My Gallery - Gallery for Wear - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application My Gallery - Gallery for Wear published at the 'play' market has multiple vulnerabilities...

Wear Media - Music Gallery - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Wear Media - Music Gallery published at the 'play' market has multiple vulnerabilities...

Anytime Gallery for Wear - Dangerous filesystem permissions, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Anytime Gallery for Wear published at the 'play' market has multiple vulnerabilities...

WordPress HB Audio Gallery Lite Directory Traversal Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

WordPress HB Audio Gallery Lite Plugin 1.0.0 - 任意文件下载

No description provided by source...

dailycomet.com XSS vulnerability

Open Bug Bounty ID: OBB-143576 Description| Value ---|--- Affected Website:| dailycomet.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Uber: SQL injection in Wordpress Plugin Huge IT Video Gallery at https://drive.uber.com/frmarketplace/

The Wordpress blog located at https://drive.uber.com/frmarketplace/ had a plugin called Huge IT Video Gallery which suffered from an SQL injection vulnerability. While this site did not contain customer information, the vulnerability could be possibly used to deface the Wordpress blog or extract...

Joomla Easy Youtube Gallery 1.0.2 SQL Injection

Exploit Title : Joomla Easy Youtube Gallery 1.0.2 SQL Injection Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/easy-youtube-gallery Google Dork : inurl:comeasyyoutubegallery mycategory Date: 2016/03/22 Version: 1.0.2 PoC: mycategory=SQL...

WordPress Plugin HB Audio Gallery Lite 1.0.0 - Arbitrary File Download

WordPress Plugin HB Audio Gallery Lite 1.0.0 - Arbitrary File Download Exploit Title: Wordpress Plugin HB Audio Gallery Lite - Arbitrary File Download Exploit Author: CrashBandicot Date: 2016-03-22 Google Dork : inurl:/wp-content/plugins/hb-audio-gallery-lite Vendor Homepage:...

WordPress HB Audio Gallery Lite Plugin 1.0.0 - Arbitrary File Download

HB Audio Gallery Lite plugin is prone to an arbitrary file download vulnerability. It allows an attacker to download arbitrary files from the web server and get potentially sensitive information. Solution Upgrade the plugin...

Joomla Easy YouTube Gallery 1.0.2 - SQL Injection

Exploit for php platform in category web applications Exploit Title : Joomla Easy Youtube Gallery 1.0.2 SQL Injection Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/easy-youtube-gallery Google Dork : inurl:comeasyyoutubegallery mycategory...

Joomla! Component Easy Youtube Gallery 1.0.2 - SQL Injection

Joomla! Component Easy Youtube Gallery 1.0.2 - SQL Injection Exploit Title : Joomla Easy Youtube Gallery 1.0.2 SQL Injection Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/easy-youtube-gallery Google Dork : inurl:comeasyyoutubegallery...

WordPress Plugin HB Audio Gallery Lite 1.0.0 - Arbitrary File Download

Exploit Title: Wordpress Plugin HB Audio Gallery Lite - Arbitrary File Download Exploit Author: CrashBandicot Date: 2016-03-22 Google Dork : inurl:/wp-content/plugins/hb-audio-gallery-lite Vendor Homepage: https://fr.wordpress.org/plugins/hb-audio-gallery-lite/ Tested on: MSWin32 Version: 1.0.0...

Joomla! Component Easy Youtube Gallery 1.0.2 - SQL Injection

Exploit Title : Joomla Easy Youtube Gallery 1.0.2 SQL Injection Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/easy-youtube-gallery Google Dork : inurl:comeasyyoutubegallery mycategory Date: 2016/03/22 Version: 1.0.2 PoC: mycategory=SQL...

WordPress HB Audio Gallery Lite 1.0.0 Arbitrary File Download

Exploit Title: Wordpress Plugin HB Audio Gallery Lite - Arbitrary File Download Exploit Author: CrashBandicot Date: 2016-03-22 Google Dork : inurl:/wp-content/plugins/hb-audio-gallery-lite Vendor Homepage: https://fr.wordpress.org/plugins/hb-audio-gallery-lite/ Tested on: MSWin32 Version: 1.0.0...

WordPress DZS Video gallery Plugin 8.60 - Multiple Vulnerabilities

DZS Video gallery plugin is prone to unauthenticated CSRF and XSS vulnerabilities. Solution Upgrade the plugin...

Dream Gallery 1.0 SQL Injection

Dream Gallery 是国外一个相册程序，album.php 页面通过传入参数 id 的值来查看不同的专辑，由于没有对传入的 id 的值进行过滤，导致存在 SQL 注入，可获取数据名等。 分析 存在问题的文件位置： query "select from albuns order by albumname asc" -fetchAll; if $db-rows = 1 $albuns = $db-data; foreach $albuns as $album $a = object $album; $db-query "select from fotos where fotoalbu...

xavier.edu XSS vulnerability

Vulnerable URL: http://www.xavier.edu/occupational-therapy-department/alumnipicnic/gallery/viewer.swf?xmlDataPath=http://45.55.162.179/vuln.xml Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

WordPress 插件 WP Easy Gallery v4.1.4 存储xss

No description provided by source...

Gallery 2 2.0.2 - Multiple Vulnerabilities

Gallery 2 2.0.2 - Multiple Vulnerabilities Gallery 2 Multiple Vulnerabilities Vendor: Bharat Mediratta Product: Gallery 2 Version: = 2.0.2 Website: http://gallery.menalto.com/ BID: 16940 CVE: CVE-2006-1127 CVE-2006-1128 OSVDB: 23596 23597 SECUNIA: 19104 PACKETSTORM: 44358 Description: Gallery2, t...