virginiajobnetwork.com XSS vulnerability

Open Bug Bounty ID: OBB-549324 Description| Value ---|--- Affected Website:| virginiajobnetwork.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Elevation Of Privileges

speaks is vulnerable to elevation of privileges. Users who have the Job/Configure permission can run Groovy code inside the Jenkins JVM, elevating their privilege to Overall/Run Scripts...

singapore.job-q.com XSS vulnerability

Open Bug Bounty ID: OBB-547918 Description| Value ---|--- Affected Website:| singapore.job-q.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Information Disclosure

hadoop-common is vulnerable to information disclosure. Malicious users can use XML directives in a configuration file to discover the job history on the server and to discover private files...

CVE-2017-14094

A vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system...

Design/Logic Flaw

A vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system...

CVE-2017-14094

A vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system...

CVE-2017-14094

CVE-2017-14094 affects Trend Micro Smart Protection Server (Standalone) up to version 3.2. It enables remote command execution via cron job injection in the admin_update_program.php flow when updates are scheduled, due to unsanitized HTTP parameters used to build cron entries. The vulnerability i...

CVE-2017-15713

Vulnerability in Apache Hadoop 0.23.x, 2.x before 2.7.5, 2.8.x before 2.8.3, and 3.0.0-alpha through 3.0.0-beta1 allows a cluster user to expose private files owned by the user running the MapReduce job history server process. The malicious user can construct a configuration file containing XML...

PT-2018-5348 · Rails · Delayed Job Web

Name of the Vulnerable Software and Affected Versions: delayed job web rails gem versions 1.2.9 through 1.4 Description: An exploitable cross site scripting XSS issue exists in the filter functionality. A specially crafted URL can cause an XSS flaw, allowing an attacker to execute arbitrary...

WordPress WpJobBoard plugin SQL injection vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . WpJobBoard plugin is used in one of the job management plugin . A SQL injection vulnerability exists in WordPress...

Fedora 27 : glibc (2017-828f8a8fc6)

This update addresses RHBZ1468837, which caused bash to lack job control in mock chroots. Note that glibc inside the chroot needs to be upgraded for the fix to be effective. In additon, two dynamic linker issues where fixed which are not security bugs, but received CVE IDs nevertheless RHBZ152486...

CVE-2018-5695

The WpJobBoard plugin 4.4.4 for WordPress allows SQL injection via the order or sort parameter to the wpjb-job or wpjb-alerts module, with a request to wp-admin/admin.php...

snagajob.com XSS vulnerability

Open Bug Bounty ID: OBB-515600 Description| Value ---|--- Affected Website:| snagajob.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosur...

WpJobBoard v4.4.4 - Multiple SQL Injection Vulnerabilities

Document Title: =============== WpJobBoard v4.4.4 - Multiple SQL Injection Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1940 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5695 CVE-ID: ======= CVE-2018-5695 Release Date:...

englandassociates.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-488002 Description| Value ---|--- Affected Website:| englandassociates.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Updated rkhunter packages fix security vulnerability

The rkhunter package has been updated to disable by default an insecure cron job. The script is now included with the package as documentation. See the README.urpmi file for more information...

MGASA-2018-0029 Updated rkhunter packages fix security vulnerability

The rkhunter package has been updated to disable by default an insecure cron job. The script is now included with the package as documentation. See the README.urpmi file for more information...

Joomla Advertisement Board Classifieds 3.2.0 Shell Upload

Title: Advertisement board Joomla classifieds extension 3.2.0 - Remote Shell Upload Vulnerability Credit: Bilal KARDADOU Vendor: http://ordasoft.com/ URL: http://ordasoft.com/advertisement-board-joomla-classifieds-extension Product: 'Advertisement board Joomla classifieds extension 3.2.0'...

Career Portal 1.0 Cross Site Scripting

Exploit Title: Career Portal - Online Job Search Script - Xss Google Dork: N/A Date: 2018/01/01 Exploit Author: ShanoWeb Author Mail : MrdotNet2NetatGmaildotcom Vendor Homepage: http://sharjeelanjum.com/ Software Buy:...