CVE-2015-6668

CVE-2015-6668 제목: Job-Manager WP 플러그인의 CV 파일명 노출...

CVE-2015-6668

CVE-2015-6668 - Job Manager IDOR CVE-2015-6668과 관련된 정보 공개 패턴을 재현하는 작은 Rust CLI 도구입니다. 이 도구는 주어진 연도, 월 및 일반적인 파일 확장자에 대해 일반적인 WordPress 업로드 경로를 열거하여 안전하지 않은 직접 객체 참조IDOR / 안전하지 않은 파일 노출을 나타낼 수 있는 공개적으로 접근 가능한 파일을 탐지합니다. 취약점 개요 CVE-2015-6668은 Job Manager//filename.ext. 공격 패턴: 일반적인 연도/월 폴더와 파일명 변형을...

js-jobs

js-jobs JS Job Manager 플러그인을 활성화하려면 여기에는 제한이 있습니다. 플러그인에 /.php 파일이 있어야 하며, 그렇지 않으면 활성화되지 않습니다: POST /wp-admin/admin-ajax.php HTTP/1.1 Accept: / Accept-Language: en-GB,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With:...

Job-Manager-Disclosure

CV 파일명 공개 스캐너 – CVE-2015-6668 이 스크립트는 WordPress용 WP Job Manager 플러그인버전 ≤ 0.7.25과 관련된 취약점 CVE-2015-6668을 통해 공개적으로 노출된 CV 파일예: .jpg, .png, .jpeg을 자동으로 검색합니다. 🧠 설명 이 취약점은 사용자가 업로드한 파일예: 이력서의 정확한 이름을 웹 서버의 예측 가능한 업로드 경로에 직접 접근하여 알아낼 수 있게 합니다. 이 스크립트는: 이름, 연도, 월 및 확장자를 기반으로 경로를 구성합니다. 가능한 모든 URL에 HTTP...

CVE-2015-6668

CVE-2015-6668 Python 3용으로 변환된 CVE-2015-6668에 대한 Evangelos Mourikis의 POC Wordpress용 Job Manager 플러그인의 IDOR 취약점을 악용합니다. Python 3.11.9에서 테스트됨 참고 자료 NIST CVE WPScan 취약점 DB 설치 및 사용법 저장소를 클론하고, 원한다면 가상 환경을 설정하고, requests를 설치한 후 Python 3로 스크립트를 실행하세요. 클론 git clone...

PYSEC-2026-3442

Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. A vulnerability in Apache Gravitino.This issue affects Apache Gravitino: from 1.0.0 through 1.2.1.Users are recommended to upgrade to...

CVE-2026-49876 Apache Gravitino: Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs

Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. A vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 through 1.2.1. Users are recommended to upgrade to...

WordPress Go Fetch Jobs (for WP Job Manager) plugin <= 1.8.4.8.1 - Unauthenticated Reflected Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Go Fetch Jobs for WP Job Manager versions = 1.8.4.8.1...

CVE-2026-39660

Missing Authorization vulnerability in Automattic WP Job Manager wp-job-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Manager: from n/a through = 2.4.1...

EUVD-2026-20330

Missing Authorization vulnerability in Automattic WP Job Manager wp-job-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Manager: from n/a through = 2.4.1...

CVE-2026-39660

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-39660

...

CVE-2026-39660

The CVE-2026-39660 entry corresponds to a Missing Authorization vulnerability in Automattic WP Job Manager (wp-job-manager) that enables exploitation via Incorrectly Configured Access Control Security Levels. Affected version range is WP Job Manager from n/a through

CVE-2026-39660

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-39660

...

PT-2026-31223

Missing Authorization vulnerability in Automattic WP Job Manager wp-job-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Manager: from n/a through = 2.4.1...

WordPress plugin WP Job Manager 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

CVE-2026-25404

Missing Authorization vulnerability in Automattic WP Job Manager wp-job-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Manager: from n/a through = 2.4.0...

CVE-2026-25404

Missing Authorization vulnerability in Automattic WP Job Manager wp-job-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Manager: from n/a through = 2.4.0...

CVE-2026-25404 WordPress WP Job Manager plugin <= 2.4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Automattic WP Job Manager wp-job-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Manager: from n/a through = 2.4.0...