DVD Photo Slideshow Professional 8.07 - Buffer Overflow (SEH)

Exploit Title: DVD Photo Slideshow Professional 8.07 - Buffer Overflow SEH Date: 2018-09-06 Exploit Author:T3jv1l Vendor Homepage:http://www.dvd-photo-slideshow.com/ Software:www.dvd-photo-slideshow.com/dpsinstall.exe Category:Local Contact:https://twitter.com/T3jv1l Version: DVD Photo Slideshow...

DVD Photo Slideshow Professional 8.07 - Buffer Overflow (SEH)

DVD Photo Slideshow Professional 8.07 - Buffer Overflow SEH Exploit Title: DVD Photo Slideshow Professional 8.07 - Buffer Overflow SEH Date: 2018-09-06 Exploit Author:T3jv1l Vendor Homepage:http://www.dvd-photo-slideshow.com/ Software:www.dvd-photo-slideshow.com/dpsinstall.exe Category:Local...

QCMS Cross-Site Scripting Vulnerability (CNVD-2019-10275)

QCMS is an open source content management system CMS for creating responsive websites. A cross-site scripting vulnerability exists in upload/System/Controller/backend/slideshow.php in QCMS 3.0.1, which can be exploited by remote attackers to inject arbitrary web script or HTML...

CVE-2018-14970

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/slideshow.php has XSS...

CVE-2018-14970

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/slideshow.php has XSS...

Wedding Slideshow Studio 1.36 - Buffer Overflow Exploit

Exploit for windows platform in category local exploits Exploit Title: Socumsoft Wedding Slideshow Studio 1.36 Date: 02.08.2018 Exploit Author: Achilles Vendor Homepage: http://www.socusoft.com Vulnerable Software: http://www.socusoft.com/down/wedding-slideshow-studio.exe Tested on OS: Windows 7...

Wedding Slideshow Studio 1.36 - Buffer Overflow

Wedding Slideshow Studio 1.36 - Buffer Overflow Exploit Title: Socumsoft Wedding Slideshow Studio 1.36 Date: 02.08.2018 Exploit Author: Achilles Vendor Homepage: http://www.socusoft.com Vulnerable Software: http://www.socusoft.com/down/wedding-slideshow-studio.exe Tested on OS: Windows 7 64-bit D...

openSUSE Security Update : cinnamon (openSUSE-2018-767)

This update for cinnamon fixes the following issues : Security issue fixed : - CVE-2018-13054: Fix symlink attack vulnerability boo1083067. Bug fixes : - Update to version 3.4.6 changes since 3.4.4 : - osdWindow.js: Always check the theme node on first showing - an actor's width isn't necessarily...

Wordpress plugin image-gallery-with-slideshow SQL injection vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. Wordpress plugin image-gallery-with-slideshow SQL injection vulnerability, the vulnerability stems from the program failing t...

Anblik WordPress image-gallery-with-slideshow SQL Injection Vulnerability

Anblik WordPress image-gallery-with-slideshow is a slideshow plugin for WordPress developed by Anblik Web Design India. A SQL injection vulnerability exists in the image-gallery-with-slideshow/adminsetting.php file in Anblik WordPress image-gallery-with-slideshow version 1.5.2. A remote attacker...

CVE-2017-1002011

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, There is a stored XSS vulnerability via the $value-galleryname and $value-gallerydescription where anyone with privileges to modify or add galleries/images and inject javascript into the database...

CVE-2017-1002013

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection via imgid parameter in image-gallery-with-slideshow/adminsetting.php...

CVE-2017-1002014

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in image-gallery-with-slideshow/adminsetting.php via galleryname parameter...

CVE-2017-1002012

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, In image-gallery-with-slideshow/adminsetting.php the following snippet of code does not sanitize input via the gid variable before passing it into an SQL statement...

CVE-2017-1002014

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in image-gallery-with-slideshow/adminsetting.php via galleryname parameter...

CVE-2017-1002012

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, In image-gallery-with-slideshow/adminsetting.php the following snippet of code does not sanitize input via the gid variable before passing it into an SQL statement...

CVE-2017-1002014

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in image-gallery-with-slideshow/adminsetting.php via galleryname parameter...

CVE-2017-1002015

The CVE-2017-1002015 entry covers a vulnerability in the WordPress plugin Image Gallery with Slideshow, version 1.5.2, where a Blind SQL Injection exists in image-gallery-with-slideshow/admin_setting.php through the selectMulGallery parameter. This is evidenced by multiple connected records (NVD,...

CVE-2017-1002012

CVE-2017-1002012 : Vulnerability in the WordPress plugin image-gallery-with-slideshow (version 1.5.2) where admin_setting.php does not sanitize the gid input before including it in an SQL statement, enabling SQL injection. Multiple sources (NVD and Red Hat CVE pages, CNVD) describe this vulnerabi...

CVE-2017-1002011

CVE-2017-1002011 affects the WordPress plugin image-gallery-with-slideshow up to version 1.5.2 . The vulnerability is a stored XSS where an attacker with privileges to modify or add galleries/images can inject JavaScript into the database via the fields $value->gallery_name and $value->gall...