CVE-2017-8872

The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service buffer over-read or information disclosure...

CVE-2017-7469

This CVE entry is rejected and not used; reference CVE-2017-7466 instead.

cv-library.co.uk XSS vulnerability

Vulnerable URL: https://www.cv-library.co.uk/cgi-bin/password.cgi Details: Description| Value ---|--- Patched:| Yes, at 22.03.2017 Latest check for patch:| 22.03.2017 09:29 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10184 VIP website status:| Yes Check...

cv-library.co.uk XSS vulnerability

Vulnerable URL: http://www.cv-library.co.uk/cgi-bin/searchjobs.cgi?q=Test+Engineer=Chesham%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E%22=15===annum=28=1= Details: Description| Value ---|--- Patched:| Yes, at 23.03.2017 Latest check for patch:| 23.03.2017 08:46 GMT...

cv-library.co.uk XSS vulnerability

Vulnerable URL: https://www.cv-library.co.uk/cgi-bin/candlogin.cgi?return="OPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 17.03.2017 Latest check for patch:| 17.03.2017 20:09 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8678 VIP website...

cv-library.co.uk XSS vulnerability

Vulnerable URL: http://www.cv-library.co.uk/job/204107125/Test-Technician?s=100218"openbug'%3Balert'OPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8454 VIP website status:| Yes Check cv-library.co....

WordPress Job Board 1.0.0 Cross Site Scripting

Plugin Name : Job Board Effected Version : 1.0.0 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Administrator PoC - Proof of Concept : The following fields put the payload as bel...

OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4911...

cv-library.co.uk XSS vulnerability

Vulnerable URL: http://www.cv-library.co.uk/cgi-bin/searchjobs.cgi?posted=28=1=1=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E=15===annum=Any Details: Description| Value ---|--- Patched:| Yes, at 22.03.2017 Latest check for patch:|...

Job Manager <= 0.7.25 - Insecure Direct Object Reference (IDOR)

It is possible to enumerate the CV filename that is uploaded on the server and then access the CV file by performing a bruteforce attack to the wordpress upload directory structure...

Bash Botnet Exploit Found, Bash Patches Incomplete

The urgency to patch systems against the Bash zero-day vulnerability has been cranked to 10 after reports of an exploit in the wild have been made public by AusCERT, the Computer Emergency Response Team of Australia. This seems to reflect a similar finding posted by a researcher who goes by the...

Joomla Component CV Maker com_cvmaker Local File Inclusion Vulnerability

No description provided by source. ============================================================================================================= o Joomla Component CV Maker Local File Inclusion Vulnerability Software : comcvmaker version 1.0 Author : AntiSecurity Vrs-hCk NoGe OoNBoY Paman zxvf s4...

T-Dreams Job Seekers Package 3.0 - SQL Injection

No description provided by source. Author: R4dc0re Exploit Title: T-Dreams Job Seekers Package SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link:http://t-dreams.com Category:WebApp Version:3.0 Price:279$ Contact: [email protected] Website: www.1337db.com Greetings to:...

FXRecruiter Shell Upload

======================================================================= FXRecruiter CMS Arbitary File Upload Vulnerability ======================================================================= Name: FXRecruiter CMS Arbitary File Upload Vulnerability Vendor: http://www.fxrecruiter.co.uk &...

Win32k Keyboard Layout Vulnerability

// My koala is staring at you CºgºD // Source: http://reversemode.com/index.php?option=comcontent&task=view&id=71&Itemid=1 include include include define MAGICOFFSET 0x6261 define InitializeUnicodeStrp,s \ p-Length= wcslens2; \ p-MaximumLength = wcslens2+2; \ p-Buffer = s; \ declspecnaked HKL...

Joomla NeoRecruit SQL Injection

Name : Joomla comneorecruit BSqli Vulnerability Date : july 6,2010 Critical Level : HIGH vendor URL :http://www.neojoomla.com Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger greetz to :www.topsecure.net ,All ICW members and ...

Joomla! Component NeoRecruit 1.6.4 - 'Itemid' Blind SQL Injection

Name : Joomla comneorecruit BSqli Vulnerability Date : july 6,2010 Critical Level : HIGH vendor URL :http://www.neojoomla.com Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger greetz to :www.topsecure.net ,All ICW members and ...

Joomla! Component com_eportfolio - Arbitrary File Upload

Joomla! Component comeportfolio - Arbitrary File Upload 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla comeportfolio Upload Vulnerability Date : june, 20 2010 Critical Level : HIGH Vendor Url :...

Joomla Component com_recruitmentmanager Upload Vulnerability

Exploit for php platform in category web applications ============================================================ Joomla Component comrecruitmentmanager Upload Vulnerability ============================================================ Title:Joomla Component comrecruitmentmanager Upload...

Joomla CV Maker 1.0 Local File Inclusion

============================================================================================================= o Joomla Component CV Maker Local File Inclusion Vulnerability Software : comcvmaker version 1.0 Vendor : http://dev.pucit.edu.pk/ Download : http://dev.pucit.edu.pk/files/CVMaker.zip...