PT-2025-39714

Name of the Vulnerable Software and Affected Versions Sync Feedly plugin for WordPress versions prior to 1.0.2 Description The software is susceptible to a Cross-Site Request Forgery issue. This is due to a lack of proper nonce validation within the crsf cron job func function. An unauthenticated...

PT-2025-39721

Name of the Vulnerable Software and Affected Versions itsourcecode Open Source Job Portal version 1.0 Description A security issue exists in itsourcecode Open Source Job Portal 1.0. Manipulation of the ID argument in the file /jobportal/admin/category/index.php?view=edit can lead to SQL injection...

itsourcecode Open Source Job Portal SQL注入漏洞

itsourcecode Open Source Job Portal is itsourcecode open source a business portal site . A SQL injection vulnerability exists in itsourcecode Open Source Job Portal version 1.0, which stems from incorrect manipulation of the parameter ID in the file /jobportal/admin/category/index.php, which coul...

SUSE CVE-2025-59346

Dragonfly is an open source P2P-based file distribution and image acceleration system. Versions prior to 2.1.0 contain a server-side request forgery SSRF vulnerability that enables users to force DragonFly2's components to make requests to internal services that are otherwise not accessible to...

CVE-2025-11041

A vulnerability has been found in itsourcecode Open Source Job Portal 1.0. Affected by this issue is some unknown functionality of the file /admin/user/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit h...

CVE-2025-11041

CVE-2025-11041 affects itsourcecode Open Source Job Portal 1.0. The vulnerability is in the admin file /admin/user/index.php?view=edit, where manipulation of the ID parameter leads to SQL injection. Exploitation is remote and the vulnerability has been publicly disclosed. Connected documents repo...

WordPress Job Board Manager Plugin <= 2.1.61 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Job Board Manager versions = 2.1.61...

CVE-2025-60162

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Job Board Manager job-board-manager allows DOM-Based XSS.This issue affects Job Board Manager: from n/a through = 2.1.61...

CVE-2025-60162 WordPress Job Board Manager Plugin <= 2.1.61 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Job Board Manager job-board-manager allows DOM-Based XSS.This issue affects Job Board Manager: from n/a through = 2.1.61...

CVE-2025-60162 WordPress Job Board Manager Plugin <= 2.1.61 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Job Board Manager job-board-manager allows DOM-Based XSS.This issue affects Job Board Manager: from n/a through = 2.1.61...

CVE-2025-60162

CVE-2025-60162 affects WordPress Plugin Job Board Manager (versions affected up to 2.1.61). It is a DOM-based XSS caused by improper input neutralization during web page generation. CVSSv3.1 base score 6.5 (Network attack, Low/Low/Low impact: Confidentiality, Integrity, Availability). Exploitatio...

WordPress plugin Job Board Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-39604

Name of the Vulnerable Software and Affected Versions PickPlugins Job Board Manager versions through 2.1.61 Description A flaw exists in PickPlugins Job Board Manager that allows for DOM-Based Cross-Site Scripting XSS. This issue is due to improper neutralization of input during web page...

itsourcecode Open Source Job Portal SQL注入漏洞

itsourcecode Open Source Job Portal is itsourcecode open source an enterprise portal site . A SQL injection vulnerability exists in version 1.0 of itsourcecode Open Source Job Portal, which stems from incorrect manipulation of the parameter ID in the file /admin/user/index.php, which could lead t...

North Korean Hackers Use New AkdoorTea Backdoor to Target Global Crypto Developers

The North Korea-linked threat actors associated with the Contagious Interview campaign have been attributed to a previously undocumented backdoor called AkdoorTea, along with tools like TsunamiKit and Tropidoor. Slovak cybersecurity firm ESET, which is tracking the activity under the name...

CVE-2025-10834

A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. This affects an unknown function of the file /jobportal/admin/login.php. Such manipulation of the argument useremail leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available a...

CVE-2025-58234

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JoomSky JS Job Manager js-jobs allows Stored XSS.This issue affects JS Job Manager: from n/a through = 2.0.2...

Patch Automation for Browsers with TruRisk™ Eliminate

Recently, CISA added a Chrome zero-day vulnerability, CVE-2025-10585, to its Known Exploited Vulnerabilities KEV Catalog, confirming that threat actors are actively exploiting this high-severity flaw in real-world attacks. This vulnerability affects multiple web browsers that utilize the Chromium...

Iranian Hackers Use Fake Job Lures to Breach Europe’s Critical Industries

New research from Check Point Research reveals the Iranian cyber group Nimbus Manticore is targeting defence, telecom, and aerospace companies in Europe with fake job offers. Learn how they use advanced malware to steal sensitive data...

CVE-2025-10834

A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. This affects an unknown function of the file /jobportal/admin/login.php. Such manipulation of the argument useremail leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available a...