Denial of Service (DoS) Vulnerability in JP1/Automatic Job Management System 3 and JP1/Automatic Job Management System 2

Overview JP1/Automatic Job Management System 3 and JP1/Automatic Job Management System 2 contain a vulnerability that could allow a remote attacker to cause a denial of service DoS condition. Impact A remote attacker could cause a denial of service DoS condition. Solution Please refer to the...

Eugene Kaspersky Chats With Facebook Users About Malware, Cybercrime and Piracy

Hi, folks! For the last two weeks each and every fan of official Kaspersky Lab Facebook pages worldwide had the chance to ask our CEO, Eugene Kaspersky, anything at all and we must say that some of our fans took this literally: Thank you for the hundreds of great questions! There’s nothing more...

CVE-2012-3459

Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid MRG 2.0, allows remote authenticated users to modify Condor attributes and possibly gain privileges via crafted additional parameters in an HTTP POST request, which triggers a job attribute change request to Condor...

DEBIAN-CVE-2012-3493

The commandgiverequestad function in condorstartd.V6/command.cpp Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 allows remote attackers to obtain sensitive information, and possibly control or start arbitrary jobs, via a ClassAd request to the condorstartd port, which leaks the ClaimId...

Cross site request forgery (csrf)

Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid MRG 2.0, allows remote authenticated users to modify Condor attributes and possibly gain privileges via crafted additional parameters in an HTTP POST request, which triggers a job attribute change request to Condor...

CVE-2012-3491

src/condorschedd.V6/schedd.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the permissions of jobs, which allows remote authenticated users to remove arbitrary idle jobs via unspecified vectors...

cumin: allows for editing internal Condor job attributes

Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid MRG 2.0, allows remote authenticated users to modify Condor attributes and possibly gain privileges via crafted additional parameters in an HTTP POST request, which triggers a job attribute change request to Condor...

ES Job Search Engine v3.0 - SQL injection vulnerability

Title: ====== ES Job Search Engine v3.0 - SQL injection vulnerability Date: ===== 2012-08-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=675 VL-ID: ===== 675 Common Vulnerability Scoring System: ==================================== 8.1 Introduction: ============= ES...

ES Job Search Engine 3.0 - SQL Injection

ES Job Search Engine 3.0 - SQL Injection Title: ====== ES Job Search Engine v3.0 - SQL injection vulnerability Date: ===== 2012-08-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=675 VL-ID: ===== 675 Common Vulnerability Scoring System:...

Fedora Update for glpi FEDORA-2012-10661

Check for the Version of glpi OpenVAS Vulnerability Test Fedora Update for glpi FEDORA-2012-10661 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora Update for condor FEDORA-2012-3263

Check for the Version of condor OpenVAS Vulnerability Test Fedora Update for condor FEDORA-2012-3263 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Google Building Privacy Red Team

Google, which has come under fire for years for its privacy practices and recently settled a privacy related case with the Federal Trade Commission that resulted in a $22.5 million fine, is building out a privacy “red team”, a group of people charged with finding and resolving privacy risks in th...

ES Job Search Engine v3.0 - SQL injection vulnerability

Document Title: =============== ES Job Search Engine v3.0 - SQL injection vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=675 Release Date: ============= 2012-08-08 Vulnerability Laboratory ID VL-ID: ==================================== 675...

ES Job Search Engine v3.0 - SQL injection vulnerability

Document Title: =============== ES Job Search Engine v3.0 - SQL injection vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=675 Release Date: ============= 2012-08-08 Vulnerability Laboratory ID VL-ID: ==================================== 675...

[SECURITY] Fedora 17 Update: glpi-0.83.4-1.fc17

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

Illinois Outlaws Employer Requests for Facebook Passwords

Illinois today became the second state in the nation to ban employers from asking employees and job applicants for login information to access their social networking accounts. The law, which goes into effect Jan. 1, also bans such requests during background checks. “Members of the workforce shou...

Scientific Linux Security Update : selinux-policy on SL6.x i386/x86_64 (20120307)

This update fixes the following bugs : - An incorrect SELinux policy prevented the qpidd service from connecting to the AMQP Advanced Message Queuing Protocol port when the qpidd daemon was configured with Corosync clustering. These selinux-policy packages contain updated SELinux rules, which all...

Scientific Linux Security Update : cups on SL5.x i386/x86_64

A flaw was found in the way CUPS handles certain Internet Printing Protocol IPP tags. A remote attacker who is able to connect to the IPP TCP port could send a malicious request causing the CUPS daemon to crash, or potentially execute arbitrary code. Please note that the default CUPS configuratio...

Hacker Claims Compromise of IT Recruiter

A hacker affiliated with a group called TeamGhostShell claims he hacked into a website servicing IT professionals seeking jobs on Wall Street, and in doing so compromised the personal information of thousands of job applicants, according to a ComputerWorld report. A hacker identifying himself as...

Multiple CSRF Vulnerabilities in [GLPI Version 0.83.2]

Hi, This is regarding multiple CSRF Cross Site Request Forgery Vulnerabilities in GLPI Version 0.83.2. The following is the disclosure document: Title: Multiple CSRF Vulnerabilities in GLPI Version 0.83.2 ------------------------------------------------------------------------...