PHPGurukul Pre-School Enrollment System Project 安全漏洞

The Pre-School Enrollment System Project is a preschool enrollment system project. A directory traversal vulnerability exists in Pre-School Enrollment System Project, which stems from a lack of validity checking of paths in the file update-teacher-pic.php when processing directory requests, and c...

Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: CVE-2025-47183: Fixed out-of-bounds read in MOV/MP4 demuxer bsc1244406. CVE-2025-47219: Fixed out-of-bounds read in MOV/MP4 demuxer bsc1244405. CVE-2024-47540: Fixed uninitialized stack memory in Matroska/WebM demuxer bsc1234421...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which originates from the media driver not setting devicecaps for MPEG encoders...

CVE-2025-45002

Vigybag v1.0 and before is vulnerable to Cross Site Scripting XSS via the upload profile picture function under my profile...

CVE-2025-45002

Vigybag v1.0 and before is vulnerable to Cross Site Scripting XSS via the upload profile picture function under my profile...

CVE-2025-45002

Vigybag v1.0 and before is vulnerable to Cross Site Scripting XSS via the upload profile picture function under my profile...

CVE-2025-45002

Vigybag v1.0 and before is vulnerable to Cross Site Scripting XSS via the upload profile picture function under my profile...

CVE-2025-45002: Improper Neutralization of Input During Web Page Generation

Vigybag v1.0 and before is vulnerable to Cross Site Scripting XSS via the upload profile picture function under my profile...

PT-2025-24543 · Vigybag · Vigybag

Name of the Vulnerable Software and Affected Versions: Vigybag versions 1.0 and before Description: The issue is related to Cross Site Scripting XSS via the upload profile picture function under the user's profile. This allows for potential malicious script execution. No information is provided...

CVE-2025-45002

Vigybag v1.0 and earlier versions are vulnerable to Cross-Site Scripting (XSS) via the upload profile picture function located under the user's profile. This vulnerability allows for the potential execution of malicious scripts. As a temporary workaround, it is recommended to disable the upload p...

CVE-2025-45002

Vigybag v1.0 and before is vulnerable to Cross Site Scripting XSS via the upload profile picture function under my profile...

CVE-2024-34759

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in VideoWhisper Picture Gallery allows Stored XSS.This issue affects Picture Gallery: from n/a through 1.5.11...

CVE-2024-23724

Ghost through 5.76.0 allows stored XSS, and resultant privilege escalation in which a contributor can take over any account, via an SVG profile picture that contains JavaScript code to interact with the API on localhost TCP port 3001. NOTE: The discoverer reports that "The vendor does not view th...

CVE-2024-37741

OpenPLC 3 through 9cd8f1b allows XSS via an SVG document as a profile picture...

CVE-2024-3295

The User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the profilepicremove function in versions up to, and including, 3.1.5. This makes it possible for...

CVE-2024-5518

A vulnerability classified as critical has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file changeprofilepicture.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit ha...

CVE-2024-13584

The Picture Gallery – Frontend Image Uploads, AJAX Photo List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisperpictures' shortcode in all versions up to, and including, 1.5.19 due to insufficient input sanitization and output escaping on user supplie...

CVE-2023-0960

A vulnerability was found in SeaCMS 11.6 and classified as problematic. Affected by this issue is some unknown functionality of the file /data/config.ftp.php of the component Picture Management. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been...

CVE-2023-21269

In startActivityInner of ActivityStarter.java, there is a possible way to launch an activity into PiP mode from the background due to BAL bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-41506

An arbitrary file upload vulnerability in the Update/Edit Student's Profile Picture function of Student Enrollment In PHP v1.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...