278 matches found
Fedora: Security Advisory for gnome-online-accounts (FEDORA-2021-303f6623fa)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Flickr: Stored open redirect in about page
The report helped us identify an HTML parsing bug that resulted in XSS...
CVE-2015-9327
The flickr-justified-gallery plugin before 3.4.0 for WordPress has XSS...
Cross site scripting
The flickr-justified-gallery plugin before 3.4.0 for WordPress has XSS...
CVE-2015-9327
The CVE-2015-9327 entry maps to a XSS vulnerability in the Flickr Justified Gallery WordPress plugin prior to version 3.4.0. Multiple connected sources (NVD, Red Hat advisory, CVE lists, and WPVulndb) validate that the flaw is a cross-site scripting issue in this plugin, affecting WordPress envir...
CVE-2015-9327
The flickr-justified-gallery plugin before 3.4.0 for WordPress has XSS...
Flickr: CSRF in Account Deletion feature (https://www.flickr.com/account/delete)
CSRF was missing in Account Deletion form due to switching login providers. @asad0x01 found the vulnerability and reported it concisely, even with a video POC. The issue was fixed with 60 days, but we were slow to resolve the ticket and disclose. Sometimes you just get lucky. When Flickr was owne...
Flickr: Improper access control in place for "member only" groups via root.YUI_config.flickr.api.site_key
Researcher identified API endpoint that was not doing sufficient permission validation...
WordPress iOS App Bug Leaked Secret Access Tokens to Third-Party Sites
If you have a "private" blog with WordPress.com and are using its official iOS app to create or edit posts and pages, the secret authentication token for your admin account might have accidentally been leaked to third-party websites. WordPress has recently patched a severe vulnerability in its iO...
Flickr: Arbitrary file read via ffmpeg HLS parser at https://www.flickr.com/photos/upload
Summary: FFmpeg is a video and audio software that is used for generating previews and for converting videos. Your current installation allows HLS playlists that contain references to external files, which leads to local file disclosure. Steps to Reproduce: 1.Download the attached file. F413554...
Synology Photo Station Input Validation Vulnerability
Synology Photo Station is a Synology solution for sharing pictures, videos and blogs over the Internet. An input validation vulnerability exists in SYNOPHOTOFlickrMultiUpload in Synology Photo Station versions prior to 6.8.3-3463 and 6.3-2971. A remote attacker can exploit the vulnerability to...
CVE-2018-6469
A cross-site scripting XSS vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the flickrRSStags parameter to wp-admin/options-general.php...
flickrRSS <= 5.3.1 - XSS and CSRF
The flickr-rss WordPress plugin was affected by a XSS and CSRF security vulnerability...
CVE-2018-5284
The ImageInject plugin 1.15 for WordPress has XSS via the flickrappid parameter to wp-admin/options-general.php...
WordPress ImageInject plugin cross-site scripting vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.ImageInject plugin is used in one of the image upload plugin. A cross-site scripting vulnerability exists in versi...
Flickr Gallery Plugin for WordPress < 1.5.3 PHP Object Injection
According to its self-reported version, the Flickr Gallery Plugin for WordPress running on the remote web server is prior to 1.5.3. It is, therefore, affected by a PHP object injection vulnerability. An unauthenticated, remote attacker can exploit this to inject PHP objects and execute arbitrary...
How to use OAuth error configuration to achieve the takeover of the Flickr account of the object-vulnerability warning-the black bar safety net
! Flickr is Yahoo's a picture of the video sharing sites, and presumably everyone is very understanding. Yahoo today, the application of the OAuth authentication situation instead of the previous the disembarkation method. The author of this article via a process of reflection on the disembarkati...
WordPress Flickr Gallery plugin <=1.5.2 - Unauthenticated PHP Object Injection vulnerability
Unauthenticated PHP Object Injection vulnerability found by Matt Barry WordFence in WordPress Appointments plugin versions =1.5.2. Solution Update the WordPress Flickr Gallery plugin to the latest available version at least 1.5.3...
VulnCheck KEV: CVE-2017-20207
The Flickr Gallery plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.5.2 via deserialization of untrusted input from the pager parameter. This allows unauthenticated attackers to inject a PHP Object. Attackers were actively exploiting this...