PT-2022-7976

Name of the Vulnerable Software and Affected Versions Kama Click Counter Plugin versions up to 3.4.8 Description A critical vulnerability has been found in the Kama Click Counter Plugin. This issue affects an unknown part of the file wp-admin/admin.php. The manipulation of the order by/order...

Wordpress plugin Kama Click Counter SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. wordpress Kama Click Counte is vulnerable to SQL injection, which can be exploited by attackers to...

CVE-2021-29865

IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch...

Design/Logic Flaw

IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch...

CVE-2021-29865: Improper Restriction of Rendered UI Layers or Frames

IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch...

IBM Jazz Team Server 安全漏洞

IBM Jazz Team Server is an application server from IBM USA. provides base services that enable a group of tools to work together as a single logical server and includes any number of Jazz Team Server Extensions that provide tool-specific functionality. A security vulnerability exists in IBM Jazz...

PT-2022-9943

Name of the Vulnerable Software and Affected Versions IBM Jazz Team Server versions 6.0.6 through 7.0.2 Description The issue allows a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this to hijack...

Fancy Bear Uses Nuke Threat Lure to Exploit 1-Click Bug

Advanced persistent threat group Fancy Bear is behind a phishing campaign that uses the specter of nuclear war to exploit a known one-click Microsoft flaw. The goal is to deliver malware that can steal credentials from the Chrome, Firefox and Edge browsers. The attacks by the Russia-linked APT ar...

CVE-2021-29865

IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch...

MAL-2022-1924 Malicious code in click-out-report-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a64ba6b0a5586a9562273eba7b3306b30274cd368fa930090a7ee3f3ced2ad9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in click-out-report-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a64ba6b0a5586a9562273eba7b3306b30274cd368fa930090a7ee3f3ced2ad9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-651 Malicious code in @tinkoff-react-bui/click-outside (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d6fd8d87a4337f42d814472a9379a3e44a7a9fa8d60e4957c396d580e0d85dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tinkoff-react-bui/click-outside (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d6fd8d87a4337f42d814472a9379a3e44a7a9fa8d60e4957c396d580e0d85dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Cervantes - Collaborative Platform For Pentesters Or Red Teams Who Want To Save Time To Manage Their Projects, Clients, Vulnerabilities And Reports In One Place

Cervantes is an opensource collaborative platform for pentesters or red teams who want to save time to manage their projects, clients, vulnerabilities and reports in one place. Features OpenSource Multiplatform Multilanguage Team Collaboration BuiltIn dashbaords and analytics Manage your clients...

CVE-2022-1791

The One Click Plugin Updater WordPress plugin through 2.4.14 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and disable / hide the badge of the available updates and the related check...

CVE-2022-1791

The CVE refers to the WordPress plugin One Click Plugin Updater, affected ≤ 2.4.14, which lacks CSRF protection when updating settings. The root cause is missing CSRF checks, enabling a logged-in admin to alter settings via CSRF and disable/hide the updates badge and related checks. Exploitation ...

CVE-2022-1791: Cross-Site Request Forgery (CSRF)

The One Click Plugin Updater WordPress plugin through 2.4.14 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and disable / hide the badge of the available updates and the related check...

PT-2022-14115

Name of the Vulnerable Software and Affected Versions One Click Plugin Updater WordPress plugin versions 2.4.14 and earlier Description The issue concerns a lack of CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack. This could...

WordPress plugin One Click Plugin Updater 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

Linking for Confluence 跨站脚本漏洞

Linking for Confluence is enabling one-click linking to access Confluence templates, aggregate resources, and create structured content. A security vulnerability exists in Linking for Confluence version 5.5.7, which can be exploited by an attacker to remotely launch a cross-site scripting attack...