933 matches found
“Restart” “Shadow” ”Reset Profile” and “Reset PvD” buttons are grayed out in Director
“Restart” “Shadow” ”Reset Profile” and “Reset PvD” buttons are grayed out in Director when user connected to static Desktops PVS+PvD in one Delivery Group. But when click the “Details” button under Activity Manager, the machine management options like “restart”, “shutdown” and “shadow” are all...
WordPress AddToAny Share Buttons plugin <=1.7.14 - Conditional Host Header Injection vulnerability
Conditional Host Header Injection vulnerability found by Paul Dannewitz in WordPress AddToAny Share Buttons plugin. Vulnerable plugin version used Host header instead of homeurl thus allows custom Hostheader injection by crafted link, web cache poisoning and it may end up with sharing malicious...
WordPress Share Buttons by AddThis plugin <= 5.3.5 - Cross-Site Request Forgery (CSRF) Vulnerability
WordPress Share Buttons by AddThis plugin addthisAsyncLoading function doesn’t check for a valid nonce to prevent CSRF. Solution Update the plugin...
html-social-share-buttons
It is an HTML/CSS/JavaScript library for adding social media sha...
Crafty Social Buttons < 1.5.8 - XSS
The Crafty Social Buttons WordPress plugin was affected by a XSS security vulnerability...
Buttons remapper (no root) - BSD license, Dangerous filesystem permissions, Runtime privilege escalation vulnerabilities
HackApp vulnerability scanner discovered that application Buttons remapper no root published at the 'play' market has multiple vulnerabilities...
Wordpress forget-about-shortcode-buttons plugin cross-site scripting vulnerability
WordPress is the WordPress Software Foundation of a set of PHP language development of the blogging platform, the platform supports PHP and MySQL server set up a personal blog site. get-about-shortcode-buttons is one of the plug-ins used to add CSS buttons in the post editor screen. A cross-site...
CVE-2016-1000133
Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1...
CVE-2016-1000133
Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1...
Cross site scripting
Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1...
CVE-2016-1000133
The Nuclei template confirms CVE-2016-1000133: a reflected XSS in WordPress plugin forget-about-shortcode-buttons v1.1.1, enabling arbitrary script execution in a user’s browser and potential cookie theft. Affected component: WordPress plugin forget-about-shortcode-buttons (version 1.1.1). Root c...
openSUSE Security Update : roundcubemail (openSUSE-2016-996)
This update for roundcubemail fixes the following vulnerabilities : - CVE-2015-8864: XSS issue in SVG images handling boo976988 - CVE-2015-2181: issue in DBMail driver of password plugin Roundcubemail was also updated to 1.0.9, fixing the following bugs : - Fix a regression where some contact dat...
WordPress Easy Social Share Buttons Plugin <= 3.2.5 - XSS
This plugin is prone to a cross site scripting vulnerability, because some parameters are not sanitized. Solution Update the plugin...
Big Buttons Keyboard Standard - Corrupted files, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Big Buttons Keyboard Standard published at the 'play' market has multiple vulnerabilities...
Funny Buttons - External URLs, WebView JavaScript enabled, WebView files access vulnerabilities
HackApp vulnerability scanner discovered that application Funny Buttons published at the 'play' market has multiple vulnerabilities...
Instant Buttons Voice Changer - Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Instant Buttons Voice Changer published at the 'play' market has multiple vulnerabilities...
ApeCrime Buttons (Sound Board) - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application ApeCrime Buttons Sound Board published at the 'play' market has multiple vulnerabilities...
The vulnerability of Google Chrome’s browser allows a hacker to replace URLs.
The vulnerability of the CustomButton::AcceleratorPressed function in the ui/views/controls/button/custombutton.cc file of Google Chrome is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to replace URLs through unauthorized actions involving...
