Job Board Software 1.0 SQL Injection

Exploit Title: Job Board Software 1.0 - SQL Injection Dork: N/A Date: 09.09.2017 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/best-softwares/job-board-software Demo: http://jobsite.scriptzee.com/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A...

JobStar Monster Clone Script 1.0 - SQL Injection

Exploit Title: JobStar Monster Clone Script v1.0 - SQL Injection Date: 2017-09-11 Exploit Author: 8bitsec Vendor Homepage: https://www.abservetech.com/ Software Link: https://www.abservetech.com/jobstar-monster-clone/ Version: 1.0 Tested on: Kali Linux 2.0 | Mac OS 10.12.6 Email: contact@8bitsec....

Docker Daemon - Unprotected TCP Socket (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Docker Daemon - Unprotected TCP Socket Exploit', 'Description' = %q Utilizing Docker via unprotected tcp socket 2375/tcp, maybe 2376/tcp with tls...

Docker Daemon Unprotected TCP Socket Exploit

Utilizing Docker via unprotected tcp socket 2375/tcp, maybe 2376/tcp with tls but without tls-auth, an attacker can create a Docker container with the '/' path mounted with read/write permissions on the host server that is running the Docker container. As the Docker container executes command as...

Docker Daemon Unprotected TCP Socket

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Docker Daemon - Unprotected TCP Socket Exploit', 'Description' = %q Utilizing Docker via unprotected tcp socket 2375/tcp, maybe 2376/tcp with tls...

lehrcare.de XSS vulnerability

Vulnerable URL: https://www.lehrcare.de/search/job.php?region=Hessen"=Beratung Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1468189 VIP website status:| No Check lehrcare.de SSL...

Trove of Private Military Contractor Job Applicants Exposed Online

By Waqas Another day another trove of data goes public This This is a post from HackRead.com Read the original post: Trove of Private Military Contractor Job Applicants Exposed Online...

MCollective: Remote Code Execution

Background MCollective is a framework to build server orchestration or parallel job execution systems. Description A vulnerability was discovered in MCollective which allowed for deserialized YAML from agents without calling safeload. This allows the potential for arbitrary code execution on the...

openthread: Stack-buffer-overflow in ot::NetworkData::HasRouteEntry::GetRloc

Detailed report: https://oss-fuzz.com/testcase?key=4983359669272576 Project: openthread Fuzzer: libFuzzeropenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: libfuzzerasanopenthreaduntrusted Platform Id: linux Crash Type: Stack-buffer-overflow READ 2 Crash...

Data Protection and the GDPR Job Market

The May 2018 deadline for full GDPR compliance will be upon us all before we know it. The GDPR will affect all organizations—regardless of their location—that handle personal data coming out of the EU. Article 37 of the GDPR requires organizations to retain a data protection officer DPO if, among...

job.mitula.com.au XSS vulnerability

Open Bug Bounty ID: OBB-281603 Description| Value ---|--- Affected Website:| job.mitula.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

job.mitula.co.nz XSS vulnerability

Open Bug Bounty ID: OBB-281589 Description| Value ---|--- Affected Website:| job.mitula.co.nz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jobs.mitula.ie XSS vulnerability

Vulnerable URL: https://jobs.mitula.ie/searchJ/q-hola%22'--!%3E%3CImage%20SrcSet=K%20OnError=confirm'OPENBUGBOUNTY'%3E/ Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 23:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

joboffers.mitula.co.uk XSS vulnerability

Vulnerable URL: https://joboffers.mitula.co.uk/searchJ/q-hola%22'--!%3E%3CImage%20SrcSet=K%20OnError=confirm'OPENBUGBOUNTY'%3E/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

job.mitula.co.za XSS vulnerability

Open Bug Bounty ID: OBB-281249 Description| Value ---|--- Affected Website:| job.mitula.co.za Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

uktemps.co.uk XSS vulnerability

Vulnerable URL: https://uktemps.co.uk/jobs/generickeyword/"...

DEBIAN-CVE-2015-7945

The RESTful control interface aka RAPI or ganeti-rapi in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.12.6, 2.13.x before 2.13.3, 2.14.x before 2.14.2, and 2.15.x before 2.15.2 allows remote attackers to obtain the DRBD secret via instance information job resul...

CVE-2015-7945

The RESTful control interface aka RAPI or ganeti-rapi in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.12.6, 2.13.x before 2.13.3, 2.14.x before 2.14.2, and 2.15.x before 2.15.2 allows remote attackers to obtain the DRBD secret via instance information job resul...

UBUNTU-CVE-2015-7945

The RESTful control interface aka RAPI or ganeti-rapi in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.12.6, 2.13.x before 2.13.3, 2.14.x before 2.14.2, and 2.15.x before 2.15.2 allows remote attackers to obtain the DRBD secret via instance information job resul...

CVE-2017-9767

Multiple cross-site scripting XSS vulnerabilities in Quali CloudShell before 8 allow remote authenticated users to inject arbitrary web script or HTML via the 1 Name or 2 Description parameter to RM/Reservation/ReserveNew; the 3 Description parameter to RM/Topology/Update; the 4 Name, 5...