Our Journey to GDPR Compliance: Lessons learned on our way to May 25th

With the European Union’s EU General Data Protection Regulation GDPR date fast approaching, we have been working hard to make sure our already strong security culture and policies will align with the new regulation. As GDPR is a very broad law that includes people, process, and technology, workin...

SQL Injection Vulnerability in Phpyun Cloud Talent System /admin/model/hr.class.php File

PHPYun is a Chinese talent operation system with independent intellectual property rights. There is a SQL injection vulnerability in the file /admin/model/hr.class.php of the phpyun cloud talent system, which can be exploited by attackers to obtain database sensitive information...

kwp-inside-hr.com XSS vulnerability

Open Bug Bounty ID: OBB-567971 Description| Value ---|--- Affected Website:| kwp-inside-hr.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Workable Zone 1.1 Database Disclosure

============================================================================================================================ | Title : Workable Zone v1.1 Human Resource Management System data base Disclosure Vulnerability | | Author : indoushka | | email : [email protected] | | Tested on :...

CVE-2018-2681

CVE-2018-2681 affects Oracle PeopleSoft Enterprise HCM Human Resources (Security subcomponent) in version 9.2. The vulnerability can be exploited by a low-privilege attacker with network access via HTTP to cause unauthorized updates, inserts, or deletes and unauthorized reads of a subset of HCM H...

hr-recruit.asus.com XSS vulnerability

Open Bug Bounty ID: OBB-524730 Description| Value ---|--- Affected Website:| hr-recruit.asus.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

apps.hr.emory.edu XSS vulnerability

Open Bug Bounty ID: OBB-451698 Description| Value ---|--- Affected Website:| apps.hr.emory.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

International Islamic University Chittagong: Default credentials on http://119.18.148.140/hrd/

Hello, When the mentioned URL is opened, the user is presented with a login form that logs them into the "HR & Payroll" system of the university. The issue here is that the credentials used are the application's default credentials, which are mentioned here...

CVE-2017-14848

WPHRM Human Resource Management System for WordPress 1.0 allows SQL Injection via the employeeid parameter...

Ultimate HR System <= 1.2 - Directory Traversal / Cross-Site Scripting Vulnerabilities

Exploit for php platform in category web applications Exploit Title: HRM - Workable Zone : Ultimate HR System Last Name Other vulnerable fields include: First Name, Contact Number Unauthenticated Directory Traversal: http://localhost.com/download?type=document&filename=../../../../../etc/passwd...

Ultimate HR System 1.2 Cross Site Scripting / Directory Traversal

Exploit Title: HRM - Workable Zone : Ultimate HR System Last Name Other vulnerable fields include: First Name, Contact Number Unauthenticated Directory Traversal: http://localhost.com/download?type=document&filename=../../../../../etc/passwd Credits & Authors: ================== 8bitsec -...

Ultimate HR System < 1.2 - Directory Traversal / Cross-Site Scripting

Exploit Title: HRM - Workable Zone : Ultimate HR System Last Name Other vulnerable fields include: First Name, Contact Number Unauthenticated Directory Traversal: http://localhost.com/download?type=document&filename=../../../../../etc/passwd Credits & Authors: ================== 8bitsec -...

viessmann.hr XSS vulnerability

Open Bug Bounty ID: OBB-270014 Description| Value ---|--- Affected Website:| viessmann.hr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

typhon.gmu.edu XSS vulnerability

Vulnerable URL: https://typhon.gmu.edu/HR/mymasonhr/index.php?action=login=appchoose.php==1"...

Unauthorized Access Vulnerability in Huatian Power OA8000 System

Huatian Power OA8000 system is a collaborative OA office system. An unauthorized access vulnerability exists in the demo.oa8000.com/OAapp/bfapp/buffalo/hrApplicationFormService page of the Huatian Power OA8000 system. An attacker is allowed to gain access to obtain sensitive information...

airservcorp.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://airservcorp.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / N...

cathaybankcareers.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://cathaybankcareers.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

mcd.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://mcd.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

monsterhires.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://monsterhires.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 20.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

ohiochristianuniversity.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://ohiochristianuniversity.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...