EUVD-2007-4606

Malware in sbrugna...

EUVD-2022-29099

Malicious code in bioql PyPI...

CVE-2011-5151

Untrusted search path vulnerability in ACDSee Picture Frame Manager 1.0 Build 81 allows local users to gain privileges via a Trojan horse ShellIntMgrPFMU.dll file in the current working directory, as demonstrated by a directory that contains a .jpg file. NOTE: the provenance of this information i...

CVE-2022-24188

The /device/signin end-point for the Ourphoto App version 1.4.1 discloses clear-text password information for functionality within the picture frame devices. The deviceVideoCallPassword and mqttPassword are returned in clear-text. The lack of sessions management and presence of insecure direct...

CVE-2022-24188: Cleartext Storage of Sensitive Information

The /device/signin end-point for the Ourphoto App version 1.4.1 discloses clear-text password information for functionality within the picture frame devices. The deviceVideoCallPassword and mqttPassword are returned in clear-text. The lack of sessions management and presence of insecure direct...

CVE-2022-24188

The /device/signin end-point for the Ourphoto App version 1.4.1 discloses clear-text password information for functionality within the picture frame devices. The deviceVideoCallPassword and mqttPassword are returned in clear-text. The lack of sessions management and presence of insecure direct...

CVE-2011-5151

Untrusted search path vulnerability in ACDSee Picture Frame Manager 1.0 Build 81 allows local users to gain privileges via a Trojan horse ShellIntMgrPFMU.dll file in the current working directory, as demonstrated by a directory that contains a .jpg file. NOTE: the provenance of this information i...

CVE-2011-5151

Untrusted search path vulnerability in ACDSee Picture Frame Manager 1.0 Build 81 allows local users to gain privileges via a Trojan horse ShellIntMgrPFMU.dll file in the current working directory, as demonstrated by a directory that contains a .jpg file. NOTE: the provenance of this information i...

Design/Logic Flaw

Untrusted search path vulnerability in ACDSee Picture Frame Manager 1.0 Build 81 allows local users to gain privileges via a Trojan horse ShellIntMgrPFMU.dll file in the current working directory, as demonstrated by a directory that contains a .jpg file. NOTE: the provenance of this information i...

CVE-2011-5151

Untrusted search path vulnerability in ACDSee Picture Frame Manager 1.0 Build 81 allows local users to gain privileges via a Trojan horse ShellIntMgrPFMU.dll file in the current working directory, as demonstrated by a directory that contains a .jpg file. NOTE: the provenance of this information i...

CVE-2011-5151

CVE-2011-5151 affects ACDSee Picture Frame Manager 1.0 Build 81, where an untrusted search path allows local users to gain privileges via a Trojan horse ShellIntMgrPFMU.dll placed in the current working directory (demonstrated with a directory containing a .jpg file). The vulnerability arises fro...

CVE-2011-5151: Undefined Security Weakness

Untrusted search path vulnerability in ACDSee Picture Frame Manager 1.0 Build 81 allows local users to gain privileges via a Trojan horse ShellIntMgrPFMU.dll file in the current working directory, as demonstrated by a directory that contains a .jpg file. NOTE: the provenance of this information i...

CVE-2007-4624

Cross-site scripting XSS vulnerability in pframe.php in AbleDesign Dynamic Picture Frame 1.00 allows remote attackers to inject arbitrary web script or HTML via the imgurl parameter. NOTE: some of these details are obtained from third party information...

CVE-2007-4624

Cross-site scripting XSS vulnerability in pframe.php in AbleDesign Dynamic Picture Frame 1.00 allows remote attackers to inject arbitrary web script or HTML via the imgurl parameter. NOTE: some of these details are obtained from third party information...

CVE-2007-4624

The CVE-2007-4624 entry describes a cross-site scripting (XSS) vulnerability in AbleDesign Dynamic Picture Frame 1.00, specifically in pframe.php where the img_url parameter can be exploited to inject arbitrary web script or HTML. The vulnerability stems from inadequate input validation of the im...

CVE-2007-4624: Undefined Security Weakness

Cross-site scripting XSS vulnerability in pframe.php in AbleDesign Dynamic Picture Frame 1.00 allows remote attackers to inject arbitrary web script or HTML via the imgurl parameter. NOTE: some of these details are obtained from third party information...