David Mortman on compliance, the changing job of the CSO and baking bread

Digital Underground podcast with Dennis Fisher In this episode of the Digital Underground podcast, Dennis Fisher talks with David Mortman, CSO-in-residence at Echelon One and longtime security executive, about whether we’ve become too reliant on compliance, the changing nature of the CSO’s job an...

10 Dos and Don'ts for security job interviews

From CIO Joan Goodchild The pickings are slim in the job market and the time line of interviewing and then hiring new people is slow. But there are positions available in the security field, according to three veteran security recruiters that we spoke with recently. If you get a call that you’ve...

Twitter searching for software security personnel

From ZDNet Zero Day Now that Oprah’s all a twitter, it looks like everyone’s favorite micro-blogging tool is finally taking a hard look at security. According to a job listing posted online, Twitter is searching for software engineers to focus specifically on application and infrastructure...

Hathaway, Obama administration swing and miss at RSA

Much of the talk at the RSA Conference last week centered on the lack of the unifying theme or big-time story that usually emerges to take over the show by mid-week. But there was, in fact, a major story, and it was the abject failure of the Obama administration, in the person of Melissa Hathaway...

Job hunters must guard against identity theft

From Orlando Sentinel Richard Burnett With unemployment soaring, identity thieves are increasingly preying on unsuspecting job seekers by stealing personal information and trying to cash in on it. The scams run the gamut from fake help-wanted ads and job-search services to bogus resume-posting We...

Sql injection

SQL injection vulnerability in jobs/jobseekers/job-info.php in Diesel Job Site allows remote attackers to execute arbitrary SQL commands via the jobid parameter...

CVE-2008-6467

SQL injection vulnerability in jobs/jobseekers/job-info.php in Diesel Job Site allows remote attackers to execute arbitrary SQL commands via the jobid parameter...

CVE-2008-6467

CVE-2008-6467 describes a SQL injection vulnerability in Diesel Job Site, specifically in the file jobs/jobseekers/job-info.php, exploitable via the job_id parameter. The issue could allow remote attackers to execute arbitrary SQL commands. The public record notes this vulnerability with a High b...

CVE-2008-6467

SQL injection vulnerability in jobs/jobseekers/job-info.php in Diesel Job Site allows remote attackers to execute arbitrary SQL commands via the jobid parameter...

CVE-2008-6329

SQL injection vulnerability in Employee/login.asp in Pre ASP Job Board allows remote attackers to execute arbitrary SQL commands via the 1 Username and 2 Password parameters, as reachable from Employee/emplogin.asp. NOTE: some of these details are obtained from third party information...

CVE-2008-6329

The CVE-2008-6329 entry concerns a SQL injection vulnerability in Pre ASP Job Board, reported in Employee/login.asp (and reachable from Employee/emp_login.asp). The vulnerability is triggered by the Username and Password parameters, allowing remote attackers to execute arbitrary SQL commands. The...

CVE-2008-6329

SQL injection vulnerability in Employee/login.asp in Pre ASP Job Board allows remote attackers to execute arbitrary SQL commands via the 1 Username and 2 Password parameters, as reachable from Employee/emplogin.asp. NOTE: some of these details are obtained from third party information...

taifajobs <= 1.0 (jobid) Remote SQL Injection Vulnerability

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV103$2009 ----------------------------------------------------------------------------------------- ECHOADV103$2009 taifajobs = 1.0 jobid Remote SQL Injection Vulnerability...

Fedora Update for condor FEDORA-2008-8733

Check for the Version of condor OpenVAS Vulnerability Test Fedora Update for condor FEDORA-2008-8733 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Sql injection

SQL injection vulnerability in homepage.php in PG Job Site Pro allows remote attackers to execute arbitrary SQL commands via the pollviewid parameter in a results action...

CVE-2008-6117

SQL injection vulnerability in homepage.php in PG Job Site Pro allows remote attackers to execute arbitrary SQL commands via the pollviewid parameter in a results action...

CVE-2008-6117

CVE-2008-6117 describes an SQL injection in the PG Job Site Pro product, triggered by the poll_view_id parameter in a results action of homepage.php. The vulnerability allows remote attackers to execute arbitrary SQL commands. Affected component: homepage.php within PG Job Site Pro; root cause is...

CVE-2008-6117

SQL injection vulnerability in homepage.php in PG Job Site Pro allows remote attackers to execute arbitrary SQL commands via the pollviewid parameter in a results action...

Flatnux 2009-01-27 (Job fields) XSS/Iframe Injection PoC

No description provided by source. / - Flatnux-2009-01-27 XSS/Iframe injection p0c + 1 Create acount + 1 Go to http://localhost/flatnux/?mod=login&op=modprof&user=username - Set iframe in the Job fields Jobless l0liframe src=http://0xc00000fdh.boo.pl/flatnuxost.php...

Flatnux 2009-01-27 (Job fields) XSS/Iframe Injection PoC

Exploit for unknown platform in category web applications ======================================================== Flatnux 2009-01-27 Job fields XSS/Iframe Injection PoC ======================================================== / - Flatnux-2009-01-27 XSS/Iframe injection p0c + 1 Create acount + 1 ...