Indeed Job Search - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Indeed Job Search published at the 'play' market has multiple vulnerabilities...

Failed to load module [veeamsnap] | Failed to load module [blksnap]

Challenge A Veeam Agent for Linux backup job fails with either of the following errors: Failed to load module veeamsnap with parameters zerosnapdata=1 debuglogging=0 The number of parameters listed in the error may vary depending on Veeam Agent for Linux version. Failed to load module blksnap Cau...

Job Portal Script 3.0 Cross Site Scripting / SQL Injection

Title: Job portal Script v3.0 - SQL Injection / Cross Site Scripting Credit: Bilal KARDADOU Vendor: www.jobportalscript.com Vendor URL: http://www.jobportalscript.com/index.html Product: Job portal site. Google Dork: categorysearch.php?indus= placementpaper.php?pn= ... Product & Service...

Job Portal Script 3.0 Cross Site Scripting / SQL Injection Vulnerabilities

Exploit for php platform in category web applications Title: Job portal Script v3.0 - SQL Injection / Cross Site Scripting Credit: Bilal KARDADOU Vendor: www.jobportalscript.com Vendor URL: http://www.jobportalscript.com/index.html Product: Job portal site. Google Dork: categorysearch.php?indus=...

mbdacareers.co.uk XSS vulnerability

Vulnerable URL: http://www.mbdacareers.co.uk/index.php/jobs/?searchpaths%5B%5D=%2Fjobs%5B48%5D%5Bvalue%5D='"--!confirmOPENBUGBOUNTY...

DC/OS Marathon UI Docker Exploit

Utilizing the DCOS Cluster's Marathon UI, an attacker can create a docker container with the '/' path mounted with read/write permissions on the host server that is running the docker container. As the docker container executes command as uid 0 it is honored by the host operating system allowing...

libreoffice: Crash in CCIDecompressor::DecompressScanline

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5956342118350848 Project: libreoffice Fuzzer: libFuzzerlibreofficetiffuzzer Fuzz target binary: tiffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: UNKNOWN Crash...

Password Cracking Web Front-End: Hashview

Password Cracking Web Front-End Hashview is a tool for security professionals to help organize and automate the repetitious tasks related to password cracking. Hashview is a web application that manages hashcat https://hashcat.net commands. Hashview strives to bring constiency in your hashcat tas...

Automated Job Portal Script - SQL Injection

Automated Job Portal Script - SQL Injection Exploit Title: Automated Job Portal Script - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://www.jagaad.com/ Software Buy: https://codecanyon.net/item/automated-job-portal-script/14318664 Demo:...

Automated Job Portal Script - SQL Injection

Exploit Title: Automated Job Portal Script - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://www.jagaad.com/ Software Buy: https://codecanyon.net/item/automated-job-portal-script/14318664 Demo: http://www.jagaad.com/demo/php/automated-job-portal/ Version: N/A Tested on: Wi...

Citrix XenServer Linux Foundation xapi Security Bypass Vulnerability (CNVD-2017-01230)

Citrix XenServer is a virtualization solution. A security vulnerability exists in Citrix XenServer Linux Foundation xapi, which allows remote attackers to exploit the vulnerability to submit a special request to cancel an administrator job...

Itech Job Portal Script 9.13 - Multiple Vulnerabilities

Itech Job Portal Script 9.13 - Multiple Vulnerabilities Exploit Title : Itech Job Portal Script - Multiple Vulnerabilities Author : Yunus YILDIRIM Th3GundY Team : CT-Zer0 @CRYPTTECH - https://www.crypttech.com Website : http://www.yunus.ninja Contact : [email protected] Vendor Homepage...

Itech Job Portal Script 9.13 - Multiple Vulnerabilities

Exploit Title : Itech Job Portal Script - Multiple Vulnerabilities Author : Yunus YILDIRIM Th3GundY Team : CT-Zer0 @CRYPTTECH - https://www.crypttech.com Website : http://www.yunus.ninja Contact : [email protected] Vendor Homepage : http://itechscripts.com/ Software Link :...

Printer Exploitation Toolkit: PRET

Printer Exploitation Toolkit PRET is a new tool for printer security testing developed in the scope of a Master’s Thesis at Ruhr University Bochum. PRET connects to a device via network or USB and exploits the features of a given printer language. Currently PostScript , PJL and PCL are supported...

Flaws Found in Popular Printer Models

Vulnerabilities in popular printer models made by HP, Dell and Lexmark expose the devices to attackers who can steal passwords, shut down printers and even steal print jobs. Academic researchers at the University Alliance Ruhr on Monday published a series of advisories and an informational wiki...

Hacking Printers Advisory 1

TL;DR: In the scope of academic research on printer security, various vulnerabilities in network printers and MFPs have been discovered. This is advisory 1 of 6 of the Hacking Printers' series. Each advisory discusses multiple issues of the same category. This post is about manipulating and...

Input validation

The casrvc program in CA Common Services, as used in CA Client Automation 12.8, 12.9, and 14.0; CA SystemEDGE 5.8.2 and 5.9; CA Systems Performance for Infrastructure Managers 12.8 and 12.9; CA Universal Job Management Agent 11.2; CA Virtual Assurance for Infrastructure Managers 12.8 and 12.9; CA...

CVE-2016-9795

The casrvc program in CA Common Services, as used in CA Client Automation 12.8, 12.9, and 14.0; CA SystemEDGE 5.8.2 and 5.9; CA Systems Performance for Infrastructure Managers 12.8 and 12.9; CA Universal Job Management Agent 11.2; CA Virtual Assurance for Infrastructure Managers 12.8 and 12.9; CA...

Job Vacancy Script SQL Injection

Vulnerability: SQL Injection Date: 19.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Job Vacancy Script Script Buy Now: http://www.scriptfolder.com/scriptfolder-job-bank-job-vacancy-script/ Author: Ihsan Sencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet SQL...

Job Site PHP Script 1.1 - Authentication Bypass

Exploit Title: ICJobSite-Job Site PHP Script - Authentication Bypass Google Dork: N/A Date: 20.01.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Buy: http://www.icloudcenter.com/jobs-site-script.htm Demo: http://icloudcenter.net/demos/icjobsite/ Version: 1.1 Tested on: Win7 x64 Explo...