CVE-2025-40683 Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System

Reflected Cross-Site Scripting XSS in Human Resource Management System version 1.0. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the 'searccity' parameter in /city.php...

CVE-2025-40682 SQL injection vulnerability in Human Resource Management System

SQL injection vulnerability in Human Resource Management System version 1.0, which allows an attacker to retrieve, create, update and delete databases via the “city” and “state” parameters in the /controller/ccity.php endpoint...

CVE-2025-40682 SQL injection vulnerability in Human Resource Management System

SQL injection vulnerability in Human Resource Management System version 1.0, which allows an attacker to retrieve, create, update and delete databases via the “city” and “state” parameters in the /controller/ccity.php endpoint...

CVE-2025-40682

The CVE-2025-40682 entry concerns Human Resource Management System (version 1.0). The vulnerability is a SQL injection in the /controller/ccity.php endpoint, exploitable via the city and state parameters, enabling an attacker to retrieve, create, update, and delete databases. Root cause described...

PT-2025-31195 · Unknown · Human Resource Management System Version 1.0

Name of the Vulnerable Software and Affected Versions: Human Resource Management System version 1.0 Description: This issue allows an attacker to execute JavaScript code in a victim’s browser. This is achieved by sending a malicious URL through the employeeid parameter. The vulnerable location is...

Human Resource Management System SQL注入漏洞

Human Resource Management System is a Human Resource Management System by maverickosama Personal Developer. A SQL injection vulnerability exists in Human Resource Management System version 1.0, which stems from improper parameter manipulation and could lead to a SQL injection attack...

PT-2025-31191 · Unknown · Human Resource Management System

Name of the Vulnerable Software and Affected Versions: Human Resource Management System version 1.0 Description: A SQL injection vulnerability exists in Human Resource Management System version 1.0. This vulnerability allows an attacker to retrieve, create, update, and delete databases via the ci...

Human Resource Management System 跨站脚本漏洞

Human Resource Management System is a Human Resource Management System by maverickosama Individual Developer. A cross-site scripting vulnerability exists in Human Resource Management System version 1.0, which stems from improper parameter manipulation and could lead to a reflective cross-site...

PT-2025-31194 · Unknown · Human Resource Management System

Name of the Vulnerable Software and Affected Versions: Human Resource Management System version 1.0 Description: Reflected Cross-Site Scripting XSS exists in Human Resource Management System version 1.0. This issue could allow an attacker to execute JavaScript code in the victim's browser by...

PT-2025-31192 · Unknown · Human Resource Management System Version 1.0

Name of the Vulnerable Software and Affected Versions: Human Resource Management System version 1.0 Description: This issue allows an attacker to execute JavaScript code in a victim’s browser by sending a malicious URL. The vulnerability is due to a reflected Cross-Site Scripting XSS flaw in the...

PT-2025-31193 · Unknown · Human Resource Management System

Name of the Vulnerable Software and Affected Versions: Human Resource Management System version 1.0 Description: Reflected Cross-Site Scripting XSS exists in Human Resource Management System version 1.0. This issue could allow an attacker to execute JavaScript code in the victim's browser by...

Human Resource Management System 跨站脚本漏洞

Human Resource Management System is a Human Resource Management System by maverickosama Individual Developer. A cross-site scripting vulnerability exists in Human Resource Management System version 1.0, which stems from improper parameter manipulation and could lead to a reflective cross-site...

LibTIFF 资源管理错误漏洞

LibTIFF is a LibTIFF open source library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A resource management error vulnerability exists in LibTIFF version 4.7.0 and earlier, which stems from the existence of...

CVE-2025-38418

In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Release rproc-cleantable after rprocattach fails When rproc-state = RPROCDETACHED is attached to remote processor through rprocattach, if rprochandleresources returns failure, then the clean table should be...

MB CONNECT LINE mbNET.mini Resource Management Error Vulnerability

The mbNET.mini from MB CONNECT LINE is an industrial router designed for industrial scenarios and is primarily used to enable secure remote connections to machines and systems. MB CONNECT LINE mbNET.mini suffers from a resource management error vulnerability that originates from exhausting critic...

IBM Security QRadar Network Threat Analytics Resource Management Error Vulnerability

IBM Security QRadar Network Threat Analytics is an advanced network security analysis tool from International Business Machines IBM. A resource management error vulnerability exists in IBM Security QRadar Network Threat Analytics version 1.3.1 and prior versions, which stems from a resource...

MB CONNECT LINE mbNET.mini resource management error vulnerability (CNVD-2025-21146)

The mbNET.mini from MB CONNECT LINE is an industrial router designed for industrial scenarios and is primarily used to enable secure remote connections to machines and systems. A resource management error vulnerability exists in MB CONNECT LINE mbNET.mini that originates from exhausting critical...

Simopro Technology WinMatrix3 Deserialization Vulnerability

Simopro Technology WinMatrix3 is an IT resource management system for enterprise-class computer asset management, endpoint security control and IT operations management. Simopro Technology WinMatrix3 suffers from a deserialization vulnerability that arises from unsafe deserialization of serialize...

IBM Security QRadar Network Threat Analytics 安全漏洞

IBM Security QRadar Network Threat Analytics is an advanced network security analysis tool from International Business Machines IBM. A resource management error vulnerability exists in IBM Security QRadar Network Threat Analytics version 1.3.1 and prior versions, which stems from a resource...

Microsoft Windows Resource Management Error Vulnerability (CNVD-2025-16952)

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. A security vulnerability exists in Microsoft Windows. An attacker could exploit the vulnerability to remotely execute code...