WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.4.18 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Ngo Van Thien in WordPress Image Photo Gallery Final Tiles Grid plugin versions = 3.4.18. Solution Update the WordPress Image Photo Gallery Final Tiles Grid plugin to the latest available version at least 3.4.19...

Photo Gallery by 10Web < 1.5.55 - Unauthenticated SQL Injection

SQL injection in the Photo Gallery 10Web Photo Gallery plugin before 1.5.55 exists via the frontend/models/model.php bwgsearchx parameter. Impact All gallerytype is affected by this bug and any unauthenticated remote attacker can exploit the plugin. PoC Sqlmap payload: sqlmap -u...

WordPress Photo Gallery by 10Web plugin <= 1.5.54 - Unauthenticated SQL Injection (SQLi) vulnerability

Unauthenticated SQL Injection SQLi vulnerability found by Nguyen Anh Tien in WordPress Photo Gallery by 10Web plugin versions = 1.5.54. Solution Update the WordPress Photo Gallery by 10Web plugin to the latest available version at least 1.5.55...

CVE-2020-12471

MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or Pages/SocialNetworking/lng/en-US/PhotoGallery.aspx because of deserialization in ModuleGallery.HTML5Upload, ModuleGallery.SilverLightUploadModule, HTML5Upload, and SilverLightUploadHandler...

Gmedia Photo Gallery < 1.18.5 - Multiple Cross-Site Scripting (XSS)

Multiple XSS vulnerabilities were discovered in the Gmedia Gallery plugin version 1.18.0 WordPress plugin. These vulnerabilities were caused by improper validation of user input in the album, gallery, category and media upload module. The vulnerability types include both stored and reflected XSS...

WordPress Gmedia Photo Gallery plugin <= 1.18.4 - Multiple Cross-Site Scripting (XSS) vulnerabilities

Multiple Cross-Site Scripting XSS vulnerabilities were discovered by Vishnupriya Ilango in the WordPress Gmedia Photo Gallery plugin versions = 1.18.4. Solution Update the WordPress Gmedia Photo Gallery plugin to the latest available version at least 1.18.5...

WordPress 10Web Photo Gallery Plugin Cross Site Scripting (CVE-2020-9335)

A cross site scripting vulnerability exists in WordPress 10Web Photo Gallery plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

Exploit for Double Free in Whatsapp

WhatsPayloadRCE This is a Automated Generate Payload for CVE-...

PT-2020-12927 · WordPress · Media Library Assistant

Name of the Vulnerable Software and Affected Versions: media-library-assistant plugin versions prior to 2.82 for WordPress Description: The issue allows for Remote Code Execution via the tax query, meta query, or date query parameter in mla gallery through an admin interface. Recommendations: For...

CVE-2020-11732

The Media Library Assistant plugin before 2.82 for Wordpress suffers from a Local File Inclusion vulnerability in mlagallery link=download...

Samsung Mobile Device Access Control Error Vulnerability

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. The Samsung Mobile Device Access Control Error vulnerability can be exploited by an attacker to access Gallery albums in Secure Folder without authentication...

CVE-2018-21041

An issue was discovered on Samsung mobile devices with O8.x software. Access to Gallery in the Secure Folder can occur without authentication. The Samsung ID is SVE-2018-13057 December 2018...

CVE-2018-21041

An issue was discovered on Samsung mobile devices with O8.x software. Access to Gallery in the Secure Folder can occur without authentication. The Samsung ID is SVE-2018-13057 December 2018...

Authentication flaw

An issue was discovered on Samsung mobile devices with O8.x software. Access to Gallery in the Secure Folder can occur without authentication. The Samsung ID is SVE-2018-13057 December 2018...

CVE-2018-21041

An issue was discovered on Samsung mobile devices with O8.x software. Access to Gallery in the Secure Folder can occur without authentication. The Samsung ID is SVE-2018-13057 December 2018...

CVE-2018-21041

CVE-2018-21041 affects Samsung mobile devices running O(8.x). The issue allows access to the Gallery inside the Secure Folder without authentication. The vulnerability is rooted in the Secure Folder access flow (exact root cause not detailed in the provided documents). Impact is elevated: unautho...

CVE-2016-11045

An issue was discovered on Samsung mobile devices with L5.0/5.1 software. The Gallery library allow memory corruption via a malformed image. The Samsung ID is SVE-2016-5317 May 2016...

CVE-2016-11045

An issue was discovered on Samsung mobile devices with L5.0/5.1 software. The Gallery library allow memory corruption via a malformed image. The Samsung ID is SVE-2016-5317 May 2016...

CVE-2016-11045

The CVE-2016-11045 entry relates to Samsung mobile devices running Lollipop (5.0/5.1) where the Gallery library is vulnerable to memory corruption triggered by a malformed image. Documented impact indicates potential data/process integrity concerns within the Gallery component. The issue is assoc...

CVE-2016-11045

An issue was discovered on Samsung mobile devices with L5.0/5.1 software. The Gallery library allow memory corruption via a malformed image. The Samsung ID is SVE-2016-5317 May 2016...