PT-2017-14033

Name of the Vulnerable Software and Affected Versions WpJobBoard version 4.5.1 Description The issue concerns multiple client-side cross-site scripting vulnerabilities. These vulnerabilities are located in the query and id parameters of the wpjb-email, wpjb-job, wpjb-application, and...

Rancher Server - Docker Daemon Code Execution Exploit

Utilizing Rancher Server, an attacker can create a docker container with the '/' path mounted with read/write permissions on the host server that is running the docker container. As the docker container executes command as uid 0 it is honored by the host operating system allowing the attacker to...

Rancher Server - Docker Daemon Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Rancher Server - Docker Exploit', 'Description' = %q Utilizing Rancher Server, an attacker can create a docker container with the '/' path mounte...

Rancher Server Docker Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Rancher Server - Docker Exploit', 'Description' = %q Utilizing Rancher Server, an attacker can create a docker container with the '/' path mounte...

Default credentials

Git Plugin connects to a user-specified Git repository as part of form validation. An attacker with no direct access to Jenkins but able to guess at a username/password credentials ID could trick a developer with job configuration permissions into following a link with a maliciously crafted Jenki...

CVE-2017-14757

OpenText Document Sciences xPression formerly EMC Document Sciences xPression v4.5SP1 Patch 13 older versions might be affected as well is prone to SQL Injection: /xDashboard/html/jobhistory/downloadSupportFile.action, parameter: jobRunId. In order for this vulnerability to be exploited, an...

Z/OS (MVS) Command Shell, Bind TCP

Provide JCL which creates a bind shell This implementation does not include ebcdic character translation, so a client with translation capabilities is required. MSF handles this automatically. This module requires Metasploit: https://metasploit.com/download Current source:...

CVE-2017-14838

TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange...

Default credentials

TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange...

CVE-2017-14838: Unrestricted Upload of File with Dangerous Type

TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange...

TeamWork Job Links profileChange and coverChange Arbitrary File Upload Vulnerability

TeamWork Job Links is a recruitment management system. profileChange and coverChange are both functional modules. profileChange is a profile change module. coverChange is a cover change module. An arbitrary file upload vulnerability exists in profileChange and coverChange in TeamWork Job Links. A...

CVE-2017-14838

TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange...

CVE-2017-14838

TeamWork Job Links is vulnerable to an arbitrary file upload in the profileChange and coverChange modules. The root cause is an improper validation/handling of uploaded files, allowing a remote attacker to upload arbitrary files. Impact noted in sources includes the ability to upload files remote...

CVE-2015-1336

The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access to the man account to gain privileges via vectors involving insecure chown use...

PT-2017-13714

Name of the Vulnerable Software and Affected Versions TeamWork Job Links affected versions not specified Description The issue allows for Arbitrary File Upload through the profileChange and coverChange functions. Recommendations At the moment, there is no information about a newer version that...

CVE-2017-14751

The Intense WP "WP Jobs" plugin 1.5 for WordPress has XSS, related to the Job Qualification field...

CVE-2017-14751

The Intense WP "WP Jobs" plugin 1.5 for WordPress has XSS, related to the Job Qualification field...

CVE-2017-14751

The Intense WP "WP Jobs" plugin 1.5 for WordPress has XSS, related to the Job Qualification field...

CVE-2017-14751

The CVE-2017-14751 entry relates to the WordPress WP Jobs plugin version 1.5, where the Job Qualification field is vulnerable to cross‑site scripting (XSS). Public sources describe this as a XSS vulnerability in the WP Jobs plugin, with at least one entry indicating a remote attacker can exploit ...

CVE-2017-14751: Improper Neutralization of Input During Web Page Generation

The Intense WP "WP Jobs" plugin 1.5 for WordPress has XSS, related to the Job Qualification field...