1251 matches found
ThingsBoard-IoT-Platform-CVE-2024-55466
使用存储型XSS进行Thingsboard权限提升 在探索物联网技术时，我发现Thingsboard应用程序中存在一个漏洞，该漏洞为权限提升提供了途径。 Thingsboard是一个开源应用程序，允许对物联网服务和部署进行设备管理、数据收集、处理和可视化。此外，单个Thingsboard实例（由租户管理员管理）可以为多个组织提供服务，每个组织都有各自的公司管理员。 在探索其功能时，我注意到“Image Gallery”（图片库）视图中有一个文件上传功能。不幸的是，该功能存在存储型跨站脚本漏洞，攻击者可以通过窃取身份验证令牌来提升权限。...
CVE-2026-54165
Dobase , an open-source self-hosted workspace, is affected by a one-click stored DOM-based XSS in its public shared-folder image gallery. The root cause is that a file's name attribute is fully attacker-controlled and never sanitized; it is round-tripped through an ERB-escaped data-name attribute...
CVE-2024-55981
CVE-2024-55981 Nabz Image Gallery = v1.00 - Inyección SQL No Autenticada Descripción El plugin Nabz Image Gallery para WordPress es vulnerable a Inyección SQL en versiones hasta la v1.00 inclusive, debido a un escape insuficiente del parámetro proporcionado por el usuario y a la falta de...
PT-2026-90505
Dobase is an open-source, self-hosted workspace with installable tools. Versions prior to 2026.06.03 have a one-click stored DOM-based cross-site scripting XSS vulnerability in the public, unauthenticated shared-folder image gallery. A file's name is fully attacker-controlled and is never...
CVE-2025-69460
CVE-2025-69460 – Simple Image Gallery 1.0 Ejecución Remota de Código RCE No Autenticado WriteUp CVE-2025-69460 – ExploitDB 50214...
CVE-2026-84695 BookStack before 26.05.4 Stored XSS via Drawing Upload
BookStack before 26.05.4 contains a stored cross-site scripting vulnerability in the drawing upload endpoint that accepts unvalidated base64 content and stores it without content inspection. Attackers with editor permissions can upload SVG files containing scripts that execute in administrator...
CVE-2026-16645
Missing Authorization vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Forceful Browsing. This issue affects PhotoSwipe - Responsive JavaScript Modal Image Gallery versions: from 0.0.0 to 3.2.0...
CVE-2026-16645
CVE-2026-16645 is a missing authorization vulnerability in the PhotoSwipe – Responsive JavaScript Modal Image Gallery Drupal module. The module fails to sufficiently check access permissions when viewing an image via the photoswipe gallery display formatter, enabling forceful browsing and potenti...
CVE-2026-67204
BookStack before 26.05.4 contains a broken access control vulnerability that allows authenticated API users with image-update or image-delete permissions to manipulate other users' avatars by exploiting missing content-type restrictions in the Image Gallery API endpoints. Attackers can supply a...
EUVD-2026-64919
BookStack before 26.05.4 contains a broken access control vulnerability that allows authenticated API users with image-update or image-delete permissions to manipulate other users' avatars by exploiting missing content-type restrictions in the Image Gallery API endpoints. Attackers can supply a...
CVE-2026-67204
BookStack before 26.05.4 contains a broken access control vulnerability in the Image Gallery API endpoints . The API controller loads any image type without the content-type restrictions enforced by the web controller's gallery and drawio checks. An authenticated user with image-update or image-d...
CVE-2026-67204 BookStack < 26.05.4 Broken Access Control via Image Gallery API
BookStack before 26.05.4 contains a broken access control vulnerability that allows authenticated API users with image-update or image-delete permissions to manipulate other users' avatars by exploiting missing content-type restrictions in the Image Gallery API endpoints. Attackers can supply a...
CVE-2026-67204 BookStack < 26.05.4 Broken Access Control via Image Gallery API
BookStack before 26.05.4 contains a broken access control vulnerability that allows authenticated API users with image-update or image-delete permissions to manipulate other users' avatars by exploiting missing content-type restrictions in the Image Gallery API endpoints. Attackers can supply a...
CVE-2026-67204 BookStack < 26.05.4 Broken Access Control via Image Gallery API
BookStack before 26.05.4 contains a broken access control vulnerability that allows authenticated API users with image-update or image-delete permissions to manipulate other users' avatars by exploiting missing content-type restrictions in the Image Gallery API endpoints. Attackers can supply a...
PT-2026-80904
BookStack before 26.05.4 contains a broken access control vulnerability that allows authenticated API users with image-update or image-delete permissions to manipulate other users' avatars by exploiting missing content-type restrictions in the Image Gallery API endpoints. Attackers can supply a...
CVE-2026-65475 WordPress Modula Image Gallery plugin 2.14.25-2.14.30 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Modula Image Gallery allows Stored XSS. This issue affects Modula Image Gallery: from 2.14.25 through 2.14.30...
CVE-2026-65475
The CVE concerns the WP Chill Modula Image Gallery WordPress plugin, specifically versions 2.14.25–2.14.30, affected by an Improper Neutralization of Input During Web Page Generation (Stored XSS). The root cause is the improper handling of user input during page generation in Modula Image Gallery...
EUVD-2026-48250
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Modula Image Gallery allows Stored XSS. This issue affects Modula Image Gallery: from 2.14.25 through 2.14.30...
DRUPAL-CONTRIB-2026-088
The Photoswipe Drupal module provides integration for the widely used PhotoSwipe lightbox library to display / zoom images in lightbox galleries using the provided image formatters. The module didn't sufficiently check access permissions, when viewing an image using the photoswipe image gallery...
PhotoSwipe - Responsive JavaScript Modal Image Gallery - Moderately critical - Access bypass - SA-CONTRIB-2026-088
The Photoswipe Drupal module provides integration for the widely used PhotoSwipe lightbox library to display / zoom images in lightbox galleries using the provided image formatters. The module didn't sufficiently check access permissions, when viewing an image using the photoswipe image gallery...