458 matches found
people-map.ru Cross Site Scripting vulnerability OBB-1476248
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
'Watch Dogs: Legion' Tackles Surveillance Without Humanity
The game envisions a near future full of techno-dystopian surveillance, but it doesn't have much to say about the people it affects...
australian-people-records.com Cross Site Scripting vulnerability OBB-1381712
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Gen Z Has a Plan to Save the Election—Starting With the Polls
Poll workers, who skew elderly, are in short supply during the pandemic. Meet some of the young people trying to make up the gap...
Seny Kamara on "Crypto for the People"
Seny Kamara gave an excellent keynote talk this year at the online CRYPTO Conference. He talked about solving real-world crypto problems for marginalized communities around the world, instead of crypto problems for governments and corporations. Well worth watching and listening to...
people-map.ru Cross Site Scripting vulnerability OBB-1284360
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
The vulnerability of the Time and Labor component of the Oracle PeopleSoft Enterprise HRMS application allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.
The vulnerability of the Time and Labor component of the Oracle PeopleSoft Enterprise HRMS is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, or to gain unauthorized access to protected informati...
Mattermost Server Injection Vulnerability (CNVD-2020-41171)
Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 5.1. The vulnerability can be exploited to cause a denial of service with the 'invitepeople' slash / command...
PT-2020-8896
Name of the Vulnerable Software and Affected Versions Mattermost Server versions prior to 5.1 Mattermost Server version 5.0.2 and earlier Mattermost Server version 4.10.2 and earlier Description An issue was discovered in Mattermost Server. An attacker could use the invite people slash command to...
PT-2020-8901
Name of the Vulnerable Software and Affected Versions Mattermost Server versions prior to 5.1 Description An issue in Mattermost Server allows attackers to cause a denial of service via the invite people slash command. Recommendations For versions prior to 5.1, update to version 5.1 or later to...
Description of the security update for SharePoint Server 2019: June 9, 2020
None None...
The vulnerability of the Query component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a hacker to trigger a service failure or gain unauthorized access to protected information.
The vulnerability of the Query component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to remotely cause service interruptions or gain unauthorized access to protected...
honolulu.jollypeople.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1178270 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Unspecified Vulnerability in Deskpro (CNVD-2020-22252)
Deskpro is a helpdesk software solution that helps companies manage communication with their customers and user base across multiple channels. A security vulnerability exists in Deskpro. The /api/people endpoint fails to properly validate user permissions, which can be exploited by an attacker to...
CVE-2020-11464
An issue was discovered in Deskpro before 2019.8.0. The /api/people endpoint failed to properly validate a user's privilege, allowing an attacker to retrieve sensitive information about all users registered on the system. This includes their full name, privilege, email address, phone number, etc...
PT-2020-12627
Name of the Vulnerable Software and Affected Versions Deskpro versions prior to 2019.8.0 Description An issue was discovered where the "/api/people" endpoint failed to properly validate a user's privilege. This allowed an attacker to retrieve sensitive information about all users registered on th...
CVE-2020-11464: Improper Privilege Management
An issue was discovered in Deskpro before 2019.8.0. The /api/people endpoint failed to properly validate a user's privilege, allowing an attacker to retrieve sensitive information about all users registered on the system. This includes their full name, privilege, email address, phone number, etc...
CVE-2019-18641: Undefined Security Weakness
Rock RMS before 1.8.6 mishandles vCard access control within the People/GetVCard/REST controller...
Blackboard Learn/PeopleTool Cross-Site Scripting Vulnerability
Blackboard is a Web-based, student-centered instructional tool. A cross-site scripting vulnerability exists in Blackboard Learn/PeopleTool version v9.1. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability ...
