946 matches found
CVE-2016-1000133
Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1...
CVE-2016-1000133
Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1...
Cross site scripting
Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1...
CVE-2016-1000133
The Nuclei template confirms CVE-2016-1000133: a reflected XSS in WordPress plugin forget-about-shortcode-buttons v1.1.1, enabling arbitrary script execution in a user’s browser and potential cookie theft. Affected component: WordPress plugin forget-about-shortcode-buttons (version 1.1.1). Root c...
openSUSE Security Update : roundcubemail (openSUSE-2016-996)
This update for roundcubemail fixes the following vulnerabilities : - CVE-2015-8864: XSS issue in SVG images handling boo976988 - CVE-2015-2181: issue in DBMail driver of password plugin Roundcubemail was also updated to 1.0.9, fixing the following bugs : - Fix a regression where some contact dat...
WordPress Easy Social Share Buttons Plugin <= 3.2.5 - XSS
This plugin is prone to a cross site scripting vulnerability, because some parameters are not sanitized. Solution Update the plugin...
Big Buttons Keyboard Standard - Corrupted files, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Big Buttons Keyboard Standard published at the 'play' market has multiple vulnerabilities...
Funny Buttons - External URLs, WebView JavaScript enabled, WebView files access vulnerabilities
HackApp vulnerability scanner discovered that application Funny Buttons published at the 'play' market has multiple vulnerabilities...
Instant Buttons Voice Changer - Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Instant Buttons Voice Changer published at the 'play' market has multiple vulnerabilities...
ApeCrime Buttons (Sound Board) - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application ApeCrime Buttons Sound Board published at the 'play' market has multiple vulnerabilities...
The vulnerability of Google Chrome’s browser allows a hacker to replace URLs.
The vulnerability of the CustomButton::AcceleratorPressed function in the ui/views/controls/button/custombutton.cc file of Google Chrome is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to replace URLs through unauthorized actions involving...
Form API ignores access restrictions on submit buttons
More info at https://www.drupal.org/SA-CORE-2016-001...
Form API ignores access restrictions on submit buttons
More info at https://www.drupal.org/SA-CORE-2016-001...
WordPress Simple Share Buttons Adder Plugin <= 6.0.0 - Reflected XSS
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update plugin...
WordPress Social Essentials Social Stats And Sharing Buttons 1.3.1 XSS Vulnerability
WordPress Social Essentials Social Stats and Sharing Buttons plugin version 1.3.1 suffers from a cross site scripting vulnerability. WordPress Social Essentials Social Stats And Sharing Buttons 1.3.1 XSS Vulnerability Plugin Name : Social Essentials Social Stats and Sharing Buttons Effected Versi...
WordPress Social Essentials Social Stats And Sharing Buttons 1.3.1 XSS
Plugin Name : Social Essentials Social Stats and Sharing Buttons Effected Version : 1.3.1 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Administrator PoC - Proof of Concept : Th...
Adobe Flash - scale9Grid Use-After-Free
Adobe Flash - scale9Grid Use-After-Free Source: https://code.google.com/p/google-security-research/issues/detail?id=380&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id There is a use-after-free issue if the scale9Grid setting is called on an object with a member that then...
Adobe Flash - scale9Grid Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=380&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id There is a use-after-free issue if the scale9Grid setting is called on an object with a member that then frees display item. This issue occurs for...
AddThis Sharing Buttons <= 5.0.12 - Authenticated Cross-Site Scripting (XSS)
The WordPress Share Buttons Plugin – AddThis WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...