WordPress Photo Gallery 1.1.30 Cross Site Scripting

Advisory ID: HTB23232 Product: Photo Gallery WordPress plugin Vendor: http://web-dorado.com/ Vulnerable Versions: 1.1.30 and probably prior Tested Version: 1.1.30 Advisory Publication: September 10, 2014 without technical details Vendor Notification: September 10, 2014 Vendor Patch: September 10,...

Photo Gallery 1.1.30 - Cross Site Scripting

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin was affected by a Cross Site Scripting security vulnerability...

CVE-2014-6836

The DS photo+ aka com.synology.dsphoto application 3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The DS photo+ aka com.synology.dsphoto application 3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6836

The DS photo+ aka com.synology.dsphoto application 3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6836

CVE-2014-6836 affects the DS photo+ (com.synology.dsphoto) Android app version 3.3. The issue is that the app does not validate X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The available docu...

GS Foto Uebertraeger v3.0 iOS - File Include Vulnerability

Document Title: =============== GS Foto Uebertraeger v3.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1325 Release Date: ============= 2014-09-22 Vulnerability Laboratory ID VL-ID: ====================================...

WP Photo Album Plus 5.4.4 & 5.4.3 Cross-Site Scripting (XSS)

The WP Photo Album Plus WordPress plugin was affected by security vulnerability...

The Fappening 3 — Jennifer Lawrence New Photos Leaked Online

It seems like there is no end of “celebrity photo leaks”. As part of the Fappening 3 hack, some new naked photos of Jennifer Lawrence have apparently been leaked online in the “third round” of celebrity photo leaks including, top model Cara Delevingne, actress Anna Kendrick. On Friday, new...

[SECURITY] Fedora 20 Update: digikam-4.3.0-2.fc20

digiKam is an easy to use and powerful digital photo management application, which makes importing, organizing and manipulating digital photos a "snap". An easy to use interface is provided to connect to your digital camera, preview the images and download and/or delete them. digiKam built-in ima...

[SECURITY] Fedora 20 Update: kphotoalbum-4.5-2.fc20

A photo album tool. Focuses on three key points: It must be easy to describe a number of images at a time. It must be easy to search for images. It must be easy to browse and View the images...

GS Foto Uebertraege 3.0 Local File Inclusion

Document Title: =============== GS Foto Uebertraeger v3.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1325 Release Date: ============= 2014-09-22 Vulnerability Laboratory ID VL-ID: ====================================...

CVE-2014-6695

The Wedding Photo Frames-Love Pics aka com.WeddingPhotoFramesLovePics application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Wedding Photo Frames-Love Pics aka com.WeddingPhotoFramesLovePics application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6695

The CVE-2014-6695 entry concerns The Wedding Photo Frames-Love Pics (com.WeddingPhotoFramesLovePics) Android app (version 1.0) that fails to verify SSL X.509 certificates. Root cause: improper certificate validation in SSL/TLS communication, enabling man-in-the-middle attackers to spoof servers a...

yxcms二次注入漏洞

简要描述： yxcms二次注入漏洞 详细说明： /protected/apps/member/controller/photoController.php $data'account'=$this-mesprefix.$this-auth'account'; $data'sort'=$POST'sort';//从这里入口 $data'exsort'=empty$POST'exsort'?'':implode',',$POST'exsort'; $data'title'=in$POST'title'; $data'keywords'=in$POST'keywords';...

CVE-2014-6004

The Pocket Cam Photo Editor aka mobi.pocketcam.editor application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Pocket Cam Photo Editor aka mobi.pocketcam.editor application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6004

The CVE-2014-6004 entry concerns the Pocket Cam Photo Editor (mobi.pocketcam.editor) app, version 3 for Android. The vulnerability is that the application does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information vi...

CVE-2014-6004

The Pocket Cam Photo Editor aka mobi.pocketcam.editor application 3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...