1463 matches found
E-Staff 安全漏洞
E-Staff is a reliable recruiting tool from the Russian company E-Staff for modern integrated solutions for recruiting in servers or in the cloud, with a wide range of integration features with any systems and services. A security vulnerability exists in E-Staff version 5.1. An attacker exploiting...
CVE-2024-40324
CVE-2024-40324: A CRLF injection vulnerability in E-Staff v5.1 allows CR/LF characters in input fields, enabling HTTP response splitting and header manipulation. Affected: E-Staff 5.1. Underlying issue: CRLF injection in input handling. Impact per sources is header-related and could influence res...
PT-2024-28806 · E-Staff · E-Staff
Name of the Vulnerable Software and Affected Versions: E-Staff version 5.1 Description: A CRLF injection issue allows attackers to insert Carriage Return CR and Line Feed LF characters into input fields, leading to HTTP response splitting and header manipulation. Recommendations: For E-Staff...
CVE-2024-40324
A CRLF injection vulnerability in E-Staff v5.1 allows attackers to insert Carriage Return CR and Line Feed LF characters into input fields, leading to HTTP response splitting and header manipulation...
Imperva Customers Protected Against Critical ServiceNow Vulnerability
Introduction ServiceNow is a widely used platform for IT service management, and its security is paramount for businesses relying on it for their operations. Recently, a critical vulnerability was discovered that could potentially allow attackers to access all data within ServiceNow instances. Th...
staff-b.com Cross Site Scripting vulnerability OBB-3949054
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
BIT-DISCOURSE-2024-36113 Discourse missing authorization checks for suspending admins/moderators
Discourse is an open-source discussion platform. Prior to version 3.2.3 on the stable branch, version 3.3.0.beta3 on the beta branch, and version 3.3.0.beta4-dev on the tests-passed branch, a rogue staff user could suspend other staff users preventing them from logging in to the site. The issue i...
CVE-2024-36113
Discourse is an open-source discussion platform. Prior to version 3.2.3 on the stable branch, version 3.3.0.beta3 on the beta branch, and version 3.3.0.beta4-dev on the tests-passed branch, a rogue staff user could suspend other staff users preventing them from logging in to the site. The issue i...
CVE-2024-36113
Discourse is an open-source discussion platform. Prior to version 3.2.3 on the stable branch, version 3.3.0.beta3 on the beta branch, and version 3.3.0.beta4-dev on the tests-passed branch, a rogue staff user could suspend other staff users preventing them from logging in to the site. The issue i...
CVE-2024-36113
Discourse flaw: prior to 3.2.3 (stable), 3.3.0.beta3 (beta) and 3.3.0.beta4-dev (tests-passed), a rogue staff user could suspend other staff, blocking logins. Root cause: missing authorization checks for suspending admins/moderators. Fixes are in 3.2.3 (stable), 3.3.0.beta3 (beta), and 3.3.0.beta...
PT-2024-26900 · Discourse · Discourse
Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 3.2.3 Discourse versions prior to 3.3.0.beta3 Discourse versions prior to 3.3.0.beta4-dev Description: A rogue staff user could suspend other staff users, preventing them from logging in to the site. Recommendation...
Malicious code in 3months-staff_schedule (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6268 Malicious code in 3months-staff-schedule (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in 3months-staff-schedule (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3052 Malicious code in staff-lite (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in staff-lite (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3051 Malicious code in staff-account (npm)
False positive caused by problematic ingestion. --- -= Per source details. Do not edit below this line.=-...
HackerOne: Reports submitted by a non 2fa setupped user account can be transferred to a 2fa require submission program
Vulnerability description not provided...
LAUSD Data Breach: Hackers Leak 25M Records, Including Student Locations
The Los Angeles Unified School District LAUSD suffered a massive data breach due to a Snowflake vulnerability, exposing personal details of millions of students and thousands of teachers and staff...