“Restart” “Shadow” ”Reset Profile” and “Reset PvD” buttons are grayed out in Director

“Restart” “Shadow” ”Reset Profile” and “Reset PvD” buttons are grayed out in Director when user connected to static Desktops PVS+PvD in one Delivery Group. But when click the “Details” button under Activity Manager, the machine management options like “restart”, “shutdown” and “shadow” are all...

WordPress AddToAny Share Buttons plugin <=1.7.14 - Conditional Host Header Injection vulnerability

Conditional Host Header Injection vulnerability found by Paul Dannewitz in WordPress AddToAny Share Buttons plugin. Vulnerable plugin version used Host header instead of homeurl thus allows custom Hostheader injection by crafted link, web cache poisoning and it may end up with sharing malicious...

WordPress Share Buttons by AddThis plugin <= 5.3.5 - Cross-Site Request Forgery (CSRF) Vulnerability

WordPress Share Buttons by AddThis plugin addthisAsyncLoading function doesn’t check for a valid nonce to prevent CSRF. Solution Update the plugin...

html-social-share-buttons

It is an HTML/CSS/JavaScript library for adding social media sha...

PT-2017-15230

Name of the Vulnerable Software and Affected Versions Captcha versions prior to 4.3.0 Car Rental versions prior to 1.0.5 Contact Form Multi versions prior to 1.2.1 Contact Form versions prior to 4.0.6 Contact Form to DB versions prior to 1.5.7 Custom Admin Page versions prior to 0.1.2 Custom Fiel...

Crafty Social Buttons < 1.5.8 - XSS

The Crafty Social Buttons WordPress plugin was affected by a XSS security vulnerability...

Buttons remapper (no root) - BSD license, Dangerous filesystem permissions, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Buttons remapper no root published at the 'play' market has multiple vulnerabilities...

Wordpress forget-about-shortcode-buttons plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation of a set of PHP language development of the blogging platform, the platform supports PHP and MySQL server set up a personal blog site. get-about-shortcode-buttons is one of the plug-ins used to add CSS buttons in the post editor screen. A cross-site...

CVE-2016-1000133

Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1...

CVE-2016-1000133

Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1...

Cross site scripting

Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1...

CVE-2016-1000133

The Nuclei template confirms CVE-2016-1000133: a reflected XSS in WordPress plugin forget-about-shortcode-buttons v1.1.1, enabling arbitrary script execution in a user’s browser and potential cookie theft. Affected component: WordPress plugin forget-about-shortcode-buttons (version 1.1.1). Root c...

CVE-2016-1000133: Improper Neutralization of Input During Web Page Generation

Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1...

PT-2016-4525

Name of the Vulnerable Software and Affected Versions wordpress plugin forget-about-shortcode-buttons version 1.1.1 Description The issue is related to a Reflected XSS in the wordpress plugin forget-about-shortcode-buttons. Recommendations For wordpress plugin forget-about-shortcode-buttons versi...

openSUSE Security Update : roundcubemail (openSUSE-2016-996)

This update for roundcubemail fixes the following vulnerabilities : - CVE-2015-8864: XSS issue in SVG images handling boo976988 - CVE-2015-2181: issue in DBMail driver of password plugin Roundcubemail was also updated to 1.0.9, fixing the following bugs : - Fix a regression where some contact dat...

WordPress Easy Social Share Buttons Plugin <= 3.2.5 - XSS

This plugin is prone to a cross site scripting vulnerability, because some parameters are not sanitized. Solution Update the plugin...

CVE-2016-3165

The Form API in Drupal 6.x before 6.38 ignores access restrictions on submit buttons, which might allow remote attackers to bypass intended access restrictions by leveraging permission to submit a form with a button that has "access" set to FALSE in the server-side form definition...

Big Buttons Keyboard Standard - Corrupted files, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Big Buttons Keyboard Standard published at the 'play' market has multiple vulnerabilities...

Funny Buttons - External URLs, WebView JavaScript enabled, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application Funny Buttons published at the 'play' market has multiple vulnerabilities...

Instant Buttons Voice Changer - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Instant Buttons Voice Changer published at the 'play' market has multiple vulnerabilities...