26 matches found
Malicious Package
Overview sjs-biginteger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview sjs-lint-build1 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in sjs-builder (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a36f6daf0c48b61b402287f9daea175fb059e04d48ee5e3e25b99f101962f34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-6877 Malicious code in sjs-builders (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33403134956efdf214a788395f07fbe72b53f2403770f4674554a0c53cd35468 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview sjs-builder is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...
MAL-2026-6876 Malicious code in sjs-builder (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a36f6daf0c48b61b402287f9daea175fb059e04d48ee5e3e25b99f101962f34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview sjs-builders is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in sjs-builders (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33403134956efdf214a788395f07fbe72b53f2403770f4674554a0c53cd35468 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sjs-lint-build1 (npm)
sjs-biginteger typosquats big.js on npm. Published April 7, 2026 by throwaway account vanes.s.p.orit.a, the package ships legitimate big.js source and hides its payload in a dependency: sjs-lint-build1. On install, the dependency’s postinstall hook fetches the attacker’s SSH public key from a C2...
CVE-2020-8645
An issue was discovered in Simplejobscript.com SJS through 1.66. There is an unauthenticated SQL injection via the job applications search function. The vulnerable parameter is jobid. The function is getJobApplicationsByJobId. The file is lib/class.JobApplication.php...
CVE-2020-8645
CVE-2020-8645 affects Simplejobscript.com SJS (up to v1.66). The issue is an unauthenticated SQL injection in the job applications search function, exploitable via the vulnerable parameter job_id in the function getJobApplicationsByJobId() within the file _lib/class.JobApplication.php . The CVSS ...
CVE-2020-8645: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in Simplejobscript.com SJS through 1.66. There is an unauthenticated SQL injection via the job applications search function. The vulnerable parameter is jobid. The function is getJobApplicationsByJobId. The file is lib/class.JobApplication.php...
PT-2020-20251
Name of the Vulnerable Software and Affected Versions Simplejobscript.com SJS versions 1.66 and earlier Description An issue was discovered in the job applications search function, allowing for unauthenticated SQL injection. The job id parameter is vulnerable, and the issue is related to the...
CVE-2020-8440
controllers/pageapply.php in Simplejobscript.com SJS through 1.66 is prone to unauthenticated Remote Code Execution by uploading a PHP script as a resume...
CVE-2020-8440
CVE-2020-8440 affects Simplejobscript.com SJS, specifically the controllers/page_apply.php component, up through version 1.66. The issue is an unauthenticated Remote Code Execution vulnerability triggered by uploading a PHP script as a resume, allowing attackers to execute arbitrary code on the s...
CVE-2020-8440
controllers/pageapply.php in Simplejobscript.com SJS through 1.66 is prone to unauthenticated Remote Code Execution by uploading a PHP script as a resume...
CVE-2020-8440: Unrestricted Upload of File with Dangerous Type
controllers/pageapply.php in Simplejobscript.com SJS through 1.66 is prone to unauthenticated Remote Code Execution by uploading a PHP script as a resume...
PT-2020-20140
Name of the Vulnerable Software and Affected Versions Simplejobscript.com SJS versions 1.66 and earlier Description The issue allows for unauthenticated Remote Code Execution by uploading a PHP script as a resume, specifically affecting the controllers/page apply.php file. Recommendations For...
CVE-2020-7229
An issue was discovered in Simplejobscript.com SJS before 1.65. There is unauthenticated SQL injection via the search engine. The parameter is landinglocation. The function is countSearchedJobs. The file is lib/class.Job.php...