EUVD-2026-96774

The SmugMug Embed WordPress plugin through 3.13 does not have authorisation or CSRF checks on an AJAX action that stores gallery data, and does not sanitise or escape that data before outputting it, allowing unauthenticated users to store arbitrary web scripts that execute when an administrator...

CVE-2026-88826: Improper Neutralization of Input During Web Page Generation

The SmugMug Embed WordPress plugin through 3.13 does not have authorisation or CSRF checks on an AJAX action that stores gallery data, and does not sanitise or escape that data before outputting it, allowing unauthenticated users to store arbitrary web scripts that execute when an administrator...

PT-2026-110048

Name of the Vulnerable Software and Affected Versions SmugMug Embed versions prior to 3.14 Description An issue exists where an AJAX action used to store gallery data lacks authorization and Cross-Site Request Forgery CSRF checks. Additionally, the plugin fails to sanitize or escape this data...

EUVD-2022-52565

Malicious code in bioql PyPI...

EUVD-2025-31818

Malicious code in bioql PyPI...

Samsung Watch security vulnerabilities

SAMSUNG Watch is a smartwatch from Samsung South Korea. A security vulnerability exists in SAMSUNG Watch versions prior to SMR Mar-2025 Release 1, which stems from a default permission error that could allow a local attacker to access data in the Galaxy Watch Gallery...

Samsung Account Privilege Management Improper Vulnerability (CNVD-2022-64087)

Samsung Account is a cell phone account from Samsung South Korea. versions prior to Samsung Account 13.2.00.6 contain an improper privilege management vulnerability that could be exploited by attackers to gain unauthorized access to contact and gallery data...

Samsung Account permission mismanagement vulnerability

Samsung Account is a cell phone account from Samsung South Korea. versions prior to Samsung Account 13.2.00.6 contain an improper privilege management vulnerability that could be exploited by attackers to gain unauthorized access to contact and gallery data...

CVE-2022-30743

Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the data of contact and gallery without permission...

CVE-2022-30736

Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the data of contact and gallery without permission...

CVE-2022-30743

Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the data of contact and gallery without permission...

CVE-2022-30736

Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the data of contact and gallery without permission...

CVE-2022-30743

Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the data of contact and gallery without permission...

Privilege escalation

Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the data of contact and gallery without permission...

CVE-2022-30743

Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the data of contact and gallery without permission...

CVE-2022-30743

CVE-2022-30743 concerns Samsung Account prior to version 13.2.00.6, with an improper privilege management vulnerability that could allow attackers to access user contact and gallery data without permission. The issue is documented across multiple sources, including Red Hat and CNVD records, and t...

CVE-2022-30736

Samsung Account has an improper privilege management vulnerability (CVE-2022-30736) that affects versions prior to 13.2.00.6. The issue could allow an attacker to access contact and gallery data without permission. Root cause: inadequate enforcement of privileges within the Samsung Account compon...

PT-2022-20274

Name of the Vulnerable Software and Affected Versions Samsung Account versions prior to 13.2.00.6 Description The issue is related to improper privilege management, allowing attackers to access contact and gallery data without permission. Recommendations For versions prior to 13.2.00.6, update to...

Samsung Account security vulnerability

Samsung Account is a cell phone account from Samsung South Korea. versions prior to Samsung Account 13.2.00.6 contain an improper privilege management vulnerability that could be exploited by attackers to gain unauthorized access to contact and gallery data...

PT-2022-20282

Name of the Vulnerable Software and Affected Versions Samsung Account versions prior to 13.2.00.6 Description The issue is related to improper privilege management, allowing attackers to access contact and gallery data without permission. Recommendations For versions prior to 13.2.00.6, update to...