6689 matches found
Sql injection
SQL injection vulnerability in synophotocsPhotoDB.php in Synology Photo Station before 6.8.11-3489 and before 6.3-2977 allows remote attackers to execute arbitrary SQL command via the type parameter...
Path traversal
Relative path traversal vulnerability in SYNO.PhotoStation.File in Synology Photo Station before 6.8.11-3489 and before 6.3-2977 allows remote attackers to upload arbitrary files via the uploadphoto parameter...
CVE-2019-11821
SQL injection vulnerability in synophotocsPhotoDB.php in Synology Photo Station before 6.8.11-3489 and before 6.3-2977 allows remote attackers to execute arbitrary SQL command via the type parameter...
CVE-2019-11822
Relative path traversal vulnerability in SYNO.PhotoStation.File in Synology Photo Station before 6.8.11-3489 and before 6.3-2977 allows remote attackers to upload arbitrary files via the uploadphoto parameter...
CVE-2019-11821
Synology Photo Station is affected by a SQL injection in synophoto_csPhotoDB.php. The issue allows remote execution of arbitrary SQL commands via the type parameter and affects versions prior to 6.8.11-3489 and prior to 6.3-2977. Root cause: lack of validation of externally supplied SQL statement...
CVE-2019-11822
Synology Photo Station contains a relative path traversal in SYNO.PhotoStation.File that lets remote attackers upload arbitrary files via the uploadphoto parameter. Affected versions are Synology Photo Station prior to 6.8.11-3489 and prior to 6.3-2977. The root cause is a path traversal vulnerab...
PT-2019-12509 · Synology · Synology Photo Station
Name of the Vulnerable Software and Affected Versions: Synology Photo Station versions prior to 6.8.11-3489 Synology Photo Station versions prior to 6.3-2977 Description: The issue allows remote attackers to upload arbitrary files via the uploadphoto parameter, due to a relative path traversal...
PT-2019-12508 · Synology · Synology Photo Station
Name of the Vulnerable Software and Affected Versions: Synology Photo Station versions prior to 6.8.11-3489 Synology Photo Station versions prior to 6.3-2977 Description: The issue allows remote attackers to execute arbitrary SQL commands via the type parameter in the synophoto csPhotoDB.php file...
MobOk Malware Hides in Photo Editors on Google Play, Siphons Cash
A powerful money-siphoning malware known as MobOk has been found hiding in seemingly legitimate photo editing apps available on the Google Play store. The Pink Camera and Pink Camera 2 apps, now removed, had been installed around 10,000 times, according to researchers at Kaspersky. They included...
Sony Bravia TV Photo Sharing Plus Parameter Injection Vulnerability
Sony Bravia TV is a smart TV from Sony Japan.Photo Sharing Plus is one of the photo sharing components. A parameter injection vulnerability exists in the Photo Sharing Plus component in Sony Bravia TV version 8.587 and earlier. The vulnerability stems from a network system or product not properly...
Sony Bravia TV Photo Sharing Plus Buffer Overflow Vulnerability
Sony Bravia TV is a smart TV from Sony Japan.Photo Sharing Plus is one of the photo sharing components. A buffer overflow vulnerability exists in the Photo Sharing Plus component in Sony Bravia TV versions 8.587 and earlier. The vulnerability originates when a networked system or product performs...
Sony Bravia TV Photo Sharing Plus Path Traversal Vulnerability
Sony Bravia TV is a smart TV from Sony Japan.Photo Sharing Plus is one of the photo sharing components. A path traversal vulnerability exists in the Photo Sharing Plus component in Sony Bravia TV version 8.587 and earlier. The vulnerability stems from a failure of a networked system or product to...
CVE-2018-16595
The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices has a Buffer Overflow...
CVE-2018-16594
The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Directory Traversal...
CVE-2018-16595
The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices has a Buffer Overflow...
CVE-2018-16593
The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Shell Metacharacter Injection...
CVE-2018-16594
The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Directory Traversal...
CVE-2018-16593
The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Shell Metacharacter Injection...