1572 matches found
WordPress Flash Album Gallery Plugin <= 2.11 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
WordPress WP Photo Album Plus Plugin <= 5.4.4 - Cross Site Scripting
This plugin is prone to a cross site scripting vulnerability. Solution Update the plugin...
WordPress Easy Photo Album Plugin <= 1.1.5 - Information Disclosure
This plugin is prone to an information disclosure vulnerability. Solution Update the plugin...
WordPress Easy Photo Album Plugin <= 1.1.5 - Information Disclosure
This plugin is prone to an information disclosure vulnerability. Solution Update the plugin...
Animated Stickers - My Album - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Animated Stickers - My Album published at the 'play' market has multiple vulnerabilities...
My Boo Album - Sticker Book - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application My Boo Album - Sticker Book published at the 'play' market has multiple vulnerabilities...
My Cat Album - Sticker Book - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application My Cat Album - Sticker Book published at the 'play' market has multiple vulnerabilities...
3Q Album(photo organizer) - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application 3Q Albumphoto organizer published at the 'play' market has multiple vulnerabilities...
marca.com XSS vulnerability
Vulnerable URL: http://www.marca.com/baloncesto/nba/albumalert/XSSPOSED/...
drchrono: CSRF Add Album On onpatient.com
Hi I'm Found Bug CSRF It is Possible To Add Album By Attacker on onpatient.com Steps to verify ---- . Login as attacker . Go to photos and click add album . rename album for example :- hacking . . intercept this request add using burp proxy or any other tool you can see X-CSRFToken and sessionid...
WordPress WP Photo Album Plus Plugin <= 4.9.0 - Full Path Disclosure
This plugin is prone to a full path disclosure vulnerability. Solution Update the plugin...
Pornhub: Cross Site Scripting – Album Page
The researcher identified that multiple albums were vulnerable to reflected cross site scripting from the URL, a few examples and proofs of concept are shown explained with relevant get requests and responses plus screenshots. The malicious link is shown below: http://www.pornhub.com/albums?...
UBNT Bug Bounty #3 - Persistent Filename Vulnerability
Document Title: =============== UBNT Bug Bounty 3 - Persistent Filename Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1468 View Video: https://www.youtube.com/watch?v=JeEWyV9VMpE Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1467 Release...
CVE-2015-4414
The CVE-2015-4414 issue affects WordPress SE HTML5 Album Audio Player plugin versions up to 1.1.0. A directory traversal vulnerability exists in download_audio.php, allowing remote, unauthenticated attackers to read arbitrary server files by crafting a .. path in the file parameter. Root cause: i...
Path Traversal vulnerability in Wordpress plugin se-html5-album-audio-player v1.1.0
Title: Path Traversal vulnerability in Wordpress plugin se-html5-album-audio-player v1.1.0 Author: Larry W. Cashdollar, @larry0 Date: 2015-06-06 Advisory: http://www.vapid.dhs.org/advisory.php?v=124 Download Site: https://wordpress.org/plugins/se-html5-album-audio-player/ Vendor:...
WordPress Plugin SE HTML5 Album Audio Player 1.1.0 - Directory Traversal
Title: Path Traversal vulnerability in Wordpress plugin se-html5-album-audio-player v1.1.0 Author: Larry W. Cashdollar, @larry0 Date: 2015-06-06 Advisory: http://www.vapid.dhs.org/advisory.php?v=124 Download Site: https://wordpress.org/plugins/se-html5-album-audio-player/ Vendor:...
WordPress SE HTML5 Album Audio Player 1.1.0 Directory Traversal Vulnerability
WordPress SE HTML5 Album Audio Player plugin version 1.1.0 suffers from a traversal vulnerability. Title: Path Traversal vulnerability in Wordpress plugin se-html5-album-audio-player v1.1.0 Author: Larry W. Cashdollar, @larry0 Date: 2015-06-06 Advisory: http://www.vapid.dhs.org/advisory.php?v=124...
Stored XSS in WP Photo Album Plus WordPress Plugin
Advisory ID: HTB23257 Product: WP Photo Album Plus WordPress Plugin Vendor: J.N. Breetvelt Vulnerable Versions: 6.1.2 and probably prior Tested Version: 6.1.2 Advisory Publication: April 29, 2015 without technical details Vendor Notification: April 29, 2015 Vendor Patch: April 29, 2015 Public...
VK.com: XSS on added name album on videos.
Hi Steps to reproduce: First go to : https://vk.com/video Next click on Add a Video After add a video from youtube and on title Field Insert TEST XSS And click save. Next after this go to https://vk.com/video again and you will see video with the name TEST XSS Click above TEST XSS and you will fo...