CVE-2022-32119

Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities via the Add Photo function at photogalleries.inc.php and the import staff excel function at 1financemaster.inc.php...

CVE-2022-32119

Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities via the Add Photo function at photogalleries.inc.php and the import staff excel function at 1financemaster.inc.php...

Design/Logic Flaw

Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities via the Add Photo function at photogalleries.inc.php and the import staff excel function at 1financemaster.inc.php...

EUVD-2022-53368

Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities via the Add Photo function at photogalleries.inc.php and the import staff excel function at 1financemaster.inc.php...

CVE-2022-32119

Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities via the Add Photo function at photogalleries.inc.php and the import staff excel function at 1financemaster.inc.php...

CVE-2022-31560

The uncleYiba/phototag repository through 2020-08-31 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

shooting-starphoto.com Cross Site Scripting vulnerability OBB-2758014

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Synology Photo Station Session Fixation Vulnerability (CNVD-2022-67854)

Synology Photo Station is a solution for sharing pictures, videos and blogs over the Internet from Synology Inc. of Taiwan, China. A session fixation vulnerability exists in Synology Photo Station, which can be exploited by attackers to bypass security constraints via unspecified vectors...

The vulnerability of the Photo Station photo storage app, related to deficiencies in authentication procedures, allows intruders to circumvent existing security restrictions.

The vulnerability of the Photo Station photo storage app is related to deficiencies in its authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions from a remote location...

The vulnerability of the Video Station photo album creation application, related to deficiencies in the authentication process, allows unauthorized users to elevate their privileges.

The vulnerability of the Video Station photo album creation application is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to increase their privileges...

The vulnerability of the Video Station photo album creation application is related to deficiencies in the authentication process, which allows unauthorized users to elevate their privileges.

The vulnerability of the Video Station photo album creation application is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers, operating remotely, to increase their privileges...

DEBIAN-CVE-2021-3697

A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be performed the attacker needs to perform some triage over the heap layout and craft an image with a malicious format and payload. This vulnerabili...

CVE-2022-22681

Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote attackers to bypass security constraint via unspecified vectors...

CVE-2022-22681

Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote attackers to bypass security constraint via unspecified vectors...

Session fixation

Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote attackers to bypass security constraint via unspecified vectors...

CVE-2022-22681

Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote attackers to bypass security constraint via unspecified vectors...

CVE-2022-22681

Synology Photo Station (pre-6.8.16-3506) contains a Session Fixation vulnerability in access control management that can allow remote attackers to bypass security constraints. Affected component: Photo Station; root cause: session fixation. Impact is elevated access by bypassing constraints; expl...

Synology Photo Station 授权问题漏洞

Synology Photo Station is a solution for sharing pictures, videos and blogs over the Internet from Synology Inc. of Taiwan, China. A session fixation vulnerability exists in Synology Photo Station, which can be exploited by attackers to bypass security constraints via unspecified vectors...

CVE-2022-22681

Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote attackers to bypass security constraint via unspecified vectors...

WordPress Gallery for Social Photo <= 1.0.0.29 - Cross-Site Request Forgery (CSRF) vulnerability leading to Post Duplication

Cross-Site Request Forgery CSRF vulnerability leading to Post Duplication discovered by Marco Wotschka in WordPress Gallery for Social Photo versions = 1.0.0.29. Solution No patched version available...