341 matches found
CVE-2015-6668
CVE-2015-6668 제목: Job-Manager WP 플러그인의 CV 파일명 노출...
CVE-2015-6668
CVE-2015-6668 Python 3용으로 변환된 CVE-2015-6668에 대한 Evangelos Mourikis의 POC Wordpress용 Job Manager 플러그인의 IDOR 취약점을 악용합니다. Python 3.11.9에서 테스트됨 참고 자료 NIST CVE WPScan 취약점 DB 설치 및 사용법 저장소를 클론하고, 원한다면 가상 환경을 설정하고, requests를 설치한 후 Python 3로 스크립트를 실행하세요. 클론 root@kitploit: git clone...
CVE-2015-6668
CVE-2015-6668 - Job Manager IDOR CVE-2015-6668과 관련된 정보 공개 패턴을 재현하는 작은 Rust CLI 도구입니다. 이 도구는 주어진 연도, 월 및 일반적인 파일 확장자에 대해 일반적인 WordPress 업로드 경로를 열거하여 안전하지 않은 직접 객체 참조IDOR / 안전하지 않은 파일 노출을 나타낼 수 있는 공개적으로 접근 가능한 파일을 탐지합니다. 취약점 개요 CVE-2015-6668은 Job Manager//filename.ext. 공격 패턴: 일반적인 연도/월 폴더와 파일명 변형을...
Job-Manager-Disclosure
Сканер раскрытия имен файлов CV – CVE-2015-6668 Этот скрипт автоматизирует поиск файлов CV таких как .jpg, .png, .jpeg, публично раскрытых через уязвимость CVE-2015-6668, связанную с плагином WP Job Manager для WordPress версии ≤ 0.7.25. 🧠 Описание Уязвимость позволяет узнать точное имя файла,...
PYSEC-2026-3442
Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. A vulnerability in Apache Gravitino.This issue affects Apache Gravitino: from 1.0.0 through 1.2.1.Users are recommended to upgrade to...
CVE-2026-49876 Apache Gravitino: Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs
Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. A vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 through 1.2.1. Users are recommended to upgrade to...
WordPress Go Fetch Jobs (for WP Job Manager) plugin <= 1.8.4.8.1 - Unauthenticated Reflected Cross-Site Scripting vulnerability
Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Go Fetch Jobs for WP Job Manager versions = 1.8.4.8.1...
CVE-2026-39660
Missing Authorization vulnerability in Automattic WP Job Manager wp-job-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Manager: from n/a through = 2.4.1...
EUVD-2026-20330
Missing Authorization vulnerability in Automattic WP Job Manager wp-job-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Manager: from n/a through = 2.4.1...
CVE-2026-39660
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2026-39660
...
CVE-2026-39660
The CVE-2026-39660 entry corresponds to a Missing Authorization vulnerability in Automattic WP Job Manager (wp-job-manager) that enables exploitation via Incorrectly Configured Access Control Security Levels. Affected version range is WP Job Manager from n/a through
CVE-2026-39660
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
PT-2026-31223
Missing Authorization vulnerability in Automattic WP Job Manager wp-job-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Manager: from n/a through = 2.4.1...
WordPress plugin WP Job Manager 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...
CVE-2026-25404
Missing Authorization vulnerability in Automattic WP Job Manager wp-job-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Manager: from n/a through = 2.4.0...
CVE-2026-25404
Missing Authorization vulnerability in Automattic WP Job Manager wp-job-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Manager: from n/a through = 2.4.0...
CVE-2026-25404 WordPress WP Job Manager plugin <= 2.4.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Automattic WP Job Manager wp-job-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Manager: from n/a through = 2.4.0...