EUVD-2017-6327

Malware in sbrugna...

GHSA-GFHJ-524Q-GCRM Stored XSS vulnerability in Jenkins console links

Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the href attribute of links to downstream jobs displayed in the build console page. This results in a stored cross-site scripting XSS vulnerability exploitable by users with Job/Configure permission. Jenkins 2.245, LTS 2.235.2...

PT-2019-11340 · Jenkins · Jenkins

Name of the Vulnerable Software and Affected Versions: Jenkins versions prior to 2.171 Jenkins LTS versions prior to 2.164.1 Description: The issue is related to a cross-site scripting XSS vulnerability. It occurs because the f:validateButton form control in the Jenkins UI does not properly escap...

CVE-2017-14838

TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange...

Default credentials

TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange...

TeamWork Job Links profileChange and coverChange Arbitrary File Upload Vulnerability

TeamWork Job Links is a recruitment management system. profileChange and coverChange are both functional modules. profileChange is a profile change module. coverChange is a cover change module. An arbitrary file upload vulnerability exists in profileChange and coverChange in TeamWork Job Links. A...

CVE-2017-14838

TeamWork Job Links is vulnerable to an arbitrary file upload in the profileChange and coverChange modules. The root cause is an improper validation/handling of uploaded files, allowing a remote attacker to upload arbitrary files. Impact noted in sources includes the ability to upload files remote...

CVE-2017-14838

TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange...

Job Links - Arbitrary File Upload

Exploit Title: Job Links - Complete Job Management Script - Arbitrary File Upload Dork: N/A Date: 26.09.2017 Vendor Homepage: http://teamworktec.com/ Software Link: https://codecanyon.net/item/job-links-complete-job-management-script/20672089 Demo: http://teamworktec.com/demo/job-links/ Version:...