CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

CNVD•added 2017/05/16 12:0 a.m.•5 views

Kerio Connect and Kerio Connect Client for Windows and Mac Clickjacking Vulnerability

Kerio Connect is a professional mail mail server setup software.Kerio Connect Client for Windows and Mac is a desktop application for Windows and Mac with features to manage email, chat messages, calendar, contacts, tasks and notes. A security vulnerability exists in Kerio Connect versions 8.0.0...

6.5CVSS6.8AI score0.00928EPSS

Hacker One•added 2017/05/14 10:35 a.m.•13 views

Yelp: User can be fooled to Bookmark any restaurant by clickjacking

In this report https://hackerone.com/reports/214087 you people said the clickjacking issue is fixed but i have found another issue of clickjacking. Using clickjacking attacker can fooled an user to bookmark n numbers of restuarants. I am attaching a PoC video , watch the video...

Hacker One•added 2017/05/12 6:5 a.m.•16 views

Yelp: ClickJacking in editing business name

SUMMARY: Hope you guys are doing great. I found clickjacking vulnerability while updating business page.One of the endpoints which is vulnerable to clickjacking is https://www.yelp.com/bizattribute?bizid=RIyHYSf3lyJcFb4El9T4tQ . Clickjacking User Interface redress attack, UI redress attack, UI...

Veracode•added 2017/05/05 2:39 a.m.•8 views

Clickjacking Attacks

github.com/sensu/uchiwa is vulnerable to clickjacking attacks. The vulnerability exists due to the lack of X-Frame-Options header in the HTTP responses sent by the web server...

OSV•added 2017/05/02 2:59 p.m.•4 views

CVE-2017-7440

Kerio Connect 8.0.0 through 9.2.2, and Kerio Connect Client desktop application for Windows and Mac 9.2.0 through 9.2.2, when e-mail preview is enabled, allows remote attackers to conduct clickjacking attacks via a crafted e-mail message...

6.5CVSS5.8AI score0.00928EPSS

Prion•added 2017/05/02 2:59 p.m.•15 views

Code injection

4.3CVSS6.5AI score0.00928EPSS

Exploits0References1Affected Software2

NVD•added 2017/05/02 2:59 p.m.•10 views

CVE-2017-7440

6.5CVSS6.5AI score0.00928EPSS

Vulnrichment•added 2017/05/02 2:0 p.m.•14 views

CVE-2017-7440

7AI score0.00928EPSS

Cvelist•added 2017/05/02 2:0 p.m.•15 views

CVE-2017-7440

6.5AI score0.00928EPSS

CVE•added 2017/05/02 2:0 p.m.•240 views

CVE-2017-7440

Kerio Connect (versions 8.0.0–9.2.2) and Kerio Connect Client (Windows/Mac, versions 9.2.0–9.2.2) are affected by a clickjacking vulnerability when email preview is enabled. A remote attacker could exploit a specially crafted email to perform clickjacking. Impact is described as enabling (partial...

6.5CVSS6.4AI score0.00928EPSS

Exploits0References1Affected Software1

Hacker One•added 2017/05/02 1:59 p.m.•19 views

Weblate: ClickJacking on Debug

Proof Of Concept: Related Issue on report 225543 1. Navigate to https://debug.weblate.org 2. As you notice it is forbidden. 3. just vulnerable by clickjacking. 3. Now the user report to CIA to open. 4. Redirect to MaliciousSite.com I uploaded the poc.html Thanks,...

0.6AI score

Positive Technologies•added 2017/05/02 12:0 a.m.•4 views

PT-2017-17737 · Kerio +2 · Kerio Connect +3

Name of the Vulnerable Software and Affected Versions: Kerio Connect versions 8.0.0 through 9.2.2 Kerio Connect Client desktop application for Windows and Mac versions 9.2.0 through 9.2.2 Description: The issue allows remote attackers to conduct clickjacking attacks via a crafted e-mail message...

6.5CVSS6.4AI score0.00928EPSS

Exploits0References3

Hacker One•added 2017/04/24 11:22 a.m.•25 views

Weblate: Clickjacking docs.weblate.org

Hi, Clickjacking User Interface redress attack, UI redress attack, UI redressing is a malicious technique of tricking a Web user into clicking on something different from what the user perceives they are clicking on, thus potentially revealing confidential information or taking control of their...

Hacker One•added 2017/04/22 10:24 a.m.•11 views

WordPress: Clickjacking In jobs.wordpress.net

A clickjacking issue was reported due to lack of security headers. It was not assessed as a security issue but a hardening fix was still deployed, without a bounty, as issues arising out of "Lack of HTTP security headers" are not applicable...

6.8AI score

Hacker One•added 2017/04/21 1:27 p.m.•34 views

Nextcloud: Clickjacking In https://demo.nextcloud.com

Hi Nextcloud, Clickjacking In https://demo.nextcloud.com This Is Zeeshan,An Ethical Hacker, I Have Found A Security Issue In Your Site Clickjacking In nextcloud https://demo.nextcloud.com Page Website is vulnerable to clickjacking! Please Fix It As Soon As Possible Best Regards, Zeeshan Waheed...

0.3AI score