EUVD-2025-1835

Malicious code in bioql PyPI...

EUVD-2025-1836

Malicious code in bioql PyPI...

CVE-2025-0722

A vulnerability classified as critical was found in needyamin imagegallery 1.0. This vulnerability affects unknown code of the file /admin/gallery.php of the component Cover Image Handler. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. T...

CVE-2025-0721

A vulnerability classified as problematic has been found in needyamin imagegallery 1.0. This affects the function imagegallery of the file /view.php. The manipulation of the argument Username leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-0722

Affected product: needyamin image_gallery 1.0. The vulnerability exists in the Cover Image Handler component, specifically /admin/gallery.php, where manipulating the image argument enables unrestricted uploads. The issue is exploitable remotely, with public disclosures already available. Root cau...

CVE-2025-0722 needyamin image_gallery Cover Image gallery.php unrestricted upload

A vulnerability classified as critical was found in needyamin imagegallery 1.0. This vulnerability affects unknown code of the file /admin/gallery.php of the component Cover Image Handler. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. T...

CVE-2025-0721 needyamin image_gallery view.php cross site scripting

A vulnerability classified as problematic has been found in needyamin imagegallery 1.0. This affects the function imagegallery of the file /view.php. The manipulation of the argument Username leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-0721 needyamin image_gallery view.php cross site scripting

A vulnerability classified as problematic has been found in needyamin imagegallery 1.0. This affects the function imagegallery of the file /view.php. The manipulation of the argument Username leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-0721

The CVE-2025-0721 entry concerns needyamin image_gallery 1.0. The vulnerability affects the image_gallery function in /view.php, where the username parameter can be manipulated to trigger cross-site scripting. Descriptions indicate remote exploitability and public disclosure, with the vendor repo...

image_gallery 跨站脚本漏洞

imagegallery is an image gallery management system by the individual developer Md. Yamin Hossain of Bangladesh. A cross-site scripting vulnerability exists in imagegallery version 1.0, which stems from a cross-site scripting attack due to improper handling of the username parameter in the...