Malicious code in zip-mp3-a-lbum-do-wnload-new-2017-68384-music-to-draw-to-satellite-6dqyd-obztmr (npm)

The package zip-mp3-a-lbum-do-wnload-new-2017-68384-music-to-draw-to-satellite-6dqyd-obztmr was found to contain malicious code...

Malicious code in zip-mp3-a-lbum-do-wnload-new-32387-the-shadow-of-an-empire-qa3z4-odvrpt (npm)

The package zip-mp3-a-lbum-do-wnload-new-32387-the-shadow-of-an-empire-qa3z4-odvrpt was found to contain malicious code...

Malicious code in zip-mp3-a-lbum-do-wnload-new-75748-toy-love-ohdfl-whbyww (npm)

The package zip-mp3-a-lbum-do-wnload-new-75748-toy-love-ohdfl-whbyww was found to contain malicious code...

Malicious code in zip-mp3-a-lbum-do-wnload-new-25371-a-long-hot-summer-xculb-dlmjir (npm)

The package zip-mp3-a-lbum-do-wnload-new-25371-a-long-hot-summer-xculb-dlmjir was found to contain malicious code...

Malicious code in zip-mp3-a-lbum-do-wnload-new-261840-agita-cdf7d-jovypl (npm)

The package zip-mp3-a-lbum-do-wnload-new-261840-agita-cdf7d-jovypl was found to contain malicious code...

Malicious code in zip-mp3-a-lbum-do-wnload-new-231192-punisher-xzwqi-aaagvn (npm)

The package zip-mp3-a-lbum-do-wnload-new-231192-punisher-xzwqi-aaagvn was found to contain malicious code...

MAL-2025-13904 Malicious code in a-lbum-do-wnload-avai-lable-file-12058-selling-live-water-a3lks-kuffcc (npm)

The package a-lbum-do-wnload-avai-lable-file-12058-selling-live-water-a3lks-kuffcc was found to contain malicious code...

MAL-2025-13903 Malicious code in a-lbum-do-wnload-avai-lable-file-105412-gilberto-gil-yhd80-ckwsmo (npm)

The package a-lbum-do-wnload-avai-lable-file-105412-gilberto-gil-yhd80-ckwsmo was found to contain malicious code...

MAL-2025-15157 Malicious code in availab-le-alb-um-zip-2016-50027-silent-earthling-u2tuv-kewuqp (npm)

The package availab-le-alb-um-zip-2016-50027-silent-earthling-u2tuv-kewuqp was found to contain malicious code...

MAL-2025-15151 Malicious code in avail-able-albu-m-down-load-496664-young-blood-32ul1-snsovu (npm)

The package avail-able-albu-m-down-load-496664-young-blood-32ul1-snsovu was found to contain malicious code...

MAL-2025-15153 Malicious code in avail-able-albu-m-down-load-5541-death-is-this-communion-n9ln6-ucncmt (npm)

The package avail-able-albu-m-down-load-5541-death-is-this-communion-n9ln6-ucncmt was found to contain malicious code...

MAL-2025-15150 Malicious code in avail-able-albu-m-down-load-441605-doom-crew-inc-ckkyk-vizpqd (npm)

The package avail-able-albu-m-down-load-441605-doom-crew-inc-ckkyk-vizpqd was found to contain malicious code...

📄 TinyWebGallery 2.7 Cross Site Scripting

TinyWebGallery version 2.7 suffers from a persistent cross site scripting vulnerability. Exploit Title: TinyWebGallery 2.7 - Authenticated Stored XSS Date: 2025-27-06 Exploit Author: tmrswrr Vendor Homepage: https://www.tinywebgallery.com Version: 2.7 Tested on:...

CVE-2025-5511: Improper Authorization

A vulnerability, which was classified as critical, has been found in quequnlong shiyi-blog up to 1.2.1. This issue affects some unknown processing of the file /dev api/app/album/photos/. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been...

CVE-2024-46333

An authenticated cross-site scripting XSS vulnerability in Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Album Name parameter under the Add Album function...

CVE-2024-37542

Missing Authorization vulnerability in WpDevArt Responsive Image Gallery, Gallery Album.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3...

CVE-2024-23255

An authentication issue was addressed with improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. Photos in the Hidden Photos Album may be viewed without authentication...

CVE-2024-7818

The Misiek Photo Album WordPress plugin through 1.4.3 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CVE-2024-2122

The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via album gallery custom URLs in all versions up to, and including, 2.4.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...

CVE-2024-46605

A cross-site scripting XSS vulnerability in the component /admin.php?page=album of Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description field...