A CISO's Ultimate Security Validation Checklist

If you're heading out of the office on a well-deserved vacation, are you certain the security controls you have in place will let you rest easy while you're away? More importantly – do you have the right action plan in place for a seamless return? Whether you're on the way out of – or back to – t...

hr-consulting.hrtechoutlook.com Cross Site Scripting vulnerability OBB-2820091

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

hr-sanitaetshaus.de Cross Site Scripting vulnerability OBB-2689889

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2022-3866 Malicious code in internal-hr-form-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61f4c59f93a033d1b3f59185034a97ff1ebfebcf22ec2a26d7b2aa6809dc0213 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internal-hr-form-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61f4c59f93a033d1b3f59185034a97ff1ebfebcf22ec2a26d7b2aa6809dc0213 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Streamlining employee onboarding: Microsoft’s response to the Great Reshuffle

In 2021, workers everywhere reevaluated their professional and personal choices, leading to what became known as the Great Resignation. In 2022, a new trend that many are calling the Great Reshuffle has emerged, with 43 percent of the workforce saying they’re very likely to consider changing jobs...

Streamlining employee onboarding: Microsoft’s response to the Great Reshuffle

In 2021, workers everywhere reevaluated their professional and personal choices, leading to what became known as the Great Resignation. In 2022, a new trend that many are calling the Great Reshuffle has emerged, with 43 percent of the workforce saying they’re very likely to consider changing jobs...

Understanding compliance platform capabilities: black box automation has its limitations

Compliance is hard. It is not a "black box" of opaque inputs and outputs, where systems and data are hidden and where users are oblivious to their inner workings. There has yet to be a product made that can magically produce all the evidence sufficient for testing and verification across the wide...

Understanding compliance platform capabilities: black box automation has its limitations

Compliance is hard. It is not a "black box" of opaque inputs and outputs, where systems and data are hidden and where users are oblivious to their inner workings. There has yet to be a product made that can magically produce all the evidence sufficient for testing and verification across the wide...

new packages: hunspell-hr

An update is available for hunspell-hr. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

europa92.hr Cross Site Scripting vulnerability OBB-2553658

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

hr-analitika.ru Cross Site Scripting vulnerability OBB-2477235

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress WP-HR GDPR: GDPR Tools for Human Resources on WordPress plugin < 0.9 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WP-HR GDPR: GDPR Tools for Human Resources on WordPress plugin versions 0.9. Solution Update the WordPress WP-HR GDPR: GDPR Tools for Human Resources on WordPress plugin to the latest available version at least 0.9...

WordPress WP-HR Manager: The Human Resources Plugin for WordPress plugin < 3.0.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WP-HR Manager: The Human Resources Plugin for WordPress plugin versions 3.0.3. Solution Update the WordPress WP-HR Manager: The Human Resources Plugin for WordPress plugin to the latest available versi...

WordPress WP-HR Manager: The Human Resources Plugin for WordPress plugin < 3.0.3 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WP-HR Manager: The Human Resources Plugin for WordPress plugin versions 3.0.3. Solution Update the WordPress WP-HR Manager: The Human Resources Plugin for WordPress plugin to the latest available version at least 3.0.3...

WordPress WP-HR GDPR: GDPR Tools for Human Resources on WordPress plugin < 0.9 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WP-HR GDPR: GDPR Tools for Human Resources on WordPress plugin versions 0.9. Solution Update the WordPress WP-HR GDPR: GDPR Tools for Human Resources on WordPress plugin to the latest available version...

hr-link.it Cross Site Scripting vulnerability OBB-2381260

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

hr-consulting.online Cross Site Scripting vulnerability OBB-2362964

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Privilege escalation

An issue was discovered in COINS Construction Cloud 11.12. Due to logical flaws in the human ressources interface, it is vulnerable to privilege escalation by HR personnel...

CVE-2021-45222

CVE-2021-45222 affects COINS Construction Cloud 11.12. The connected PT-Security entry confirms a vulnerability caused by logical flaws in the human resources interface that allows privilege escalation by HR personnel. No exploit details are provided in the documents. Recommendation from PT-Secur...