CVE-2025-63294

WorkDo HRM SaaS HR and Payroll Tool version 8.1 is vulnerable to Insecure Permissions (CWE-862). Due to improperly set permissions, an authenticated user can perform unauthorized actions by creating leave or resignation records on behalf of other users. To mitigate this risk, the documentation re...

CVE-2025-63294: Missing Authorization

WorkDo HRM SaaS HR and Payroll Tool 8.1 is affected vulnerable to Insecure Permissions. An authenticated user can create leave or resignation records on behalf of other users...

EUVD-2025-37760

WorkDo HRM SaaS HR and Payroll Tool 8.1 is affected vulnerable to Insecure Permissions. An authenticated user can create leave or resignation records on behalf of other users...

PT-2025-45014

Name of the Vulnerable Software and Affected Versions WorkDo HRM SaaS HR and Payroll Tool version 8.1 Description WorkDo HRM SaaS HR and Payroll Tool version 8.1 has an issue with insecure permissions. An authenticated user is able to create leave or resignation records for other users...

EUVD-2025-32960

Malicious code in hrm-absence-frontend-deps npm...

Malware in hrm-absence-frontend-deps

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview vn-hrm is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malware in vn-hrm

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

EUVD-2025-32959

Malicious code in vn-hrm npm...

EUVD-2020-30100

Malware in sbrugna...

EUVD-2018-10113

Malware in sbrugna...

EUVD-2021-20905

Malware in sbrugna...

EUVD-2013-1392

Malware in sbrugna...

EUVD-2021-20906

Malware in sbrugna...

EUVD-2020-30099

Malware in sbrugna...

EUVD-2018-2334

Malware in sbrugna...

EUVD-2021-21691

Malware in sbrugna...

EUVD-2021-21690

Malware in sbrugna...

MAL-2025-48029 Malicious code in hrm-absence-frontend-deps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e83d68d053c95b30727ac72a2707c8add3c6426eceeb22869d8c6536887ad7f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hrm-absence-frontend-deps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e83d68d053c95b30727ac72a2707c8add3c6426eceeb22869d8c6536887ad7f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...