Memory Corruption Vulnerability in WPS Images (CNVD-2020-32600)

WPS Photo is an ad-free image processing software from Kingsoft. A memory corruption vulnerability exists in WPS Photo, which can be exploited by an attacker to cause the software to crash with a malicious image file constructed using the vulnerability...

QNAP Photo Station Multiple Vulnerabilities (NAS-201911-25) - Active Check

QNAP Photo Station is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

QNAP QTS And Photo Station 6.0.3 - Remote Command Execution

QNAP QTS and Photo Station version 6.0.3 suffers from a remote command execution vulnerability. Exploit Title: QNAP QTS and Photo Station 6.0.3 - Remote Command Execution Exploit Author: Yunus YILDIRIM Th3Gundy Team: CT-Zer0 @CRYPTTECH - https://www.crypttech.com Date: 2020-05-28 Vendor Homepage:...

QNAP QTS and Photo Station 6.0.3 - Remote Command Execution Exploit

Exploit for php platform in category web applications Exploit Title: QNAP QTS and Photo Station 6.0.3 - Remote Command Execution Exploit Author: Yunus YILDIRIM Th3Gundy Team: CT-Zer0 @CRYPTTECH - https://www.crypttech.com Vendor Homepage: https://www.qnap.com Version: QTS 4.4.1 | Photo Station...

QNAP QTS and Photo Station Local File Inclusion

This module exploits a local file inclusion in QNAP QTS and Photo Station that allows an unauthenticated attacker to download files from the QNAP filesystem. Because the HTTP server runs as root, it is possible to access sensitive files, such as SSH private keys and password hashes. This module h...

WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.4.18 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Ngo Van Thien in WordPress Image Photo Gallery Final Tiles Grid plugin versions = 3.4.18. Solution Update the WordPress Image Photo Gallery Final Tiles Grid plugin to the latest available version at least 3.4.19...

QNAP QTS And Photo Station 6.0.3 Remote Command Execution

Exploit Title: QNAP QTS and Photo Station 6.0.3 - Remote Command Execution Exploit Author: Yunus YILDIRIM Th3Gundy Team: CT-Zer0 @CRYPTTECH - https://www.crypttech.com Date: 2020-05-28 Vendor Homepage: https://www.qnap.com Version: QTS 4.4.1 | Photo Station 6.0.3 CVE: CVE-2019-7192, CVE-2019-7193...

QNAP QTS and Photo Station 6.0.3 - Remote Command Execution

Exploit Title: QNAP QTS and Photo Station 6.0.3 - Remote Command Execution Exploit Author: Yunus YILDIRIM Th3Gundy Team: CT-Zer0 @CRYPTTECH - https://www.crypttech.com Date: 2020-05-28 Vendor Homepage: https://www.qnap.com Version: QTS 4.4.1 | Photo Station 6.0.3 CVE: CVE-2019-7192, CVE-2019-7193...

Exploit for Incorrect Authorization in Qnap Photo_Station

QNAP Pre-Auth Root RCE CVE-2019-7192 CVE-2019-7195 Exploit...

Android Airbrush elevation of privilege vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA.Airbrush is one of the photo editors. There is a security vulnerability in Airbrush in Android. An attacker can exploit the vulnerability to elevate privileges...

Photo Gallery by 10Web < 1.5.55 - Unauthenticated SQL Injection

SQL injection in the Photo Gallery 10Web Photo Gallery plugin before 1.5.55 exists via the frontend/models/model.php bwgsearchx parameter. Impact All gallerytype is affected by this bug and any unauthenticated remote attacker can exploit the plugin. PoC Sqlmap payload: sqlmap -u...

WordPress Photo Gallery by 10Web plugin <= 1.5.54 - Unauthenticated SQL Injection (SQLi) vulnerability

Unauthenticated SQL Injection SQLi vulnerability found by Nguyen Anh Tien in WordPress Photo Gallery by 10Web plugin versions = 1.5.54. Solution Update the WordPress Photo Gallery by 10Web plugin to the latest available version at least 1.5.55...

Topcoder: CSRF on https://apps.topcoder.com/wiki/users/editmyprofilepicture.action

Summary: Hi : There is a CSRF on uploading user profile photo and saving it. Steps To Reproduce: There is no CSRF token or anything like that on https://apps.topcoder.com/wiki/users/editmyprofilepicture.action . I added the poc html files below. Attacker can upload a new profile photo and update...

CVE-2020-12471

MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or Pages/SocialNetworking/lng/en-US/PhotoGallery.aspx because of deserialization in ModuleGallery.HTML5Upload, ModuleGallery.SilverLightUploadModule, HTML5Upload, and SilverLightUploadHandler...

WordPress Gmedia Photo Gallery plugin <= 1.18.4 - Multiple Cross-Site Scripting (XSS) vulnerabilities

Multiple Cross-Site Scripting XSS vulnerabilities were discovered by Vishnupriya Ilango in the WordPress Gmedia Photo Gallery plugin versions = 1.18.4. Solution Update the WordPress Gmedia Photo Gallery plugin to the latest available version at least 1.18.5...

WordPress 10Web Photo Gallery Plugin Cross Site Scripting (CVE-2020-9335)

A cross site scripting vulnerability exists in WordPress 10Web Photo Gallery plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

Foxitsoftware Foxit Studio Photo Remote Code Execution (CVE-2020-8878)

A remote code execution vulnerability exists in foxitsoftware foxit studio photo. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2020-11811

In qdPM 9.1, an attacker can upload a malicious .php file to the server by exploiting the Add Profile Photo capability with a crafted content-type value. After that, the attacker can execute an arbitrary command on the server using this malicious file...

Design/Logic Flaw

In qdPM 9.1, an attacker can upload a malicious .php file to the server by exploiting the Add Profile Photo capability with a crafted content-type value. After that, the attacker can execute an arbitrary command on the server using this malicious file...

CVE-2020-11811

In qdPM 9.1, an attacker can upload a malicious .php file to the server by exploiting the Add Profile Photo capability with a crafted content-type value. After that, the attacker can execute an arbitrary command on the server using this malicious file...