PYSEC-2026-2738 Open WebUI Vulnerable to Cross-Site Request Forgery (CSRF) via Image URL Manipulation

Summary An application-wide Cross-Site Request Forgery CSRF vulnerability was found Open-WebUl's image uploading functionality. An attacker can set an image URL to a malicious endpoint, allowing them to perform actions on behalf of a victim user. Any authenticated user can exploit this...

CVE-2023-52275

Gallery3d on Tecno Camon X CA7 devices allows attackers to view hidden images by navigating to data/com.android.gallery3d/.privatealbum/.encryptfiles and guessing the correct image file extension...

CVE-2023-52275

CVE-2023-52275 concerns Gallery3d on Tecno Camon X CA7 devices. The vulnerability enables attackers to view hidden images by navigating to the directory data/com.android.gallery3d/.privatealbum/.encryptfiles and guessing the correct image file extension. Public descriptions consistently identify ...

PT-2023-31953 · Gallery3D · Gallery 3

Name of the Vulnerable Software and Affected Versions: Gallery3d on Tecno Camon X CA7 devices affected versions not specified Description: The issue allows attackers to view hidden images by navigating to the data/com.android.gallery3d/.privatealbum/.encryptfiles directory and guessing the correc...

WordPress plugin NS WooCommerce Watermark安全漏洞

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress NS WooCommerce Watermark plugin has a...

CVE-2011-2639

Opera before 11.10 does not properly handle hidden animated GIF images, which allows remote attackers to cause a denial of service CPU consumption via an image file that triggers continual repaints...