aviary-genome (>=0.13.0, <=0.13.4), galaxy (>=26.0.0, <=26.0.1) +3 more potentially affected by CVE-2026-59890 via setuptools (80.10.1)

setuptools PYPI version 80.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aviary-genome =0.13.0, =26.0.0, =20260123.0.0.dev3, =20260126.1.0.dev0 - netbox-manager 0.20260123.0 - water-column-sonar-processing 26.1....

aviary-genome (>=0.13.0, <=0.13.4), galaxy (>=26.0.0, <=26.0.1) +3 more potentially affected by CVE-2026-59890 via setuptools (80.10.1)

setuptools PYPI version 80.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aviary-genome =0.13.0, =26.0.0, =20260123.0.0.dev3, =20260126.1.0.dev0 - netbox-manager 0.20260123.0 - water-column-sonar-processing 26.1....

EUVD-2013-0292

Malware in sbrugna...

VulnCheck KEV: CVE-2015-4455

Unrestricted file upload vulnerability in includes/upload.php in the Aviary Image Editor Add-on For Gravity Forms plugin 3.0 beta for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

Stripo Inc: Non-revoked API Key Information disclosure via Stripo_report()

Talking about 983331 reports where a security researcher reported secret API key leakage vulnerability in a JavaScript file at Stripo. This report is disclosed on HackerOne, and the team at Stripo have forgotten to blur the API keys from the report before disclosing it to the public. The API keys...

Using Aviary to Analyze Post-Compromise Threat Activity in M365 Environments

Aviary is a new dashboard that CISA and partners developed to help visualize and analyze outputs from its Sparrow detection tool released in December 2020. Sparrow helps network defenders detect possible compromised accounts and applications in Azure/Microsoft O365 environments. CISA created...

Stripo Inc: Non-revoked API Key Disclosure in a Disclosed API Key Disclosure Report on Stripo

Summary: Can you imagine discovering an API key disclosure vulnerability in a disclosed API key disclosure report? The same thing is what I came across while going through the disclosed reports at Stripo Inc. Plus, the disclosed API key isn't even revoked, and therefore I am still able to use the...

Code injection

An import error was introduced in Cumin in the code refactoring in r5310. Server certificate validation is always disabled when connecting to Aviary servers, even if the installed packages on a system support it...

CVE-2013-0264

CVE-2013-0264 affects Cumin. The issue is an import error introduced during code refactoring (r5310) that causes server certificate validation to be always disabled when connecting to Aviary servers, even if the system packages support it. This creates a potential integrity risk (partial) and, pe...

CVE-2013-0264: Improper Certificate Validation

An import error was introduced in Cumin in the code refactoring in r5310. Server certificate validation is always disabled when connecting to Aviary servers, even if the installed packages on a system support it...

PT-2019-6840

Name of the Vulnerable Software and Affected Versions Cumin affected versions not specified Description An import error in Cumin, introduced during code refactoring in revision 5310, causes server certificate validation to be disabled when connecting to Aviary servers. This occurs even when the...

Denial Of Service (DoS)

condor is vulnerable to denial of service DoS attacks. The vulnerability exists as aviary/jobcontrol.py in Condor, as used in Red Hat Enterprise MRG 2.3, when removing a job, allows remote attackers to cause a denial of service condorschedd restart via square brackets in the cproc option...

Unrestricted file upload

Unrestricted file upload vulnerability in includes/upload.php in the Aviary Image Editor Add-on For Gravity Forms plugin 3.0 beta for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

CVE-2015-4455

Unrestricted file upload vulnerability in includes/upload.php in the Aviary Image Editor Add-on For Gravity Forms plugin 3.0 beta for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

CVE-2015-4455: Unrestricted Upload of File with Dangerous Type

Unrestricted file upload vulnerability in includes/upload.php in the Aviary Image Editor Add-on For Gravity Forms plugin 3.0 beta for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

PT-2017-6759

Name of the Vulnerable Software and Affected Versions Aviary Image Editor Add-on For Gravity Forms plugin version 3.0 beta Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the includes/upload.php file, and then accessing i...

Photo Editor by Aviary - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Photo Editor by Aviary published at the 'play' market has multiple vulnerabilities...

WordPress Aviary Image Editor Add On For Gravity Forms Plugin 3.0 /includes/upload.php File Upload

No description provided by source...

WordPress Aviary Image Editor Add-on For Gravity Forms Plugin Arbitrary File Upload Vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on PHP and MySQL servers.Aviary Image Editor Add-on For Gravity Forms is a plug-in for Gravity Forms forms that integrates the Adobe Creative SDK Photo/Image Editor add-on for Gravity Forms. An...

WordPress Plugin Aviary Image Editor Addon For Gravity Forms 3.0 Beta - Arbitrary File Upload

Title: Remote file upload vulnerability in aviary-image-editor-add-on-for-gravity-forms v3.0beta Wordpress plugin Author: Larry W. Cashdollar, @larry0 Date: 2015-06-07 Download Site: https://wordpress.org/plugins/aviary-image-editor-add-on-for-gravity-forms Vendor: Waters Edge Web Design and...