Design/Logic Flaw

The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the restproxycallgeturl function, which allows remote attackers to cause a denial of service application crash via running the EnsureCredentials method from the org.gnome.OnlineAccounts.Account interfa...

CVE-2015-2675

The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the restproxycallgeturl function, which allows remote attackers to cause a denial of service application crash via running the EnsureCredentials method from the org.gnome.OnlineAccounts.Account interfa...

CVE-2015-2675: Improper Restriction of Operations within the Bounds of a Memory Buffer

The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the restproxycallgeturl function, which allows remote attackers to cause a denial of service application crash via running the EnsureCredentials method from the org.gnome.OnlineAccounts.Account interfa...

Flickr’ Account Takeover Vulnerability Patched, Researcher Gets $7k Bounty

By Jahanzaib Hassan A security researcher named “Michael Reizelman” privately disclosed a serious vulnerability in Flickr and earned a bounty of $7,000 in the process. A few days back, Michael spotted a critical flaw in the multimillion-image and video hosting website-Flickr through Yahoo’s...

Flickr Vulnerability Worth $7K Bounty to Researcher

Yahoo has patched an account takeover vulnerability on its Flickr image-hosting service that earned an independent security researcher a $7,000 bounty. The issue was patched April 10, eight days after Michael Reizelman privately disclosed it through Yahoo’s HackerOne bounty program. Reizelman sai...

Flickr - BSD license, Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Flickr published at the 'play' market has multiple vulnerabilities...

WordPress Simple Flickr Display Plugin - Stored Cross Site Scripting

This plugin is prone to an username field stored cross site scripting vulnerability Solution Upgrade the plugin...

WordPress Simple Flickr Display Plugin - Stored Cross Site Scripting

This plugin is prone to an username field stored cross site scripting vulnerability Solution Upgrade the plugin...

PT-2017-6605 · Gnome +2 · Librest +2

Name of the Vulnerable Software and Affected Versions: librest versions prior to 0.7.93 Description: The issue is related to the OAuth implementation in librest, which incorrectly truncates a pointer returned by the rest proxy call get url function. This can be exploited by remote attackers to...

WordPress Plugin Flickr Justified Gallery 'fjgwpp.php' Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.Flickr Justified Gallery is one of the JQuery photo gallery plugin. A cross-site scripting vulnerability exist...

WordPress Flickr Justified Gallery plugin 'fjgwpp.php' cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.Flickr Justified Gallery is one of the JQuery photo gallery plugin. A cross-site scripting vulnerability exist...

WordPress Flickr Justified Gallery 3.3.6 Cross Site Scripting Vulnerability

WordPress Flickr Justified Gallery plugin version 3.3.6 suffers from a cross site scripting vulnerability. Details ================ Software: Flickr Justified Gallery Version: 3.3.6 Homepage: https://wordpress.org/plugins/flickr-justified-gallery/ Advisory report:...

WordPress Flickr Justified Gallery Plugin <= 3.3.6 - Reflected Cross Site Scripting

Because of this vulnerability, unauthenticated attackers can do anything that admin can do. Solution Update the plugin...

WordPress Flickr Justified Gallery 3.3.6 Cross Site Scripting

Details ================ Software: Flickr Justified Gallery Version: 3.3.6 Homepage: https://wordpress.org/plugins/flickr-justified-gallery/ Advisory report:...

Flickr Justified Gallery <= 3.3.6 - Reflected Cross-Site Scripting (XSS)

The Flickr Justified Gallery WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

Flickr Mobile Application Detection (deprecated)

Binary data 6970.prm...

PODCAST: News from RSA 2015

Dennis Fisher, Mike Mimoso and Brian Donohue discuss the news of the week from the RSA Conference. Download: digitalunderground198.mp3 Music by Chris Gonsalves Flickr photo via @jf10...

Flickr Cross-Site Request Forgery Vulnerability Patched

Yahoo-owned Flickr, one of the biggest online photo management and sharing website in the world was recently impacted by a web application vulnerability, which could allow an attacker to modify users’ profile image. Flickr is one of the most popular photo sharing website with more than 87 million...

Simple Flickr Display - Username Field Stored Cross-Site Scripting (XSS)

The Simple Flickr Display WordPress plugin was affected by an Username Field Stored Cross-Site Scripting XSS security vulnerability...

Yahoo Fixes Trio of Bugs in Mail, Messenger, Flickr

Yahoo recently patched three remotely exploitable vulnerabilities in its services that could have let attackers inject malicious script and led to session hijacking, phishing, among other nefarious tricks. The vulnerabilities in Yahoo Mail, Messenger and its Flickr photo-sharing site qualified fo...