665 matches found
How to implement Multi-Factor Authentication (MFA)
Another day, another data breach. If the regular drumbeat of leaked and phished accounts hasn't persuaded you to switch to Multi-Factor Authentication MFA already, maybe the usual January rush of 'back to work' password reset requests is making you reconsider. When such an effective option for...
CVE-2020-2586
Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite component: Hierarchy Diagrammers. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise...
Oracle E-Business Suite cpujan2020 Multiple Security Vulnerabilities
Description Oracle E-Business Suite is prone to multiple security vulnerabilities in 'Human Resources' product. These vulnerabilities affect the following supported versions: 12.1.1 through 12.1.3, 12.2.3 through 12.2.9 Technologies Affected Oracle E-Business Suite 12.1.1 Oracle E-Business Suite...
hr.thesciencejob.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1042337 Security Researcher MrRain1996 Helped patch 1039 vulnerabilities Received 5 Coordinated Disclosure badges Received 9 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting hr.thesciencejob.com...
intranet.vef.hr Cross Site Scripting vulnerability
Security Researcher fakessh Helped patch 1840 vulnerabilities Received 9 Coordinated Disclosure badges Received 60 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting intranet.vef.hr website and its users. Following coordinat...
mi2.hr Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1013309 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2019-2951
Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: US Federal Specific. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterpri...
Sentrifugo 3.2 - Persistent Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Sentrifugo 3.2 - Persistent Cross-Site Scripting Exploit Author: creosote Vendor Homepage: http://www.sentrifugo.com/ Version: 3.2 Tested on: Ubuntu 18.04 CVE : CVE-2019-15814 Multiple Stored XSS vulnerabilities were found in...
Sentrifugo 3.2 - Persistent Cross-Site Scripting
Sentrifugo 3.2 - Persistent Cross-Site Scripting Exploit Title: Sentrifugo 3.2 - Persistent Cross-Site Scripting Google Dork: N/A Date: 8/29/2019 Exploit Author: creosote Vendor Homepage: http://www.sentrifugo.com/ Version: 3.2 Tested on: Ubuntu 18.04 CVE : CVE-2019-15814 Multiple Stored XSS...
DIGISOL SYSTEMS Wireless Wifi Home Router HR-3300 Cross-Site Scripting Vulnerability
DIGISOL SYSTEMS Wireless Wifi Home Router HR-3300 is a home wireless router from DIGISOL SYSTEMS India. A cross-site scripting vulnerability exists in the DIGISOL SYSTEMS Wireless Wifi Home Router HR-3300. The vulnerability stems from the lack of proper validation of client data by the WEB...
Trend Micro Named Best Company To Work For In Taiwan
Trend Micro prides itself on caring first about people – both in our external mission and internally with our employees. As this issue is close to the hearts of our executives, we are always very proud to be recognized by related awards. The HR Asia Awards Taiwan recently named Trend Micro as one...
CVE-2018-14027
Digisol Wireless Wifi Home Router HR-3300 allows XSS via the userid or password parameter to the admin login page...
Design/Logic Flaw
Digisol Wireless Wifi Home Router HR-3300 allows XSS via the userid or password parameter to the admin login page...
CVE-2018-14027
Digisol HR-3300 Wireless Home Router is affected by a cross‑site scripting (XSS) vulnerability, exposed via the userid or password parameter on the admin login page. Multiple connected sources corroborate this vulnerability exists in the Digisol HR-3300 series (e.g., CVE-2018-14027) and describe ...
CVE-2018-14027
Digisol Wireless Wifi Home Router HR-3300 allows XSS via the userid or password parameter to the admin login page...
Zucchetti HR Portal Path Traversal Vulnerability
Zucchetti HR Portal is a human resources management system. A path traversal vulnerability exists in Zucchetti HR Portal 2019-03-15 and prior versions. The vulnerability stems from a failure of a networked system or product to properly filter for specific elements in a resource or file path. An...
CVE-2019-10257
Zucchetti HR Portal through 2019-03-15 allows Directory Traversal. Unauthenticated users can escape outside of the restricted location dot-dot-slash notation to access files or directories that are elsewhere on the system. Through this vulnerability it is possible to read the application's java...
CVE-2019-10257
Zucchetti HR Portal through 2019-03-15 allows Directory Traversal. Unauthenticated users can escape outside of the restricted location dot-dot-slash notation to access files or directories that are elsewhere on the system. Through this vulnerability it is possible to read the application's java...
Directory traversal
Zucchetti HR Portal through 2019-03-15 allows Directory Traversal. Unauthenticated users can escape outside of the restricted location dot-dot-slash notation to access files or directories that are elsewhere on the system. Through this vulnerability it is possible to read the application's java...
CVE-2019-10257
Zucchetti HR Portal through 2019-03-15 allows Directory Traversal. Unauthenticated users can escape outside of the restricted location dot-dot-slash notation to access files or directories that are elsewhere on the system. Through this vulnerability it is possible to read the application's java...