CVE-2013-1438

Unspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in libraw, ufraw, shotwell, and other products, allows context-dependent attackers to cause a denial of service via a crafted photo file that triggers a 1 divide-by-zero, 2 infinite loop, or 3 NULL pointer dereference...

CVE-2013-1438

Unspecified vulnerability in dcraw 0.8.x through 0.8.9, as used in libraw, ufraw, shotwell, and other products, allows context-dependent attackers to cause a denial of service via a crafted photo file that triggers a 1 divide-by-zero, 2 infinite loop, or 3 NULL pointer dereference...

Threat Outbreak Alert: Fake Photo Attachment Email Messages on January 16, 2014

Medium Alert ID: 32472 First Published: 2014 January 16 20:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a photo for the recipient. The text in the email message attempts to convince the recipient to open the...

HackerOne: Upload profile photo from URL

Using this vulnerability users can upload images from any image URL. Just change upload type using inspect element from "type=file" to "type=url" , paste URL in text field and hit enter or click on "Update Profile". Your profile photo will be changed to photo from URL. P.S Im sorry for my bad...

Threat Outbreak Alert: Fake Photo Notification Email Messages on January 13, 2014

Medium Alert ID: 32415 First Published: 2014 January 14 15:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain photographs for the recipient. The text in the email message attempts to convince the...

Air Gallery 1.0 Air Photo Browser - Multiple Vulnerabilities

Document Title: =============== Air Gallery 1.0 Air Photo Browser - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1165 Release Date: ============= 2013-12-09 Vulnerability Laboratory ID VL-ID: ==================================...

Joomla Aclsfgpl Shell Upload

Author: TUNISIAN CYBER + Exploit Title: Joomla Component comaclsfgpl File Upload Vulnerability + Date: 07-01-2014 + Category: WebApp + Google Dork: :inurl:"index.php?option=comaclsfgpl" addform + Tested on: KaliLinux + Friend's blog: www.na3il.com +Exploit: You can upload file .php/.php.jpg...

Photo Video Album Transfer 1.0 iOS - Multiple Vulnerabilities

Document Title: =============== Photo Video Album Transfer 1.0 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1166 Release Date: ============= 2013-12-10 Vulnerability Laboratory ID VL-ID:...

Updated libkdcraw packages fix CVE-2013-1438 & CVE-2013-1439

Updated libkdcraw packages fix libraw security vulnerabilities: It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, applications linked against LibRaw could be made to crash, resulting in a denia...

Threat Outbreak Alert: Fake Personal Photo Email Messages on December 20, 2013

Medium Alert ID: 32254 First Published: 2013 December 23 13:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain personal photos for the recipient. The text in the email message attempts to convince the...

Thinksaas SQL注入#4

简要描述： Thinksaas SQL注入4 详细说明： 编辑图片信息： /app/photo/action/edit.php case "do": if$POST'token' != $SESSION'token' tsNotice'非法操作！'; $photoid = intval$POST'photoid'; $photoname = tsClean$POST'photoname'; $photodesc = tsClean$POST'photodesc'; $new'photo'-update'photo',array 'photoid'=$photoid, ,array...

Threat Outbreak Alert: Fake Photo Sharing Email Messages on December 17, 2013

Medium Alert ID: 32192 First Published: 2013 December 17 17:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a photograph for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Photo Sharing Email Messages on December 16, 2013

Medium Alert ID: 32175 First Published: 2013 December 16 17:06 GMT Last Updated: 2013 December 17 14:58 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a photo for the recipient. The text in the email message attempts to...

Wallpaper Script 3.5.0082 - Persistent Cross-Site Scripting

Exploit Title : Wallpaper Script Stored XSS Vulnerability D0rk Google : Author : nullp0int3r [email protected] Version : 3.5.0082 Date : 2013-12-14 Vendor Homepage: http://www.wallpaperscript.com/ Test on : Windows Exploitation: 1 Register and log on as a regular member 2 Click on "Add...

Microsoft PhotoStory - CS Cross Site Scripting Vulnerability

Document Title: =============== Microsoft PhotoStory - CS Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1012 Microsoft Security Response Center MSRC ID: 15155 Release Date: ============= 2013-12-11 Vulnerability...

Photo Video Album Transfer 1.0 iOS - Multiple Vulnerabilities

Document Title: =============== Photo Video Album Transfer 1.0 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1166 Release Date: ============= 2013-12-10 Vulnerability Laboratory ID VL-ID:...

Photo Video Album Transfer 1.0 iOS - Multiple Vulnerabilities

Document Title: =============== Photo Video Album Transfer 1.0 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1166 Release Date: ============= 2013-12-10 Vulnerability Laboratory ID VL-ID:...

Wireless Transfer App 3.7 iOS - Multiple Web Vulnerabilities

Document Title: =============== Wireless Transfer App 3.7 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1152 Release Date: ============= 2013-12-04 Vulnerability Laboratory ID VL-ID: ==================================...

Wireless Transfer App 3.7 iOS - Multiple Web Vulnerabilities

Document Title: =============== Wireless Transfer App 3.7 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1152 Release Date: ============= 2013-12-03 Vulnerability Laboratory ID VL-ID: ==================================...

Photo Transfer Wifi 1.4.4 iOS - Multiple Web Vulnerabilities

Document Title: =============== Photo Transfer Wifi 1.4.4 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1153 Release Date: ============= 2013-12-02 Vulnerability Laboratory ID VL-ID: ==================================...