EUVD-2025-16059

Malicious code in bioql PyPI...

CVE-2025-44040: Improper Privilege Management

An issue in OrangeHRM v.5.7 allows an attacker to escalate privileges via UserService.php and the checkForOldHash function. Authentication decisions may be made via PHP loose-equality comparisons if a specific MD5 value is present in the credential store. NOTE: this is disputed by the Supplier...

OrangeHRM 安全漏洞

OrangeHRM is a human resource management system HRM from OrangeHRM, Inc. in the United States. The system supports personnel information management, leave management, attendance management and recruitment management. A security vulnerability exists in OrangeHRM v.5.7, which originates from...