PT-2022-32882

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.17 through 5.10.126 Description A refcount leak was discovered in the exynos map pmu function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 3.17 through...

PT-2022-33085

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.17 through v4.19.249 Description A refcount leak was discovered in the exynos map pmu function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v3.17 and is fixe...

PT-2022-32560

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.18.5 Description A refcount leak was discovered in the map interrupts function of the irqchip/realtek-rtl driver. The issue was introduced in version v5.12 and is fixed in version v5.18.6. The actual impa...

PT-2022-33197

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.17 through 4.9.320 Description The issue is related to a refcount leak in the exynos map pmu function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 3.17...

PT-2022-32717

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.51 Description The issue is related to a refcount leak in the exynos map pmu function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-32508

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.8 Description The issue is related to a refcount leak in the exynos map pmu function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-32999

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.17 through 5.4.201 Description The issue is related to a refcount leak in the exynos map pmu function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 3.17...

PT-2022-33147

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.286 Description The issue is related to a refcount leak in the exynos map pmu function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

CVE-2021-33057

The QQ application 8.7.1 for Android and iOS does not enforce the permission requirements e.g., android.permission.ACCESSFINELOCATION for determining the device's physical location. An attacker can use qq.createMapContext to create a MapContext object, use MapContext.moveToLocation to move the...

Tencent QQ 安全漏洞

Tencent QQ is a multi-platform instant messaging software from China's Tencent. It supports text, voice and video chatting, as well as file sharing, network hard disk, mailboxes, games, forums, online shopping, renting and job hunting. A security vulnerability exists in Tencent QQ version 8.7.1,...

PT-2022-10197 · Tencent · Qq

Name of the Vulnerable Software and Affected Versions: QQ application version 8.7.1 Description: The issue concerns the QQ application's failure to enforce permission requirements for determining a device's physical location, such as android.permission.ACCESS FINE LOCATION. An attacker can exploi...

The vulnerability of the sourceMapURL function in the DevTools set of web development tools for the Firefox browser allows attackers to disclose sensitive information.

The vulnerability of the sourceMapURL function in the DevTools browser extension for web development is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

Malicious code in deere-map-features (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecf01480d483812d03ead6ec633c050d070eb0b88e31cedfdf174cf90012e914 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2400 Malicious code in deere-map-features (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecf01480d483812d03ead6ec633c050d070eb0b88e31cedfdf174cf90012e914 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

A memory leak vulnerability was found in the Linux kernel's eBPF for the Simulated networking device driver in the way user uses BPF for the device such that function nsim_map_alloc_elem being called. A local user could use this flaw to get unauthorized access to some data.

...

WP DS Blog Map <= 3.1.3 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup PoC Put the following payload in any of the settings...

WP DS Blog Map <= 3.1.3 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup Put the following payload in any of the settings...

WordPress WP DS Blog Map plugin <= 3.1.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Vinay Varma Mudunuri, Krishna Harsha Kondaveeti in WordPress WP DS Blog Map plugin versions = 3.1.3. Solution Deactivate and delete. This plugin has been closed as of July 15, 2022 and is not available for download. This...

PT-2025-8525

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version that includes the fix for the dma queue left shift overflow issue Description A left shift overflow issue has been identified in the Linux kernel when the queue number is greater than 4, due to a 32-b...

Malicious Package

Overview deere-map-features is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...