Lucene search
+L

959 matches found

NVD
NVD
added 2021/10/22 2:15 p.m.21 views

CVE-2021-42169

The Simple Payroll System with Dynamic Tax Bracket in PHP using SQLite Free Source Code by: oretnom23 is vulnerable from remote SQL-Injection-Bypass-Authentication for the admin account. The parameter username from the login form is not protected correctly and there is no security and escaping fr...

9.8CVSS0.0274EPSS
SaveExploits1References2
OSV
OSV
added 2021/10/22 2:15 p.m.9 views

CVE-2021-42169

The Simple Payroll System with Dynamic Tax Bracket in PHP using SQLite Free Source Code by: oretnom23 is vulnerable from remote SQL-Injection-Bypass-Authentication for the admin account. The parameter username from the login form is not protected correctly and there is no security and escaping fr...

9.8CVSS5.8AI score0.0274EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/10/22 1:9 p.m.18 views

CVE-2021-42169

The Simple Payroll System with Dynamic Tax Bracket in PHP using SQLite Free Source Code by: oretnom23 is vulnerable from remote SQL-Injection-Bypass-Authentication for the admin account. The parameter username from the login form is not protected correctly and there is no security and escaping fr...

9.9AI score0.0274EPSS
SaveExploits1References2
ThreatPost
ThreatPost
added 2021/10/21 5:33 p.m.40 views

Gigabyte Allegedly Hit by AvosLocker Ransomware

The AvosLocker ransomware gang is claiming that it breached tech giant Gigabyte and has leaked a sample of what it claims are files stolen from the Taiwanese company’s network. It’s offering to sell the rest. On Wednesday, the gang posted a “press release” announcing that it had purportedly gutte...

6.7AI score
SaveExploits0References14
zdt
zdt
added 2021/10/13 12:0 a.m.291 views

Simple Payroll System 1.0 - SQL injection Authentication Bypass Vulnerability

Exploit Title: Simple Payroll System 1.0 - SQLi Authentication Bypass Exploit Author: Yash Mahajan Vendor Homepage: https://www.sourcecodester.com/php/14974/simple-payroll-system-dynamic-tax-bracket-php-using-sqlite-free-source-code.html Software Link:...

0.5AI score
SaveExploits0
Packet Storm
Packet Storm
added 2021/10/13 12:0 a.m.266 views

Simple Payroll System 1.0 SQL Injection

Exploit Title: Simple Payroll System 1.0 - SQLi Authentication Bypass Date: 2021-10-09 Exploit Author: Yash Mahajan Vendor Homepage: https://www.sourcecodester.com/php/14974/simple-payroll-system-dynamic-tax-bracket-php-using-sqlite-free-source-code.html Software Link:...

0.3AI score
SaveExploits0
CNVD
CNVD
added 2021/10/09 12:0 a.m.20 views

IceHrm Cross-Site Scripting Vulnerability

IceHrm is a human resource management Hrm system that includes features such as employee management, leave management, and payroll. The system includes functions such as employee management, leave management and payroll management.IceHrm has security vulnerabilities on several pages that could be...

5.4CVSS2.7AI score0.00743EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/08/09 12:0 a.m.33 views

Wage-CMS Cross-site Request Forgery Vulnerability

Wage-CMS is a payroll system based on laravel-admin for small and medium-sized businesses. wage-CMS version 1.5.-dev is vulnerable to cross-site request forgery. An attacker can use this vulnerability to add arbitrary users...

6.5CVSS4AI score0.00443EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/07/20 12:0 a.m.10 views

Oracle PeopleSoft Enterprise HCM Global Payroll 安全漏洞

Oracle PeopleSoft Enterprise HCM Global Payroll is a rules-based payroll calculation solution from Oracle Corporation Oracle. A security vulnerability exists in Oracle PeopleSoft's PeopleSoft Enterprise HCM Shared Components product Component:Person Search that allows a highly privileged attacker...

6.5CVSS7.1AI score0.00901EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/07/16 12:0 a.m.12 views

Information leakage vulnerability in payroll inquiry system

Payroll Enquiry System is a payroll inquiry system. The Payroll Inquiry System has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

6.4AI score
SaveExploits0
Krebs on Security
Krebs on Security
added 2021/07/01 6:56 p.m.53 views

Intuit to Share Payroll Data from 1.4M Small Businesses With Equifax

Financial services giant Intuit this week informed 1.4 million small businesses using its QuickBooks Online Payroll and Intuit Online Payroll products that their payroll information will be shared with big-three consumer credit bureau Equifax starting later this year unless customers opt out by t...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2021/06/28 12:0 a.m.13 views

Unauthorized Access Vulnerability in Payroll Inquiry System

Payroll Enquiry System is an application. An unauthorized access vulnerability exists in the Payroll Inquiry System, which can be exploited by an attacker to access specific files, jump to the backend, and view information such as the ID number of an active employee...

6.7AI score
SaveExploits0
CNVD
CNVD
added 2021/06/02 12:0 a.m.48 views

Frontier ichris has an unspecified vulnerability

Frontier ichris is an application from Frontier Australia. A payroll software. A security vulnerability exists in Frontier ichris version 5.18 that allows users to upload malicious executable files that could later be downloaded and run by any client user. No details of the vulnerability are...

9.8CVSS6.8AI score0.01228EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/06/02 12:0 a.m.21 views

Unspecified vulnerability in Frontier ichris (CNVD-2021-50156)

Frontier ichris is an application from Frontier Australia. A payroll software. A security vulnerability exists in Frontier ichris version 5.18, which stems from the program incorrectly handling DNS requests that request the hostname in the HTTP host header. No detailed vulnerability details are...

7.5CVSS6.8AI score0.01236EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/05/29 12:0 a.m.5 views

Frontier ichris 安全漏洞

Frontier ichris is an application from Frontier Australia. A payroll software. A security vulnerability exists in Frontier ichris version 5.18, which stems from the program incorrectly handling DNS requests that request the hostname in the HTTP host header. No detailed vulnerability details are...

7.5CVSS5.5AI score0.01236EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/05/29 12:0 a.m.7 views

Frontier ichris 代码问题漏洞

Frontier ichris is an application from Frontier Australia. A payroll software. A security vulnerability exists in Frontier ichris version 5.18 that allows users to upload malicious executable files that could later be downloaded and run by any client user. No details of the vulnerability are...

9.8CVSS5.6AI score0.01228EPSS
SaveExploits0References1
ThreatPost
ThreatPost
added 2021/05/12 4:50 p.m.54 views

Gig Workers Being Paid $500 for Payroll Passwords

Fintech startup Argyle, a financial-services platform aimed at gig workers, is working to replace credit scores assigned by bureaus like Equifax. But closer security analysis hints that Argyle could be just the latest incarnation of an ongoing data-collection campaign, paying people to give up...

5.7AI score
SaveExploits0References9
CNVD
CNVD
added 2021/05/12 12:0 a.m.47 views

SAP Business One Information Disclosure Vulnerability (CNVD-2022-58480)

SAP Business One is a suite of enterprise management software from SAP, a German company. The software includes financial management, operations management and human resources management functions.SAP Business One Chef cookbook contains an information disclosure vulnerability that could be...

7.8CVSS1.9AI score0.00258EPSS
SaveExploits0References1
OSV
OSV
added 2021/05/11 3:15 p.m.4 views

CVE-2021-27613

Under certain conditions, SAP Business One Chef cookbook, version - 9.2, 9.3, 10.0, used to install SAP Business One, allows an attacker to exploit an insecure temporary folder for incoming & outgoing payroll data and to access information which would otherwise be restricted, which could lead to...

7.8CVSS5.8AI score0.00258EPSS
SaveExploits0References2
Prion
Prion
added 2021/05/11 3:15 p.m.17 views

Information disclosure

Under certain conditions, SAP Business One Chef cookbook, version - 9.2, 9.3, 10.0, used to install SAP Business One, allows an attacker to exploit an insecure temporary folder for incoming & outgoing payroll data and to access information which would otherwise be restricted, which could lead to...

4.6CVSS7.3AI score0.00258EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder