CVE-2022-22503

CVE-2022-22503 affects IBM Robotic Process Automation prior to 21.0.1. A remote attacker could hijack the victim’s clicking action by persuading them to visit a malicious site, potentially enabling further attacks. CVSS base score 6.1 (NETWORK, UI:R, S:C, C:L/I:L). Remediation: upgrade to IBM Rob...

CVE-2022-22503: Improper Restriction of Rendered UI Layers or Frames

IBM Robotic Process Automation 21.0.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks agains...

October 4, 2022, update for Office 2013 (KB5002274)

October 4, 2022, update for Office 2013 KB5002274 This article describes update 5002274 for Microsoft Office 2013 that was released on October 4, 2022. This update also applies to Office Home and Student 2013 RT.Be aware that the update in the Microsoft Download Center applies to the Microsoft...

Threat Roundup for September 16 to September 23

Today, Talos is publishing a glimpse into the most prevalent threats we've observed between Sept. 16 and Sept. 23. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavioral...

UBUNTU-CVE-2022-41322

In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code execution. The user must display attacker-controlled content in the terminal, then click on a notification popup...

Microsoft Warns of Large-Scale Click Fraud Campaign Targeting Gamers

Microsoft said it's tracking an ongoing large-scale click fraud campaign targeting gamers by means of stealthily deployed browser extensions on compromised systems. "The attackers monetize clicks generated by a browser node-webkit or malicious browser extension secretly installed on devices,"...

@netceterapx/click-to-pay-embedded-sdk (>=0.0.1, <=1.0.5) potentially affected by CVE-2022-36083 via jose-browser-runtime (4.1.2)

jose-browser-runtime NPM version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on jose-browser-runtime and may be impacted: - @netceterapx/click-to-pay-embedded-sdk =0.0.1, =1.0.5 Source cves: CVE-2022-36083 Source advisory: OSV:GHSA-JV3G-J58F-9MQ...

@netceterapx/click-to-pay-embedded-sdk (>=0.0.1, <=1.0.5) potentially affected by CVE-2022-36083 via jose-browser-runtime (4.1.2)

jose-browser-runtime NPM version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on jose-browser-runtime and may be impacted: - @netceterapx/click-to-pay-embedded-sdk =0.0.1, =1.0.5 Source cves: CVE-2022-36083 Source advisory: GHSA-JV3G-J58F-9MQ9...

Denial Of Service (DoS)

vim is vulnerable to Denial Of Service DoS.The vulnerability exists due to lack of proper initialization of the mouse click in domouse function in mouse.c, which allows an attacker to crash the application by providing a malicious input...

Security Bulletin: A vulnerabilities have been identified in IBM WebSphere Application Server Liberty shipped with IBM® Intelligent Operations Center(CVE-2021-39038)

Summary A vulnerabilities have been identified in IBM WebSphere Application Server Liberty17.0.0.3 - 22.0.0.2 shipped with IBM® Intelligent Operations Center. Information about these vulnerabilities affecting IBM® Intelligent Operations Center have been published and addressed the applicable CVEs...

Microsoft Discover Severe 'One-Click' Exploit for TikTok Android App

Microsoft on Wednesday disclosed details of a now-patched "high severity vulnerability" in the TikTok app for Android that could let attackers take over accounts when victims clicked on a malicious link. "Attackers could have leveraged the vulnerability to hijack an account without users' awarene...

Microsoft Office 365 (2016 Click-to-Run) Multiple Remote Code Execution Vulnerabilities (Aug 2022)

This host is missing a critical security update according to Microsoft Office Click-to-Run update August 2022 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...

CVE-2022-34162

IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM...

CVE-2022-34162

IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM...

Design/Logic Flaw

IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM...

CVE-2022-34162

IBM CICS TX 11.1 is affected by CVE-2022-34162 (clickjacking). IBM CICS TX Standard and IBM CICS TX Advanced (both 11.1) could allow a remote attacker to hijack a victim’s clicking actions by convincing the user to visit a malicious web page, potentially enabling further attacks. IBM references t...

CVE-2022-34162

IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server Liberty shipped with IBM Tivoli Netcool Impact (CVE-2018-25031, CVE-2021-46708)

Summary IBM WebSphere Application Server Liberty is shipped with IBM Tivoli Netcool Impact as part of its server infrastructure. Information about a security vulnerability affecting IBM WebSphere Application Server Liberty has been published in a security bulletin. Vulnerability Details...

Pegasus Spyware Used to Hack Devices of Pro-Democracy Activists in Thailand — The Hacker News

Thai activists involved in the country's pro-democracy protests have had their smartphones infected with NSO Group's infamous Pegasus government-sponsored spyware. At least 30 individuals, spanning activists, academics, lawyers, and NGO workers, are believed to have been targeted between October...

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Jul 2022)

This host is missing a critical security update according to Microsoft Office Click-to-Run update SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...