9914 matches found
CVE-2012-3493
The commandgiverequestad function in condorstartd.V6/command.cpp Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 allows remote attackers to obtain sensitive information, and possibly control or start arbitrary jobs, via a ClassAd request to the condorstartd port, which leaks the ClaimId...
CVE-2012-3491
src/condorschedd.V6/schedd.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the permissions of jobs, which allows remote authenticated users to remove arbitrary idle jobs via unspecified vectors...
CVE-2012-3491: Undefined Security Weakness
src/condorschedd.V6/schedd.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the permissions of jobs, which allows remote authenticated users to remove arbitrary idle jobs via unspecified vectors...
PT-2012-4758
Name of the Vulnerable Software and Affected Versions Condor versions 7.6.x through 7.6.9 Condor versions 7.8.x through 7.8.3 Description The issue allows remote attackers to obtain sensitive information and possibly control or start arbitrary jobs via a ClassAd request to the condor startd port...
cumin: allows for editing internal Condor job attributes
Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid MRG 2.0, allows remote authenticated users to modify Condor attributes and possibly gain privileges via crafted additional parameters in an HTTP POST request, which triggers a job attribute change request to Condor...
ES Job Search Engine v3.0 - SQL injection vulnerability
Title: ====== ES Job Search Engine v3.0 - SQL injection vulnerability Date: ===== 2012-08-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=675 VL-ID: ===== 675 Common Vulnerability Scoring System: ==================================== 8.1 Introduction: ============= ES...
ES Job Search Engine 3.0 - SQL Injection
ES Job Search Engine 3.0 - SQL Injection Title: ====== ES Job Search Engine v3.0 - SQL injection vulnerability Date: ===== 2012-08-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=675 VL-ID: ===== 675 Common Vulnerability Scoring System:...
Fedora Update for condor FEDORA-2012-3263
Check for the Version of condor OpenVAS Vulnerability Test Fedora Update for condor FEDORA-2012-3263 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Fedora Update for glpi FEDORA-2012-10661
Check for the Version of glpi OpenVAS Vulnerability Test Fedora Update for glpi FEDORA-2012-10661 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
Google Building Privacy Red Team
Google, which has come under fire for years for its privacy practices and recently settled a privacy related case with the Federal Trade Commission that resulted in a $22.5 million fine, is building out a privacy “red team”, a group of people charged with finding and resolving privacy risks in th...
ES Job Search Engine v3.0 - SQL injection vulnerability
Document Title: =============== ES Job Search Engine v3.0 - SQL injection vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=675 Release Date: ============= 2012-08-08 Vulnerability Laboratory ID VL-ID: ==================================== 675...
ES Job Search Engine v3.0 - SQL injection vulnerability
Document Title: =============== ES Job Search Engine v3.0 - SQL injection vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=675 Release Date: ============= 2012-08-08 Vulnerability Laboratory ID VL-ID: ==================================== 675...
[SECURITY] Fedora 17 Update: glpi-0.83.4-1.fc17
GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...
Illinois Outlaws Employer Requests for Facebook Passwords
Illinois today became the second state in the nation to ban employers from asking employees and job applicants for login information to access their social networking accounts. The law, which goes into effect Jan. 1, also bans such requests during background checks. “Members of the workforce shou...
Scientific Linux Security Update : selinux-policy on SL6.x i386/x86_64 (20120307)
This update fixes the following bugs : - An incorrect SELinux policy prevented the qpidd service from connecting to the AMQP Advanced Message Queuing Protocol port when the qpidd daemon was configured with Corosync clustering. These selinux-policy packages contain updated SELinux rules, which all...
Scientific Linux Security Update : cups on SL5.x i386/x86_64
A flaw was found in the way CUPS handles certain Internet Printing Protocol IPP tags. A remote attacker who is able to connect to the IPP TCP port could send a malicious request causing the CUPS daemon to crash, or potentially execute arbitrary code. Please note that the default CUPS configuratio...
Hacker Claims Compromise of IT Recruiter
A hacker affiliated with a group called TeamGhostShell claims he hacked into a website servicing IT professionals seeking jobs on Wall Street, and in doing so compromised the personal information of thousands of job applicants, according to a ComputerWorld report. A hacker identifying himself as...
Multiple CSRF Vulnerabilities in [GLPI Version 0.83.2]
Hi, This is regarding multiple CSRF Cross Site Request Forgery Vulnerabilities in GLPI Version 0.83.2. The following is the disclosure document: Title: Multiple CSRF Vulnerabilities in GLPI Version 0.83.2 ------------------------------------------------------------------------...
WordPress Resume Submissions & Job Postings v2.5.1 Unrestricted File Upload
Exploit for php platform in category web applications Exploit Title: WordPress Resume Submissions & Job Postings v2.5.1 Unrestricted File Upload Date: 7/9/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.geerservices.com/ Software Link:...
WordPress Resume Submissions / Job Postings 2.5.1 Shell Upload
Exploit Title: WordPress Resume Submissions & Job Postings v2.5.1 Unrestricted File Upload Date: 7/9/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.geerservices.com/ Software Link: http://downloads.wordpress.org/plugin/resume-submissions-job-postings.2.5.1.zip Version: 2.5.1...