Facebook Photo Uploader ActiveX Control FileMask Method Buffer Overflow - Ver2 (CVE-2008-0660)

Facebook is a social networking website which allows its users to publish their photos. The website publishes an ActiveX control, ImageUploader4.ocx, to assist photo uploading. A buffer overflow vulnerability exists in the Facebook Photo Uploader ActiveX control. The flaw is due to a boundary err...

CVE-2014-6228: Undefined Security Weakness

Integer overflow in the stringchunksplit function in hphp/runtime/base/zend-string.cpp in Facebook HipHop Virtual Machine HHVM before 3.3.0 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via crafted arguments to the chunksplit...

PT-2014-4558

Name of the Vulnerable Software and Affected Versions Facebook HipHop Virtual Machine HHVM versions prior to 3.1.0 Description The issue allows remote attackers to bypass intended access restrictions by leveraging group permissions for a file or directory, due to the failure to drop supplemental...

Facebook Bug Bounty #17 - Migrate Privacy Vulnerability

Document Title: =============== Facebook Bug Bounty 17 - Migrate Privacy Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1370 Facebook Security ID: 216850649 Vulnerability Magazine:...

Facebook Bug Bounty #17 - Migrate Privacy Vulnerability

Document Title: =============== Facebook Bug Bounty 17 - Migrate Privacy Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1370 Facebook Security ID: 216850649 Vulnerability Magazine:...

Facebook Studio Cross Site Scripting

Document Title: =============== Facebook Bug Bounty 16 Studio - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1368 Facebook Security ID: 219162244 Release Date: ============= 2014-12-10 Vulnerability Laboratory ID VL-ID:...

Facebook BB #18 - IDOR Issue & Privacy Vulnerability

Document Title: =============== Facebook BB 18 - IDOR Issue & Privacy Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1371 Facebook Security ID: 219208937 Release Date: ============= 2014-12-12 Vulnerability Laboratory ID VL-ID:...

WordPress Facebook Like Box 2.8.2 CSRF / XSS

Title: WordPress 'Facebook Like Box' plugin - CSRF/XSS Version: 2.8.2 Reported by: Morten Nørtoft, Kenneth Jepsen, Mikkel Vej Date: 2014/12/12 Download: https://wordpress.org/plugins/cardoza-facebook-like-box/ Notified WordPress: 2014/11/27...

WordPress WP-FB-AutoConnect 4.0.5 CSRF / XSS

Title: WordPress 'WP-FB-AutoConnect' plugin - XSS/CSRF Version: 4.0.5 Author: Morten Nørtoft, Kenneth Jepsen, Mikkel Vej Date: 2014/12/12 Download: https://wordpress.org/plugins/wp-fb-autoconnect/ Contacted WordPress: 2014/11/27 ----------------------------------------------------------------...

Cardoza Facebook Like Box < 2.8.3 - Multiple CSRF

The Easy Social Like Box – Popup – Sidebar Widget WordPress plugin was affected by a Multiple CSRF security vulnerability...

Facebook BB #18 - IDOR Issue & Privacy Vulnerability

Document Title: =============== Facebook BB 18 - IDOR Issue & Privacy Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1371 Facebook Security ID: 219208937 Release Date: ============= 2014-12-12 Vulnerability Laboratory ID VL-ID:...

Facebook BBP #16 (Studio) - Persistent Vulnerability

Document Title: =============== Facebook BBP 16 Studio - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1368 Facebook Security ID: 219162244 Release Date: ============= 2014-12-10 Vulnerability Laboratory ID VL-ID:...

Facebook BBP #16 (Studio) - Persistent Vulnerability

Document Title: =============== Facebook BBP 16 Studio - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1368 Facebook Security ID: 219162244 Release Date: ============= 2014-12-10 Vulnerability Laboratory ID VL-ID:...

HHVM Detection

The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

CVE-2014-8800

Cross-site scripting XSS vulnerability in nextend-facebook-settings.php in the Nextend Facebook Connect plugin before 1.5.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fbloginbutton parameter in a newfbupdateoptions action...

Cross site scripting

Cross-site scripting XSS vulnerability in nextend-facebook-settings.php in the Nextend Facebook Connect plugin before 1.5.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fbloginbutton parameter in a newfbupdateoptions action...

CVE-2014-8800

CVE-2014-8800 is a cross-site scripting (XSS) vulnerability in the Nextend Facebook Connect WordPress plugin prior to 1.5.1. The issue affects nextend-facebook-settings.php via the fb_login_button parameter in a newfb_update_options action, enabling remote injection of arbitrary HTML/script. Publ...

CVE-2014-8800

Cross-site scripting XSS vulnerability in nextend-facebook-settings.php in the Nextend Facebook Connect plugin before 1.5.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fbloginbutton parameter in a newfbupdateoptions action...

CVE-2014-8800

Cross-site scripting XSS vulnerability in nextend-facebook-settings.php in the Nextend Facebook Connect plugin before 1.5.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fbloginbutton parameter in a newfbupdateoptions action...

CVE-2014-8800: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in nextend-facebook-settings.php in the Nextend Facebook Connect plugin before 1.5.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fbloginbutton parameter in a newfbupdateoptions action...