69 matches found
CVE-2026-57912
Johnson & Johnson Campus Recruiting before 2025-10-31 allows viewing of data provided by recruited students, and notes entered about students by interviewers...
CVE-2026-57912
Johnson & Johnson Campus Recruiting before 2025-10-31 allows viewing of data provided by recruited students, and notes entered about students by interviewers...
CVE-2026-57912
Johnson & Johnson Campus Recruiting before 2025-10-31 allows viewing of data provided by recruited students, and notes entered about students by interviewers...
EUVD-2026-39643
Johnson & Johnson Campus Recruiting before 2025-10-31 allows viewing of data provided by recruited students, and notes entered about students by interviewers...
CVE-2026-57912
This CVE concerns the Johnson & Johnson Campus Recruiting web application (pre-2025-10-31), where data provided by recruited students and notes entered by interviewers may be viewed by unauthorized parties. The vulnerability implies an exposure of personal/student data with no available details o...
SAP E-Recruiting BSP 跨站脚本漏洞
SAP E-Recruiting BSP is a recruitment process management module provided by the German company SAP. SAP E-Recruiting BSP has a cross-site scripting vulnerability. This vulnerability stems from insufficient validation of user-controlled URL parameters, which may lead to unvalidated redirections to...
CVE-2009-4991
Cross-site scripting XSS vulnerability in users/resumeregister.php in Omnistar Recruiting allows remote attackers to inject arbitrary web script or HTML via the job2 parameter...
CVE-2025-42924
SAP S/4HANA landscape SAP E-Recruiting BSP allows an unauthenticated attacker to craft malicious links, when clicked the victim could be redirected to the page controlled by the attacker. This has low impact on confidentiality and integrity of the application with no impact on availability...
CVE-2025-42924 Open Redirect vulnerabilities in SAP S/4HANA landscape (SAP E-Recruiting BSP)
SAP S/4HANA landscape SAP E-Recruiting BSP allows an unauthenticated attacker to craft malicious links, when clicked the victim could be redirected to the page controlled by the attacker. This has low impact on confidentiality and integrity of the application with no impact on availability...
CVE-2025-42924
Summary (CVE-2025-42924) : The issue affects SAP S/4HANA landscape, specifically the SAP E-Recruiting BSP. An unauthenticated attacker can craft malicious links that, when clicked, redirect the victim to a page controlled by the attacker (open redirect). The documented impact is low for confident...
EUVD-2017-6012
Malware in sbrugna...
EUVD-2008-1829
Malware in sbrugna...
EUVD-2009-4953
Malware in sbrugna...
Violence-as-a-Service: Encrypted Apps Used in Recruiting Teens as Hitmen
European police, led by Denmark and Sweden, are arresting individuals in a crackdown on violence-as-a-service, where criminal groups recruit teenagers online for contract killings. Learn about Europol's OTF GRIMM task force and how they're fighting this disturbing trend...
PrepHero-Linked Database Exposed Data of 3M Students and Coaches
A security lapse on PrepHero, a college recruiting platform, exposed millions of unencrypted records, including sensitive personal details…...
OfferBox 安全漏洞
OfferBox is a recruiting application from OfferBox, Inc. OfferBox has a security vulnerability that stems from the use of hard-coded keys...
Cybercriminals’ Recruiting Effort Highlights Need for Proper User Access Controls
The Lapsus$ ransomware gang’s modus operandi seems to be evolving. Following the recent data breaches of Nvidia and Samsung, on March 10, 2022, the Lapsus$ ransomware gang posted a message on their Telegram channel claiming that they were looking to recruit employees/insiders of companies in the...
Why diversity is important for a strong cybersecurity team
Medicine. Aeronautics. Academia. When you’re a cybersecurity professional, the colleague next to you could have started in one of these industries—or just about any other you can imagine. The backgrounds of cybersecurity professionals are more diverse than those of professionals in other...
secure.tennisrecruiting.net Cross Site Scripting vulnerability OBB-1487887
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
phoenix-recruiting.com Cross Site Scripting vulnerability OBB-1201059
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...