481 matches found
EUVD-2025-28884
Malicious code in bioql PyPI...
EUVD-2022-42842
Malicious code in bioql PyPI...
EUVD-2022-51634
Malicious code in bioql PyPI...
EUVD-2025-7255
Malicious code in bioql PyPI...
EUVD-2024-16266
Malicious code in bioql PyPI...
EUVD-2025-23468
Malicious code in bioql PyPI...
EUVD-2025-23466
Malicious code in bioql PyPI...
EUVD-2025-22994
Malicious code in bioql PyPI...
Bold Workplanner 安全漏洞
Bold Workplanner is an enterprise software for human resource management from the Spanish company Bold Workplanner. Bold Workplanner suffers from an insecure direct object reference vulnerability that can be exploited by an attacker to access the date of current contract details using an...
BOLD Workplanner 安全漏洞
Bold Workplanner is an enterprise software for human resource management from the Spanish company Bold Workplanner. Bold Workplanner suffers from an insecure direct object reference vulnerability that can be exploited by an attacker to access permission lists using unauthorized internal identifie...
Bold Workplanner 安全漏洞
Bold Workplanner is an enterprise software for human resource management from the Spanish company Bold Workplanner. Bold Workplanner suffers from an insecure direct object reference vulnerability that can be exploited by an attacker to access basic employee details using an unauthorized internal...
Bold Workplanner 安全漏洞
Bold Workplanner is an enterprise software for human resource management from the Spanish company Bold Workplanner. Bold Workplanner suffers from an insecure direct object reference vulnerability that can be exploited by an attacker to access functional contract details using an unauthorized...
Bold Workplanner 安全漏洞
Bold Workplanner is an enterprise software for human resource management from the Spanish company Bold Workplanner. Bold Workplanner suffers from an insecure direct object reference vulnerability that can be exploited by an attacker to access basic contract details using an unauthorized internal...
CVE-2025-59525
Horilla HRMS prior to 1.4.0 is vulnerable to Cross-Site Scripting (XSS) via uploaded SVG files (and via allowed embed/ tags), enabling script execution when affected content (e.g., announcements) is viewed and potentially leading to an admin account takeover. The issue stems from improper sanitiz...
PT-2025-39308
Name of the Vulnerable Software and Affected Versions Horilla version 1.3.0 Description Horilla is a Human Resource Management System HRMS. Unauthenticated users can access uploaded resume files by directly guessing or predicting file URLs. These files are stored in a publicly accessible director...
CVE-2025-56293
code-projects Human Resource Integrated System 1.0 is vulnerable to Cross Site Scripting XSS in the Add Child Information section in the Childs Name field...
CVE-2025-56293
code-projects Human Resource Integrated System 1.0 is vulnerable to Cross Site Scripting XSS in the Add Child Information section in the Childs Name field...
CVE-2025-56293
code-projects Human Resource Integrated System 1.0 is vulnerable to Cross Site Scripting XSS in the Add Child Information section in the Childs Name field...
CVE-2025-56293
The CVE-2025-56293 entry concerns code-projects Human Resource Integrated System 1.0, where a Cross Site Scripting (XSS) vulnerability exists in the Add Child Information section via the Childs Name field. The root cause is insufficient input validation/sanitization in that field, enabling script...
