CVE-2023-49677: Improper Neutralization of Special Elements used in an SQL Command

Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'cmbQual' parameter of the Employer/InsertJob.php resource does not validate the characters received and they are sent unfiltered to the database...

employer-branding-lab.de Improper Access Control vulnerability OBB-3816662

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress JobBoardWP – Job Board Listings and Submissions Plugin <= 1.2.2 is vulnerable to Insecure Direct Object References (IDOR)

Software JobBoardWP – Job Board Listings and Submissions Type Plugin Vulnerable versions = 1.2.2 Fixed in 1.2.3 OWASP Top 10 A5: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2023-23715 Patch priority Low CVSS severity Low 5.2 Developer Claim ownership PSID...

Malicious Package

Overview gd-employer-infosite is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Ransom Your Employer Email Scam Suspect Arrested

By Deeba Ahmed The scam involved attempts to hire insiders to install DemonWare ransomware on their employer's IT systems. This is a post from HackRead.com Read the original post: Ransom Your Employer Email Scam Suspect Arrested...

Akamai Wellness in APJ

Creating the world's best and most secure digital experience demands the very best industry talent. But as a responsible employer, we also understand how important it is to play our part in looking after those brilliant minds...

Online Job Portal 1.0 - Cross Site Scripting (Stored)

Exploit Title: Online Job Portal 1.0 Cross Site Scripting Stored Google Dork: N/A Date: 2020/10/17 Exploit Author: Akıner Kısa Vendor Homepage: https://www.sourcecodester.com/php/13850/online-job-portal-phppdo.html Software Link:...

JobCareer < 3.5 - Multiple Cross-Site Scripting (XSS)

An Unauthenticated Reflected & Authenticated Persistent XSS vulnerabilities were discovered in the JobCareer theme through 3.4 for WordPress. Unauthenticated Reflected XSS - Vulnerable parameters: jobtitle, specialisms, location Authenticated Persistent XSS on Employer Profile - «Complete Address...

JobCareer < 3.5 - Multiple Cross-Site Scripting (XSS)

An Unauthenticated Reflected & Authenticated Persistent XSS vulnerabilities were discovered in the JobCareer theme through 3.4 for WordPress. Unauthenticated Reflected XSS - Vulnerable parameters: jobtitle, specialisms, location Authenticated Persistent XSS on Employer Profile - «Complete Address...

JobSearch < 1.5.3 - Multiple Cross-Site Scripting Issues

An Unauthenticated Reflected & Multiple Authenticated Persistent XSS vulnerabilities was discovered in the JobSearch plugin through 1.5.1 and 1.5.2 for WordPress. Authenticated Persistent XSS on the Candidate and Employer Profile pages. An Authenticated Persistent XSS @ Job Page will trigger on t...

Careerfy < 4.1.0 - Multiple Cross-Site Scripting (XSS) Issues

An Unauthenticated Reflected & Multiple Authenticated Persistent XSS vulnerabilities was discovered in the Careerfy Job Board theme through 3.9.0 and 4.0.0 for WordPress. Authenticated Persistent XSS on the Candidate and Employer Profile pages. An Authenticated Persistent XSS @ Job Page will...

Glassdoor: Site wide CSRF affecting both job seeker and Employer account on glassdoor.com

Summary: I have found an issue which enables an attacker to do CSRF attacks on all actions on both job seeker and employer account on www.glassdoor.com. Attacker is able to get a CSRF token from the server, which can be used to do CSRF attacks on any logged in victim on both types of glassdoor...

Unauthorized Access Vulnerability in the Employment Management System of Xi'an Zerui Communications Co.

The Employment Management System is an employment system that manages the source data of graduates, establishes a database of employers, and realizes the interoperability of information among students, schools, and employers. An unauthorized access vulnerability exists in the Employment Managemen...

How to write an information security analyst job description

By Owais Sultan One of the diverse critical tools in the human resource department is a job description. It’s one of the paramount tools that aid in an employer’s staffing programs. Job description usually stipulates the duties, responsibilities any relevant skills required, the level of training...

Side-Channel Attack Allows Remote Listener to ‘Hear’ On-Screen Images

A stealthy side-channel tactic for digital surveillance has been uncovered, which allows an attacker to “hear” on-screen images. According to a team of academic researchers from Columbia University, the University of Michigan, University of Pennsylvania and Tel Aviv University, inaudible acoustic...

Boys Town Healthcare Data Breach Exposed Personal Details of Patients

Another day, Another data breach! This time-sensitive and personal data of hundreds of thousands of people at Boys Town National Research Hospital have been exposed in what appears to be the largest ever reported breach by a pediatric care provider or children's hospital. According to the U.S...

Joomla JS Jobs 1.2.0 Cross Site Scripting

Exploit Title: Joomla! Component JS Jobs 1.2.0 - Cross Site Scripting Google Dork: N/A Date: 03-04-2018 Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: https://www.joomsky.com/products/js-jobs.html Software Link: https://www.joomsky.com/5/download/1.html...

Joomla JS Jobs 1.2.0 Component - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JS Jobs 1.2.0 - Cross Site Scripting Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: https://www.joomsky.com/products/js-jobs.html Software Link:...

A Top Employer in Canada for the Second Year in a Row

Trend Micro has been protecting governments, businesses and consumers from cyber-threats for more than 28 years. Right from the start, our founders were keen to emphasize the important role played by corporations in society as a whole. To that end, we’ve always been an active participant in...

FS Monster Clone SQL Injection Vulnerability

FS Monster Clone is a PHP and MySQL based online job search and recruitment website script. A SQL injection vulnerability exists in FS Monster Clone version 1.0. The vulnerability can be exploited by remote attackers to inject SQL commands by sending the 'id' parameter to the EmployerDetails.php...