WordPress Social Pug - Easy Social Share Buttons Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up personal blog site.Social Pug-Easy Social Share Buttons Plugin is used in one of the social platform sharing plugin. A cross-site scriptin...

CVE-2016-10736

The "Social Pug - Easy Social Share Buttons" plugin before 1.2.6 for WordPress allows XSS via the wp-admin/admin.php?page=dpsp-toolkit dpspmessageclass parameter...

CVE-2016-10736

CVE-2016-10736 affects the WordPress plugin Social Pug - Easy Social Share Buttons, before version 1.2.6. The vulnerability is an XSS in the wp-admin/admin.php?page=dpsp-toolkit with the dpsp_message_class parameter. Public sources (NVD entry and multiple vulnerability databases) describe it as a...

Microsoft Word 2013 Service Pack 1 Multiple Vulnerabilities (KB4461594)

This host is missing an important security update according to Microsoft KB4461594 SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2019-0561

An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclosure Vulnerability." This affects Microsoft Word, Office 365 ProPlus, Microsoft Office, Word...

CVE-2019-0561

CVE-2019-0561 is an information-disclosure vulnerability in Microsoft Word/Office related to improper handling of Word fields, specifically via Word macro buttons. The issue allows reading arbitrary files from the targeted system. Multiple Nessus/OpenVAS entries and advisories group CVE-2019-0561...

Microsoft Word Information Disclosure Vulnerability

An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly. An attacker who successfully exploited this vulnerability could read arbitrary files from a targeted system. To exploit the vulnerability, an attacker could craft a special document file and...

WordPress Ad Buttons 3.1 Database Disclosure

Exploit Title : WordPress Ad Buttons Plugins 3.1 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 06/12/2018 Vendor Homepage : wordpress.org/plugins/ad-buttons/ blogio.net/blog/ Software Download Link :...

EKFiddle v.0.8.2 - A Framework Based On The Fiddler Web Debugger To Study Exploit Kits, Malvertising And Malicious Traffic In General

A framework based on the Fiddler web debugger to study Exploit Kits, malvertising and malicious traffic in general. Installation Download and install the latest version of Fiddler https://www.telerik.com/fiddler Special instructions for Linux and Mac here:...

All Regular Labs extensions with editor buttons

All Regular Labs extensions with editor buttons, versions before 7 September 2018, cross site scripting XSS:- - Articles Anywhere - Conditional Content - Dummy Content - Modals - Modules Anywhere - Sliders - Snippets - Tabs - Tooltips The editor button popup urls could potentially be used...

EKFiddle - A Framework Based On The Fiddler Web Debugger To Study Exploit Kits, Malvertising And Malicious Traffic In General

A framework based on the Fiddler web debugger to study Exploit Kits, malvertising and malicious traffic in general. Installation Download and install the latest version of Fiddler https://www.telerik.com/fiddler Special instructions for Linux and Mac here:...

WordPress Add Social Share Messenger Buttons Whatsapp and Viber plugin <= 1.0.8 - Cross-site Request Forgery (CSRF) vulnerability

Cross-site Request Forgery CSRF vulnerability found by ThreatPress Research Team in WordPress Add Social Share Messenger Buttons Whatsapp and Viber plugin versions = 1.0.8. Solution 3 June 2018 - plugin still closed by WordPress Security team, no patched version available...

CVE-2018-11632

An issue was discovered in the MULTIDOTS Add Social Share Messenger Buttons Whatsapp and Viber plugin 1.0.8 for WordPress. If an admin user can be tricked into visiting a crafted URL created by an attacker via spear phishing/social engineering, the attacker can change the plugin settings via...

Facebook phishers want you to “Connect with Facebook”

As we edge toward Christmas, scammers are throwing their own party—in the form of Facebook phishing pages linked to and from bogus landing pages hosted on sitesdotgoogledotcom URLs. These landing pages, adorned with very large and very fake "Login with Facebook" buttons, may be extra convincing t...

Workspace Control - Connect and Disconnect button in Receiver for Web are not visible

Consider the following scenario. You have enabled Workspace Control for Receiver for Webin your Xen Desktop environment. Additionally, you have enabled the setting to display Reconnect/Disconnect button for Receiver for Web asshown in the screenshot below: However, when user logs on toReceiver fo...

“Restart” “Shadow” ”Reset Profile” and “Reset PvD” buttons are grayed out in Director

“Restart” “Shadow” ”Reset Profile” and “Reset PvD” buttons are grayed out in Director when user connected to static Desktops PVS+PvD in one Delivery Group. But when click the “Details” button under Activity Manager, the machine management options like “restart”, “shutdown” and “shadow” are all...

WordPress AddToAny Share Buttons plugin <=1.7.14 - Conditional Host Header Injection vulnerability

Conditional Host Header Injection vulnerability found by Paul Dannewitz in WordPress AddToAny Share Buttons plugin. Vulnerable plugin version used Host header instead of homeurl thus allows custom Hostheader injection by crafted link, web cache poisoning and it may end up with sharing malicious...

WordPress Share Buttons by AddThis plugin <= 5.3.5 - Cross-Site Request Forgery (CSRF) Vulnerability

WordPress Share Buttons by AddThis plugin addthisAsyncLoading function doesn’t check for a valid nonce to prevent CSRF. Solution Update the plugin...

html-social-share-buttons

It is an HTML/CSS/JavaScript library for adding social media sha...

Crafty Social Buttons < 1.5.8 - XSS

The Crafty Social Buttons WordPress plugin was affected by a XSS security vulnerability...