115 matches found
WordPress Simple Image Manipulator < 1.0 - Local File Inclusion
WordPress Simple Image Manipulator 1.0 is vulnerable to local file inclusion in ./simple-image-manipulator/controller/download.php because no checks are made to authenticate users or sanitize input when determining file location. id: CVE-2015-1000010 info: name: WordPress Simple Image Manipulator...
CVE-2025-69460
CVE-2025-69460 – Simple Image Gallery 1.0 Remote Code Execution RCE Unauthenticated WriteUp CVE-2025-69460 – ExploitDB 50214...
CVE-2023-50596
CVE-2023-50596 Suggested description Cross Site Scripting vulnerability in Simple Image Stack Website using PHP and API v.1.00000 allows a remote attacker to execute arbitrary code via a crafted payload to the URL. Additional Information Lets paste our payload in the URL section...
WordPress Simple Image Manipulator < 1.0 - Local File Inclusion Detection
WordPress Simple Image Manipulator 1.0 is vulnerable to local file inclusion in ./simple-image-manipulator/controller/download.php because no checks are made to authenticate users or sanitize input when determining file location. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Simple Image...
Exploit for CVE-2025-69460
CVE-2025-69460 – Simple Image Gallery 1.0 Remote Cod...
📄 Adobe DNG SDK Image Processing Logic
Proof of concept exploit that demonstrates a heap out-of-bounds read / write leading to memory corruption and potential code execution in the Image Processing Logic of Adobe DNG SDK versions prior to 1.7.1.2410...
EUVD-2021-25256
Malware in sbrugna...
EUVD-2021-25190
Malware in sbrugna...
EUVD-2018-19432
Malware in sbrugna...
EUVD-2017-7550
Malware in sbrugna...
EUVD-2025-3950
Malicious code in bioql PyPI...
EUVD-2023-30829
Malicious code in bioql PyPI...
EUVD-2024-44489
Malicious code in bioql PyPI...
EUVD-2022-50370
Malicious code in bioql PyPI...
EUVD-2024-44056
Malicious code in bioql PyPI...
CVE-2025-24810
Cross-site scripting vulnerability exists in Simple Image Sizes 3.2.3 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in to the product with the administrative privilege and accessing the settings screen...
CVE-2024-4433
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mr Digital Simple Image Popup allows Stored XSS.This issue affects Simple Image Popup: from n/a through 2.4.0...
CVE-2023-27040
Simple Image Gallery v1.0 was discovered to contain a remote code execution RCE vulnerability via the username parameter...
CVE-2023-6896
A vulnerability was found in SourceCodester Simple Image Stack Website 1.0. It has been rated as problematic. This issue affects some unknown processing. The manipulation of the argument search with the input sy2ap%22%3e%3cscript%3ealert1%3c%2fscript%3etkxh1 leads to cross site scripting. The...