CVE-2021-34354 Stored Cross-site Scripting Vulnerability in Photo Station

A cross-site scripting XSS vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Photo Station: Photo Station 6.0.18...

QNAP NAS 跨站脚本漏洞

QNAP NAS is an accessible and fast storage solution from QNAP China. A cross-site scripting vulnerability exists in QNAP NAS, which can be exploited by remote attackers to inject malicious code. The following products and versions are affected: Photo Station versions prior to 5.4.10 August 19,...

Qnap Photo Station 跨站脚本漏洞

Qnap Photo Station is an online photo album from China's Qnap Technology Qnap. It is used to organize multimedia content photos and videos on Qnap Nas. A cross-site scripting vulnerability exists in QNAP devices prior to Qnap Photo Station 6.0.18 2021 09 01, which can be exploited by remote...

Qnap Photo Station 跨站脚本漏洞

Qnap Photo Station is an online photo album from China's Qnap Technology Qnap. It is used to organize multimedia content photos and videos on Qnap Nas. A cross-site scripting vulnerability exists in versions prior to Qnap Photo Station 6.0.18 2021 09 01, which can be exploited by remote attackers...

Adobe Photoshop Elements out-of-bounds write vulnerability

Adobe Photoshop Elements is a new image editing, photo retouching, and Web graphics solution from Adobe following Photoshop. Adobe Photoshop Elements 2021 build 19.0 and earlier versions contain an out-of-bounds write vulnerability that could be exploited by attackers to execute arbitrary code...

The vulnerability of the PHP component of the Synology Photo Station storage management tool lies in the lack of security measures for the SQL query structure, allowing attackers to execute arbitrary SQL commands.

The vulnerability of the PHP component used in Synology Photo Station’s image storage management system is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL commands remotely...

CVE-2021-40814

The Customer Photo Gallery addon before 2.9.4 for PrestaShop is vulnerable to SQL injection...

CVE-2021-40814

The Customer Photo Gallery addon before 2.9.4 for PrestaShop is vulnerable to SQL injection...

CVE-2021-40814

The Customer Photo Gallery addon before 2.9.4 for PrestaShop is vulnerable to SQL injection...

Sql injection

The Customer Photo Gallery addon before 2.9.4 for PrestaShop is vulnerable to SQL injection...

CVE-2021-40814

The CVE affects PrestaShop’s Customer Photo Gallery addon prior to version 2.9.4, which is vulnerable to an SQL injection in user-supplied input. The vulnerability can impact confidentiality, integrity, and availability, with a CVSSv3.1 score of 9.8 (CRITICAL) and network access without authentic...

CVE-2021-40814

The Customer Photo Gallery addon before 2.9.4 for PrestaShop is vulnerable to SQL injection...

The vulnerability of the Photo Station photo storage application lies in the improper restriction on the path to the restricted catalog. This allows a violator to compromise the integrity of the data.

The vulnerability of the Photo Station photo storage application lies in improper restrictions on the path to the restricted catalog. Exploiting this vulnerability could allow an attacker to compromise the integrity of the data...

The vulnerability of the Photo Station photo storage application, related to privilege management errors, allows a intruder to gain unauthorized access to the system.

The vulnerability of the Photo Station photo storage app is related to privilege management errors. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to the system...

The vulnerability of the Photo Station photo storage application lies in the improper restriction on the path to the restricted catalog. This allows a violator to compromise the integrity of the data.

The vulnerability of the Photo Station photo storage application lies in improper restrictions on the path to the restricted catalog. Exploiting this vulnerability could allow an attacker to compromise the integrity of the data...

Apple Backs Down on Its Controversial Photo-Scanning Plans

A sustained backlash against a new system to look for child sexual abuse materials on user devices has led the company to hit pause...

WhatsApp Photo Filter Bug Allows Sensitive Info to Be Lifted

A security vulnerability in WhatsApp’s pic-retouching function could allow an attacker to read sensitive information from the WhatsApp memory, researchers said – so users should be careful whose pics they view and should, of course, update their apps. Disclosed by Check Point Research CPR, the...

CVE-2021-30867

The issue was addressed with improved authentication. This issue is fixed in iOS 15 and iPadOS 15. A malicious application may be able to access photo metadata without needing permission to access photos...

CVE-2021-30867

The issue was addressed with improved authentication. This issue is fixed in iOS 15 and iPadOS 15. A malicious application may be able to access photo metadata without needing permission to access photos...

CVE-2021-30867

The issue was addressed with improved authentication. This issue is fixed in iOS 15 and iPadOS 15. A malicious application may be able to access photo metadata without needing permission to access photos...