CVE-2025-12461 Unprotected access to parts of the application in Epsilon RH by Grupo Castilla

This vulnerability allows an attacker to access parts of the application that are not protected by any type of access control. The attacker could access this path ‘…/epsilonnet/License/About.aspx’ and obtain information on both the licence and the configuration of the product by knowing which...

CVE-2025-41028

A SQL Injection vulnerability has been found in Epsilon RH by Grupo Castilla. This vulnerability allows an attacker to retrieve, create, update and delete database via sending a POST request using the parameter ‘sEstadoUsr’ in ‘/epsilonnetws/WSAvisos.asmx’...

CVE-2025-41028

A SQL Injection vulnerability has been found in Epsilon RH by Grupo Castilla. This vulnerability allows an attacker to retrieve, create, update and delete database via sending a POST request using the parameter ‘sEstadoUsr’ in ‘/epsilonnetws/WSAvisos.asmx’...

CVE-2025-41028

CVE-2025-41028 affects the Epsilon RH software from Grupo Castilla. The vulnerability is a SQL Injection that allows an attacker to retrieve, create, update, and delete data by sending a POST request that uses the parameter sEstadoUsr in the endpoint /epsilonnetws/WSAvisos.asmx . This is document...

CVE-2025-41028 SQL injection in Epsilon RH

A SQL Injection vulnerability has been found in Epsilon RH by Grupo Castilla. This vulnerability allows an attacker to retrieve, create, update and delete database via sending a POST request using the parameter ‘sEstadoUsr’ in ‘/epsilonnetws/WSAvisos.asmx’...

Grupo Castilla Epsilon RH 安全漏洞

Grupo Castilla Epsilon RH is a human resource management software from the Spanish company Grupo Castilla. A security vulnerability exists in Grupo Castilla Epsilon RH, which stems from incorrect manipulation of the parameter sEstadoUsr in the file /epsilonnetws/WSAvisos.asmx, which could lead to...

EUVD-2011-3328

Malware in sbrugna...

EUVD-2020-3184

Malware in sbrugna...

EUVD-2025-7510

Malicious code in bioql PyPI...

EUVD-2025-28825

Malicious code in bioql PyPI...

CVE-2025-9193

A flaw has been found in TOTVS Portal Meu RH up to 12.1.17. Impacted is an unknown function of the component Password Reset Handler. Executing manipulation of the argument redirectUrl can lead to open redirect. The attack may be performed from a remote location. The exploit has been published and...

CVE-2025-9193

A flaw has been found in TOTVS Portal Meu RH up to 12.1.17. Impacted is an unknown function of the component Password Reset Handler. Executing manipulation of the argument redirectUrl can lead to open redirect. The attack may be performed from a remote location. The exploit has been published and...

CVE-2025-9193 TOTVS Portal Meu RH Password Reset redirect

A flaw has been found in TOTVS Portal Meu RH up to 12.1.17. Impacted is an unknown function of the component Password Reset Handler. Executing manipulation of the argument redirectUrl can lead to open redirect. The attack may be performed from a remote location. The exploit has been published and...

CVE-2025-9193

TOTVS Portal Meu RH (versions up to 12.1.17) contains a vulnerability in the Password Reset Handler where manipulating the redirectUrl argument can cause an open redirect. The issue is exploitable remotely and affects products no longer supported by the maintainer. Upgrading is recommended to mit...

TOTVS Portal Meu RH 输入验证错误漏洞

TOTVS Portal Meu RH is an enterprise management application from TOTVS Brazil. An input validation error vulnerability exists in TOTVS Portal Meu RH version 12.1.17 and earlier, which stems from mishandling of password reset and could lead to open redirection...

Malicious code in @zalastax/nolb-react-rh (npm)

The package @zalastax/nolb-react-rh was found to contain malicious code...

RHSA-2021:2040 Red Hat Security Advisory: rh-mariadb103-mariadb and rh-mariadb103-galera security update

Bulletin has no description...

CVE-2025-4601 RH - Real Estate WordPress Theme <= 4.4.0 - Authenticated (Subscriber+) Privilege Escalation

The "RH - Real Estate WordPress Theme" theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.4.0. This is due to the theme not properly restricting user roles that can be updated as part of the inspiryupdateprofile function. This makes it possible for...

CVE-2025-0458

A vulnerability classified as problematic was found in Virtual Computer Vysual RH Solution 2024.12.1. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login Panel. The manipulation of the argument page leads to cross site scripting. The attack can...

CVE-2025-2125

A vulnerability has been found in Control iD RH iD 25.2.25.0 and classified as problematic. This vulnerability affects unknown code of the file /v2/report.svc/comprovantemarcacao/?companyId=1 of the component PDF Document Handler. The manipulation of the argument nsr leads to improper control of...