665 matches found
jira.erstebank.hr XSS vulnerability
Open Bug Bounty ID: OBB-632131 Description| Value ---|--- Affected Website:| jira.erstebank.hr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
This Week in Security News: HR and Heritage Hacks
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, the details of 92 million accounts for MyHertitage were discovered on a private server outside of the company. Also, companies using service...
HRSALE The Ultimate HRM 1.0.2 - Local File Inclusion
Exploit Title: HRSALE The Ultimate HRM v1.0.2 - Local File Inclusion Date: 2018-04-23 Exploit Author: 8bitsec CVE: CVE-2018-10260 Vendor Homepage: https://codecanyon.net/ Software Link: https://codecanyon.net/item/hrsale-the-ultimate-hrm/21665619 Version: 1.0.2 Tested on: Kali Linux 2.0 | Mac OS...
um.optinet.hr XSS vulnerability
Open Bug Bounty ID: OBB-605950 Description| Value ---|--- Affected Website:| um.optinet.hr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-2870
Vulnerability in the Oracle Human Resources component of Oracle E-Business Suite subcomponent: General Utilities. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with netwo...
The Human (Resource) Role in the Journey to GDPR Compliance
Employees are at the center of dealing with the General Data Protection Regulation GDPR, which is the new European regulation that aims to strengthen and standardize the data pricy rights of European citizens. As we’ve discussed throughout this blog series, the GDPR impacts many organizations...
Our Journey to GDPR Compliance: Lessons learned on our way to May 25th
With the European Union’s EU General Data Protection Regulation GDPR date fast approaching, we have been working hard to make sure our already strong security culture and policies will align with the new regulation. As GDPR is a very broad law that includes people, process, and technology, workin...
SQL Injection Vulnerability in Phpyun Cloud Talent System /admin/model/hr.class.php File
PHPYun is a Chinese talent operation system with independent intellectual property rights. There is a SQL injection vulnerability in the file /admin/model/hr.class.php of the phpyun cloud talent system, which can be exploited by attackers to obtain database sensitive information...
kwp-inside-hr.com XSS vulnerability
Open Bug Bounty ID: OBB-567971 Description| Value ---|--- Affected Website:| kwp-inside-hr.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Workable Zone 1.1 Database Disclosure
============================================================================================================================ | Title : Workable Zone v1.1 Human Resource Management System data base Disclosure Vulnerability | | Author : indoushka | | email : [email protected] | | Tested on :...
CVE-2018-2681
CVE-2018-2681 affects Oracle PeopleSoft Enterprise HCM Human Resources (Security subcomponent) in version 9.2. The vulnerability can be exploited by a low-privilege attacker with network access via HTTP to cause unauthorized updates, inserts, or deletes and unauthorized reads of a subset of HCM H...
hr-recruit.asus.com XSS vulnerability
Open Bug Bounty ID: OBB-524730 Description| Value ---|--- Affected Website:| hr-recruit.asus.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...
apps.hr.emory.edu XSS vulnerability
Open Bug Bounty ID: OBB-451698 Description| Value ---|--- Affected Website:| apps.hr.emory.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
International Islamic University Chittagong: Default credentials on http://119.18.148.140/hrd/
Hello, When the mentioned URL is opened, the user is presented with a login form that logs them into the "HR & Payroll" system of the university. The issue here is that the credentials used are the application's default credentials, which are mentioned here...
CVE-2017-14848
WPHRM Human Resource Management System for WordPress 1.0 allows SQL Injection via the employeeid parameter...
Ultimate HR System <= 1.2 - Directory Traversal / Cross-Site Scripting Vulnerabilities
Exploit for php platform in category web applications Exploit Title: HRM - Workable Zone : Ultimate HR System Last Name Other vulnerable fields include: First Name, Contact Number Unauthenticated Directory Traversal: http://localhost.com/download?type=document&filename=../../../../../etc/passwd...
Ultimate HR System 1.2 Cross Site Scripting / Directory Traversal
Exploit Title: HRM - Workable Zone : Ultimate HR System Last Name Other vulnerable fields include: First Name, Contact Number Unauthenticated Directory Traversal: http://localhost.com/download?type=document&filename=../../../../../etc/passwd Credits & Authors: ================== 8bitsec -...
Ultimate HR System < 1.2 - Directory Traversal / Cross-Site Scripting
Exploit Title: HRM - Workable Zone : Ultimate HR System Last Name Other vulnerable fields include: First Name, Contact Number Unauthenticated Directory Traversal: http://localhost.com/download?type=document&filename=../../../../../etc/passwd Credits & Authors: ================== 8bitsec -...
viessmann.hr XSS vulnerability
Open Bug Bounty ID: OBB-270014 Description| Value ---|--- Affected Website:| viessmann.hr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...