CVE-2020-14940: Improper Restriction of XML External Entity Reference

An issue was discovered in io/gpx/GPXDocumentReader.java in TuxGuitar 1.5.4. It uses misconfigured XML parsers, leading to XXE while loading GP6 .gpx and GP7 .gp tablature files...

ExpertGPS 6.38 - XML External Entity Injection

ExpertGPS 6.38 - XML External Entity Injection + Exploit Title: ExpertGPS 6.38 - XML External Entity Injection + Date: 2019-12-07 + Exploit Author: Trent Gordon + Vendor Homepage: https://www.topografix.com/ + Software Link: http://download.expertgps.com/SetupExpertGPS.exe + Disclosed at: 7FEB202...

CVE-2012-6649

WordPress WP GPX Maps Plugin 1.1.21 allows remote attackers to execute arbitrary PHP code via improper file upload...

Unrestricted file upload

WordPress WP GPX Maps Plugin 1.1.21 allows remote attackers to execute arbitrary PHP code via improper file upload...

CVE-2012-6649

The CVE-2012-6649 affects WordPress WP GPX Maps Plugin 1.1.21 and is caused by an improper/unrestricted file upload, enabling remote attackers to execute arbitrary PHP code on the server. Impact: remote code execution with web‑server context; vulnerability is tied to the wp-gpx-maps plugin. Remed...

CVE-2012-6649

WordPress WP GPX Maps Plugin 1.1.21 allows remote attackers to execute arbitrary PHP code via improper file upload...

CVE-2012-6649: Unrestricted Upload of File with Dangerous Type

WordPress WP GPX Maps Plugin 1.1.21 allows remote attackers to execute arbitrary PHP code via improper file upload...

Malicious Package

Overview Version 1.0.1 of leaflet-gpx contained malicious code. The code when executed in the browser would enumerate password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment and...

GPX Viewer - Customized SSL, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application GPX Viewer published at the 'play' market has multiple vulnerabilities...

wp-gpx-max version 1.1.21 - Arbitrary File Upload

The wp-gpx-map WordPress plugin was affected by an Arbitrary File Upload security vulnerability...

Wordpress wp-gpx-map 1.1.21 - Arbitrary File Upload Vulnerability

No description provided by source. Exploit Title: Wordpress wp-gpx-map version 1.1.21 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/wp-gpx-maps/ Date: 11/05/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://www.darwinner.it/ Software Link:...

Guitar Pro 6.1.1 r10791 (.gpx) Crash PoC

No description provided by source. !/usr/bin/python --------------------------------------------------------- Guitar Pro 6.1.1 r10791 .gpx Crash POC found by condis Date : 01 May 2012 AD Tested on : Windows XP Professional SP3 PL Description : Each load of malformated file into the program ends u...

CVE-2012-6048

Guitar Pro 6.1.1 r10791 allows remote attackers to cause a denial of service crash via a long string in a gpx file...

Design/Logic Flaw

Guitar Pro 6.1.1 r10791 allows remote attackers to cause a denial of service crash via a long string in a gpx file...

WordPress Wp-Gpx-Map 1.1.21 Shell Upload

Exploit Title: Wordpress wp-gpx-map version 1.1.21 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/wp-gpx-maps/ Date: 11/05/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://www.darwinner.it/ Software Link: http://downloads.wordpress.org/plugin/wp-gpx-maps.1.1.21.zip Version...

WordPress Plugin wp-gpx-map 1.1.21 - Arbitrary File Upload

WordPress Plugin wp-gpx-map 1.1.21 - Arbitrary File Upload Exploit Title: Wordpress wp-gpx-map version 1.1.21 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/wp-gpx-maps/ Date: 11/05/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://www.darwinner.it/ Software Link:...

WordPress WP GPX Map Plugin 1.1.21 - Arbitrary File Upload

WP GPX Map plugin is prone to an arbitrary file upload vulnerability. Restricted access to this script is not properly realized. In that way an attacker can to upload files containing malicious PHP code and run it in the context of the web server process. Other attacks are also possible. Solution...

WordPress Plugin wp-gpx-map 1.1.21 - Arbitrary File Upload

Exploit Title: Wordpress wp-gpx-map version 1.1.21 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/wp-gpx-maps/ Date: 11/05/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://www.darwinner.it/ Software Link: http://downloads.wordpress.org/plugin/wp-gpx-maps.1.1.21.zip Version...

Wordpress wp-gpx-map version 1.1.21 Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress wp-gpx-map version 1.1.21 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/wp-gpx-maps/ Date: 11/05/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://www.darwinner.it/ Software Link:...

Guitar Pro 6.1.1 r10791 - .gpx Crash (PoC)

Guitar Pro 6.1.1 r10791 - .gpx Crash PoC !/usr/bin/python --------------------------------------------------------- Guitar Pro 6.1.1 r10791 .gpx Crash POC found by condis Date : 01 May 2012 AD Tested on : Windows XP Professional SP3 PL Description : Each load of malformated file into the program...