Code injection

An issue was discovered in certain Apple products. iOS before 11.1 is affected. The issue involves the "Messages" component. It allows physically proximate attackers to view arbitrary photos via a Reply With Message action in the lock-screen state...

CVE-2017-13844

An issue was discovered in certain Apple products. iOS before 11.1 is affected. The issue involves the "Messages" component. It allows physically proximate attackers to view arbitrary photos via a Reply With Message action in the lock-screen state...

Design/Logic Flaw

An exploitable vulnerability exists in the user photo update functionality of Circle with Disney running firmware 2.0.1. A repeated set of specially crafted API calls can cause the device to corrupt essential memory, resulting in a bricked device. An attacker needs network connectivity to the...

CVE-2017-2884

An exploitable vulnerability exists in the user photo update functionality of Circle with Disney running firmware 2.0.1. A repeated set of specially crafted API calls can cause the device to corrupt essential memory, resulting in a bricked device. An attacker needs network connectivity to the...

CVE-2017-2884

An exploitable vulnerability exists in the user photo update functionality of Circle with Disney running firmware 2.0.1. A repeated set of specially crafted API calls can cause the device to corrupt essential memory, resulting in a bricked device. An attacker needs network connectivity to the...

Shareet - Photo Sharing Social Network SQL Injection Vulnerability

Shareet - Photo Sharing Social Network is a social networking system with photo sharing features. A SQL injection vulnerability exists in Shareet - Photo Sharing Social Network version 1.0. The vulnerability can be exploited by remote attackers to inject SQL commands using the 'photo' parameter...

Circle with Disney Denial of Service Vulnerability

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. A denial of service vulnerability exists in the user photo upload feature in Circle with Disney version 2.0.1. The vulnerability can be...

Shareet Photo Sharing Social Network SQL Injection

Exploit Title: Shareet - Photo Sharing Social Network - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: https://odallated.com/ Software Link: https://www.codester.com/items/4910/shareet-photo-sharing-social-network Demo: https://odallated.com/shareet/demo/ Version: N/A Category: Webapps...

Apple iOS Messages Photo Access Vulnerability

Apple iOS is an operating system for mobile devices developed by Apple Inc. Messages is a component of the application used to send text, photos and videos. A photo access vulnerability exists in the Messages component in Apple iOS versions prior to 11.1. An attacker in close physical proximity...

CVE-2017-15979

Shareet - Photo Sharing Social Network 1.0 allows SQL Injection via the photo parameter...

CVE-2017-15979

Shareet - Photo Sharing Social Network 1.0 allows SQL Injection via the photo parameter...

snapfish.fr XSS vulnerability

Vulnerable URL: https://www.snapfish.fr/2/album-photo?cobrandName=snapfishit=tbm...

iPhone Apps With Camera Permissions Can Secretly Take Your Photos Without You Noticing

Are you a proud iPhone owner? If yes, this could freak you up. Trust me! Your iPhone has a serious privacy concern that allows iOS app developers to take your photographs and record your live video using both front and back camera—all without any notification or your consent. This alarming privac...

[SECURITY] Fedora 26 Update: ImageMagick-6.9.9.19-1.fc26

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

ofec.ma XSS vulnerability

Vulnerable URL: http://ofec.ma/web/galeriephoto.php?nom=x%22%20onerror=prompt/openbugbounty/%20%225&=22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3034418 VIP website status:| ...

[SECURITY] Fedora 25 Update: ImageMagick-6.9.9.15-1.fc25

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

[SECURITY] Fedora 26 Update: ImageMagick-6.9.9.15-1.fc26

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

[SECURITY] Fedora 27 Update: LibRaw-0.18.5-1.fc27

LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. LibRaw is based on the source codes of the dcraw utility, where part of drawbacks have already been eliminated and part will be fixed in future...

[SECURITY] Fedora 27 Update: ImageMagick-6.9.9.13-1.fc27

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

[SECURITY] Fedora 27 Update: LibRaw-0.18.4-2.fc27

LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. LibRaw is based on the source codes of the dcraw utility, where part of drawbacks have already been eliminated and part will be fixed in future...