PT-2023-28832 · Unknown · Janobe Online Job Portal

Name of the Vulnerable Software and Affected Versions: janobe Online Job Portal version 2020 Description: The issue allows a remote attacker to execute arbitrary code via the login.php component. This is due to a SQL injection vulnerability. Recommendations: For janobe Online Job Portal version...

CVE-2023-43468

SQL injection vulnerability in janobe Online Job Portal v.2020 allows a remote attacker to execute arbitrary code via the login.php component...

CVE-2023-43469

SQL injection vulnerability in janobe Online Job Portal v.2020 allows a remote attacker to execute arbitrary code via the ForPass.php component...

CVE-2023-43468

CVE-2023-43468 affects janobe Online Job Portal v.2020, with a SQL injection in login.php enabling a remote attacker to execute arbitrary code. NVD metrics classify it as CRITICAL (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Exploitation status is not detailed in the provided sources. Some co...

CVE-2023-43469

SQL injection vulnerability in janobe Online Job Portal v.2020 allows a remote attacker to execute arbitrary code via the ForPass.php component...

PT-2023-28833 · Unknown · Janobe Online Job Portal

Name of the Vulnerable Software and Affected Versions: janobe Online Job Portal version 2020 Description: A SQL injection issue allows a remote attacker to execute arbitrary code via the ForPass.php component. Recommendations: For janobe Online Job Portal version 2020, consider disabling the...

AutomataCI Input Validation Error Vulnerability

AutomataCI is a template git repository by the individual developer HollowayKeanHo. An input validation error vulnerability exists in AutomataCI 1.4.1 and earlier versions, which stems from allowing the release job function to reset the git root repository...

CVE-2023-43469

CVE-2023-43469 describes a SQL injection vulnerability in janobe Online Job Portal v.2020, exploitable via the ForPass.php component and capable of remote code execution. Affected software is janobe Online Job Portal version 2020; CVSS v3.1 base score 9.8 (CRITICAL). Mitigation notes from PT-2023...

CVE-2023-43309

There is a stored cross-site scripting XSS vulnerability in Webmin 2.002 and below via the Cluster Cron Job tab Input field, which allows attackers to run malicious scripts by injecting a specially crafted payload...

CVE-2023-43309

There is a stored cross-site scripting XSS vulnerability in Webmin 2.002 and below via the Cluster Cron Job tab Input field, which allows attackers to run malicious scripts by injecting a specially crafted payload...

CVE-2023-43309

There is a stored cross-site scripting XSS vulnerability in Webmin 2.002 and below via the Cluster Cron Job tab Input field, which allows attackers to run malicious scripts by injecting a specially crafted payload...

Cross site scripting

There is a stored cross-site scripting XSS vulnerability in Webmin 2.002 and below via the Cluster Cron Job tab Input field, which allows attackers to run malicious scripts by injecting a specially crafted payload...

CVE-2023-43309

There is a stored cross-site scripting XSS vulnerability in Webmin 2.002 and below via the Cluster Cron Job tab Input field, which allows attackers to run malicious scripts by injecting a specially crafted payload...

Webmin Cross-Site Scripting Vulnerability

Webmin is a set of Web-based system administration tools for use in Unix-like operating systems from the Webmin community. A security vulnerability exists in Webmin 2.002 and prior versions that stems from a stored cross-site scripting XSS vulnerability in the Input field of the Cluster Cron Job...

PT-2023-9415 · Webmin +1 · Webmin +1

Name of the Vulnerable Software and Affected Versions: Webmin versions 2.002 and below Description: The issue is related to a stored cross-site scripting XSS vulnerability, which allows attackers to run malicious scripts by injecting a specially crafted payload via the Cluster Cron Job tab Input...

CVE-2023-37279

Faktory is a language-agnostic persistent background job server. Prior to version 1.8.0, the Faktory web dashboard can suffer from denial of service by a crafted malicious url query param days. The vulnerability is related to how the backend reads the days URL query parameter in the Faktory web...

CVE-2023-37279 Faktory Web Dashboard can lead to denial of service(DOS) via malicious user input

Faktory is a language-agnostic persistent background job server. Prior to version 1.8.0, the Faktory web dashboard can suffer from denial of service by a crafted malicious url query param days. The vulnerability is related to how the backend reads the days URL query parameter in the Faktory web...

XXE (XML External Entity Injection) in Jira Service Management Data Center and Server - CVE-2019-13990

h2. Summary of Vulnerability Certain versions of Jira Service Management Server & Data Center were affected by CVE-2019-13990. The affected versions contained vulnerable versions of Terracotta Quartz Scheduler which allowed authenticated attackers to initiate an XML External Entity injection atta...

On the Cybersecurity Jobs Shortage

In April, Cybersecurity Ventures reported on extreme cybersecurity job shortage: Global cybersecurity job vacancies grew by 350 percent, from one million openings in 2013 to 3.5 million in 2021, according to Cybersecurity Ventures. The number of unfilled jobs leveled off in 2022, and remains at 3...

Faktory Security Breach

Faktory is a job server. It is a repository for background jobs in the application. Jobs have a type and a set of parameters and are placed in a queue for staff to fetch and execute. A security vulnerability exists in Faktory versions prior to 1.8.0 that stems from the Faktory Web dashboard that...