thelocal.de XSS vulnerability

Vulnerable URL: http://www.thelocal.de/jobs/?jobkeyword=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%2FOPENBUGBOUNTY%2F%3E%22location=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%2FOPENBUGBOUNTY%2F%3E%22 Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 10:47...

jenkins: Encrypted secrets (e.g. passwords) were leaked to users with permission to read configuration (SECURITY-266)

Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with extended read access to obtain sensitive password information by reading a job configuration...

the-job-exchange.com XSS vulnerability

Vulnerable URL: http://the-job-exchange.com/forums/16559/ShowThread.aspx?%27-prompt%28%27OPENBUGBOUNTY%27%29-%27 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

CVE-2016-6319

It was found that foreman is vulnerable to a stored XSS via a job template with a malformed name. This could allow an attacker with privileges to set the name in a template to display arbitrary HTML including scripting code within the web interface...

job-centre.info XSS vulnerability

Vulnerable URL: http://www.job-centre.info/index.php?keyword=" Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:...

jobs.fastretailing.com XSS vulnerability

Vulnerable URL: https://jobs.fastretailing.com/talentcommunity/subscribe/?slp=/talentcommunity/profile/%27-prompt%28%27OPENBUGBOUNTY%27%29-%27 Details: Description| Value ---|--- Patched:| Yes, at 18.08.2016 Latest check for patch:| 18.08.2016 11:09 GMT Vulnerability type:| XSS Vulnerability...

jobs.3m.com XSS vulnerability

Vulnerable URL: https://jobs.3m.com/talentcommunity/subscribe/?slp=/talentcommunity/profile/%27-prompt%28%27OPENBUGBOUNTY%27%29-%27 Details: Description| Value ---|--- Patched:| Yes, at 18.08.2016 Latest check for patch:| 18.08.2016 11:09 GMT Vulnerability type:| XSS Vulnerability status:| Public...

OLX: Manipulating joinolx.com Job Vacancy alert subscription emails (HTML Injection / Script Injection)

Hello, Another report here. Description I found that www.joinolx.com has an option to do subscription for vacancy alert. So I took a look at that. I was able to include my HTML codes to manipulate emails sent to my address. The Name field in the subscription form doesn't validate the name to stri...

WordPress WP Job Manager 1.25 Shell Upload

Exploit Title : Wordpress WP Job Manager 1.25 Arbitrary File Upload Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:/wp-content/uploads/job-manager-uploads Software link : http://downloads.wordpress.org/plugin/wp-job-manager.latest-stable.zip Vendor Homepage : https://wpjobmanager.com/...

WP Job Manager <= 1.26.1 - Unauthenticated Arbitrary File Upload

The WP Job Manager WordPress plugin was affected by an Unauthenticated Arbitrary File Upload security vulnerability...

utdirect.utexas.edu XSS vulnerability

Vulnerable URL: https://utdirect.utexas.edu/apps/hr/jobs/nlogon/search/0/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

CUPS Printing Server Code Execution

The vulnerability of the addjob function in the scheduler/ipp.c file of the CUPS printing server is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to modify the device configuration file remotely or execute arbitrary code using specially crafted...

Google Chrome DoS

The Google Chrome browser contains a vulnerability related to memory usage after it is freed, located in the net/websockets/websocketjob.cc component of the WebSockets framework. Exploiting this vulnerability allows a malicious actor to cause service failures or otherwise affect the system by...

callatradey.com.au XSS vulnerability

Vulnerable URL: http://www.callatradey.com.au/joblisting.php?keywords=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

job-applications.com XSS vulnerability

Vulnerable URL: http://www.job-applications.com/search/salaries/?term= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 50928 VIP website status:| No Check job-applications.com SSL...

jenkins: Encrypted secrets (e.g. passwords) were leaked to users with permission to read configuration (SECURITY-266)

Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with extended read access to obtain sensitive password information by reading a job configuration...

nesiditsa.ru XSS vulnerability

Vulnerable URL: http://nesiditsa.ru/search-vacancies Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 80216 VIP website status:| No Check nesiditsa.ru SSL connection:| Grade: C+...

job-hunt.org XSS vulnerability

Vulnerable URL: http://www.job-hunt.org/"/ Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 27695 VIP website status:| Yes Check job-hunt.org SSL connection...

AutoNessus - Script to Communicate with Nessus API

This script communicates with the Nessus API in an attempt to help with automating scans. Depending on the flag issued with the script, you can list all scans, list all policies, start, stop, pause, and resume a scan. It may be helpful to create a cron job/scheduled task for automating the start ...

job-engine.info XSS vulnerability

Vulnerable URL: http://job-engine.info/jobdetails.jsp?jid=50873605=1%22--%3E%3Csvg/onload=;prompt%28/OPENBUGBOUNTY/%29;%3ETitle%20Examiners,%20Abstractors,%20and%20Searchers=CSC=LINTHICUM%2C+MD Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type...