Inappropriate implementation in Gamepad API in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2022-0610: Stable Channel Update for Desktop

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in wpDataTables (WordPress plugin) versions <= 2.1.27

CVE-2022-25618: wpDataTables – Tables & Table Charts

In the Noo JobMonster WordPress theme before 4.5.2.9 JobMonster there is a XSS vulnerability as the input for the search form is provided through unsanitized GET requests.

CVE-2022-1170: Jobmonster - Job Board WordPress Theme

There are unauthenticated reflected Cross-Site Scripting (XSS) vulnerabilities in CareerUp Careerup WordPress theme before 2.3.1, via the filter parameters.

CareerUp – Job Board WordPress theme is a complete Job Board WordPress theme that allows you to create a useful and easy to use job listings website . Using CareerUp theme, you can create a complete & fully Responsive job portal, career platform to run human resource management, recruitment or job posting website. CareerUp is not just a job board theme, it’s the best WordPress job portal template choice for anyone who wants a simple job script that makes money.

**Features**

*   **Restrict Job**  
    **\- View job page:**
    *   All (Users, Guests)
    *   All Register Users
    *   Register Candidates (All registered candidates can view jobs.)
    *   Always Hidden
*   **Restrict Candidate**  
    **\- View candidate page:**
    
    *   All (Users, Guests)
    *   All Register Users
    *   Only Applicants (Employer can view only their own applicants candidates.)
    *   Register Employers (All registered employers can view candidates.)
    *   Register Employers with package (Registered employers who purchased CV Package can view candidates.)
    
    **\- View candidate contact info:**
    *   All (Users, Guests)
    *   All Register Users
    *   Only Applicants (Employer can view only their own applicants candidates.)
    *   Register Employers (All registered employers can view candidates.)
    *   All users can view candidate, but only employers with package can see contact info (Users who purchased Contact Package can see contact info.)
*   **Restrict Employer**  
    **\- View candidate page:**
    
    *   All (Users, Guests)
    *   All Register Users
    *   Only Applicants (Candidate can view only their own applicants employers.)
    *   Register Candidates (All registered candidates can view employers.)
    *   Always Hidden
    
    **\- View candidate contact info:**
    *   All (Users, Guests)
    *   All Register Users
    *   Only Applicants (Candidate can view only their own applicants employers.)
    *   Register Candidates (All registered candidates can view employers.)
    *   Always Hidden
*   Add a job in frontend
*   Highly Customizable
*   Extensive Admin Interface
*   One click Demo Import
*   No coding knowledge required
*   Page Templates
*   Responsive & Retina Ready
*   Large collection of useful inner pages
*   Choose your grid size
*   Boxed layout option
*   Powerful typography options
*   Translation ready
*   WooCommerce compatible
*   Powerful sorting options for job listings and resumes
*   Multiple ways of showcasing job listings and resumes
*   Listing List shortcode
*   Listing Search shortcode
*   Listing Advanced Search shortcode
*   Listing Simple Search shortcode
*   Resume List shortcode
*   Resume Advanced Search shortcode
*   User login
*   User Dashboard page template
*   Facebook, Google, Twitter, LinkedIn login
*   Facebook, Google, Twitter, LinkedIn apply job
*   Pricing Tables shortcode
*   Comparison Pricing Tables shortcode
*   Smooth Page Transitions
*   Fontawsome & Flaticon
*   User Login Form

**Updates History:**

**Version 2.3.24 – 24 March 2022**

\* Update Elementor

**Version 2.3.23 – 05 November 2021**

\* Update register form

**Version 2.3.22 – 15 September 2021**

\* Update filter job

**Version 2.3.21 – 01 July 2021**

\* Update Website Preload

**Version 2.3.20 – 10 June 2021**

\* Updated select2

**Version 2.3.19 – 31 May 2021**

\* Updated employer logo default

**Version 2.3.18 – 14 May 2021**

\* Added Fields Manager

**Version 2.3.17 – 28 April 2021**

\* Updated Elementor

**Version 2.3.16 – 26 April 2021**

\* Updated Elementor

**Version 2.3.15 – 14 April 2021**

\* Updated WooCommerce
\* Updated Language

**Version 2.3.14 – 17 March 2021**

\* Updated related
\* Fixed pricing package

**Version 2.3.13 – 16 March 2021**

\* Updated pagination Jobs, Employers, Candidates

**Version 2.3.12 – 19 February 2021**

\* Improved responsive
\* Improved restrict Job, Employer, Candidate

**Version 2.3.11 – 15 January 2021**

\* Updated WooCommerce

**Version 2.3.10 – 03 November 2020**

\* Updated restrict jobs, candidate, employer
\* Updated application status

**Version 2.3.9 – 01 October 2020**

\* Updated get jobs by multiple taxonomies
\* Updated Job map
\* Updated Job preview

**Version 2.3.8 – 21 August 2020**

\* Updated candidate category list
\* Update them style

**Version 2.3.7 – 21 August 2020**

\* Updated WooCommerce 4.4

**Version 2.3.6 – 14 August 2020**

\* Fixed javascript error
\* Improve geolocation

**Version 2.3.5 – 12 August 2020**

\* Fixed javascript error
\* Updated demo import

**Version 2.3.4 – 05 August 2020**

\* Updated plugin "WP Job Board" 2.1.3
\* Updated search location
\* Updated Employer | Candidate email
\* Updated Employer my jobs

**Version 2.3.3 – 13 July 2020**

\* Updated plugin "WP Job Board - WooCommerce Paid Listings" 3.2.2
\* Add element "Apus Jobs Maps" to show maps in home page

**Version 2.3.2 – 10 July 2020**

\* Updated plugin "WP Job Board" 2.1.2
\* Updated plugin "WP Job Board - WooCommerce Paid Listings" 3.2.1
\* Updated WooCommerce 4.3
\* Fixed Urgent/Featured jobs

**Version 2.3.1 – 18 June 2020**

\* Updated plugin "WP Job Board - WooCommerce Paid Listings" 3.1.1
\* Updated filter url
\* Updated texts
\* Added update checker

**Version 2.3.0 – 29 May 2020**

\* Updated plugin "WP Job Board" 2.1.0
\* Updated plugin "WP Job Board - WooCommerce Paid Listings" 3.1.0
\* Updated job filter
\* Updated Resume package
\* Added job restrict
\* Added recaptcha for lost password form
\* Added ajax handles
\* Fixed send email alert (jobs, candidates)

**Version 2.2.2 – 26 May 2020**

\* Updated plugin "WP Job Board" 2.0.5
\* Updated mapbox
\* Fixed php error
\* Updated contact form
\* Updated candidate custom fields

**Version 2.2.1 – 06 May 2020**

\* Updated WooCommerce
\* Fixed filter location list

**Version 2.2.0 – 04 May 2020**

\* Updated plugin "WP Job Board" 2.0.3
\* Updated plugin "WP Job Board - WooCommerce Paid Listings" 3.0.3
\* Added 2 Home pages
\* Added 2 Job details page
\* Added 2 Employer page
\* Added 2 Candidate pages
\* Added 2 job listing style
\* Added option change color for Urgent, Featured job, employer, candidate
\* Added options for hidden Register form fields
\* Added job suggestion search
\* Updated filter results
\* Updated email template
\* Fixed social login

**Version 2.1.1 – 31 March 2020**

\* Updated rating review

**Version 2.1.0 – 30 March 2020**

\* Updated plugin "WP Job Board" 2.0.0
\* Updated plugin "WP Job Board - WooCommerce Paid Listings" 3.0.2
\* Add Employee for Employer
\* Add RSS Feed Jobs
\* Updated permalink
\* Updated phone display
\* Updated WooCommerce
\* Fixed facebook login

**Version 2.0.3 – 03 March 2020**

\* Updated plugin "WP Job Board" 1.3.2
\* Updated locations
\* Updated Filter count

**Version 2.0.2 – 29 February 2020**

\* Updated plugin "WP Job Board - WooCommerce Paid Listings" 3.0.1
\* Fixed pricing package

**Version 2.0.1 – 27 February 2020**

\* Updated responsive
\* Updated demo import

**Version 2.0.0 – 27 February 2020**

\* Updated more 5 home page
\* Updated plugin "WP Job Board" 1.3.0
\* Updated plugin "WP Job Board - WooCommerce Paid Listings" 3.0.0
\* Updated location
\* Updated Elementor elements
\* Added candidate search form
\* Added field location list for Job search form
\* Added package with WooCommerce Subscription
\* Added filter by Employers

**Version 1.1.24 – 04 February 2020**

\* Updated plugin "WP Job Board" 1.2.24
\* Updated submit job preview
\* Updated responsive
\* Updated candidate filter location
\* Updated employer filter location
\* Fixed submit job preview

**Version 1.1.23 – 31 January 2020**

\* Updated plugin "WP Job Board" 1.2.23
\* Updated WooCommerce 3.9.0
\* Updated search form

**Version 1.1.22 – 20 December 2019**

\* Updated plugin "WP Job Board" 1.2.20
\* Updated plugin "WP Job Board - WooCommerce Paid Listings" 2.0.5
\* Added Approved for Application
\* Fixed Filter widgets Jobs, Employers, Candidates
\* Added taxonomy multiple select field
\* Added User search ajax fields
\* Added Employer view all jobs
\* Updated my jobs

**Version 1.1.21 – 12 December 2019**

\* Updated plugin "WP Job Board" 1.2.19
\* Updated Job Preview
\* Updated Menu class
\* Updated price format
\* Updated job expired

**Version 1.1.20 – 27 November 2019**

\* Updated plugin "WP Job Board" 1.2.18
\* Added sort by for packages
\* Updated candidate shortlist
\* Updated reset password

**Version 1.1.19 – 25 November 2019**

\* Updated plugin "WP Job Board" 1.2.17
\* Updated job simple search
\* Updated job expired date

**Version 1.1.18 – 21 November 2019**

\* Updated plugin "WP Job Board" 1.2.16
\* Updated search location
\* Updated filter
\* Updated custom field placeholder
\* Updated user approve

**Version 1.1.17 – 13 November 2019**

\* Updated plugin "WP Job Board" 1.2.15
\* Updated email apply
\* Updated Google Maps
\* Updated WooCommerce 3.8
\* Fixed Search Form Location

**Version 1.1.16 – 07 November 2019**

\* Updated plugin "WP Job Board" 1.2.14
\* Fixed submit job error

**Version 1.1.15 – 05 November 2019**

\* Updated plugin "WP Job Board" 1.2.13
\* Updated listing count
\* Updated breadcrumbs

**Version 1.1.14 – 21 October 2019**

\* Updated plugin "WP Job Board" 1.2.12
\* Updated job button style
\* Improved Job filter Widget
\* Improved Candidate filter Widget
\* Improved Employer filter Widget

**Version 1.1.13 – 9 October 2019**

\* Added translate Menu text
\* Added loading for reset password

**Version 1.1.12 – 27 September 2019**

\* Updated plugin "WP Job Board" 1.2.10
\* Updated Recaptcha
\* Update contact form email template
\* Added filter taxonomies

**Version 1.1.11 – 16 September 2019**

\* Updated plugin "WP Job Board" 1.2.9
\* Updated plugin "WP Job Board - WooCommerce Paid Listings" 2.0.3
\* Updated clear location
\* Update submit form

**Version 1.1.10 – 13 September 2019**

\* Updated plugin "WP Job Board" 1.2.8
\* Added placeholder image
\* Fixed filter Employer/Candidate
\* Fixed Pagination
\* Updated ajax filter
\* Updated social share
\* Updated Email variable
\* Updated Linkedin login
\* Updated submit form

**Version 1.1.9 – 30 August 2019**

\* Updated plugin "WP Job Board" 1.2.7
\* Added candidate tags
\* Fixed custom field
\* Add Google Structure data
\* Fixed candidate salary types
\* Fixed Translate

**Version 1.1.8 – 23 August 2019**

\* Updated plugin "WP Job Board" 1.2.6
\* Updated date field
\* Added email template for apply job
\* Add page settings for after login
\* Add relist expired job
\* Fixed apply job with complete resume
\* Fixed Salary format

**Version 1.1.7 – 13 August 2019**

\* Updated plugin "WP Job Board" 1.2.3
\* Added Undo reject applicant
\* Updated WooComemrce 3.7
\* Updated spelling

**Version 1.1.6 – 12 August 2019**

\* Updated plugin "WP Job Board" 1.2.3
\* Updated location search
\* Updated maps default location

**Version 1.1.5 – 10 August 2019**

\* Updated plugin "WP Job Board" 1.2.2
\* Added employer restrict review
\* Added candidate restrict review
\* Update date format
\* Added Terms and Conditions

**Version 1.1.4 – 08 August 2019**

\* Updated plugin "WP Job Board" 1.2.0
\* Compatible with WPML
\* Improved responsive
\* Updated profile url field

**Version 1.1.3 – 07 August 2019**

\* Added simple jobs widget
\* Added simple candidates widget
\* Added simple employers widget
\* Added editable profile url
\* Added Apply job with complete resume

**Version 1.1.2 – 02 August 2019**

\* Added video for candidate/employer
\* Added popup image for candidate portfolio
\* Updated plugin "WP Job Board" 1.1.2

**Version 1.1.1 – 01 August 2019**

\* Updated download CV
\* Fixed error with old version WP Job Board
\* Fixed filter in job List v3

**Version 1.1.0 – 31 July 2019**

\* Compatible with WP Job Manager 1.1.0
\* Fixed indeed job import
\* Added restrict employer
\* Added restrict candidate
\* Added approve user register
\* Added approve resume
\* Added Resume download
\* Added changeable Miles/Kilometer
\* Added Free/paid apply for candidate
\* Added CV package
\* Added Contact candidate package
\* Added Resume package
\* Added Candidate package
\* Fixed Job package expiry date
\* Fixed error with WooCommerce 3.x

**Version 1.0.10 – 18 July 2019**

\* Fixed job tabs
\* Updated plugin "WP Job Board" version 1.0.13

**Version 1.0.9 – 16 July 2019**

\* Update register user
\* Update plugin "WP Job Board" to version 1.0.12

**Version 1.0.8 – 12 July 2019**

\* Updated import demo data

**Version 1.0.7 – 12 July 2019**

\* Updated Spelling text
\* Updated plugin "WP Job Board" version 1.0.11
\* Fixed search by jobs, employer, candidate
\* Fixed filter candidate

**Version 1.0.6 – 11 July 2019**

\* Updated plugin "Wp Job Board" to version 1.0.10
\* Updated expired job
\* Updated messages system
\* Updated demo import

**Version 1.0.5 – 09 July 2019**

\* Updated plugin "Wp Job Board" to version 1.0.9
\* Updated filter for jobs/candidate shortlist
\* Updated filter for following
\* Updated filter for applicants
\* Updated Applicants page
\* Added reject applicant
\* Added filter count
\* Fixed expired job
\* Improved filter jobs/candidate/employer

**Version 1.0.4 – 05 July 2019**

\* Added filter count
\* Improved filter job
\* Updated plugin "WP Job Board" to version 1.0.4

**Version 1.0.3 – 02 July 2019**

\* Fixed responsive sidebar

**Version 1.0.2 – 28 June 2019**

\* Fixed job style
\* Fixed job tabs layout
\* Fixed Register user
\* Improved urgent label style
\* Improved import demo data
\* Add change header mobile color

**Version 1.0.1 – 26 June 2019**

\* Updated demo data
\* Improve header style

**Version 1.0.0 – 25 June 2019**

\* First release

CVE-2022-1167: CareerUp - Job Board WordPress Theme

The Insights from Google PageSpeed WordPress plugin before 4.0.4 does not sanitise and escape various parameters before outputting them back in attributes in the plugin's settings dashboard, leading to Reflected Cross-Site Scripting

CVE-2022-0431

An unrestricted file upload at /public/admin/index.php?add_product of Ecommerce-Website v1.1.0 allows attackers to upload a webshell via the Product Image component.

CVE-2022-27435: GitHub - D4rkP0w4r/Full-Ecommece-Website-Add_Product-Unrestricted-File-Upload-RCE-POC

CVE-2022-28378: cms/CHANGELOG.md at develop · craftcms/cms

In the Linux kernel before 5.17.1, a refcount leak bug was found in net/llc/af_llc.c.

Permalink

Browse files

llc: fix netdevice reference leaks in llc\_ui\_bind()

Whenever llc\_ui\_bind() and/or llc\_ui\_autobind()
took a reference on a netdevice but subsequently fail,
they must properly release their reference
or risk the infamous message from unregister\_netdevice()
at device dismantle.

unregister\_netdevice: waiting for eth0 to become free. Usage count = 3

Fixes: 1da177e ("Linux-2.6.12-rc2")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: 赵子轩 <beraphin@gmail.com>
Reported-by: Stoyan Manolov <smanolov@suse.de>
Link: https://lore.kernel.org/r/20220323004147.1990845-1-eric.dumazet@gmail.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>

*   Loading branch information

CVE-2022-28356: llc: fix netdevice reference leaks in llc_ui_bind() · torvalds/linux@764f4eb

Permalink

Browse files

llc: fix netdevice reference leaks in llc\_ui\_bind()

Whenever llc\_ui\_bind() and/or llc\_ui\_autobind()
took a reference on a netdevice but subsequently fail,
they must properly release their reference
or risk the infamous message from unregister\_netdevice()
at device dismantle.

unregister\_netdevice: waiting for eth0 to become free. Usage count = 3

Fixes: 1da177e ("Linux-2.6.12-rc2")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: 赵子轩 <beraphin@gmail.com>
Reported-by: Stoyan Manolov <smanolov@suse.de>
Link: https://lore.kernel.org/r/20220323004147.1990845-1-eric.dumazet@gmail.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>

*   Loading branch information

Showing with **8 additions** and **0 deletions**.

1.  +8 −0 net/llc/af\_llc.c

Express OpenID Connect is an Express JS middleware implementing sign on for Express web apps using OpenID Connect. Users of the `requiresAuth` middleware, either directly or through the default `authRequired` option, are vulnerable to an Open Redirect when the middleware is applied to a catch all route. If all routes under `example.com` are protected with the `requiresAuth` middleware, a visit to `http://example.com//google.com` will be redirected to `google.com` after login because the original url reported by the Express framework is not properly sanitized. This vulnerability affects versions prior to 2.7.2. Users are advised to upgrade. There are no known workarounds.

@@ -354,4 +354,21 @@ describe('requiresAuth', () => {

assert.equal(response.statusCode, 401);

sinon.assert.notCalled(checkSpy);

});

  

it('should collapse leading slashes on returnTo', async () \=> {

server \= await createServer(auth(defaultConfig));

const payloads \= \['//google.com', '///google.com', '//google.com'\];

for (const payload of payloads) {

const response \= await request({ url: \`${baseUrl}${payload}\` });

const state \= new URL(response.headers.location).searchParams.get(

'state'

);

const decoded \= Buffer.from(state, 'base64');

const parsed \= JSON.parse(decoded);

  

assert.equal(response.statusCode, 302);

assert.include(response.headers.location, 'https://op.example.com');

assert.equal(parsed.returnTo, '/google.com');

}

});

});

Tag

#google