Mystery Company Offers $250,000 Bounty for VM Escape Vulnerabilities

An unnamed company will start an eight-week, invite-only bug bounty program in September that offers a $250,000 payout for virtual-machine escape vulnerabilities tied to an unreleased product. Bugcrowd announced the program today, and said the high-priced bounty is the largest advertised bounty o...

Cybersecurity Wants You!

At Black Hat in Las Vegas last week, Trend Micro’s Kevin Simzer spoke about the global, dire need for cybersecurity talent. The number of open jobs in cybersecurity continues to increase dramatically. A report from Cisco stated that there were over one million unfilled positions globally in 2016...

July 7, 2017 – Morning Cyber Coffee Headlines – “Spiderman” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! July 7, 2017 - Headlines Carbon Black in the News: Residents of these states ar...

74cms has an override access vulnerability

74cms knight cms is a PHP-based open source professional talent system. 74cms has an override access vulnerability. The vulnerability is caused by the failure to limit the userid of the user , an attacker can use the vulnerability to delete the resume...

Arbitrary file deletion vulnerability in Knight CMS Talent Recruitment System

74cms knight cms is a PHP-based open source professional talent system. Knight CMS Talent Recruitment System alController.class.php in the ajaxresumeattach function exists arbitrary file deletion vulnerability. Allow attackers to exploit the vulnerability to delete arbitrary files resulting in th...

Knight CMS Talent Recruitment System type parameter exists server-side template injection vulnerability

74cms knight cms is a PHP-based open source professional talent system. Knight CMS Talent Recruitment System TYPE parameter has a server-side template injection vulnerability . Allow attackers to upload any file to obtain server privileges...

Knight Talent System (74cms) V3.7 Reflex Cross-Site Vulnerability

Knight Talent System 74cms is a PHP-based open source professional talent system. The system has a high implementation efficiency, free switching of templates, flexible background management functions and many other excellent features. Knight Talent System 74cms V3.7 version of the existence of...

Reflective Cross-Site Scripting Vulnerability in Knight Talent System 'key' Parameter

Knight Talent System is a professional talent system based on PHP + MYSQL as the core development, free + open source. A reflective cross-site scripting vulnerability exists in the search 'key' parameter of the Knight Talent System v4.0 job search function. The vulnerability allows attackers to...

talent.24ur.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-189680 Description| Value ---|--- Affected Website:| talent.24ur.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

CVE-2016-8292

Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to Talent Acquisition Manager...

CVE-2016-8292

Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to Talent Acquisition Manager...

CVE-2016-8292

Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to Talent Acquisition Manager...

Security feature bypass

Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to Talent Acquisition Manager...

CVE-2016-8292

Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to Talent Acquisition Manager...

CVE-2016-8292

Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to Talent Acquisition Manager...

CVE-2016-8292

CVE-2016-8292 affects Oracle PeopleSoft 9.2, specifically the PeopleSoft Enterprise HCM component’s Talent Acquisition Manager. The vulnerability is described as unspecified, enabling remote authenticated users to impact confidentiality and integrity via vectors related to Talent Acquisition Mana...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise HCM

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise HCM is one of the Human Capital Management HCM components. An unspecified...

Knight CMS suffers from SQL injection vulnerability

Knight CMS Talent System is a professional talent system based on PHP+MYSQL. Knight CMS Talent System version 3.7 suffers from a SQL injection vulnerability, which is exploited by attackers to obtain sensitive information due to unfiltered variable names...

Knight CMS Talent System v3.7 has SQL Injection Vulnerabilities

Knight CMS Talent System is a professional talent system based on PHP+MYSQL. Knight CMS Talent System v3.7 suffers from a SQL injection vulnerability due to numeric variable filtering being missed resulting in injection, allowing remote attackers to exploit the vulnerability by submitting special...

Knight CMS Talent System Cross-site Scripting Vulnerability

Knight CMS Talent System is a professional talent system based on PHP+MYSQL. Knight CMS Talent System v3.7 cross-site scripting vulnerability, attackers can exploit the vulnerability to execute arbitrary script code, steal cookie-based authentication and launch other attacks...