CVE-2024-13006 1000 Projects Human Resource Management System employeeview.php sql injection

A vulnerability, which was classified as critical, has been found in 1000 Projects Human Resource Management System 1.0. This issue affects some unknown processing of the file /employeeview.php. The manipulation of the argument search leads to sql injection. The attack may be initiated remotely...

CVE-2024-13006

CVE-2024-13006 affects 1000 Projects Human Resource Management System v1.0. The vulnerability exists in /employeeview.php where manipulating the search parameter leads to SQL injection. Remote exploitation is possible and exploits have been disclosed publicly. Affected product: 1000 Projects HRM ...

CVE-2024-13006 1000 Projects Human Resource Management System employeeview.php sql injection

A vulnerability, which was classified as critical, has been found in 1000 Projects Human Resource Management System 1.0. This issue affects some unknown processing of the file /employeeview.php. The manipulation of the argument search leads to sql injection. The attack may be initiated remotely...

Human Resource Management System 注入漏洞

Human Resource Management System is a human resource management system by maverickosama Personal Developer. An injection vulnerability exists in Human Resource Management System version 1.0, which is caused by an SQL injection vulnerability in the search parameter of the /employeeview.php file...

PT-2024-17866 · Unknown · 1000 Projects Human Resource Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Human Resource Management System version 1.0 Description: A critical issue has been found in the processing of the file /employeeview.php, where the manipulation of the search argument leads to SQL injection. The attack can be...

PT-2025-4231 · Oracle · Oracle Advanced Outbound Telephony +1

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.10 Description: The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks require human interaction from...

bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution

A flaw was found in the HID Profile in BlueZ that opens doors for unauthorized connections, especially by devices like keyboards, to inject keystrokes without user confirmation. BlueZ lacks proper restrictions on non-bonded devices, creating a risk for attackers that are physically close to injec...

CISA and EPA Release Joint Fact Sheet Detailing Risks Internet-Exposed HMIs Pose to WWS Sector

Today, CISA and the Environmental Protection Agency EPA released Internet-Exposed HMIs Pose Cybersecurity Risks to Water and Wastewater Systems. This joint fact sheet provides Water and Wastewater Systems WWS facilities with recommendations for limiting the exposure of Human Machine Interfaces HM...

HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()

...

HID: core: zero-initialize the report buffer

...

Oracle Siebel Server (July 2019 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2019 CPU advisory. - Vulnerability in the Siebel Core - Server Framework product of Oracle Siebel CRM component: Search. Supported versions that are affected are 19.0...

Oracle Siebel Server <= 20.6 (July 2020 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by a vulnerability as referenced in the July 2020 CPU advisory. - Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM component: SWSE Server. Supported versions that are affected are 20.6 and prior...

The vulnerability of the software for managing human capital resources in SAP Human Capital Management (HCM) lies in the absence of authentication procedures that would allow unauthorized users to increase their privileges.

The vulnerability of software for managing human capital in the SAP Human Capital Management HCM system is related to the absence of authentication procedures. Exploiting this vulnerability can allow attackers, operating remotely, to increase their privileges...

Oracle Siebel Server (October 2022 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2022 CPU advisory. - Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM component: Marketing XMLBeans. Supported versions that are affected a...

Vulnerabilities fixed in SAP products

SAP has fixed vulnerabilities in SAP NetWeaver, ABAP, Web Dispatcher, Business Objects, HCM and Commerce Cloud. A malicious party can exploit the vulnerabilities to launch attacks that can lead to the following categories of damage: - Cross-Site Scripting XSS. - Server-Side Request Forgery SSRF. ...

SAP HCM Approve Timesheets 安全漏洞

SAP HCM Approve Timesheets is a transactional application from SAP, Germany. An authorization issue vulnerability exists in SAP HCM Approve Timesheets version 4, which stems from a failure to perform the required authorization checks on authenticated users and can be exploited by an attacker to...

CVE-2024-11436 Drag & Drop Builder, Human Face Detector, Pre-built Templates, Spam Protection, User Email Notifications & more! <= 1.4.19 - Reflected Cross-Site Scripting

The Drag & Drop Builder, Human Face Detector, Pre-built Templates, Spam Protection, User Email Notifications & more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.4.19 due to insufficient input sanitization an...

The vulnerability of the HMI interface configuration software Monitouch V-SFT lies in the possibility of buffer overflow due to a stack-based mechanism. This allows an attacker to execute arbitrary code.

The vulnerability of the HMI interface configuration software Monitouch V-SFT lies in the possibility of buffer overflow due to a stack-based mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially created V10 files...

The vulnerability of the HMI interface configuration software Monitouch V-SFT lies in the possibility of buffer overflow due to a stack-based mechanism. This allows an attacker to execute arbitrary code.

The vulnerability of the HMI interface configuration software Monitouch V-SFT is related to the possibility of buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code using specially created V8 files...

The vulnerability of the HMI interface configuration software Monitouch V-SFT lies in the possibility of buffer overflow due to a stack-based mechanism. This allows an attacker to execute arbitrary code.

The vulnerability of the HMI interface configuration software Monitouch V-SFT is related to the possibility of buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code using specially created V8C files...