CVE-2026-15721

Cleartext storage of sensitive information vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows SQL Injection. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

EUVD-2026-52646

Cleartext storage of sensitive information vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows SQL Injection. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

CVE-2026-18686

creationtimestamp| type| source ---|---|--- 2026-08-04 01:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117034649197021910 2026-08-04 01:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3ms7ugrbllc2x 2026-08-04 02:01:18+00:00| seen|...

PT-2026-67685

Use of GET request method with sensitive query strings vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Session Hijacking. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

ROS-20260804-73-0010

The vulnerability of the inode.c component in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

PT-2026-67681

Observable response discrepancy vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Account Footprinting. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

ROS-20260804-73-0017

The vulnerability of the fs/btrfs kernel component in the Linux operating system relates to operations involving resources after their expiration or release. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...

ROS-20260804-73-0042

The vulnerability of the xskgenericrcv function in the net/xdp/xsk.c module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of...

CVE-2026-14804: Use of Hard-coded Cryptographic Key

Use of hard-coded cryptographic key vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Read Sensitive Constants Within an Executable. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

ROS-20260804-73-0032

The vulnerability of the padatareorder function in the kernel/padata.c module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-14465: Insufficient Session Expiration

Insufficient session expiration vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Reusing Session IDs aka Session Replay. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

CVE-2026-14219: URL Redirection to Untrusted Site

URL redirection to untrusted site 'open redirect' vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Phishing. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

ROS-20260804-73-0038

The vulnerability of the checkmuloverflow function in the netfilter component of the Linux operating system is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a attacker to cause a service failure...

CVE-2026-14192: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Stored XSS. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

CVE-2026-14175: Unrestricted Upload of File with Dangerous Type

Unrestricted upload of file with dangerous type vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Upload a Web Shell to a Web Server. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

CVE-2026-68494: Allocation of Resources Without Limits or Throttling

The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser is incomplete. This record covers the remaining bypass. The earlier fix wired validateIntegerLength into a new setIntLength helper and invoked it...

PT-2026-67678

Unrestricted upload of file with dangerous type vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Upload a Web Shell to a Web Server. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

PT-2026-67680

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Path Traversal. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

CVE-2026-15721: Cleartext Storage of Sensitive Information

Cleartext storage of sensitive information vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows SQL Injection. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

PT-2026-67686

Cleartext storage of sensitive information vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows SQL Injection. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...