Design/Logic Flaw

HR Systems Strategies info:HR HRIS 7.9 does not properly protect the database password, which allows local users to bypass intended database restrictions by accessing the USERPW registry key and bypassing an unspecified obfuscation technique...

CVE-2013-5208

HR Systems Strategies info:HR HRIS 7.9 does not properly protect the database password, which allows local users to bypass intended database restrictions by accessing the USERPW registry key and bypassing an unspecified obfuscation technique...

CVE-2013-5208

CVE-2013-5208 affects HR Systems Strategies info:HR HRIS 7.9, where the database password is stored in a registry key (USERPW) with weak obfuscation. This enables a local attacker to read/decipher the password and gain full control of the database and application, including access to PII. Vendor ...

PT-2013-5445

Name of the Vulnerable Software and Affected Versions HR Systems Strategies info:HR HRIS version 7.9 Description The issue allows local users to bypass intended database restrictions. This is achieved by accessing the USERPW registry key and bypassing an unspecified obfuscation technique, which...

CVE-2013-5208: Undefined Security Weakness

HR Systems Strategies info:HR HRIS 7.9 does not properly protect the database password, which allows local users to bypass intended database restrictions by accessing the USERPW registry key and bypassing an unspecified obfuscation technique...

CVE-2012-3218

Unspecified vulnerability in the Human Resources component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Security Groups...

RedHat Update for net-snmp RHSA-2013:0124-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Human Resources component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and availability, related to PDF generation...

Attackers Go Phishing for Payroll Workers With Java CVE-2012-1723 Exploit

The Java CVE-2012-1723 vulnerability is suddenly the golden child of bugs. The flaw, which Oracle patched in June, has been the target of several pieces of malware and Web-based attacks of late, and now researchers say there is a phishing scam targeting payroll and HR employees that involves and...

HR Software SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

HR Software - SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x...

骑士cms注入，后台拿shell

简要描述： 0x1 任意用户登录 0x2 盲注 0x3 后台拿shell 0x4 随机函数问题 详细说明： 0x1 任意用户登录 user/login.php elseifempty$SESSION'uid' || empty$SESSION'username' || empty$SESSION'utype' && $COOKIE'QS''username' && $COOKIE'QS''password' && $COOKIE'QS''uid' ifcheckcookie$COOKIE'QS''username',$COOKIE'QS''password'...

Another Government contractor - PCS Consultants (USA) got Hacked by #Antisec

Another Government contractor - PCS Consultants USA got Hacked Another Government contractor - PCS Consultants USA got hacked by Anonymous Hackers & Antisec operation Hackers. Database of website has been extracted and leaked on internet via tweeter on Pastebin.The leaked Data extracted Includes...

Design/Logic Flaw

Unspecified vulnerability in the PeopleSoft Enterprise HCM - HR component in Oracle PeopleSoft and JDEdwards Suite 9.0 Bundle 13 and 9.1 Bundle 3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2010-3530

Unspecified vulnerability in the PeopleSoft Enterprise HCM - HR component in Oracle PeopleSoft and JDEdwards Suite 9.0 Bundle 13 and 9.1 Bundle 3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2010-3530

CVE-2010-3530 affects PeopleSoft Enterprise HCM - HR inside Oracle PeopleSoft and JD Edwards Suite, specifically 9.0 Bundle #13 and 9.1 Bundle #3. The vulnerability is described as unspecified and allows remote authenticated users to affect confidentiality and integrity via unknown vectors; no de...

PT-2010-4892

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise HCM - HR component versions 9.0 Bundle 13 and 9.1 Bundle 3 Description The issue affects confidentiality and integrity, allowing remote authenticated users to exploit it via unknown vectors. Recommendations For versions 9...

CVE-2010-3530: Undefined Security Weakness

Unspecified vulnerability in the PeopleSoft Enterprise HCM - HR component in Oracle PeopleSoft and JDEdwards Suite 9.0 Bundle 13 and 9.1 Bundle 3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

ZeeCareers 2x XSS / Authentication Bypass

/\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111 ---------------------------------------------------------------- + ZeeCareers v2x - PHP HR Manager Website XSS / Auth Bypass // Author Info x Author: bi0 x Contact: [email protected] x Homepage :...

ZeeCareers v2x - PHP HR Manager Website [ XSS / Auth Bypass ]

Exploit for unknown platform in category web applications ============================================================= ZeeCareers v2x - PHP HR Manager Website XSS / Auth Bypass ============================================================= Title: ZeeCareers v2x - PHP HR Manager Website XSS / Auth...