User Profile Picture < 2.6.0 - Arbitrary User Picture Change/Deletion via IDOR

The plugin was affected by an IDOR issue, allowing users with the uploadimage capability by default author and above to change and delete the profile pictures of other users including those with higher roles. Use a proxy such as Burp Suite to capture the request made when change your own profile...

User Profile Picture < 2.6.0 - Arbitrary User Picture Change/Deletion via IDOR

The plugin was affected by an IDOR issue, allowing users with the uploadimage capability by default author and above to change and delete the profile pictures of other users including those with higher roles. PoC Use a proxy such as Burp Suite to capture the request made when change your own...

Denial of Service Vulnerability in WPS Images of Zhuhai Kingsoft Office Software Co. Ltd (CNVD-2021-46740)

WPS Pictures is a picture processor. A denial of service vulnerability exists in WPS Picture by Zhuhai Kingsoft Office Software Co. which can be exploited by attackers to cause a denial of service...

Denial of Service Vulnerability in WPS Images at Zhuhai Kingsoft Office Software Co.

WPS Pictures is a picture processor. A denial of service vulnerability exists in WPS Picture by Zhuhai Kingsoft Office Software Co. which can be exploited by attackers to cause a denial of service...

SUSE-SU-2021:1904-1 Security update for gstreamer-plugins-bad

This update for gstreamer-plugins-bad fixes the following issues: - CVE-2021-3185: h264parser: guard against refpicmarkings overflow bsc1181255...

Code injection

wire-ios is the iOS version of Wire, an open-source secure messaging app. In wire-ios versions 3.8.0 and prior, a vulnerability exists that can cause a denial of service between users. If a user has an invalid assetID for their profile picture and it contains the " character, it will cause the iO...

CVE-2021-32666

wire-ios is the iOS version of Wire, an open-source secure messaging app. In wire-ios versions 3.8.0 and prior, a vulnerability exists that can cause a denial of service between users. If a user has an invalid assetID for their profile picture and it contains the " character, it will cause the iO...

Binary Vulnerability in 2345 Viewer (CNVD-2021-40736)

2345 Picture Viewer is a picture browsing and management software under 2-3-4-5. It fully supports browsing, managing, and editing of all mainstream image formats, and supports the functions of flipping, zooming, and printing of images in a folder. A binary vulnerability exists in 2345 Picture...

Binary Vulnerability in 2345 Viewer (CNVD-2021-40737)

2345 Picture Viewer is a picture browsing and management software under 2-3-4-5. It fully supports browsing, managing, and editing of all mainstream image formats, and supports the functions of flipping, zooming, and printing of images in a folder. A binary vulnerability exists in 2345 Picture...

Binary Vulnerability in 2345 Viewer (CNVD-2021-40735)

2345 Picture Viewer is a picture browsing and management software under 2-3-4-5. It fully supports browsing, managing, and editing of all mainstream image formats, and supports the functions of flipping, zooming, and printing of images in a folder. A binary vulnerability exists in 2345 Picture...

Binary Vulnerability in 2345 Viewer

2345 Picture Viewer is a picture browsing and management software under 2-3-4-5. It fully supports browsing, managing, and editing of all mainstream image formats, and supports the functions of flipping, zooming, and printing of images in a folder. A binary vulnerability exists in 2345 Picture...

Binary Vulnerability in 2345 Viewer (CNVD-2021-40734)

2345 Picture Viewer is a picture browsing and management software under 2-3-4-5. It fully supports browsing, managing, and editing of all mainstream image formats, and supports the functions of flipping, zooming, and printing of images in a folder. A binary vulnerability exists in 2345 Picture...

CVE-2020-26678

vFairs 3.3 is affected by Remote Code Execution. Any user logged in to a vFairs virtual conference or event can abuse the functionality to upload a profile picture in order to place a malicious PHP file on the server and gain code execution...

CVE-2020-26679

vFairs 3.3 is affected by Insecure Permissions. Any user logged in to a vFairs virtual conference or event can modify any other users profile information or profile picture. After receiving any user's unique identification number and their own, an HTTP POST request can be made update their profil...

CVE-2020-26678

vFairs 3.3 is affected by Remote Code Execution. Any user logged in to a vFairs virtual conference or event can abuse the functionality to upload a profile picture in order to place a malicious PHP file on the server and gain code execution...

PT-2021-11259

Name of the Vulnerable Software and Affected Versions: vFairs version 3.3 Description: The issue allows any logged-in user to modify other users' profile information or profile picture in a vFairs virtual conference or event. By obtaining a user's unique identification number and their own, an...

PT-2021-11258

Name of the Vulnerable Software and Affected Versions: vFairs version 3.3 Description: The issue allows for Remote Code Execution. It can be exploited by any user logged in to a vFairs virtual conference or event, who can abuse the profile picture upload functionality to place a malicious PHP fil...

CVE-2020-26678: Unrestricted Upload of File with Dangerous Type

vFairs 3.3 is affected by Remote Code Execution. Any user logged in to a vFairs virtual conference or event can abuse the functionality to upload a profile picture in order to place a malicious PHP file on the server and gain code execution...

Chevereto 3.17.1 Cross Site Scripting

Exploit Title: Chevereto 3.17.1 - Cross Site Scripting Stored Google Dork: "powered by chevereto" Date: 19.04.2021 Exploit Author: Akıner Kısa Vendor Homepage: https://chevereto.com/ Software Link: https://chevereto.com/releases Version: 3.17.1 Tested on: Windows 10 / Xampp Proof of Concept: 1...

CVE-2021-30172

Special characters of picture preview page in the Quan-Fang-Wei-Tong-Xun system are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out Reflected XSS Cross-site scripting attacks, additionally access and manipulate customer’s...