376 matches found
A Silicon Valley VC Got Israel Starlink Access Within Days of October 7 Attack
During a webinar hosted by Israel’s Defense Ministry, Sequoia Capital partner Shaun Maguire discussed helping connect Israel with SpaceX’s Starlink satellite internet far earlier than was known...
Proof-Of-Social-Capital: Privacy-Preserving Consensus Protocol Replacing Stake for Social Capital
Consensus protocols used today in blockchains often rely on computational power or financial stakes - scarce resources. We propose a novel protocol using social capital - trust and influence from social interactions - as a non-transferable staking mechanism to ensure fairness and decentralization...
The vulnerability of SAP Capital Yield Tax Management software lies in incorrect restrictions on the path to the catalog, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the SAP Capital Yield Tax Management software relates to incorrect restrictions on the path name to the catalog. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...
SAP Capital Yield Tax Management Directory Traversal Vulnerability
SAP Capital Yield Tax Management is a tool for capital gains tax calculation, reporting and compliance management from SAP. A directory traversal vulnerability exists in SAP Capital Yield Tax Management, which can be exploited by an attacker to submit a special request to view the contents of...
CVE-2025-30014
SAP Capital Yield Tax Management has directory traversal vulnerability due to insufficient path validation. This could allow an attacker with low privileges to read files from directory which they don�t have access to, hence causing a high impact on confidentiality. Integrity and Availability are...
The vulnerability of Websoft HCM’s automation software for HR processes stems from insufficient validation of input data, allowing attackers to compromise the integrity and accessibility of protected information.
The vulnerability of Websoft HCM’s automation software for HR processes is related to insufficient verification of entered data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the integrity and accessibility of protected information...
CVE-2025-30014 Directory Traversal vulnerability in SAP Capital Yield Tax Management
SAP Capital Yield Tax Management has directory traversal vulnerability due to insufficient path validation. This could allow an attacker with low privileges to read files from directory which they don�t have access to, hence causing a high impact on confidentiality. Integrity and Availability are...
CVE-2025-30014
CVE-2025-30014 affects SAP Capital Yield Tax Management with a directory traversal vulnerability due to insufficient path validation. An attacker with low privileges could read files outside the intended directory, exposing confidentiality (integrity and availability unaffected). CVSS 3.1 base sc...
CVE-2025-30014 Directory Traversal vulnerability in SAP Capital Yield Tax Management
SAP Capital Yield Tax Management has directory traversal vulnerability due to insufficient path validation. This could allow an attacker with low privileges to read files from directory which they don�t have access to, hence causing a high impact on confidentiality. Integrity and Availability are...
PT-2025-15372 · Sap · Sap Capital Yield Tax Management
Name of the Vulnerable Software and Affected Versions: SAP Capital Yield Tax Management affected versions not specified Description: The issue is related to a directory traversal vulnerability due to insufficient path validation. This could allow an attacker with low privileges to read files from...
SAP Capital Yield Tax Management 安全漏洞
SAP Capital Yield Tax Management is a tool for capital gains tax calculation, reporting and compliance management from SAP. A directory traversal vulnerability exists in SAP Capital Yield Tax Management, which can be exploited by an attacker to submit a special request to view the contents of...
Epicor HCM 安全漏洞
Epicor HCM is a human capital management system from Epicor, Inc. A security vulnerability exists in Epicor HCM version 2021 1.9, which stems from an incorrect manipulation of the parameter filter can lead to SQL injection issues...
CVE-2025-1388
Orca HCM from LEARNING DIGITAL has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and run web shells...
CVE-2019-13939
A vulnerability has been identified in APOGEE MEC/MBC/PXC P2 All versions = V2.8.2 = V2.8.2 = V2.3 = V2.3x and = V2.3 = V2.3 = V2.3 = V2.3x and = V2.3 = V2.3 = V2.3 = V2.3 = V2.3 = V2.3x and = V2.3 V6.0.327, Nucleus NET All versions, Nucleus ReadyStart V3 All versions V2017.02.3, Nucleus Source...
PT-2025-1063 · Unknown · Websoft Hcm
Name of the Vulnerable Software and Affected Versions: Websoft HCM affected versions not specified Description: The issue is related to the Websoft HCM software, which has a vulnerability associated with arbitrary file upload. This could allow a remote attacker to execute arbitrary code by creati...
SQL Injection Vulnerability in Macroview HCM of Beijing Macroview Century Software Co.
Macroview HCM is a human capital management system based on the transformation and upgrading of human resources from management to service operation. A SQL injection vulnerability exists in Hongjing HCM of Beijing Hongjing Century Software Co. Ltd, which can be exploited by attackers to obtain...
The vulnerability of the software for managing human capital resources in SAP Human Capital Management (HCM) lies in the absence of authentication procedures that would allow unauthorized users to increase their privileges.
The vulnerability of software for managing human capital in the SAP Human Capital Management HCM system is related to the absence of authentication procedures. Exploiting this vulnerability can allow attackers, operating remotely, to increase their privileges...
Vulnerabilities fixed in SAP products
SAP has fixed vulnerabilities in SAP NetWeaver, ABAP, Web Dispatcher, Business Objects, HCM and Commerce Cloud. A malicious party can exploit the vulnerabilities to launch attacks that can lead to the following categories of damage: - Cross-Site Scripting XSS. - Server-Side Request Forgery SSRF. ...
SAP HCM Approve Timesheets 安全漏洞
SAP HCM Approve Timesheets is a transactional application from SAP, Germany. An authorization issue vulnerability exists in SAP HCM Approve Timesheets version 4, which stems from a failure to perform the required authorization checks on authenticated users and can be exploited by an attacker to...
