WordPress Plugin leenk.me 2.5.0 - Cross-Site Request Forgery / Cross-Site Scripting

I would like to disclose CSRF and stored XSS vulnerability in Wordpress plugin LeenkMe version 2.5.0. The plugin can be found at https://wordpress.org/plugins/leenkme/ In the page wp-content/plugins/leenkme/facebook.php XSS vulnerable Fields are : - facebookmessage - facebooklinkname -...

The vulnerabilities of Firefox ESR and Firefox, the rendering software Graphite 2, allow attackers to induce service failures or exert other effects.

The vulnerability of the graphite2::TtfUtil::CmapSubtable12Lookup function TtfUtil.cpp for Firefox ESR and Firefox browsers can be exploited due to buffer overflows. Exploiting this vulnerability may allow an attacker to cause service interruptions or other effects by using a specially crafted...

The vulnerability of the Firefox browser, which allows a perpetrator to exert other effects or cause service failures

The vulnerability of the I420VideoFrame::CreateFrame function in the Firefox WebRTC browser implementation is caused by buffer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures or other effects such as memory corruption...

The vulnerability of the Firefox browser, which allows a violator to trigger a service failure

The vulnerability of the Intel video driver for the Firefox browser is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions such as memory consumption and memory corruption due to the invocation of the WebGL shader...

The vulnerabilities of Firefox ESR and Firefox, the rendering software Graphite 2, allow attackers to induce service failures or exert other effects.

The vulnerability of the graphite2::Slot::setAttr function in Firefox ESR and Firefox browsers, as well as in the Graphite 2 rendering software, is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to cause service interruptions or other effect...

The vulnerability of the Firefox browser, which allows a violator to trigger a service failure or cause other effects

The vulnerability of the DesktopDisplayDevice class in the Firefox browser’s WebRTC implementation relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service interruptions or other adverse effects...

The vulnerability of the Graphite 2 rendering software, as well as the Firefox and Firefox ESR browsers, allows a perpetrator to trigger a service failure or exert other effects.

The vulnerability of the setAttr function in the Graphite rendering software for browsers Firefox and Firefox ESR is caused by buffer overflow. Exploiting this vulnerability allows an attacker to cause service interruptions or other effects such as memory corruption through a specially created...

The vulnerability of the Thunderbird email client, as well as the Firefox and Firefox ESR browsers, allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the AtomicBaseIncDec function in the Thunderbird email client, as well as in browsers like Firefox and Firefox ESR, is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

The vulnerability of the Firefox browser, which allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the FileReader class in Firefox browsers is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges or cause a service failure memory corruption due to changes made to the file while it is being read by the...

The vulnerabilities of Firefox ESR and Firefox, the rendering software Graphite 2, allow attackers to induce service failures or exert other effects.

The vulnerability of the graphite2::Slot::getAttr function Slot.cpp in Firefox ESR and Firefox browsers, as well as in the Graphite 2 rendering software, arises due to buffer overflows. Exploiting this vulnerability can allow an attacker to cause service interruptions or other effects through a...

The vulnerability of the Graphite 2 rendering software, as well as the Firefox and Firefox ESR browsers, allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Machine::Code::decoder::analysis::setref function in the Graphite rendering software, used by browsers Firefox and Firefox ESR, arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memor...

The vulnerability of the Thunderbird email client, as well as the Firefox and Firefox ESR browsers, allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the nsNPObjWrapper::GetNewOrUsed function located in dom/plugins/base/nsJSNPRuntime.cpp in the Thunderbird email client, as well as in Firefox and Firefox ESR browsers, is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to execut...

The vulnerability of the Thunderbird email client, as well as the Firefox and Firefox ESR browsers, allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the nsHtml5TreeBuilder class in the Thunderbird HTML5 client browser, as well as in Firefox and Firefox ESR browsers, arises due to a loss of precision. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure disruption of resourc...

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

CachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service buffer over-read or possibly have unspecified other impact via a crafted Graphite smart font...

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service buffer over-read or possibly have unspecified other impact via a crafted Graphite smart font...

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The graphite2::FileFace::gettablefn function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure, which allows remote attackers to cause a denial of service or possibly have unknown other...

Mozilla Firefox Network Security Services Memory Misreference Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the U.S. Mozilla Network Security Services NSS is a library of functions Network Security Services library. A memory misreference vulnerability exists in the 'ssl3HandleECDHServerKeyExchange' function in Mozilla...

DEBIAN-CVE-2016-1978

Use-after-free vulnerability in the ssl3HandleECDHServerKeyExchange function in Mozilla Network Security Services NSS before 3.21, as used in Mozilla Firefox before 44.0, allows remote attackers to cause a denial of service or possibly have unspecified other impact by making an SSL 1 DHE or 2 ECD...

CVE-2016-1970

Integer underflow in the srtpunprotect function in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

Mozilla Firefox Sensitive Information Disclosure Vulnerability (CNVD-2016-01683)

Firefox is an open source web browser. Mozilla Firefox suffers from a sensitive information disclosure vulnerability due to Content Security Policy CSP reports containing full path information, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be...