Malicious code in @zalastax/nolb-cck (npm)

The package @zalastax/nolb-cck was found to contain malicious code...

MAL-2025-10871 Malicious code in @zalastax/nolb-cck (npm)

The package @zalastax/nolb-cck was found to contain malicious code...

Code injection

The TETRA TA61 identity encryption function internally uses a 64-bit value derived exclusively from the SCK Class 2 networks or CCK Class 3 networks. The structure of TA61 allows for efficient recovery of this 64-bit value, allowing an adversary to encrypt or decrypt arbitrary identities given on...

CVE-2022-24403 De-anonymization attack in TETRA

The TETRA TA61 identity encryption function internally uses a 64-bit value derived exclusively from the SCK Class 2 networks or CCK Class 3 networks. The structure of TA61 allows for efficient recovery of this 64-bit value, allowing an adversary to encrypt or decrypt arbitrary identities given on...

CVE-2022-24403: Use of a Broken or Risky Cryptographic Algorithm

The TETRA TA61 identity encryption function internally uses a 64-bit value derived exclusively from the SCK Class 2 networks or CCK Class 3 networks. The structure of TA61 allows for efficient recovery of this 64-bit value, allowing an adversary to encrypt or decrypt arbitrary identities given on...

Ordasoft CCK, 6.1.12 Various

Ordasoft CCK, 6.1.12 Various,,Other new version number...

SQL injection vulnerability in the co*** parameter of the ordasoft-cck component of Joomla!

Developed with PHP language and MySQL database, Joomla! is a content management system. A SQL injection vulnerability exists in the co parameter of the Joomla! ordasoft-cck component. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL injection vulnerability in the la***_ty*** parameter of the ordasoft-cck component of Joomla!

Developed with PHP language and MySQL database, Joomla! is a content management system. A SQL injection vulnerability exists in the laty parameter of the Joomla! ordasoft-cck component. An attacker can exploit this vulnerability to obtain sensitive database information...

Arbitrary File Upload Vulnerability in Joomla! ordasoft-cck Component

Developed with PHP language and MySQL database, Joomla! is a content management system. An arbitrary file upload vulnerability exists in the Joomla! ordasoft-cck component. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

SQL injection vulnerability in the js*** parameter of the ordasoft-cck component of Joomla!

Developed with PHP language and MySQL database, Joomla! is a content management system. A SQL injection vulnerability exists in the js parameter of the Joomla! ordasoft-cck component. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Us*** Parameters of Joomla! ordasoft-cck Component

Developed with PHP language and MySQL database, Joomla! is a content management system. A SQL injection vulnerability exists in the Us parameter of the Joomla! ordasoft-cck component, which can be exploited by an attacker to obtain sensitive information about a database...

OrdaSoft CCK,2.0.4,SQL Injection

OrdaSoft CCK, 2.0.4, SQL Injection Resolution: update to 2.0.5 Update notice: http://ordasoft.com/News/News/os-cck-content-construction-kit-for-joomla-security-update.html...

CVE-2015-5510

Open redirect vulnerability in the Content Construction Kit CCK 6.x-2.x before 6.x-2.10 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the destinations parameter, related to administration pages...

Open redirect

Open redirect vulnerability in the Content Construction Kit CCK 6.x-2.x before 6.x-2.10 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the destinations parameter, related to administration pages...

CVE-2015-5510

The CVE-2015-5510 entry concerns the Drupal Content Construction Kit (CCK) module. Affected: CCK 6.x-2.x before 6.x-2.10. Root cause: an open redirect vulnerability via the destinations parameter on certain admin pages, allowing remote attackers to redirect users to arbitrary sites (phishing risk...

CVE-2015-5510: Undefined Security Weakness

Open redirect vulnerability in the Content Construction Kit CCK 6.x-2.x before 6.x-2.10 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the destinations parameter, related to administration pages...

PT-2015-6962

Name of the Vulnerable Software and Affected Versions Drupal CCK versions 6.x-2.x before 6.x-2.10 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the destinations parameter, related to administration pages. Recommendations Fo...

Fedora 21 : drupal6-cck-2.10-1.fc21 (2015-12028)

https://www.drupal.org/project/cck Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

Fedora 22 : drupal6-cck-2.10-1.fc22 (2015-12037)

https://www.drupal.org/project/cck Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

Fedora Update for drupal6-cck FEDORA-2015-12028

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...