UBUNTU-CVE-2015-8794

Absolute path traversal vulnerability in program/steps/addressbook/photo.inc in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via a full pathname in the alt parameter, related to contact photo handling...

CVE-2015-8794

Absolute path traversal vulnerability in program/steps/addressbook/photo.inc in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via a full pathname in the alt parameter, related to contact photo handling...

CVE-2015-8794

Absolute path traversal vulnerability in program/steps/addressbook/photo.inc in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via a full pathname in the alt parameter, related to contact photo handling...

FBI Has Named Hacker allegedly responsible for The Fappening Leaks

Remember The Fappening incident? Took place in mid-2014, in the incident, anonymous hackers flooded the Internet with private photographs of major celebrities, including Jennifer Lawrence, Kim Kardashian, Kate Upton and Kirsten Dunst. The Fappening was the result of the hack of thousands of Apple...

[SECURITY] Fedora 22 Update: shotwell-0.23.0-0.1.20160105gitf2fb1f7.fc22

Shotwell is an easy-to-use, fast photo organizer designed for the GNOME desktop. It allows you to import photos from your camera or disk, organize them by date and subject matter, even ratings. It also offers basic photo editing, like crop, red-eye correction, color adjustments, and straighten...

[SECURITY] Fedora 23 Update: shotwell-0.23.0-0.1.20160105gitf2fb1f7.fc23

Shotwell is an easy-to-use, fast photo organizer designed for the GNOME desktop. It allows you to import photos from your camera or disk, organize them by date and subject matter, even ratings. It also offers basic photo editing, like crop, red-eye correction, color adjustments, and straighten...

Hornil's Multiple Products Process BMP Images Memory Corruption Vulnerability

Hornil is a South Korean software company.Hornil StylePix is a photo editing software.Hornil Photo Viewer is a lightweight image viewer window.... A memory corruption vulnerability exists in the handling of BMP images in this class of tools. The vulnerability allows an attacker to construct a...

Hornil's Multiple Products Address TGA Image Memory Corruption Vulnerability

Hornil is a South Korean software company.Hornil StylePix is a photo editing software.Hornil Photo Viewer is a lightweight image viewer window.... A memory corruption vulnerability exists in this class of tools when processing TGA images. The vulnerability allows an attacker to construct a...

shotwell -- not verifying certificates

Michael Catanzaro reports: Shotwell has a serious security issue "Shotwell does not verify TLS certificates". Upstream is no longer active and I do not expect any further upstream releases unless someone from the community steps up to maintain it. What is the impact of the issue? If you ever used...

[SECURITY] Fedora 22 Update: LibRaw-0.16.2-3.fc22

LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. LibRaw is based on the source codes of the dcraw utility, where part of drawbacks have already been eliminated and part will be fixed in future...

Coinbase: XXE in OAuth2 Applications gallery profile App logo

upload svg photo XML based as App logo contain XML payload renamed to .jpg server start execute this XML payload or just watch this video "https://www.dropbox.com/s/wkba6f0wrax0wr8/xxe.mp4?dl=0" the same vulnerability was in https://www.coinbase.com/careers and reported by...

[SECURITY] Fedora 23 Update: LibRaw-0.16.2-3.fc23

LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. LibRaw is based on the source codes of the dcraw utility, where part of drawbacks have already been eliminated and part will be fixed in future...

WordPress WP Photo Album Plus Plugin <= 4.9.0 - Full Path Disclosure

This plugin is prone to a full path disclosure vulnerability. Solution Update the plugin...

nanopress.it XSS vulnerability

Vulnerable URL: http://www.nanopress.it/sport/foto/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 33960 Google Pagerank| 4 VIP website status:| Yes Check nanopress.it SSL...

Photo Transfer 2 1.0 Denial Of Service

Document Title: =============== Photo Transfer 2 v1.0 iOS - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1580 Release Date: ============= 2015-08-20 Vulnerability Laboratory ID VL-ID: ===================================...

Photo Transfer (2) 1.0 iOS - Denial of Service

Photo Transfer 2 1.0 iOS - Denial of Service Document Title: =============== Photo Transfer 2 v1.0 iOS - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1580 Release Date: ============= 2015-08-20 Vulnerability Laboratory ...

PHP Kobo Photo Gallery CMS for PC/smartphone and feature phone Cross Site Scripting Vulnerability

PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone is a photo gallery content management system CMS for PC, smartphone and feature phone from PHP Kobo Japan. A cross-site scripting vulnerability exists in the jquery.lightbox-0.5.min.js file in PHP Kobo Photo Gallery CMS for PC,...

PHP Kobo Photo Gallery CMS for PC/smartphone and feature phone Cross-Site Request Forgery Vulnerability

PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone is a photo gallery content management system CMS for PC, smartphone and feature phone from PHP Kobo Japan. A cross-site request forgery vulnerability exists in the admin.php script in PHP Kobo Photo Gallery CMS for PC, smartphone and...

CVE-2015-2983

Cross-site request forgery CSRF vulnerability in admin.php in PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone 1.0.1 Free and earlier allows remote attackers to hijack the authentication of arbitrary users...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in admin.php in PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone 1.0.1 Free and earlier allows remote attackers to hijack the authentication of arbitrary users...