blog.ibm.jobs Improper Access Control vulnerability

Open Bug Bounty ID: OBB-695397 Description| Value ---|--- Affected Website:| blog.ibm.jobs Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| hidde...

SUSE SLES12 Security Update : smt, yast2-smt (SUSE-SU-2018:2898-2)

This update for yast2-smt to 3.0.14 and smt to 3.0.37 fixes the following issues : These security issues were fixed in SMT : CVE-2018-12471: Xml External Entity processing in the RegistrationSharing modules allowed to read arbitrary file read bsc1103809. CVE-2018-12470: SQL injection in...

CVE-2018-17382

SQL Injection exists in the Jobs Factory 2.0.4 component for Joomla! via the filterletter parameter...

CVE-2018-17382

SQL Injection exists in the Jobs Factory 2.0.4 component for Joomla! via the filterletter parameter...

Sql injection

SQL Injection exists in the Jobs Factory 2.0.4 component for Joomla! via the filterletter parameter...

CVE-2018-17382

CVE-2018-17382 affects Joomla! Jobs Factory 2.0.4 via SQL Injection in the filter_letter parameter. The vulnerability is confirmed by multiple sources (NVD entry and third-party advisories) and is rated high/critical (CVSS v2 base 7.5, CVSS v3 base 9.8). Exploit references exist (Exploit-DB, Pack...

SUSE-SU-2018:2898-1 Security update for smt, yast2-smt

This update for yast2-smt to 3.0.14 and smt to 3.0.37 fixes the following issues: These security issues were fixed in SMT: - CVE-2018-12471: Xml External Entity processing in the RegistrationSharing modules allowed to read arbitrary file read bsc1103809. - CVE-2018-12470: SQL injection in...

Jobs Factory SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Jobs Factory component of Joomla! The vulnerability is caused by inserting SQL commands into the query string of a web form submission or...

Joomla Jobs Factory 2.0.4 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Jobs Factory 2.0.4 - SQL Injection Vendor Homepage: https://thephpfactory.com/ Software Link: https://extensions.joomla.org/extensions/extension/ads-a-affiliates/jobs-a-recruitment/jobs-factory/ Version: 2.0.4...

Joomla! Component Jobs Factory 2.0.4 - SQL Injection

Joomla! Component Jobs Factory 2.0.4 - SQL Injection Exploit Title: Joomla! Component Jobs Factory 2.0.4 - SQL Injection Dork: N/A Date: 2018-09-24 Vendor Homepage: https://thephpfactory.com/ Software Link:...

Active Campaign Exploits Critical Apache Struts 2 Flaw in the Wild

It was only a matter of time before attacks were seen in the wild, and now it’s happened. A known threat actor has mounted a large cryptomining campaign using the recently disclosed Apache Struts 2 critical remote code-execution vulnerability. It uses a new malware designed for persistence and...

careukhealthcare.com XSS vulnerability

Open Bug Bounty ID: OBB-673069 Description| Value ---|--- Affected Website:| careukhealthcare.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Code injection

On EPSON WF-2750 printers with firmware JP02I2, there is no filtering of print jobs. Remote attackers can send print jobs directly to the printer via TCP port 9100...

hispanic-jobs.com XSS vulnerability

Open Bug Bounty ID: OBB-664072 Description| Value ---|--- Affected Website:| hispanic-jobs.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jobsearch.hello-jobs.com XSS vulnerability

Open Bug Bounty ID: OBB-663208 Description| Value ---|--- Affected Website:| jobsearch.hello-jobs.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jobs-dortmund.org XSS vulnerability

Open Bug Bounty ID: OBB-663146 Description| Value ---|--- Affected Website:| jobs-dortmund.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

openSUSE: Security Advisory for cups (openSUSE-SU-2018:2239-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

hispanic-jobs.com XSS vulnerability

Open Bug Bounty ID: OBB-655330 Description| Value ---|--- Affected Website:| hispanic-jobs.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

neuvoo.com XSS vulnerability

Open Bug Bounty ID: OBB-653915 Description| Value ---|--- Affected Website:| neuvoo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Microhard Systems 3G/4G Cellular Ethernet And Serial Gateway Remote Root

Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Remote Root Exploit Vendor: Microhard Systems Inc. Product web page: http://www.microhardcorp.com Affected version: IPn4G 1.1.0 build 1098 IPn3Gb 2.2.0 build 2160 IPn4Gb 1.1.6 build 1184-14 IPn4Gb 1.1.0 Rev 2 build 1090-2 IPn4Gb 1.1.0 R...