Malware in @ozon-maps/map-sdk

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2023-1027 Malicious code in @ozon-maps/map-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbfd1be2f4f9a09e5f0ba2fbef81062825b5959a48a8e035d3bc1a1aeb527421 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-36710

Уязвимость функции cpu map ring cleanup модуля kernel/bpf/cpumap.c поддержки интерпретатора BPF ядра операционной системы Linux связана с некорректной проверкой кода возврата функции. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

WordPress Google Map Shortcode Plugin <= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Google Map Shortcode Type Plugin Vulnerable versions = 3.1.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-38396 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID ad78bcfdec4a Credits thiennv Required...

WordPress Map Plugin alternative to Google Maps using MapQuest, with directions Plugin <= 2.16.1 is vulnerable to Cross Site Scripting (XSS)

Software Map Plugin alternative to Google Maps using MapQuest, with directions Type Plugin Vulnerable versions = 2.16.1 Fixed in 2.16.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID...

WordPress Open User Map | Everybody can add locations Plugin < 1.3.17 is vulnerable to Cross Site Scripting (XSS)

Software Open User Map | Everybody can add locations Type Plugin Vulnerable versions 1.3.17 Fixed in 1.3.17 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9c1e6c504f0a Credits Rafi...

PT-2023-26167

Name of the Vulnerable Software and Affected Versions Grav versions 1.7.42 through 1.7.42.1 Description Grav is a file-based Web-platform built in PHP. It is subject to a server side template injection SSTI vulnerability. The fix for another SSTI vulnerability using |map, |filter and |reduce twig...

WordPress Internal Link Flow & Topical Authority & Topical Map Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Internal Link Flow & Topical Authority & Topical Map Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 294360c372a8 Credi...

AZL-27671 CVE-2023-38409 affecting package hyperv-daemons for versions less than 5.15.122.1-1

An issue was discovered in setcon2fbmap in drivers/video/fbdev/core/fbcon.c in the Linux kernel before 6.2.12. Because an assignment occurs only for the first vc, the fbconregisteredfb and fbcondisplay arrays can be desynchronized in fbconmodedeleted the con2fbmap points at the old fbinfo...

PT-2025-41077

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the map user pages function within the qaic component of the Linux kernel. The issue occurs when get user pages fast allocates pages but does not allocate the...

WordPress Plugin WordPress Robots.txt optimization (+ XML Sitemap) – Website traffic, SEO & ranking Booster 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin WordPress Robots.txt...

CVE-2023-37241

Input verification vulnerability in the WMS API. Successful exploitation of this vulnerability may cause the device to restart...

WordPress Mobile Call Now & Map Buttons Plugin <= 1.5.0 is vulnerable to Cross Site Scripting (XSS)

Software Mobile Call Now & Map Buttons Type Plugin Vulnerable versions = 1.5.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Scripting XSS CVE CVE-2023-24401 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a547a52ae1b5 Credits Abdi Pranata...

Joplin Cross-site Scripting vulnerability

Joplin before 2.11.5 allows XSS via an AREA element of an image map...

GHSA-4JJV-P8X9-RRF7 Joplin Cross-site Scripting vulnerability

Joplin before 2.11.5 allows XSS via an AREA element of an image map...

CVE-2023-37299

Joplin before 2.11.5 allows XSS via an AREA element of an image map...

Design/Logic Flaw

Joplin before 2.11.5 allows XSS via an AREA element of an image map...

CVE-2023-37299: Improper Neutralization of Input During Web Page Generation

Joplin before 2.11.5 allows XSS via an AREA element of an image map...

CVE-2023-37299

Joplin before 2.11.5 allows XSS via an AREA element of an image map...

CVE-2023-37299

Joplin before 2.11.5 allows XSS via an AREA element of an image map...