CVE-2019-10257

CVE-2019-10257 affects Zucchetti HR Portal (through 2019-03-15). It is a directory traversal/path-traversal vulnerability that allows unauthenticated users to escape restricted directories (dot-dot-slash) and read files, including the application’s Java sources under /WEB-INF/classes/*.class. NVD...

Design/Logic Flaw

The WP Human Resource Management plugin before 2.2.6 for WordPress does not ensure that a leave modification occurs in the context of the Administrator or HR Manager role...

Joomla Mailto 1.2.2.2 SQL Injection

Exploit Title : Joomla Mailto Components 1.2.2.2 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 04/02/2019 Vendor Homepage : hr-it-solutions.com Software Download Link : github.com/eddieajau/joomla-mailto...

Hackers Succeed in NASA Mission, Lifting Thousands of Employee Records

NASA has become the latest victim of a breach, but it’s unlikely that sensitive space mission data was impacted. In an internal memo sent to employees, NASA admitted that it was hacked by an unauthorized intruder in October, and that personally identifiable information for thousands of employees...

hr-live.com XSS vulnerability

Open Bug Bounty ID: OBB-710964 Description| Value ---|--- Affected Website:| hr-live.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...

hr-technologies.com XSS vulnerability

Open Bug Bounty ID: OBB-705792 Description| Value ---|--- Affected Website:| hr-technologies.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

candidate.hr-manager.net XSS vulnerability

Open Bug Bounty ID: OBB-702494 Description| Value ---|--- Affected Website:| candidate.hr-manager.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:...

Let’s Continue the Skills Gap Conversation

Most analysis is that the cybersecurity skills gap or shortage is getting worse. ESG reported in CSOOnline that 2018 had the highest levels, at 51%, where organizations "claimed their organization had a problematic shortage of cybersecurity skills." It’s a complex problem, but I believe with...

SAP HCM Fiori People Profile GBX01 HR Privilege Vulnerability

SAP HCM Fiori People Profile GBX01 HR is a human resource management solution from SAP. An elevation of privilege vulnerability exists in SAP HCM Fiori People Profile GBX01 HR version 6.0, which can be exploited by an attacker to gain privileges due to a failure of the program to perform...

CVE-2018-2461

Missing authorization check in SAP HCM Fiori "People Profile" GBX01 HR version 6.0 for an authenticated user which may result in an escalation of privileges...

Authorization

Missing authorization check in SAP HCM Fiori "People Profile" GBX01 HR version 6.0 for an authenticated user which may result in an escalation of privileges...

HRSale 1.0.6 Local File Disclosure Vulnerability

Exploit for php platform in category local exploits Exploit Title: HRSALE - HR Management PHP Script - LFD Exploit Author: ShanoWeb Author Mail : MrdotNet2NetatGmaildotcom Vendor Homepage: http://hrsale.com Software Buy: https://www.codester.com/items/8599/hrsale-hr-management-php-script Demo:...

alfateh2000.hr XSS vulnerability

Open Bug Bounty ID: OBB-655492 Description| Value ---|--- Affected Website:| alfateh2000.hr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Highly Sophisticated Parasite RAT Emerges on the Dark Web

Researchers are tracking a remote access trojan RAT on underground markets that, so far, has only been attributed to one small malicious email campaign. However, the RAT, dubbed Parasite HTTP by the Proofpoint researchers that discovered it, has an impressive list of sophisticated features –...

amazon-realestate.hr XSS vulnerability

Open Bug Bounty ID: OBB-648241 Description| Value ---|--- Affected Website:| amazon-realestate.hr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ConnX ESP HR Management SQL Injection Vulnerability

ConnX ESP HR Management is a modular web-based HR management solution from ConnX Australia. A SQL injection vulnerability exists in ConnX ESP HR Management version 4.4.0. The vulnerability can be exploited by a remote attacker to execute arbitrary SQL commands by sending the...

CVE-2015-4043

SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to execute arbitrary SQL commands via the ctl00$cphMainContent$txtUserName parameter to frmLogin.aspx...

Sql injection

SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to execute arbitrary SQL commands via the ctl00$cphMainContent$txtUserName parameter to frmLogin.aspx...

CVE-2015-4043

SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to execute arbitrary SQL commands via the ctl00$cphMainContent$txtUserName parameter to frmLogin.aspx...

CVE-2015-4043

CVE-2015-4043 describes a SQL injection in ConnX ESP HR Management 4.4.0. The vulnerability is exploitable remotely via the parameter ctl00$cphMainContent$txtUserName in frmLogin.aspx, allowing execution of arbitrary SQL commands. Affected component: the login page handling on ConnX ESP HR Manage...