GS Foto Uebertraeger v3.0 iOS - File Include Vulnerability

Document Title: =============== GS Foto Uebertraeger v3.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1325 Release Date: ============= 2014-09-22 Vulnerability Laboratory ID VL-ID: ====================================...

More Celebrity Photos Leaked — Kim Kardashian and Others Targeted

So far people have not forgotten about the recent celebrity iCloud hacking scandal, a new wave of photographs of celebrities have been leaked in what appears to be the second edition of the massive leak related to the celebrities intimate-images on Internet earlier this month. Among the victims o...

CVE-2012-1556

Cross-site scripting XSS vulnerability in Synology Photo Station 5 for DiskStation Manager DSM 3.2-1955 allows remote attackers to inject arbitrary web script or HTML via the name parameter to photo/photoone.php...

Cross site scripting

Cross-site scripting XSS vulnerability in Synology Photo Station 5 for DiskStation Manager DSM 3.2-1955 allows remote attackers to inject arbitrary web script or HTML via the name parameter to photo/photoone.php...

CVE-2012-1556

Cross-site scripting XSS vulnerability in Synology Photo Station 5 for DiskStation Manager DSM 3.2-1955 allows remote attackers to inject arbitrary web script or HTML via the name parameter to photo/photoone.php...

CVE-2012-1556

CVE-2012-1556 is a reflected XSS vulnerability in Synology Photo Station 5 on DSM 3.2-1955, where input in the name parameter to photo/photo_one.php is not properly sanitized. The root cause is improper verification of the name input, enabling remote attackers to inject arbitrary scripts. Impacts...

WordPress Photo Album Plus 5.4.4 Cross Site Scripting

WP Photo Album Plus Security Vulnerabilities Author: Milhouse Download: https://wordpress.org/plugins/wp-photo-album-plus/ Home Page: http://wppa.opajaap.nl/ Google dork: inurl:wp-content/plugins/wp-photo-album-plus Set up: Wordpress Version: 3.9.1, 3.9.2 WP Photo Album Plus version: 5.4.4, 5.4.3...

WordPress Web-Dorado Photo Gallery Plugin <= 1.1.30 - Multiple XSS

Because of these vulnerabilities, the attackers can inject arbitrary web script or HTML via the "callback", "dir", or "extensions" parameters. Solution Update the plugin...

Design/Logic Flaw

The Eversnap Private Photo Album aka com.weddingsnap.android application 1.0.23 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5742

CVE-2014-5742 affects the Eversnap Private Photo Album Android app (com.weddingsnap.android) version 1.0.23. The root cause is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via a crafted cer...

CVE-2014-5742

The Eversnap Private Photo Album aka com.weddingsnap.android application 1.0.23 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5652

The Kicksend Photo Prints aka com.kicksend.android.print application 1.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5614

The Love Collage - Photo Editor aka com.etoolkit.lovecollage application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The PicsArt - Photo Studio aka com.picsart.studio application 4.5.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Kicksend Photo Prints aka com.kicksend.android.print application 1.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5652

The Kicksend Photo Prints aka com.kicksend.android.print application 1.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5614

The CVE-2014-5614 entry documents a vulnerability in The Love Collage - Photo Editor (com.etoolkit.lovecollage) for Android 1.3, where SSL certificate validation is not performed. This lack of X.509 validation enables MITM attackers to spoof servers and potentially obtain sensitive information vi...

CVE-2014-5640

The CVE-2014-5640 entry concerns the Android app CM Backup -Restore,Cloud,Photo (com.ijinshan.kbackup) version 1.1.0.135, which fails to verify X.509 certificates when connecting to SSL servers. This allows MITM attackers to spoof servers and access sensitive information via a crafted certificate...

CVE-2014-5674

CVE-2014-5674 affects the PicsArt Photo Studio Android app (com.picsart.studio), up to version 4.5.5, by not validating SSL certificates. The vulnerability enables MITM attackers to spoof servers and access sensitive data. Public sources describe the root cause as improper certificate validation,...

CVE-2014-5674

The PicsArt - Photo Studio aka com.picsart.studio application 4.5.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...