Trend Micro Named Best Company To Work For In Taiwan

Trend Micro prides itself on caring first about people – both in our external mission and internally with our employees. As this issue is close to the hearts of our executives, we are always very proud to be recognized by related awards. The HR Asia Awards Taiwan recently named Trend Micro as one...

CVE-2018-14027

Digisol Wireless Wifi Home Router HR-3300 allows XSS via the userid or password parameter to the admin login page...

Design/Logic Flaw

Digisol Wireless Wifi Home Router HR-3300 allows XSS via the userid or password parameter to the admin login page...

CVE-2018-14027

Digisol Wireless Wifi Home Router HR-3300 allows XSS via the userid or password parameter to the admin login page...

CVE-2018-14027

Digisol HR-3300 Wireless Home Router is affected by a cross‑site scripting (XSS) vulnerability, exposed via the userid or password parameter on the admin login page. Multiple connected sources corroborate this vulnerability exists in the Digisol HR-3300 series (e.g., CVE-2018-14027) and describe ...

Zucchetti HR Portal Path Traversal Vulnerability

Zucchetti HR Portal is a human resources management system. A path traversal vulnerability exists in Zucchetti HR Portal 2019-03-15 and prior versions. The vulnerability stems from a failure of a networked system or product to properly filter for specific elements in a resource or file path. An...

CVE-2019-10257

Zucchetti HR Portal through 2019-03-15 allows Directory Traversal. Unauthenticated users can escape outside of the restricted location dot-dot-slash notation to access files or directories that are elsewhere on the system. Through this vulnerability it is possible to read the application's java...

CVE-2019-10257

Zucchetti HR Portal through 2019-03-15 allows Directory Traversal. Unauthenticated users can escape outside of the restricted location dot-dot-slash notation to access files or directories that are elsewhere on the system. Through this vulnerability it is possible to read the application's java...

Directory traversal

Zucchetti HR Portal through 2019-03-15 allows Directory Traversal. Unauthenticated users can escape outside of the restricted location dot-dot-slash notation to access files or directories that are elsewhere on the system. Through this vulnerability it is possible to read the application's java...

CVE-2019-10257

CVE-2019-10257 affects Zucchetti HR Portal (through 2019-03-15). It is a directory traversal/path-traversal vulnerability that allows unauthenticated users to escape restricted directories (dot-dot-slash) and read files, including the application’s Java sources under /WEB-INF/classes/*.class. NVD...

CVE-2019-10257

Zucchetti HR Portal through 2019-03-15 allows Directory Traversal. Unauthenticated users can escape outside of the restricted location dot-dot-slash notation to access files or directories that are elsewhere on the system. Through this vulnerability it is possible to read the application's java...

Design/Logic Flaw

The WP Human Resource Management plugin before 2.2.6 for WordPress does not ensure that a leave modification occurs in the context of the Administrator or HR Manager role...

Joomla Mailto 1.2.2.2 SQL Injection

Exploit Title : Joomla Mailto Components 1.2.2.2 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 04/02/2019 Vendor Homepage : hr-it-solutions.com Software Download Link : github.com/eddieajau/joomla-mailto...

Hackers Succeed in NASA Mission, Lifting Thousands of Employee Records

NASA has become the latest victim of a breach, but it’s unlikely that sensitive space mission data was impacted. In an internal memo sent to employees, NASA admitted that it was hacked by an unauthorized intruder in October, and that personally identifiable information for thousands of employees...

hr-live.com XSS vulnerability

Open Bug Bounty ID: OBB-710964 Description| Value ---|--- Affected Website:| hr-live.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...

hr-technologies.com XSS vulnerability

Open Bug Bounty ID: OBB-705792 Description| Value ---|--- Affected Website:| hr-technologies.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

candidate.hr-manager.net XSS vulnerability

Open Bug Bounty ID: OBB-702494 Description| Value ---|--- Affected Website:| candidate.hr-manager.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:...

Let’s Continue the Skills Gap Conversation

Most analysis is that the cybersecurity skills gap or shortage is getting worse. ESG reported in CSOOnline that 2018 had the highest levels, at 51%, where organizations "claimed their organization had a problematic shortage of cybersecurity skills." It’s a complex problem, but I believe with...

SAP HCM Fiori People Profile GBX01 HR Privilege Vulnerability

SAP HCM Fiori People Profile GBX01 HR is a human resource management solution from SAP. An elevation of privilege vulnerability exists in SAP HCM Fiori People Profile GBX01 HR version 6.0, which can be exploited by an attacker to gain privileges due to a failure of the program to perform...

CVE-2018-2461

Missing authorization check in SAP HCM Fiori "People Profile" GBX01 HR version 6.0 for an authenticated user which may result in an escalation of privileges...