Why diversity is important for a strong cybersecurity team

Medicine. Aeronautics. Academia. When you’re a cybersecurity professional, the colleague next to you could have started in one of these industries—or just about any other you can imagine. The backgrounds of cybersecurity professionals are more diverse than those of professionals in other...

Logic Flaw Vulnerability in Talent Recruitment System of Lian Yi Technology Co.

Lianyi Technology Co., Ltd. provides universities and colleges to provide management, service, teaching, research and other full-scene products and services. A logic flaw exists in the Talent Recruitment System of Lianyi Technology Company Limited, which can be exploited by an attacker to reset a...

SQL Injection Vulnerability in 74cms v4.2.111 Cookie

Knight Talent System 74cms is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. By Taiyuan Xunyi Technology Co., Ltd. was officially launched in 2009. 74cms v4.2.111 Cookie SQL injection vulnerability, an attacker can use the vulnerabilit...

Knight Talent Recruitment CMS suffers from cross-site request forgery vulnerability

Knight CMS Talent System is a professional talent system based on PHP+MYSQL. A cross-site request forgery vulnerability exists in Knight Talent Recruitment CMS. An attacker can exploit this vulnerability to add an administrator user...

IT Security Team Staffing Shortages: Managing Risks and Attracting Talent

A company's C-suite has multiple priorities during this time of year: Getting next year's budget squared away while also ensuring the business is on a path toward its upcoming goals are two items high on this list. Another key element that executives must consider heading into 2018 is staffing...

Arbitrary file deletion vulnerability in Knight CMS Talent Recruitment System

74cms knight cms is a PHP-based open source professional talent system. Knight CMS Talent Recruitment System alController.class.php in the ajaxresumeattach function exists arbitrary file deletion vulnerability. Allow attackers to exploit the vulnerability to delete arbitrary files resulting in th...

Knight CMS Talent Recruitment System type parameter exists server-side template injection vulnerability

74cms knight cms is a PHP-based open source professional talent system. Knight CMS Talent Recruitment System TYPE parameter has a server-side template injection vulnerability . Allow attackers to upload any file to obtain server privileges...