WordPress flickr-picture-backup Arbitrary File Upload Vulnerability

WordPress is the WordPress Software Foundation a set of blogging platform developed using the PHP language, the platform supports in PHP and MySQL servers set up a personal blog site.WordPress flickr-picture-backup is a picture backup plugin developed for WordPress. An arbitrary file upload...

CVE-2017-1002016

Vulnerability in wordpress plugin flickr-picture-backup v0.7, The code in flickr-picture-download.php doesn't check to see if the user is authenticated or that they have permission to upload files...

CVE-2017-1002016

Vulnerability in wordpress plugin flickr-picture-backup v0.7, The code in flickr-picture-download.php doesn't check to see if the user is authenticated or that they have permission to upload files...

CVE-2017-1002016

CVE-2017-1002016 affects the WordPress plugin flickr-picture-backup (v0.7). The vulnerability arises in flickr-picture-download.php, which does not verify user authentication or permissions before handling file uploads, enabling unauthenticated arbitrary file upload. Public sources (NVD, Red Hat,...

CVE-2017-1002016

Vulnerability in wordpress plugin flickr-picture-backup v0.7, The code in flickr-picture-download.php doesn't check to see if the user is authenticated or that they have permission to upload files...

WordPress Cool Flickr Slideshow 1.0 Cross Site Scripting

| | Exploit Title: Wordpress cool-flickr-slideshow Plugin Cross Site Scriptingxss | Exploit Author: Ashiyane Digital security Team | Vendor Homepage:https://wordpress.org/plugins/cool-flickr-slideshow/ | Software Link: https://downloads.wordpress.org/plugin/cool-flickr-slideshow.1.0.zip | Version...

DEBIAN-CVE-2015-2675

The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the restproxycallgeturl function, which allows remote attackers to cause a denial of service application crash via running the EnsureCredentials method from the org.gnome.OnlineAccounts.Account interfa...

Design/Logic Flaw

The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the restproxycallgeturl function, which allows remote attackers to cause a denial of service application crash via running the EnsureCredentials method from the org.gnome.OnlineAccounts.Account interfa...

CVE-2015-2675

The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the restproxycallgeturl function, which allows remote attackers to cause a denial of service application crash via running the EnsureCredentials method from the org.gnome.OnlineAccounts.Account interfa...

Flickr’ Account Takeover Vulnerability Patched, Researcher Gets $7k Bounty

By Jahanzaib Hassan A security researcher named “Michael Reizelman” privately disclosed a serious vulnerability in Flickr and earned a bounty of $7,000 in the process. A few days back, Michael spotted a critical flaw in the multimillion-image and video hosting website-Flickr through Yahoo’s...

Flickr Vulnerability Worth $7K Bounty to Researcher

Yahoo has patched an account takeover vulnerability on its Flickr image-hosting service that earned an independent security researcher a $7,000 bounty. The issue was patched April 10, eight days after Michael Reizelman privately disclosed it through Yahoo’s HackerOne bounty program. Reizelman sai...

Flickr - BSD license, Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Flickr published at the 'play' market has multiple vulnerabilities...

WordPress Simple Flickr Display Plugin - Stored Cross Site Scripting

This plugin is prone to an username field stored cross site scripting vulnerability Solution Upgrade the plugin...

WordPress Simple Flickr Display Plugin - Stored Cross Site Scripting

This plugin is prone to an username field stored cross site scripting vulnerability Solution Upgrade the plugin...

PT-2017-6605 · Gnome +2 · Librest +2

Name of the Vulnerable Software and Affected Versions: librest versions prior to 0.7.93 Description: The issue is related to the OAuth implementation in librest, which incorrectly truncates a pointer returned by the rest proxy call get url function. This can be exploited by remote attackers to...

WordPress Plugin Flickr Justified Gallery 'fjgwpp.php' Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.Flickr Justified Gallery is one of the JQuery photo gallery plugin. A cross-site scripting vulnerability exist...

WordPress Flickr Justified Gallery plugin 'fjgwpp.php' cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.Flickr Justified Gallery is one of the JQuery photo gallery plugin. A cross-site scripting vulnerability exist...

WordPress Flickr Justified Gallery 3.3.6 Cross Site Scripting Vulnerability

WordPress Flickr Justified Gallery plugin version 3.3.6 suffers from a cross site scripting vulnerability. Details ================ Software: Flickr Justified Gallery Version: 3.3.6 Homepage: https://wordpress.org/plugins/flickr-justified-gallery/ Advisory report:...

WordPress Flickr Justified Gallery Plugin <= 3.3.6 - Reflected Cross Site Scripting

Because of this vulnerability, unauthenticated attackers can do anything that admin can do. Solution Update the plugin...

Flickr Justified Gallery <= 3.3.6 - Reflected Cross-Site Scripting (XSS)

The Flickr Justified Gallery WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...