5532 matches found
Linux kernel HID DoS
The vulnerability of the HID component in Linux operating systems is related to memory corruption. Exploiting this vulnerability can allow an attacker to cause a system failure...
How PAM Mitigates Insider Threats: Preventing Data Breaches, Privilege Misuse, and More
When people think of cybersecurity threats, they often picture external hackers breaking into networks. However, some of the most damaging breaches stem from within organizations. Whether through negligence or malicious intent, insiders can expose your organization to significant cybersecurity...
CVE-2025-2590
A vulnerability was found in code-projects Human Resource Management System 1.0.1. It has been classified as problematic. Affected is the function UpdateRecruitmentById of the file \handler\recruitment.go. The manipulation of the argument c leads to cross site scripting. It is possible to launch...
CVE-2025-2589
A vulnerability was found in code-projects Human Resource Management System 1.0.1 and classified as critical. This issue affects the function Index of the file \handler\Account.go. The manipulation of the argument usercookie leads to improper authorization. The exploit has been disclosed to the...
CVE-2025-2590
A vulnerability was found in code-projects Human Resource Management System 1.0.1. It has been classified as problematic. Affected is the function UpdateRecruitmentById of the file \handler\recruitment.go. The manipulation of the argument c leads to cross site scripting. It is possible to launch...
CVE-2025-2589
A vulnerability was found in code-projects Human Resource Management System 1.0.1 and classified as critical. This issue affects the function Index of the file \handler\Account.go. The manipulation of the argument usercookie leads to improper authorization. The exploit has been disclosed to the...
CVE-2025-2589
A vulnerability was found in code-projects Human Resource Management System 1.0.1 and classified as critical. This issue affects the function Index of the file \handler\Account.go. The manipulation of the argument usercookie leads to improper authorization. The exploit has been disclosed to the...
CVE-2025-2590
CVE-2025-2590 affects code-projects Human Resource Management System 1.0.1. The vulnerability lies in the UpdateRecruitmentById function of the file handler\recruitment.go, where manipulation of the argument c leads to cross-site scripting. It can be exploited remotely and the exploit has been di...
CVE-2025-2590 code-projects Human Resource Management System recruitment.go UpdateRecruitmentById cross site scripting
A vulnerability was found in code-projects Human Resource Management System 1.0.1. It has been classified as problematic. Affected is the function UpdateRecruitmentById of the file \handler\recruitment.go. The manipulation of the argument c leads to cross site scripting. It is possible to launch...
CVE-2025-2590 code-projects Human Resource Management System recruitment.go UpdateRecruitmentById cross site scripting
A vulnerability was found in code-projects Human Resource Management System 1.0.1. It has been classified as problematic. Affected is the function UpdateRecruitmentById of the file \handler\recruitment.go. The manipulation of the argument c leads to cross site scripting. It is possible to launch...
CVE-2025-2589 code-projects Human Resource Management System Account.go Index improper authorization
A vulnerability was found in code-projects Human Resource Management System 1.0.1 and classified as critical. This issue affects the function Index of the file \handler\Account.go. The manipulation of the argument usercookie leads to improper authorization. The exploit has been disclosed to the...
CVE-2025-2589 code-projects Human Resource Management System Account.go Index improper authorization
A vulnerability was found in code-projects Human Resource Management System 1.0.1 and classified as critical. This issue affects the function Index of the file \handler\Account.go. The manipulation of the argument usercookie leads to improper authorization. The exploit has been disclosed to the...
CVE-2025-2589
CVE-2025-2589 affects the Code-Projects Human Resource Management System (HMS) 1.0.1. The vulnerability resides in the Index function of the file handler\Account.go , where manipulation of the argument user_cookie leads to improper authorization. Multiple sources in connected documents confirm th...
CVE-2025-2590: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in code-projects Human Resource Management System 1.0.1. It has been classified as problematic. Affected is the function UpdateRecruitmentById of the file \handler\recruitment.go. The manipulation of the argument c leads to cross site scripting. It is possible to launch...
Code-Projects Human Resource Management System 安全漏洞
Code-Projects Human Resource Management System is an open source human resource management system from Code-Projects. A security vulnerability exists in Code-Projects Human Resource Management System version 1.0.1, which stems from an improperly authorized Index function in the handlerAccount.go...
PT-2025-12416
Name of the Vulnerable Software and Affected Versions code-projects Human Resource Management System version 1.0.1 Description A critical issue affects the function Index of the file handlerAccount.go. The manipulation of the argument user cookie leads to improper authorization. The exploit has...
CVE-2025-2589: Improper Authorization
A vulnerability was found in code-projects Human Resource Management System 1.0.1 and classified as critical. This issue affects the function Index of the file \handler\Account.go. The manipulation of the argument usercookie leads to improper authorization. The exploit has been disclosed to the...
CVE-2025-29640: Improper Neutralization of Special Elements used in an SQL Command
Phpgurukul Human Metapneumovirus HMPV – Testing Management System v1.0 is vulnerable to SQL Injection in /patient-report.php via the parameter searchdata...
PT-2025-12425
Name of the Vulnerable Software and Affected Versions Phpgurukul Human Metapneumovirus HMPV – Testing Management System version 1.0 Description The issue is related to SQL Injection in the /patient-report.php endpoint via the searchdata parameter. This allows for potential exploitation...
CVE-2025-29640
The Phpgurukul Human Metapneumovirus (HMPV) – Testing Management System v1.0 is vulnerable to SQL Injection (CWE-89). The flaw exists in the /patient-report.php file when processing the searchdata parameter. This vulnerability allows for the improper neutralization of special elements used in an ...