roundcube -- multiple vulnerabilities

Roundcube reports: We just published updates to both stable versions 1.0 and 1.1 after fixing many minor bugs and adding some security improvements to the 1.1 release branch. Version 1.0.6 comes with cherry-picked fixes from the more recent version to ensure proper long term support especially in...

[SECURITY] Fedora 21 Update: LibRaw-0.16.2-1.fc21

LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. LibRaw is based on the source codes of the dcraw utility, where part of drawbacks have already been eliminated and part will be fixed in future...

Coppermine Photo Gallery Open Redirect Vulnerability

Coppermine Photo Gallery is a WEB-based graphics gallery management program. An open redirection vulnerability exists in Coppermine Photo Gallery versions prior to 1.5.36, which can be exploited by remote attackers to redirect users to arbitrary web sites and conduct phishing attacks...

Coppermine Photo Gallery Cross-Site Scripting Vulnerability

Coppermine Photo Gallery is a WEB-based graphics gallery management program. A cross-site scripting vulnerability exists in Coppermine Photo Gallery versions prior to 1.5.36, which allows remote, authenticated users to inject arbitrary web script or HTML via reference parameters...

CVE-2015-3922

Open redirect vulnerability in mode.php in Coppermine Photo Gallery before 1.5.36 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referer parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in contact.php in Coppermine Photo Gallery before 1.5.36 allows remote authenticated users to inject arbitrary web script or HTML via the referer parameter...

Open redirect

Open redirect vulnerability in mode.php in Coppermine Photo Gallery before 1.5.36 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referer parameter...

CVE-2015-3921

Cross-site scripting XSS vulnerability in contact.php in Coppermine Photo Gallery before 1.5.36 allows remote authenticated users to inject arbitrary web script or HTML via the referer parameter...

CVE-2015-3922

Open redirect vulnerability in mode.php in Coppermine Photo Gallery before 1.5.36 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referer parameter...

CVE-2015-3922

The CVE covers Coppermine Photo Gallery open redirect in mode.php prior to 1.5.36. The vulnerability allows remote attackers to redirect users to arbitrary sites via a URL in the referer parameter, enabling phishing-like redirection. Affected software: Coppermine Photo Gallery (web-based gallery)...

CVE-2015-3921

Coppermine Photo Gallery contains a cross-site scripting (XSS) flaw in contact.php, exploitable by remote authenticated users via the referer parameter. Affected versions are before 1.5.36. The vulnerability allows injection of arbitrary web script/HTML. Root cause is improper handling of the ref...

Synology Fixes File-Takeover Flaw in Cloud Station OS X Client

There is a vulnerability in some versions of Synology’s Cloud Station client for OS X that can enable any user to take over system files and gain complete control of the machine. Cloud Station is a system that allows users to sync files across a number of devices. The system saves changes to file...

[SECURITY] Fedora 20 Update: LibRaw-0.15.4-2.fc20

LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. LibRaw is based on the source codes of the dcraw utility, where part of drawbacks have already been eliminated and part will be fixed in future...

[SECURITY] Fedora 22 Update: LibRaw-0.16.2-1.fc22

LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. LibRaw is based on the source codes of the dcraw utility, where part of drawbacks have already been eliminated and part will be fixed in future...

WordPress Plugin Simple Photo Gallery 'index.php' SQL Injection Vulnerability

WordPress is a set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up personal blog site.Simple Photo Gallery is an image gallery plugin. A SQL injection vulnerability exists in the WordPress plugin Simple Photo Gallery 'index.php. The...

Synology Photo Station Detection

The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

Synology Photo Station Cross-Site Scripting Vulnerability

Synology Photo Station is a solution for sharing pictures, videos and blogs over the Internet. A cross-site scripting vulnerability exists in Synology Photo Station, which can be exploited by remote attackers to inject malicious scripts or HTML code, which can be used to obtain sensitive...

Synology Photo Station 6.2-2858 Cross Site Scripting

------------------------------------------------------------------------ Synology Photo Station multiple Cross-Site Scripting vulnerabilities ------------------------------------------------------------------------ Han Sahin, May 2015...

Synology Photo Station 6.2-2858 Command Injection

------------------------------------------------------------------------ Command injection vulnerability in Synology Photo Station ------------------------------------------------------------------------ Han Sahin, May 2015 ------------------------------------------------------------------------...

WordPress Plugin Simple Photo Gallery 1.7.8 - Blind SQL Injection

WordPress Plugin Simple Photo Gallery 1.7.8 - Blind SQL Injection Exploit Title: Wordpess Simple Photo Gallery Blind SQL Injection Date: 12-05-2015 Exploit Author: woodspeed Vendor Homepage: https://wordpress.org/plugins/simple-photo-gallery/ Version: 1.7.8 Tested on: Apache 2.2.22, PHP 5.3.10...