersController, AdminBookingDocumentController, AdminProductsController and AdminAddHotelController that skip htlaccess hotel checks. Hotel-restricted employees can supply other...

CVE-2026-108797

A vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This vulnerability affects unknown code of the file /personnel/api/employees/ of the component Employee REST API. The manipulation leads to authorization bypass. The attack may be initiated remotely. Upgrading to version...

CVE-2026-108797 ZKTeco BioTime Employee REST API employees authorization

A vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This vulnerability affects unknown code of the file /personnel/api/employees/ of the component Employee REST API. The manipulation leads to authorization bypass. The attack may be initiated remotely. Upgrading to version...

EUVD-2026-97168

A vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This vulnerability affects unknown code of the file /personnel/api/employees/ of the component Employee REST API. The manipulation leads to authorization bypass. The attack may be initiated remotely. The vendor was...

CVE-2026-108797

A vulnerability exists in ZKTeco BioTime version 9.5.6 Build 20260130.3206 within the Employee REST API component. Specifically, unknown code in the file /personnel/api/employees/ is susceptible to manipulation, leading to an authorization bypass . This attack can be initiated remotely . No speci...