CVE-2025-1388 Learning Digital Orca HCM - Arbitrary File Upload

Orca HCM from LEARNING DIGITAL has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and run web shells...

CVE-2025-1388 Learning Digital Orca HCM - Arbitrary File Upload

Orca HCM from LEARNING DIGITAL has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and run web shells...

CVE-2025-1387 Learning Digital Orca HCM - Improper Authentication

Orca HCM from LEARNING DIGITAL has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to log in to the system as any user...

CVE-2025-1387 Learning Digital Orca HCM - Improper Authentication

Orca HCM from LEARNING DIGITAL has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to log in to the system as any user...

CVE-2025-1387

CVE-2025-1387 affects Orca HCM from LEARNING DIGITAL. The connected sources describe an improper authentication vulnerability that allows unauthenticated remote attackers to log in as any user, indicating a severe impact (high confidentiality, integrity, and availability) per the CVSS vector: AV:...

CVE-2025-1387: Weak Authentication

Orca HCM from LEARNING DIGITAL has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to log in to the system as any user...

Learning Digital Orca HCM 安全漏洞

Learning Digital Orca HCM is a digital learning platform from China-based Yiyu Digital Learning Digital. A security vulnerability exists in Learning Digital Orca HCM that stems from improper authentication. An attacker can exploit the vulnerability to log in to the system as any user...

Learning Digital Orca HCM SQL注入漏洞

Learning Digital Orca HCM is a digital learning platform from China-based Learning Digital. Learning Digital Orca HCM suffers from a SQL injection vulnerability that stems from improper handling of SQL queries. An attacker can inject arbitrary SQL commands to read, modify, or delete database...

PT-2025-6913

Name of the Vulnerable Software and Affected Versions: Orca HCM from Learning Digital affected versions not specified Description: The issue allows attackers with regular privileges to inject arbitrary SQL commands, enabling them to read, modify, and delete database contents. This is a SQL...

CVE-2025-1388: Unrestricted Upload of File with Dangerous Type

Orca HCM from LEARNING DIGITAL has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and run web shells...

CVE-2025-1389: Improper Neutralization of Special Elements used in an SQL Command

Orca HCM from Learning Digital has a SQL Injection vulnerability, allowing attackers with regular privileges to inject arbitrary SQL commands to read, modify, and delete database contents...

Learning Digital Orca HCM 代码问题漏洞

Learning Digital Orca HCM is a digital learning platform from China-based Learning Digital. A code issue vulnerability exists in Learning Digital Orca HCM, which stems from an improper implementation of the file upload functionality. An attacker can exploit the vulnerability to upload and run a W...

PT-2025-6911

Name of the Vulnerable Software and Affected Versions: Orca HCM from LEARNING DIGITAL affected versions not specified Description: The issue is related to an Improper Authentication vulnerability, allowing unauthenticated remote attackers to log in to the system as any user. Recommendations: At t...

PT-2025-6912

Name of the Vulnerable Software and Affected Versions: Orca HCM from LEARNING DIGITAL affected versions not specified Description: The issue allows remote attackers with regular privileges to upload and run web shells due to an Arbitrary File Upload vulnerability. Recommendations: At the moment,...

Google Cloud Platform Data Destruction via Cloud Build

Background & Public Research Google Cloud Platform GCP Cloud Build is a Continuous Integration/Continuous Deployment CI/CD service offered by Google that is utilized to automate the building, testing and deployment of applications. Orca Security published an article describing certain aspects of...

CVE-2024-8585

Orca HCM from LEARNING DIGITA does not properly restrict a specific parameter of the file download functionality, allowing a remote attacker with regular privileges to download arbitrary system files...

CVE-2024-8585

Orca HCM from LEARNING DIGITA does not properly restrict a specific parameter of the file download functionality, allowing a remote attacker with regular privileges to download arbitrary system files...

CVE-2024-8584

Orca HCM from LEARNING DIGITAL has an Missing Authentication vulnerability, allowing unauthenticated remote attacker to exploit this functionality to create an account with administrator privilege and subsequently use it to log in...

CVE-2024-8584

Orca HCM from LEARNING DIGITAL has an Missing Authentication vulnerability, allowing unauthenticated remote attacker to exploit this functionality to create an account with administrator privilege and subsequently use it to log in...

CVE-2024-8585 LEARNING DIGITAL Orca HCM - Arbitrary File Download

Orca HCM from LEARNING DIGITA does not properly restrict a specific parameter of the file download functionality, allowing a remote attacker with regular privileges to download arbitrary system files...