1946 matches found
CVE-2014-125035 Jobs-Plugin cross site scripting
A vulnerability classified as problematic was found in Jobs-Plugin. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. The identifier of the patch is b8a56718b1d42834c6ec51d9c489c5dc20471d7b. It is...
CVE-2014-125035
CVE-2014-125035 concerns the Jobs-Plugin and describes a cross-site scripting (XSS) vulnerability in an unknown functionality. The issue is exploitable remotely via network access, with the underlying cause not fully detailed in the provided documents, but a patch identifier is given: b8a56718b1d...
Jobs-Plugin 跨站脚本漏洞
Jobs-Plugin is a plugin by Bobby Bryant Personal Developer. Jobs-Plugin suffers from a cross-site scripting vulnerability. An attacker could exploit this vulnerability to perform cross-site scripting attacks...
PT-2023-10105 · Unknown · Jobs-Plugin
Name of the Vulnerable Software and Affected Versions: Jobs-Plugin affected versions not specified Description: A problematic vulnerability was found in the Jobs-Plugin, affecting an unknown functionality, which leads to cross-site scripting. The attack can be launched remotely. Recommendations: ...
KBase Metrics SQL注入漏洞
KBase Metrics are scripts and other tools used to collect metrics and generate reports and summaries. KBase Metrics suffers from a SQL injection vulnerability that stems from a problem with the function uploaduserdata in the file source/dailycronjobs/methodsuploaduserstats.py, which can lead to s...
Malicious code in sponsor-jobs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ff91cd8369dec7dda50c1d1b495256642f2f035c7789c5f99a6520094deabc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6239 Malicious code in sponsor-jobs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ff91cd8369dec7dda50c1d1b495256642f2f035c7789c5f99a6520094deabc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EulerOS Virtualization 2.10.0 : cups (EulerOS-SA-2022-2900)
According to the versions of the cups package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.2, Security Update 2019-0...
LinkedIn: Attackers can create unlimited jobs by paying a low price `( Rp. 10,000 )` from the original lowest price of around **Rp 93,151**
Vulnerability description not provided...
Feature Deprecation: "Transform previous backup chains into rollbacks"
Prepare for Veeam Backup & Replication 12 This article concerns a feature that will be fully deprecated in Veeam Backup & Replication 12. This article documents how to identify if this feature is in use and how to phase out this feature to ensure the existing Veeam Backup & Replication deployment...
Syncovery For Linux Web-GUI Authenticated Remote Command Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'json' class MetasploitModule 'Syncovery For Linux Web-GUI Authenticated Remote Command Execution', 'Description' = %q This module exploits an authenticated...
Update 19.14 for Microsoft Dynamics 365 Business Central (on-premises) 2021 Release Wave 2 (Application Build 19.14.49970, Platform Build 19.0.49925)
None None...
GHSA-Q7JC-V6F2-Q9JR Duplicate Advisory: Resque Scheduler Reflected XSS In Delayed Jobs View
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-9hmq-fm33-x4xx. This link is maintained to preserve external references. Original Description Resque Scheduler version 1.27.4 is vulnerable to Cross-site scripting XSS. A remote attacker could inject javascript...
CVE-2022-44303
Resque Scheduler version 1.27.4 is vulnerable to Cross-site scripting XSS. A remote attacker could inject javascript code to the "schedulejob" or "args" parameter in /resque/delayed/jobs/schedulejob?args=argsid to execute javascript at client side...
Resque Scheduler 跨站脚本漏洞
Resque Scheduler is Resque open source a lightweight job scheduling system built on Resque . Resque Scheduler version 1.27.4 security vulnerability , the vulnerability stems from the vulnerability to cross-site scripting XSS attacks , a remote attacker can inject javascript code into...
PT-2022-27174 · Unknown · Resque Scheduler
Name of the Vulnerable Software and Affected Versions: Resque Scheduler version 1.27.4 Description: A remote attacker could inject javascript code to the schedule job or args parameters in "/resque/delayed/jobs/schedule job?args=args id" to execute javascript at the client side, resulting in a...
zeitarbeit-jobs-mecklenburg-vorpommern.de Cross Site Scripting vulnerability OBB-3080558
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-38974
Broken Access Control vulnerability in WPML Multilingual CMS premium plugin = 4.5.10 on WordPress allows users with subscriber or higher user roles to change the status of the translation jobs...
Improper access control
Broken Access Control vulnerability in WPML Multilingual CMS premium plugin = 4.5.10 on WordPress allows users with subscriber or higher user roles to change the status of the translation jobs...
CVE-2022-38974 WordPress WPML Multilingual CMS premium plugin <= 4.5.10 - Broken Access Control vulnerability
Broken Access Control vulnerability in WPML Multilingual CMS premium plugin = 4.5.10 on WordPress allows users with subscriber or higher user roles to change the status of the translation jobs...