CVE-2019-14314

CVE-2019-14314 CVE-2019-14314 - NextGEN Gallery 3.2.10 인증된 SQL 인젝션 사용법 usage: cve201914314.py -h url loginuser loginpass username CVE-2019-14314 Hash Extractor positional arguments: url Wordpress blog URL loginuser Username to login with loginpass Password to login with username Username to extra...

NextGEN Gallery <= 3.59 - Missing Authorization to Unauthenticated Information Disclosure

The WordPress Gallery Plugin – NextGEN Gallery plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getitem function in versions up to, and including, 3.59. This makes it possible for unauthenticated attackers to extract sensitive data includi...

NextGEN Gallery <= 4.2.3 - Reflected Cross-Site Scripting

NextGEN Gallery through 4.2.3 reflects a URL-decoded nggtag route value into the generated tag page without the context-specific escaping added in 4.2.4. An unauthenticated attacker can break out of the tag context and inject an auto-executing script. This template injects an svg onload payload...

NextGen Healthcare Mirth Connect - Remote Code Execution

Unauthenticated remote code execution vulnerability in NextGen Healthcare Mirth Connect before version 4.4.1. id: CVE-2023-43208 info: name: NextGen Healthcare Mirth Connect - Remote Code Execution author: princechaddha severity: critical description: Unauthenticated remote code execution...

CVE-2023-43208-MIRTHCONNECT

CVE-2023-43208 NextGen Healthcare Mirth Connect バージョン4.4.1未満は、認証されていないリモートコード実行に対して脆弱です。この脆弱性は、CVE-2023-37679の不完全なパッチによって引き起こされることに注意してください。 最初に: 私はあなたがそれをどう使うかについて一切責任を負いません。 次に: apt-get install parallel curl -y chmod +x CVE-2023-43208.sh CVE-2023-43208.sh:...

mirth-connect-security-poc

NextGen Connect 4.5.2 脆弱性 PoC NextGen Connect Mirth Connect 4.5.2 に存在するネットワーク到達可能な3つの脆弱性に対する、動作する概念実証エクスプロイトです。ハーネスは公式コンテナイメージを実行し、発見事項に必要なチャネル設定のみを作成し、別のコンテナから攻撃を実行し、主張されたセキュリティ効果が観測されない限り失敗します。 このレビューでは、公開されている Refute-or-Promote 手法 とその オープンソースのオーケストレーションプレイブック...

CVE-2026-94123

Unauthenticated Arbitrary File Download in NextGEN Gallery = 4.5.0 versions...

EUVD-2026-89840

Unauthenticated Arbitrary File Download in NextGEN Gallery = 4.5.0 versions...

CVE-2026-94123

The NextGEN Gallery plugin for WordPress (versions

CVE-2026-94123 WordPress NextGEN Gallery plugin <= 4.5.0 - Arbitrary File Download vulnerability

Unauthenticated Arbitrary File Download in NextGEN Gallery = 4.5.0 versions...

CVE-2026-94123 WordPress NextGEN Gallery plugin <= 4.5.0 - Arbitrary File Download vulnerability

Unauthenticated Arbitrary File Download in NextGEN Gallery = 4.5.0 versions...

PT-2026-103172

Unauthenticated Arbitrary File Download in NextGEN Gallery = 4.5.0 versions...

CVE-2026-94123: Improper Limitation of a Pathname to a Restricted Directory

Unauthenticated Arbitrary File Download in NextGEN Gallery = 4.5.0 versions...

WordPress NextGEN Gallery plugin <= 4.5.0 - Arbitrary File Download vulnerability

Arbitrary File Download vulnerability discovered by Intrudify in WordPress Plugin NextGEN Gallery versions = 4.5.0...

WordPress Photo Gallery, Sliders, Proofing and Themes plugin < 4.5.0 - Authenticated Arbitrary File Upload vulnerability

Authenticated Arbitrary File Upload vulnerability discovered by Alihan Şahin in WordPress Plugin NextGEN Gallery versions 4.5.0...

CVE-2026-81653

The NextGEN Gallery (Photo Gallery, Sliders, Proofing and Themes) WordPress plugin versions before 4.5.0 is vulnerable to an Insecure Direct Object Reference (IDOR) . The root cause is a failure to verify that a user owns the gallery associated with a specific image. Consequently, users granted g...

CVE-2026-81654

The NextGEN Gallery WordPress plugin (versions before 4.5.0 ) is vulnerable to an authorization bypass because it fails to verify if a user possesses the options capability before saving image sizing settings. This allows users with only gallery-management privileges to modify settings that affec...

CVE-2026-81653 NextGEN Gallery < 4.5.0 - Authenticated Arbitrary Gallery Image Deletion via IDOR

The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the user acting on an image owns the gallery it belongs to, allowing users granted its gallery-management capability by an administrator to delete, copy and re-tag any image on the site, including images i...

CVE-2026-81653 NextGEN Gallery < 4.5.0 - Authenticated Arbitrary Gallery Image Deletion via IDOR

The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the user acting on an image owns the gallery it belongs to, allowing users granted its gallery-management capability by an administrator to delete, copy and re-tag any image on the site, including images i...

WordPress Photo Gallery, Sliders, Proofing and Themes plugin < 4.5.0 - Authenticated Arbitrary Gallery Image Deletion vulnerability

Authenticated Arbitrary Gallery Image Deletion vulnerability discovered by Erwan LR WPScan in WordPress Plugin NextGEN Gallery versions 4.5.0...