CVE-2023-22906

CVE-2023-22906 CVE-2023-22906 is a critical vulnerability that affects the Hero Qubo Smart Doorbell device running version HCD0102V1.3820220125. This particular device allows Telnet access with root privileges by default, without requiring a password. This vulnerability poses a significant securi...

CVE-2026-116050

A vulnerability has been found in krupalshah Employee Recruitment System up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects an unknown part of the file /source/registerform3.php of the component Registration. The manipulation of the argument pemail leads to sql injection. The attack can...

CVE-2026-116050 krupalshah Employee Recruitment System Registration registerform3.php sql injection

A vulnerability has been found in krupalshah Employee Recruitment System up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects an unknown part of the file /source/registerform3.php of the component Registration. The manipulation of the argument pemail leads to sql injection. The attack can...

EUVD-2026-109378

A vulnerability has been found in krupalshah Employee Recruitment System up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects an unknown part of the file /source/registerform3.php of the component Registration. The manipulation of the argument pemail leads to sql injection. The attack can...

CVE-2026-116050

The krupalshah Employee Recruitment System (Registration component) contains a SQL injection vulnerability in the registerform3.php file. An attacker can remotely initiate the attack by manipulating the pemail argument. The exploit has been publicly disclosed and may be used. Because the product ...

CVE-2026-116050 krupalshah Employee Recruitment System Registration registerform3.php sql injection

A vulnerability has been found in krupalshah Employee Recruitment System up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects an unknown part of the file /source/registerform3.php of the component Registration. The manipulation of the argument pemail leads to sql injection. The attack can...

Krupal Employee Recruitment System input validation error vulnerability

The Krupal Employee Recruitment System has a security vulnerability. This vulnerability stems from improper handling of parameters such as university/institute/branch/degree/status/cpi/semester/experience by the mysqlquery function in the file /source/registerform2.php within the Registration...

PT-2026-122960

A vulnerability has been found in krupalshah Employee Recruitment System up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects an unknown part of the file /source/registerform3.php of the component Registration. The manipulation of the argument pemail leads to sql injection. The attack can...

Krupal Employee Recruitment System input validation error vulnerability

The Krupal Employee Recruitment System has a security vulnerability. This vulnerability stems from improper handling of the parameters firstname, middlename, lastname, gender, birthdate, state, statespecify, city, and cityspecify by the mysqlquery function within the Registration component at...

Krupal Employee Recruitment System input validation error vulnerability

The Krupal Employee Recruitment System has a security vulnerability stemming from improper handling of the pemail parameter in the file /source/registerform3.php within its Registration component. This flaw may lead to SQL injection, allowing attackers to launch remote attacks...

“Spray and pray” job applications could make it harder for you to spot a scam

AI can help you send more job applications. But when you lose track of where you’ve applied, a fake recruiter’s message can start to look like the reply you’ve been waiting for. Job hunting can feel like shouting into the void. You send applications, rewrite cover letters, and wait for replies th...

OpenCATS arbitrary file upload vulnerability

Versions of OpenCATS prior to 0.10.0 have a vulnerability related to arbitrary file uploads. This vulnerability stems from the Import module, specifically modules/import/ImportUI.php. This file retains the original name of the uploaded file and places it in a temporary directory accessible to the...

CVE-2026-63432 Horilla: Server-Side Template Injection (SSTI) in Mail Preview Endpoints Allows Authenticated Users to Disclose Password Hashes and Server Metadata

Horilla is an HR and CRM software. From 1.0.0 until 1.6.0 and 2.0.0, the getmailpreview handlers in recruitment/views/actions.py and employee/notinoutdashboard.py render a user-controlled body at /recruitment/get-mail-preview/ and /employee/get-employee-mail-preview with the full request object i...

CVE-2026-63432: Improper Control of Generation of Code

Horilla is an HR and CRM software. From 1.0.0 until 1.6.0 and 2.0.0, the getmailpreview handlers in recruitment/views/actions.py and employee/notinoutdashboard.py render a user-controlled body at /recruitment/get-mail-preview/ and /employee/get-employee-mail-preview with the full request object i...

PT-2026-99136

Name of the Vulnerable Software and Affected Versions Horilla versions 1.0.0 through 1.5.9 Horilla version 2.0.0 affected versions not specified Description The get mail preview handlers in recruitment/views/actions.py and employee/not in out dashboard.py render a user-controlled body at the...

osint-suspicious-recruitment-case

Investigación OSINT: Caso de Reclutamiento Sospechoso Este repositorio documenta una investigación de OSINT Open Source Intelligence centrada en una actividad de reclutamiento sospechosa vinculada a múltiples plataformas, números de teléfono y servicios en línea. El objetivo de este proyecto es...

CTM360 Uncovers Over 3,000 Recruitment Phishing URLs Using Browser-in-the-Browser (BitB) Credential Traps

Cybersecurity researchers have uncovered a large-scale, global recruitment-themed phishing campaign that uses fake interview scheduling pages and Browser-in-the-Browser BitB windows to steal Google and Facebook credentials and, in more advanced cases, relay multi-factor authentication MFA prompts...

Social media platforms crack down on drone factory recruiting game

A video game about drone warfare may look like an unusual cybersecurity story. But cybersecurity isn't only about malware or stolen passwords. Sometimes it's about understanding how online platforms are used to influence decisions, build trust, and persuade people to share personal information or...

How mule betting scams recruit ordinary people

Mule betting or third-party betting account scams are a form of money mule scam where criminals recruit or coerce people into opening gambling accounts in their own name. The criminals then use those accounts to place bets to help launder money and obscure the source or ownership of funds. The UK...

CVE-2026-9237

Summary: CVE-2026-9237 affects the WordPress plugin “Crew HRM” (Employee, Leave and Recruitment Management System). All versions up to 1.2.2 are vulnerable to an authorization bypass due to improper access verification. Authenticated users with subscriber-level access or higher can delete, archiv...