cincinnatiemmaus.org XSS vulnerability

Open Bug Bounty ID: OBB-253187 Description| Value ---|--- Affected Website:| cincinnatiemmaus.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Jenkins Credential Collector

This module can be used to extract saved Jenkins credentials, user tokens, SSH keys, and secrets. Interesting files will be stored in loot along with combined csv output. require 'nokogiri' require 'base64' require 'digest' require 'openssl' require 'sshkey' class MetasploitModule 'Jenkins...

WordPress WP Jobs Plugin SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.WP Jobs plugin is one of the post management plugin. A SQL injection vulnerability exists in WordPress WP Jobs plug...

WordPress Jobs 1.4 SQL Injection

Exploit Title: WordPress Plugin WP Jobs 1.5 - SQL Injection Date: 11-06-2017 Exploit Author: Dimitrios Tsagkarakis Website: dtsa.eu Software Link: https://en-gb.wordpress.org/plugins/wp-jobs/ Vendor Homepage: http://www.intensewp.com/ Version: 1.4 CVE : CVE-2017-9603 Category: webapps 1...

Sql injection

SQL injection vulnerability in the WP Jobs plugin before 1.5 for WordPress allows authenticated users to execute arbitrary SQL commands via the jobid parameter to wp-admin/edit.php...

CVE-2017-9603

SQL injection vulnerability in the WP Jobs plugin before 1.5 for WordPress allows authenticated users to execute arbitrary SQL commands via the jobid parameter to wp-admin/edit.php...

CVE-2017-9603

SQL injection vulnerability in the WP Jobs plugin before 1.5 for WordPress allows authenticated users to execute arbitrary SQL commands via the jobid parameter to wp-admin/edit.php...

CVE-2017-9603

Summary: CVE-2017-9603 is a SQL injection vulnerability in the WP Jobs WordPress plugin (versions before 1.5). The issue allows authenticated users to execute arbitrary SQL commands via the jobid parameter in wp-admin/edit.php. The PoC demonstrates crafting a UNION-based payload (e.g., jobid=5 UN...

CVE-2017-9603: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the WP Jobs plugin before 1.5 for WordPress allows authenticated users to execute arbitrary SQL commands via the jobid parameter to wp-admin/edit.php...

PT-2017-19063

Name of the Vulnerable Software and Affected Versions WP Jobs plugin version 1.4 and earlier Description The issue allows authenticated users to execute arbitrary SQL commands. This is achieved by exploiting the jobid parameter in the /wp-admin/edit.php endpoint. Recommendations For WP Jobs plugi...

WP Jobs <= 1.4 - Authenticated SQL Injection

The WP Jobs WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...

CentOS 6 : kernel (CESA-2017:1372)

An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

yorkshirecoastradio.com XSS vulnerability

Vulnerable URL: http://www.yorkshirecoastradio.com/jobs/?fid=jobsCategoryFiltering=4...

wessexfm.com XSS vulnerability

Vulnerable URL: http://www.wessexfm.com/jobs/?fid=jobsCategoryFiltering=5...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

monster.com.ph XSS vulnerability

Vulnerable URL: http://www.monster.com.ph/it-jobs.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 149803 VIP website status:| No Check monster.com.ph SSL connection:| Grade: C+...

apply.aramco.jobs XSS vulnerability

Vulnerable URL: https://apply.aramco.jobs/jobs/apply/243703'-confirm'OPENBUGBOUNTY'-'/login/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

actionrecruitment.ae XSS vulnerability

Vulnerable URL: http://www.actionrecruitment.ae/jobs/find/?state=%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12685537 VIP websi...

thelocal.se XSS vulnerability

Vulnerable URL: http://www.thelocal.se/jobs//%22%27%2D%2D%21 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 23152 VIP website status:| Yes Check thelocal.se SSL connection:| Grade:...

thelocal.no XSS vulnerability

Vulnerable URL: http://www.thelocal.no/jobs//%22%27%2D%2D%21 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 177202 VIP website status:| No Check thelocal.no SSL connection:| Grade:...