1245 matches found
CVE-2025-69460
CVE-2025-69460 – Simple Image Gallery 1.0 Remote Code Execution RCE Unauthenticated WriteUp CVE-2025-69460 – ExploitDB 50214...
ThingsBoard-IoT-Platform-CVE-2024-55466
ThingsBoard Privilege Escalation durch Stored XSS Während ich mit IoT-Technologie herumexperimentierte, fand ich eine Schwachstelle in der Thingsboard-Anwendung, die Möglichkeiten zur Privilegienausweitung bot. Thingsboard ist eine Open-Source-Anwendung, die Geräteverwaltung, Datenerfassung,...
CVE-2026-16645
Drupal PhotoSwipe (contrib module) contains a missing authorization flaw in its image gallery display formatter that allows forceful browsing of images. The module failed to sufficiently check access permissions when viewing images via the lightbox gallery formatter. Affected versions are < 3....
CVE-2026-67204
BookStack before 26.05.4 contains a broken access control vulnerability that allows authenticated API users with image-update or image-delete permissions to manipulate other users' avatars by exploiting missing content-type restrictions in the Image Gallery API endpoints. Attackers can supply a...
CVE-2026-67204
BookStack before 26.05.4 contains a broken access control vulnerability in the Image Gallery API endpoints . The API controller loads any image type without the content-type restrictions enforced by the web controller's gallery and drawio checks. An authenticated user with image-update or image-d...
EUVD-2026-64919
BookStack before 26.05.4 contains a broken access control vulnerability that allows authenticated API users with image-update or image-delete permissions to manipulate other users' avatars by exploiting missing content-type restrictions in the Image Gallery API endpoints. Attackers can supply a...
CVE-2026-67204 BookStack < 26.05.4 Broken Access Control via Image Gallery API
BookStack before 26.05.4 contains a broken access control vulnerability that allows authenticated API users with image-update or image-delete permissions to manipulate other users' avatars by exploiting missing content-type restrictions in the Image Gallery API endpoints. Attackers can supply a...
PT-2026-80904
BookStack before 26.05.4 contains a broken access control vulnerability that allows authenticated API users with image-update or image-delete permissions to manipulate other users' avatars by exploiting missing content-type restrictions in the Image Gallery API endpoints. Attackers can supply a...
CVE-2024-55981
CVE-2024-55981 Nabz Image Gallery = v1.00 - Nicht authentifizierte SQL-Injection Beschreibung Das Nabz Image Gallery-Plugin für WordPress ist in Versionen bis einschließlich v1.00 anfällig für SQL-Injection, da der vom Benutzer bereitgestellte Parameter unzureichend escaped wird und es an einer...
CVE-2026-65475 WordPress Modula Image Gallery plugin 2.14.25-2.14.30 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Modula Image Gallery allows Stored XSS. This issue affects Modula Image Gallery: from 2.14.25 through 2.14.30...
CVE-2026-65475
The CVE concerns the WP Chill Modula Image Gallery WordPress plugin, specifically versions 2.14.25–2.14.30, affected by an Improper Neutralization of Input During Web Page Generation (Stored XSS). The root cause is the improper handling of user input during page generation in Modula Image Gallery...
EUVD-2026-48250
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Modula Image Gallery allows Stored XSS. This issue affects Modula Image Gallery: from 2.14.25 through 2.14.30...
DRUPAL-CONTRIB-2026-088
The Photoswipe Drupal module provides integration for the widely used PhotoSwipe lightbox library to display / zoom images in lightbox galleries using the provided image formatters. The module didn't sufficiently check access permissions, when viewing an image using the photoswipe image gallery...
PhotoSwipe - Responsive JavaScript Modal Image Gallery - Moderately critical - Access bypass - SA-CONTRIB-2026-088
The Photoswipe Drupal module provides integration for the widely used PhotoSwipe lightbox library to display / zoom images in lightbox galleries using the provided image formatters. The module didn't sufficiently check access permissions, when viewing an image using the photoswipe image gallery...
EUVD-2026-36940
Author PHP Object Injection in Modula Image Gallery = 2.14.18 versions...
CVE-2026-42688
Subscriber Cross Site Scripting XSS in Modula Image Gallery = 2.14.23 versions...
CVE-2026-39481
Author PHP Object Injection in Modula Image Gallery = 2.14.18 versions...
CVE-2026-42688 WordPress Modula Image Gallery plugin <= 2.14.23 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in Modula Image Gallery = 2.14.23 versions...