SourceCodester E-Commerce System 代码问题漏洞

SourceCodester E-Commerce System is an e-commerce system from SourceCodester Inc. A code issue vulnerability exists in SourceCodester E-Commerce System version 1.0 due to an untrusted file upload vulnerability in the photo parameter of the /ecommerce/admin/products/controller.php page...

Malicious code in assisting-threading (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 33605e5f943eacd5d5ab7a4c37625226e2ef072f2fd3dac068b169d58ba1c2c9 Infostealer exfiltrating cookies, history and passwords from the Google Chrome browser, as well as attempting to do a webcam photo. Data are sent to a Discord...

MAL-2024-12362 Malicious code in thethreadingassistant (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 762eff7d2ce4176f6050d35736ba93b5853e8519e760522372aced785a146e59 Infostealer exfiltrating cookies, history and passwords from the Google Chrome browser, as well as attempting to do a webcam photo. Data are sent to a Discord...

Malicious code in assistant-threader (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6dba125172b57e6b24bcd2cc0df076483e1fe36d1969f37e533d611fb6f9d808 Infostealer exfiltrating cookies, history and passwords from the Google Chrome browser, as well as attempting to do a webcam photo. Data are sent to a Discord...

Malicious code in threading-assistant (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b7b431362a8fc3af245e62278011eb007f0b23eeaa959c3a34bbb959fa549a4c Infostealer exfiltrating cookies, history and passwords from the Google Chrome browser, as well as attempting to do a webcam photo. Data are sent to a Discord...

MAL-2024-12209 Malicious code in assisting-threading (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 33605e5f943eacd5d5ab7a4c37625226e2ef072f2fd3dac068b169d58ba1c2c9 Infostealer exfiltrating cookies, history and passwords from the Google Chrome browser, as well as attempting to do a webcam photo. Data are sent to a Discord...

CVE-2024-7910 CodeAstro Online Railway Reservation System Profile Photo Update emp-profile-avatar.php unrestricted upload

A vulnerability was found in CodeAstro Online Railway Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/emp-profile-avatar.php of the component Profile Photo Update Handler. The manipulation leads to unrestricted upload. The...

WordPress Photo Engine plugin <= 6.4.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Photo Engine versions = 6.4.0...

WordPress Photo Engine Plugin <= 6.4.0 is vulnerable to Broken Access Control

Software Photo Engine Type Plugin Vulnerable versions = 6.4.0 Fixed in 6.4.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-43332 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 6c8a51b120f7 Credits Majed Refaea Required privilege...

WordPress Sunshine Photo Cart plugin <= 3.2.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Manab Jyoti Dowarah Patchstack Alliance in WordPress Plugin Sunshine Photo Cart versions = 3.2.1...

CVE-2024-39627 WordPress Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin <= 3.59.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Imagely NextGEN Gallery allows Stored XSS.This issue affects NextGEN Gallery: from n/a through 3.59.3...

CVE-2024-39660

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Jordy Meow Photo Engine allows Stored XSS.This issue affects Photo Engine: from n/a through 6.3.1...

CVE-2024-39660 WordPress Photo Engine (Media Organizer & Lightroom) plugin <= 6.3.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Jordy Meow Photo Engine allows Stored XSS.This issue affects Photo Engine: from n/a through 6.3.1...

CVE-2024-39660 WordPress Photo Engine (Media Organizer & Lightroom) plugin <= 6.3.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Jordy Meow Photo Engine allows Stored XSS.This issue affects Photo Engine: from n/a through 6.3.1...

CVE-2024-39660

CVE-2024-39660 is a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Photo Engine (Media Organizer & Lightroom) by Jordy Meow. The issue affects Photo Engine versions

WordPress Photo Engine plugin <= 6.3.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Photo Engine versions = 6.3.1...

WordPress plugin Photo Engine 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Photo Engine Plugin <= 6.3.1 is vulnerable to Cross Site Scripting (XSS)

Software Photo Engine Type Plugin Vulnerable versions = 6.3.1 Fixed in 6.3.2 OWASP Top 10 A4: Insecure Design Classification Cross Site Scripting XSS CVE CVE-2024-39660 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID dc7264fd0c77 Credits Majed Refaea Required privilege...

CVE-2023-42949

This issue was addressed with improved data protection. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17. An app may be able to access edited photos saved to a temporary directory...

CVE-2023-42949

CVE-2023-42949 affects Apple's platforms (iOS/iPadOS, macOS, watchOS, tvOS) where an app could access edited photos saved to a temporary directory. The description and connected sources consistently state this was addressed by improving data protection, with fixes in iOS 17 / iPadOS 17, macOS Son...