6606 matches found
CVE-2024-12923
The CVE-2024-12923 entry concerns QNAP Photo Station and an XSS vulnerability. Affected product: Photo Station (QNAP). The vulnerability enables cross-site scripting when a logged-in user is targeted, with the attacker who has a user account able to exploit to read application data or bypass secu...
CVE-2024-12923 Photo Station
A cross-site scripting XSS vulnerability has been reported to affect Photo Station. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: Photo...
WordPress Sunshine Photo Cart plugin <= 3.5.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Sunshine Photo Cart versions = 3.5.3...
PT-2025-35253
Name of the Vulnerable Software and Affected Versions: Photo Station versions prior to 6.4.5 Description: A cross-site scripting XSS vulnerability affects Photo Station. A remote attacker gaining a user account can exploit this issue to bypass security mechanisms or read application data...
QNAP Systems Photo Station 跨站脚本漏洞
QNAP Systems Photo Station is an online photo album from QNAP Systems, Inc. It is used to organize multimedia content photos and videos on Qnap Nas. A cross-site scripting vulnerability exists in QNAP Systems Photo Station that stems from susceptibility to cross-site scripting attacks...
CVE-2025-56694
Client-side password validation CWE-602 in lumasoft fotoShare Cloud 2025-03-13 allowing unauthenticated attackers to view password-protected photo albums...
Malicious code in photo-agent (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5815b50954cc097d97f91fcab8cd626c3f40231a4b7950124b8308ff21ca1bd4 The OpenSSF Package Analysis project identified 'photo-agent' @ 99.0....
MAL-2025-41317 Malicious code in photo-agent (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5815b50954cc097d97f91fcab8cd626c3f40231a4b7950124b8308ff21ca1bd4 The OpenSSF Package Analysis project identified 'photo-agent' @ 99.0....
CVE-2025-55621
The CVE-2025-55621 entry describes an insecure direct object reference (IDOR) in Reolink app version 4.54.0.4.20250526, where an attacker could access and download other users’ profile photos via a crafted URL. This is supported by multiple connected records noting the same vulnerability and the ...
CVE-2025-9153
A vulnerability was detected in itsourcecode Online Tour and Travel Management System 1.0. This vulnerability affects unknown code of the file /admin/operations/travellers.php. The manipulation of the argument photo results in unrestricted upload. The attack can be launched remotely. The exploit ...
CVE-2025-9153
A vulnerability was detected in itsourcecode Online Tour and Travel Management System 1.0. This vulnerability affects unknown code of the file /admin/operations/travellers.php. The manipulation of the argument photo results in unrestricted upload. The attack can be launched remotely. The exploit ...
CVE-2025-9153
CVE-2025-9153 affects the itsourcecode Online Tour and Travel Management System v1.0. The vulnerability is in the file /admin/operations/travellers.php where the photo parameter can be manipulated to achieve an unrestricted file upload. This is described as a remote, publicly exploitable issue. M...
CVE-2025-9153 itsourcecode Online Tour and Travel Management System travellers.php unrestricted upload
A vulnerability was detected in itsourcecode Online Tour and Travel Management System 1.0. This vulnerability affects unknown code of the file /admin/operations/travellers.php. The manipulation of the argument photo results in unrestricted upload. The attack can be launched remotely. The exploit ...
itsourcecode Online Tour and Travel Management System 安全漏洞
itsourcecode Online Tour and Travel Management System is a itsourcecode open source online tour and travel management system. A security vulnerability exists in version 1.0 of itsourcecode Online Tour and Travel Management System, which is caused by a misuse of the parameter photo in the file...
PT-2025-33846 · Itsourcecode · Itsourcecode Online Tour/Travel Management System
Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tour and Travel Management System version 1.0 Description: A vulnerability exists in itsourcecode Online Tour and Travel Management System that allows for unrestricted file upload. The issue affects unknown code within the...
CVE-2025-54672
Cross-Site Request Forgery CSRF vulnerability in Jordy Meow Photo Engine wplr-sync allows Cross Site Request Forgery.This issue affects Photo Engine: from n/a through = 6.4.3...
Malicious code in flickr-photo-brick (npm)
The package flickr-photo-brick was found to contain malicious code...
Malicious code in photo-compare-sort (npm)
The package photo-compare-sort was found to contain malicious code...