CVE-2014-5640

The CVE-2014-5640 entry concerns the Android app CM Backup -Restore,Cloud,Photo (com.ijinshan.kbackup) version 1.1.0.135, which fails to verify X.509 certificates when connecting to SSL servers. This allows MITM attackers to spoof servers and access sensitive information via a crafted certificate...

CVE-2014-5614

The CVE-2014-5614 entry documents a vulnerability in The Love Collage - Photo Editor (com.etoolkit.lovecollage) for Android 1.3, where SSL certificate validation is not performed. This lack of X.509 validation enables MITM attackers to spoof servers and potentially obtain sensitive information vi...

CVE-2014-5674

CVE-2014-5674 affects the PicsArt Photo Studio Android app (com.picsart.studio), up to version 4.5.5, by not validating SSL certificates. The vulnerability enables MITM attackers to spoof servers and access sensitive data. Public sources describe the root cause as improper certificate validation,...

CVE-2014-5652

The CVE-2014-5652 entry concerns the Android app Kicksend Photo Prints (com.kicksend.android.print) version 1.0.7. The vulnerability is an SSL verification flaw where the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sens...

CVE-2014-5674

The PicsArt - Photo Studio aka com.picsart.studio application 4.5.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Apple Patches 'Find My iPhone' Vulnerability Which May Caused Celebrities Photo Leak

Apple has patched the security flaw in its Find My iPhone online service that may have allowed hackers to get access to a number of celebrities' private pictures leaked online. OVER 100 CELEBRITIES AFFECTED So far, I hope everybody have heard about probably the biggest digital exposure of persona...

Apple Fixes Glitch in Find My iPhone App Connected to Celbrity Photo Leak

UPDATE–Apple has patched the vulnerability in its Find My iPhone app that likely was used in the attack that led to the publication of private photos belonging to dozens of celebrities over the weekend. The victims of the breach included actors, models and athletes such as Jennifer Lawrence and...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/picturemodify.php in the photo-edit subsystem in Piwigo 2.6.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the associate field, a different vulnerability than CVE-2014-4649...

CVE-2014-3900

CVE-2014-3900 affects Piwigo 2.6.3 and earlier. An XSS flaw in admin/picture_modify.php (photo-edit subsystem) allows injection of arbitrary script via the associate[] field. Root cause involves insufficient input handling; impact is user browser script execution. Exploitation status is not detai...

Photo Org WonderApplications v8.3 iOS - File Include Vulnerability

Document Title: =============== Photo Org WonderApplications v8.3 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1277 Release Date: ============= 2014-07-04 Vulnerability Laboratory ID VL-ID:...

Photo WiFi Transfer 1.01 Directory Traversal

Document Title: =============== Photo WiFi Transfer 1.01 - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1285 Release Date: ============= 2014-07-31 Vulnerability Laboratory ID VL-ID: ==================================...

Gallery Bank 2.0.19 - Multiple Unspecified Issues

The WordPress Photo Gallery Plugin by Gallery Bank WordPress plugin was affected by a Multiple Unspecified Issues security vulnerability...

Gallery Bank 2.0.19 - album-gallery-bank-class.php recordsArray Parameter Reflected XSS

The WordPress Photo Gallery Plugin by Gallery Bank WordPress plugin was affected by an album-gallery-bank-class.php recordsArray Parameter Reflected XSS security vulnerability...

WP Photo Album Plus - "commentid" Cross-Site Scripting

The WP Photo Album Plus WordPress plugin was affected by a "commentid" Cross-Site Scripting security vulnerability...

WP Photo Album Plus - index.php wppa-tag Parameter XSS

The WP Photo Album Plus WordPress plugin was affected by an index.php wppa-tag Parameter XSS security vulnerability...

WP Photo Album Plus < 4.8.12 - wp-photo-album-plus.php wppa-searchstring XSS

The WP Photo Album Plus WordPress plugin was affected by a wp-photo-album-plus.php wppa-searchstring XSS security vulnerability...

WP Photo Album Plus - Full Path Disclosure

The WP Photo Album Plus WordPress plugin was affected by a Full Path Disclosure security vulnerability...

WP Photo Album Plus - wp-admin/admin.php edit_id Parameter XSS

The WP Photo Album Plus WordPress plugin was affected by a wp-admin/admin.php editid Parameter XSS security vulnerability...

GRAND Flash Album Gallery 2.55 - "gid" SQL Injection

The Album and Image Gallery with Lightbox – Flagallery Photo Portfolio WordPress plugin was affected by a "gid" SQL Injection security vulnerability...

GRAND Flash Album Gallery - Multiple Vulnerabilities

The Album and Image Gallery with Lightbox – Flagallery Photo Portfolio WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...