CVE-2020-35749

Directory traversal vulnerability in class-simplejobboardresumedownloadhandler.php in the Simple Board Job plugin 2.9.3 and earlier for WordPress allows remote attackers to read arbitrary files via the sjbfile parameter to wp-admin/post.php...

CVE-2020-35749

Directory traversal vulnerability in class-simplejobboardresumedownloadhandler.php in the Simple Board Job plugin 2.9.3 and earlier for WordPress allows remote attackers to read arbitrary files via the sjbfile parameter to wp-admin/post.php...

Directory traversal

Directory traversal vulnerability in class-simplejobboardresumedownloadhandler.php in the Simple Board Job plugin 2.9.3 and earlier for WordPress allows remote attackers to read arbitrary files via the sjbfile parameter to wp-admin/post.php...

CVE-2020-35749

Directory traversal vulnerability in class-simplejobboardresumedownloadhandler.php in the Simple Board Job plugin 2.9.3 and earlier for WordPress allows remote attackers to read arbitrary files via the sjbfile parameter to wp-admin/post.php...

CVE-2020-35749

The CVE-2020-35749 issue affects WordPress Simple Job Board plugin versions prior to 2.9.4. It allows an authenticated user with the download_resume capability to exploit an LFI (local file inclusion) by not validating the sjb_file parameter when viewing a resume, enabling reading arbitrary serve...

Wordpress Simple Board Job Plugin 路径遍历漏洞

Wordpress Simple Board Job Plugin is a plugin from the WordPress Wordpress Foundation that provides job posting functionality job boards for Wordpress. A security vulnerability exists in WordPress Simple Board Job plugin 2.9.3 and earlier versions, which stems from a path traversal vulnerability ...

Simple Job Board < 2.9.4 - Authenticated Path Traversal Leading to Arbitrary File Download

The plugin does not validate the sjbfile parameter when viewing a resume, allowing authenticated user with the downloadresume capability such as HR users to download arbitrary files from the web-server via a path traversal attack PoC The sjbfile parameter to use may depends on the configuration o...

WordPress Simple Job Board plugin <= 2.9.3 - Authenticated Directory Traversal vulnerability

Authenticated Directory Traversal vulnerability found by Arcangelo Saracino in WordPress Simple Job Board plugin versions = 2.9.3. Solution Update the WordPress Simple Job Board plugin to the latest available version at least 2.9.4...

OSV-2018-179 Heap-buffer-overflow in OT::post::accelerator_t::cmp_gids

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11290 Crash type: Heap-buffer-overflow READ 5 Crash state: OT::post::acceleratort::cmpgids sortrcmpswap sortrsimple...

CMS Made Simple 2.2.15 Remote Command Execution

Exploit Title: CMS Made Simple 2.2.15 - RCE Authenticated Author: Andrey Stoykov Vendor Homepage: https://www.cmsmadesimple.org/ Software Link: https://www.cmsmadesimple.org/downloads/cmsms Version: 2.2.15 Tested on: Debian 10 LAMPP Exploit and Detailed Info:...

CMS Made Simple 2.2.15 - RCE (Authenticated)

Exploit Title: CMS Made Simple 2.2.15 - RCE Authenticated Author: Andrey Stoykov Vendor Homepage: https://www.cmsmadesimple.org/ Software Link: https://www.cmsmadesimple.org/downloads/cmsms Version: 2.2.15 Tested on: Debian 10 LAMPP Exploit and Detailed Info:...

CVE-2020-35892

An issue was discovered in the simple-slab crate before 0.3.3 for Rust. index allows an out-of-bounds read...

CVE-2020-35893

An issue was discovered in the simple-slab crate before 0.3.3 for Rust. remove has an off-by-one error, causing memory leakage and a drop of uninitialized memory...

CVE-2020-35893

An issue was discovered in the simple-slab crate before 0.3.3 for Rust. remove has an off-by-one error, causing memory leakage and a drop of uninitialized memory...

CVE-2020-35892

An issue was discovered in the simple-slab crate before 0.3.3 for Rust. index allows an out-of-bounds read...

Design/Logic Flaw

An issue was discovered in the simple-slab crate before 0.3.3 for Rust. index allows an out-of-bounds read...

CVE-2020-35892

CVE-2020-35892 : In Rust crate simple-slab , versions before 0.3.3 contain an out-of-bounds read in the index() function. The issue is corroborated by multiple sources (NVD, RH, GHSA/OSV) and is rated CRITICAL (CVSS3.1 base score 9.1; network interaction, no privileges required). The connected do...

CVE-2020-35892

An issue was discovered in the simple-slab crate before 0.3.3 for Rust. index allows an out-of-bounds read...

CVE-2020-35893

CVE-2020-35893 affects the Rust crate simple-slab, prior to version 0.3.3. The remove() function has an off-by-one error that can cause memory leakage and a drop of uninitialized memory. This is documented across multiple sources (NVD entry and OSV/GHSA advisories) and is not accompanied by publi...

CVE-2020-35893

An issue was discovered in the simple-slab crate before 0.3.3 for Rust. remove has an off-by-one error, causing memory leakage and a drop of uninitialized memory...