6693 matches found
Memory Corruption Vulnerability in Ashampoo Photo Commander's PCX Image Processing
Ashampoo Photo Commander Free is a photo management software from Germany. A memory corruption vulnerability exists in Ashampoo Photo Commander's logic for handling PCX images, which allows attackers to exploit the vulnerability to parse malformed pcx samples and cause the application to crash...
Memory Corruption Vulnerability in Ashampoo Photo Commander's BMP Image Processing
Ashampoo Photo Commander Free is a photo management software from Germany. A memory corruption vulnerability exists in Ashampoo Photo Commander's handling of BMP images, allowing attackers to exploit the vulnerability to parse malformed programs and cause the application to crash...
Memory Corruption Vulnerability in Ashampoo Photo Commander's Handling of ICO Images
Ashampoo Photo Commander Free is a photo management software from Germany. Ashampoo Photo Commander handles ICO images with logical errors that allow attackers to exploit vulnerabilities to parse malformed programs and cause the application to crash...
Ashampoo Photo Commander Memory Corruption Vulnerability
Ashampoo Photo Commander Free is a photo management software from Germany. Ashampoo Photo Commander has bugs in the logic of handling TIFF images, allowing attackers to exploit vulnerabilities to parse malformed programs and cause the application to crash...
WordPress Photo Gallery Plugin Arbitrary File Upload Vulnerability
WordPress Photo Gallery Plugin is a wordpress image plugin. The WordPress Photo Gallery Plugin suffers from an arbitrary file upload vulnerability, which allows attackers to exploit the vulnerability to submit a special file and execute it with WEB privileges, as the program fails to properly...
Piwigo 2.7.3 - SQL Injection
Piwigo 2.7.3 - SQL Injection CVE-2015-1517 Piwigo - SQL Injection in Version 2.7.3 ---------------------------------------------------------------- Product Information: Software: Piwigo Tested Version: 2.7.3, released on 9 January 2015 Vulnerability Type: SQL Injection CWE-89 Download link:...
Piwigo 2.7.3 - SQL Injection
CVE-2015-1517 Piwigo - SQL Injection in Version 2.7.3 ---------------------------------------------------------------- Product Information: Software: Piwigo Tested Version: 2.7.3, released on 9 January 2015 Vulnerability Type: SQL Injection CWE-89 Download link: http://piwigo.org/basics/downloads...
Wordpress Photo Gallery Plugin Unrestricted File Upload (CVE-2014-9312)
An unauthorized file upload vulnerability has been reported in Wordpress Photo Gallery Plugin. A remote attacker could exploit this vulnerability by uploading a file to a server running the vulnerable application. Successful exploitation of this vulnerability could allow a remote attacker to...
Facebook Vulnerability Allows Hacker to Delete Any Photo Album
A Serious vulnerability in Facebook has recently been reported that could allow anyone to delete your complete Facebook photo album without having authentication. Security Researcher Laxman Muthiyah told The Hacker News that the vulnerability actually resides in Facebook Graph API mechanism, whic...
Photo Gallery <= 1.2.5 - Unrestricted File Upload
The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin was affected by an Unrestricted File Upload security vulnerability...
WordPress Photo Gallery 1.2.5 Unrestricted File Upload
This module requires Metasploit: http://www.metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex/zip' require 'json' class Metasploit3 'WordPress Photo Gallery 1.2.5 Unrestricted File Upload', 'Description' = %qPhoto Gallery Plugin...
CVE-2015-1393
SQL injection vulnerability in the Photo Gallery plugin before 1.2.11 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the ascordesc parameter in a create gallery request in the galleriesbwg page to wp-admin/admin.php...
Sql injection
SQL injection vulnerability in the Photo Gallery plugin before 1.2.11 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the ascordesc parameter in a create gallery request in the galleriesbwg page to wp-admin/admin.php...
CVE-2015-1393
SQL injection vulnerability in the Photo Gallery plugin before 1.2.11 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the ascordesc parameter in a create gallery request in the galleriesbwg page to wp-admin/admin.php...
CVE-2015-1393
The CVE-2015-1393 entry concerns the Photo Gallery WordPress plugin (before 1.2.11). The vulnerability is a SQL injection in the asc_or_desc parameter of a create gallery request processed via galleries_bwg on wp-admin/admin.php, exploitable by remote authenticated users. The affected component i...
[CVE-2015-1393] Photo Gallery (Wordpress Plugin) - SQL Injection in Version 1.2.8
CVE-2015-1393 Photo Gallery Wordpress Plugin - SQL Injection in Version 1.2.8 ---------------------------------------------------------------- Product Information: Software: Photo Gallery Wordpress Plugin Tested Version: 1.2.8, released on 15.01.2015 and has over half a million downloads...
1 7-year-old adolescents disclosed the“American version of wechat,”a WhatsApp Web two security vulnerabilities-vulnerability warning-the black bar safety net
! Abroad the most popular mobile communication APP that is the United States of wechat）WhatsApp recently developed a web version. Unfortunately not on the line long, a 1 7-year-old Indian teenager discovered it 2 a security vulnerability. You again...... Run it juvenile Indrajeet Bhuyan 1 year 7...
WordPress Plugin Photo Gallery Has Multiple Cross-Site Scripting Vulnerabilities
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress plugin Photo Gallery has multiple cross-site scripting vulnerabilities due to the program failing to properly filte...
WordPress Plugin Photo Gallery 'asc_or_desc' Parameter SQL Injection Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress plugin Photo Gallery 'ascordesc' Parameter due to the program failing t...
17-Year-Old Found Bugs in WhatsApp Web and Mobile App
Last week, the most popular mobile messaging application WhatsApp finally arrived on the web — dubbed WhatsApp Web, but unfortunately it needs some improvements in its web version. An independent 17-year-old security researcher Indrajeet Bhuyan reported two security holes in the WhatsApp web clie...