CVE-2015-5528

The CVE-2015-5528 entry concerns the WordPress Floating Social Bar plugin (pre-1.1.6). The XSS vulnerability arises in the save_order function within class-floating-social-bar.php, where the items[] parameter in the fsb_save_order action to wp-admin/admin-ajax.php is not properly filtered, allowi...

PT-2015-6973

Name of the Vulnerable Software and Affected Versions Floating Social Bar plugin versions prior to 1.1.6 Description The issue is related to a cross-site scripting XSS vulnerability. It affects the save order function in the class-floating-social-bar.php file. Remote attackers can inject arbitrar...

WordPress Floating Social Bar Plugin <= 1.1.5 - XSS

This vulnerability allows an attacker to inject arbitrary web script or HTML via the "items" parameter in an fsbsaveorder action to wp-admin/admin-ajax.php. Solution Update the plugin...

CVE-2015-5528: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the saveorder function in class-floating-social-bar.php in the Floating Social Bar plugin before 1.1.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the items parameter in an fsbsaveorder action to wp-admin/admin-ajax.ph...

WordPress Floating Social Bar 1.1.5 Cross Site Scripting

Exploit Title: Floating Social Bar 1.1.5 XSS Date: 09-01-2015 Software Link: https://wordpress.org/plugins/floating-social-bar/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description Everyone can access saveorder...

WordPress Floating Social Media Links Plugin <= 1.4.2 - Remote File Inclusion

This plugin is prone to remote file inclusion vulnerability via fsml-hideshow.js.php wpp parameter and fsml-admin.js.php wpp parameter. It allows attackers to obtain sensitive information. Solution Update plugin...

WordPress Floating Social Media Links Plugin <= 1.4.2 - Remote File Inclusion

This plugin is prone to remote file inclusion vulnerability via fsml-hideshow.js.php wpp parameter and fsml-admin.js.php wpp parameter. It allows attackers to obtain sensitive information. Solution Update plugin...

WordPress Floating Social Media Links Plugin <= 1.4.2 - Remote File Inclusion

This plugin is prone to fsml-admin.js.php wpp parameter remote file inclusion vulnerability. It allows attackers to obtain sensitive information. Solution Update plugin...

WordPress Floating Tweets Plugin <= 1.0.1 - Stored XSS

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress Floating Tweets Plugin <= 1.0.1 - Directory Traversal

Because of this vulnerability, attackers can read only css-files. Solution Update the plugin...

DEBIAN-CVE-2015-3416

The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause a denial of service integer overflow and stack-based buffer overflow or possibly have unspecifie...

WordPress Floating Social Bar Plugin HTML Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An HTML injection vulnerability exists in the WordPress Floating Social Bar plugin. This vulnerability allows attackers to...

[SECURITY] Fedora 20 Update: mpfr-3.1.2-5.fc20

The MPFR library is a C library for multiple-precision floating-point computations with "correct rounding". The MPFR is efficient and also has a well-defined semantics. It copies the good ideas from the ANSI/IEEE-754 standard for double-precision floating-point arithmetic 53-bit mantissa. MPFR is...

[SECURITY] Fedora 21 Update: mpfr-3.1.2-8.fc21

The MPFR library is a C library for multiple-precision floating-point computations with "correct rounding". The MPFR is efficient and also has a well-defined semantics. It copies the good ideas from the ANSI/IEEE-754 standard for double-precision floating-point arithmetic 53-bit mantissa. MPFR is...

PHP Multiple Vulnerabilities (Jan 2015)

PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...

OracleVM 2.1 : ntp (OVMSA-2009-0011)

The remote OracleVM system is missing necessary patches to address critical security updates : CVE-2009-0159 Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response...

UBUNTU-CVE-2014-3670

The exififdmakevalue function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 operates on floating-point arrays incorrectly, which allows remote attackers to cause a denial of service heap memory corruption and application crash or possibly execut...

floating-tweets - directory traversal

The floating-tweets WordPress plugin was affected by a directory traversal security vulnerability...

Floating Social Media Links <= 1.4.2 - fsml-admin.js.php wpp Parameter Remote File Inclusion

The Floating Social Media Links WordPress plugin was affected by a fsml-admin.js.php wpp Parameter Remote File Inclusion security vulnerability...

GDI+ CreateDashedPath Integer Overflow in gdiplus.dll

No description provided by source. Abysssec Research 1 Advisory information Title : GDI+ CreateDashedPath Integer overflow in gdiplus.dll Discovery : Nicolas july from vupen Analysis : Abysssec.com Vendor : http://www.microsoft.com Impact : High Contact : info at abysssec.com Twitter : @abysssec...