9931 matches found
Jobs2Careers / Coroflot Clone - SQL Injection
Exploit Title: Jobs2Careers / Coroflot Clone - SQL Injection Date: 2017-11-30 Exploit Author: 8bitsec Vendor Homepage: http://www.i-netsolution.com/ Software Link: http://www.i-netsolution.com/product/jobs2careers-coroflot-jobs-clone-script/ Version: 30 November 17 Tested on: Kali Linux 2.0 | Mac...
[SECURITY] Fedora 27 Update: slurm-17.02.9-3.fc27
Slurm is an open source, fault-tolerant, and highly scalable cluster management and job scheduling system for large and small Linux clusters...
Will AI Change the Role of Cybersecurity?
Mention artificial intelligence AI and security and a lot of people think of Skynet from The Terminator movies. Sure enough, at a recent Bay Area Cyber Security Meetup group panel on AI and machine learning, it was moderator Alan Zeichick – technology analyst, journalist and speaker – who first...
employethiopia.com XSS vulnerability
Open Bug Bounty ID: OBB-410689 Description| Value ---|--- Affected Website:| employethiopia.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
[SECURITY] Fedora 27 Update: slurm-17.02.9-2.fc27
Slurm is an open source, fault-tolerant, and highly scalable cluster management and job scheduling system for large and small Linux clusters...
mycnajobs.com XSS vulnerability
Vulnerable URL: https://www.mycnajobs.com/job-listings/5874544/spring-into-a-new-caregiving-job.html?searchId=%22%3E%3Csvg%3E%3Cscript%3E/%3C@/%3Eprompt/OPENBUGBOUNTY/%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 11.11.2017 Latest check for patch:| 11.11.2017 22:00 GMT...
hospitallabjobs.com XSS vulnerability
Open Bug Bounty ID: OBB-407506 Description| Value ---|--- Affected Website:| hospitallabjobs.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...
Debian DSA-4023-1 : slurm-llnl - security update
Ryan Day discovered that the Simple Linux Utility for Resource Management SLURM, a cluster resource management and job scheduling system, does not properly handle SPANK environment variables, allowing a user permitted to submit jobs to execute code as root during the Prolog or Epilog. All systems...
[SECURITY] [DSA 4023-1] slurm-llnl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4023-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 07, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4023-1] slurm-llnl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4023-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 07, 2017 https://www.debian.org/security/faq -...
job-hunt.org XSS vulnerability
Open Bug Bounty ID: OBB-388904 Description| Value ---|--- Affected Website:| job-hunt.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...
chakra: Stack-buffer-overflow in Output::PrintBuffer
Project: https://github.com/Microsoft/ChakraCore.git Detailed report: https://oss-fuzz.com/testcase?key=5319633180557312 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7efd1fdab820 Crash State: Output::PrintBuffer...
chakra: Crash in Js::JavascriptObject::CreateKeysHelper
Detailed report: https://oss-fuzz.com/testcase?key=5612339362529280 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x007fe19e6e44 Crash State: Js::JavascriptObject::CreateKeysHelper Js::JavascriptOperators::GetOwnPropertyNames...
Job Board Script Software SQL Injection Vulnerability
Job Board Script Software is a web-based recruitment system. The system supports online resume creation, job application and job search report writing. A SQL injection vulnerability exists in Job Board Script Software. A remote attacker can exploit this vulnerability by sending PATHINFO to the...
CVE-2017-15964
Job Board Script Software allows SQL Injection via the PATHINFO to a /job-details URI...
Sql injection
Job Board Script Software allows SQL Injection via the PATHINFO to a /job-details URI...
CVE-2017-15964
CVE-2017-15964 affects Job Board Script Software, a web-based recruitment system. The vulnerability is an SQL injection via PATH_INFO to the /job-details URI, allowing an attacker to inject SQL commands. Connected sources (CNVD, CVE records, Exploit-DB/Exploit-Pack entries) confirm the issue and ...
CVE-2017-15964
Job Board Script Software allows SQL Injection via the PATHINFO to a /job-details URI...
PT-2017-14318
Name of the Vulnerable Software and Affected Versions Job Board Script Software affected versions not specified Description The issue allows SQL Injection via the PATH INFO to a "/job-details" API endpoint. This could potentially lead to unauthorized access to sensitive data. Recommendations At t...
