CVE-2016-10322

Synology Photo Station before 6.3-2958 allows remote authenticated guest users to execute arbitrary commands via shell metacharacters in the X-Forwarded-For HTTP header to photo/login.php...

CVE-2016-10323

Synology Photo Station prior to version 6.3-2958 contains an elevation of privilege due to a setuid execution flaw in the command "synophoto_dsm_user --copy-no-ea", allowing local users to gain privileges. This is documented across multiple sources (CVE-2016-10323, including Red Hat and CVE recor...

CVE-2016-10323

Synology Photo Station before 6.3-2958 allows local users to gain privileges by leveraging setuid execution of a "synophotodsmuser --copy-no-ea" command...

CVE-2016-10322

Synology Photo Station (pre-6.3-2958) is affected by CVE-2016-10322. Remote authenticated guest users can inject shell metacharacters in the X-Forwarded-For header to photo/login.php and execute arbitrary commands. Impact is described as remote code execution with the attacker in a low-privilege ...

CVE-2016-10322

Synology Photo Station before 6.3-2958 allows remote authenticated guest users to execute arbitrary commands via shell metacharacters in the X-Forwarded-For HTTP header to photo/login.php...

CVE-2015-4673

Multiple cross-site scripting XSS vulnerabilities in ClipBucket 2.7.0.5 allow remote authenticated users to inject arbitrary web script or HTML via 1 the collectiondescription parameter to upload/managecollections.php in an addnew action or the 2 photodescription, 3 phototags, or 4 phototitle...

CVE-2015-4673

Multiple cross-site scripting XSS vulnerabilities in ClipBucket 2.7.0.5 allow remote authenticated users to inject arbitrary web script or HTML via 1 the collectiondescription parameter to upload/managecollections.php in an addnew action or the 2 photodescription, 3 phototags, or 4 phototitle...

Samsung Galaxy S8's Facial Unlocking Feature Can Be Fooled With A Photo

Samsung launched its new flagship smartphones, the Galaxy S8 and Galaxy S8 Plus, at its Unpacked 2017 event on Wednesday in New York, with both IRIS and Facial Recognition features, making it easier for users to unlock their smartphone and signing into websites. All users need to do is simply hol...

Gr8 Gallery Script - SQL Injection

Exploit Title: Gr8 Gallery Script - SQL Injection Google Dork: N/A Date: 24.03.2017 Vendor Homepage: http://gr8script.com/ Software: http://gr8script.com/gr8gallery.php Demo: http://www.gr8script.com/gr8gallery/ Version: N/A Tested on: Win7 x64, Kali Linux x64 Exploit Author: Ihsan Sencan Author...

Gr8 Gallery Script SQL Injection

Exploit Title: Gr8 Gallery Script - SQL Injection Google Dork: N/A Date: 24.03.2017 Vendor Homepage: http://gr8script.com/ Software: http://gr8script.com/gr8gallery.php Demo: http://www.gr8script.com/gr8gallery/ Version: N/A Tested on: Win7 x64, Kali Linux x64 Exploit Author: Ihsan Sencan Author...

Wordpress Photo Gallery Plugin Arbitrary File Download Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An arbitrary file download vulnerability exists in the Wordpress Photo Gallery plugin, which allows attackers to exploit the...

Wordpress Plugin Photo Gallery v3. 0 - arbitrary File Download

Vulnerability title: Wordpress Plugin Photo Gallery v3. 0 - arbitrary File Download Vulnerability type: arbitrary File Download Vulnerability impact: Photo Gallery v3. 0 Vulnerabilities exist in the url: http://localhost/PLUGINPATH/macdownload.php Vulnerability details:...

Bonfire Photo Editor Pro - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Bonfire Photo Editor Pro published at the 'play' market has multiple vulnerabilities...

WordPress PICA Photo Gallery Plugin SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.Mail Masta aka mail-masta is one of the email plug-ins. A SQL injection vulnerability exists in the parameter aid i...

WordPress PICA Photo Gallery 1.0 SQL Injection

Exploit Title: WordPress Plugin PICA Photo Gallery v1.0 - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.apptha.com/ Software: https://www.apptha.com/category/extension/Wordpress/PICA-Photo-Gallery Demo: http://www.apptha.com/demo/pica-photo-gallery Version: 1.0 Test...

WordPress Plugin PICA Photo Gallery 1.0 - SQL Injection

Exploit Title: WordPress Plugin PICA Photo Gallery v1.0 - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.apptha.com/ Software: https://www.apptha.com/category/extension/Wordpress/PICA-Photo-Gallery Demo: http://www.apptha.com/demo/pica-photo-gallery Version: 1.0 Test...

WordPress Mac Photo Gallery 3.0 Arbitrary File Download

Exploit Title: WordPress Plugin Mac Photo Gallery v3.0 - Arbitrary File Download Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.apptha.com/ Software: https://www.apptha.com/category/extension/Wordpress/Mac-Photo-Gallery Demo: http://www.apptha.com/demo/mac-photo-gallery Version: 3...

WordPress Plugin Mac Photo Gallery 3.0 - Arbitrary File Download

WordPress Plugin Mac Photo Gallery 3.0 - Arbitrary File Download Exploit Title: WordPress Plugin Mac Photo Gallery v3.0 - Arbitrary File Download Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.apptha.com/ Software:...

WordPress PICA Photo Gallery 1.0 Plugin - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Plugin PICA Photo Gallery v1.0 - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.apptha.com/ Software: https://www.apptha.com/category/extension/Wordpress/PICA-Photo-Gallery Demo:...

WordPress Plugin PICA Photo Gallery 1.0 - SQL Injection

WordPress Plugin PICA Photo Gallery 1.0 - SQL Injection Exploit Title: WordPress Plugin PICA Photo Gallery v1.0 - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.apptha.com/ Software: https://www.apptha.com/category/extension/Wordpress/PICA-Photo-Gallery Demo:...