LinEnum - Local Linux Enumeration & Privilege Escalation Checks

LinEnum will automate many of the checks that I’ve documented in the Local Linux Enumeration & Privilege Escalation Cheatsheet. It’s a very basic shell script that performs over 65 checks, getting anything from kernel information to locating possible escalation points such as potentially useful...

XOOPS Module Jobs Remote SQL Injection (CVE-2007-2370)

An SQL injection vulnerability has been reported in Xoops John Mordo Jobs Module. An attacker could exploit this vulnerability via the cid parameter in a jobsview action. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected...

[SECURITY] Fedora 19 Update: torque-3.0.4-5.fc19

TORQUE Tera-scale Open-source Resource and QUEue manager is a resource manager providing control over batch jobs and distributed compute nodes. TORQUE is based on OpenPBS version 2.3.12 and incorporates scalability, fault tolerance, and feature extension patches provided by USC, NCSA, OSC, the U....

CVE-2014-2058

BuildTrigger in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to bypass access restrictions and execute arbitrary jobs by configuring a job to trigger another job. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7330...

CVE-2014-2058

BuildTrigger in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to bypass access restrictions and execute arbitrary jobs by configuring a job to trigger another job. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7330...

CVE-2014-2058

BuildTrigger in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to bypass access restrictions and execute arbitrary jobs by configuring a job to trigger another job. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7330...

CVE-2014-2058

CVE-2014-2058 affects Jenkins (BuildTrigger) where authenticated remote users could bypass access restrictions and trigger arbitrary jobs by configuring a job to trigger another. Affected versions are Jenkins before 1.551 and LTS before 1.532.2. The issue is described as a result of an incomplete...

CVE-2014-2058

BuildTrigger in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to bypass access restrictions and execute arbitrary jobs by configuring a job to trigger another job. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7330...

PT-2014-4458

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 1.551 Jenkins LTS versions prior to 1.532.2 Description The issue allows remote authenticated users to bypass access restrictions and execute arbitrary jobs by configuring a job to trigger another job. This is due to ...

Design/Logic Flaw

Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/CONFIGURE permission to bypass intended restrictions and create or destroy arbitrary jobs via unspecified vectors...

CVE-2014-3663

Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/CONFIGURE permission to bypass intended restrictions and create or destroy arbitrary jobs via unspecified vectors...

CVE-2014-3663

Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/CONFIGURE permission to bypass intended restrictions and create or destroy arbitrary jobs via unspecified vectors...

PT-2014-5441 · Cloudbees +1 · Jenkins

Name of the Vulnerable Software and Affected Versions: Jenkins versions prior to 1.583 Jenkins LTS versions prior to 1.565.3 Description: The issue allows remote authenticated users with the Job/CONFIGURE permission to bypass intended restrictions. This can lead to the creation or destruction of...

CVE-2014-3663: Undefined Security Weakness

Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/CONFIGURE permission to bypass intended restrictions and create or destroy arbitrary jobs via unspecified vectors...

CVE-2014-7201

Multiple SQL injection vulnerabilities in the search function in pi1/class.txdmmjobcontrolpi1.php in the JobControl dmmjobcontrol extension 2.14.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via the 1 education, 2 region, or 3 sector fields, as demonstrated by t...

PT-2014-7832

Name of the Vulnerable Software and Affected Versions TYPO3 JobControl dmmjobcontrol extension versions 2.14.0 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the tx dmmjobcontrol pi1searchkeyword parameter to the "jobs/"...

Fedora 19 : cups-1.6.4-10.fc19 (2014-9703)

Upstream patches have been applied to prevent long-running Get-Jobs operations preventing other requests from being handled, and to fix the order of completed jobs in Get-Jobs responses. This update fixes a security flaw potentially leading to a disclosure of information. Note that Tenable Networ...

PT-2014-2692 · Openmediavault · Openmediavault

Name of the Vulnerable Software and Affected Versions: OpenMediaVault affected versions not specified Description: The issue allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitrary commands via the username parameter in the Cron service in rpc.php...

CVE-2014-6770

The Aerospace Jobs aka com.appaerospacejobs.layout application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Aerospace Jobs aka com.appaerospacejobs.layout application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...