817 matches found
CVE-2019-9912
CVE-2019-9912 affects the WordPress WP Go Maps plugin prior to version 7.10.43. The vulnerability is a Cross-Site Scripting (XSS) via the wp-admin/admin.php PATH_INFO, allowing an attacker to execute arbitrary script in the admin context. Impact can include potential session hijacking or privileg...
WordPress WP Google Maps plugin <= 7.10.41 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability found by Tim Coen in WordPress WP Google Maps plugin versions = 7.10.41. Solution Update the WordPress WP Google Maps plugin to the latest available version at least 7.10.43...
Joomla Geommunity3es 1.4 SQL Injection
Exploit Title : Joomla Geommunity3es Components 1.4 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/02/2019 Vendor Homepage : nordmograph.com Software Download Link : nordmograph.com/extensions /index.php?option=comvirtuemart&view=productdetails...
Joomla PhocaMaps 3.0.5 Database Disclosure / SQL Injection
Exploit Title : Joomla PhocaMaps 3.0.5 SQL Injection / Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : phoca.cz/phocamaps Software Download Link : phoca.cz/download/category/38-phoca-maps-plugin Software Informati...
Joomla WebMapPlus 1.0 SQL Injection
Exploit Title : Joomla WebMapPlus Components 1.0 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 04/02/2019 Vendor Homepage : artio.net Software Download Link : github.com/bkulyk/webmapplus.git Software Information Link : github.com/bkulyk/webmappl...
WP Google Maps <= 7.10.41 - Cross-Site Scripting (XSS)
The WP Google Maps WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
Fraudsters changing contact details of banks on Google Maps to scam users
By Waqas Don’t trust Google Maps for banks’ contact details - At least not for now. Scammers are now increasingly interested in defrauding users through Google Maps that lets users change or correct the listings displayed on the service. Seeing this as an effectively exploitable opportunity,...
Google Maps: Hubby divorces wife after finding her on Street View with another man
By Carolina Google Maps is full of surprises, primarily thanks to some of its funniest, creepiest, and strangest street view images. In 2013, a father found his son's dead body image and crime scene on Google Maps but who could have imagined this seemingly harmless technology would force a marrie...
WordPress Snazzy Maps 1.1.3 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications Advisory Title: WordPress Snazzy Maps Plugin Multiple XSS Vulnerabilities Advisory URL: http://www.defensecode.com/advisories.php Software: WordPress Snazzy Maps plugin Language: PHP Version: 1.1.3 and below Vendor Status: Vendor contacted, no...
WordPress Google Maps Plugin SQL Injection
An SQL injection vulnerability exists in the WordPress Google Maps Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Cross site request forgery (csrf)
The API service on Google Home and Chromecast devices before mid-July 2018 does not prevent DNS rebinding attacks from reading the scanresults JSON data, which allows remote attackers to determine the physical location of most web browsers by leveraging the presence of one of these devices on its...
8 Google Maps hidden places You are not allowed to see
By Waqas If you thought you have seen it all then you This is a post from HackRead.com Read the original post: 8 Google Maps hidden places You are not allowed to see...
FireShodanMap - A Realtime Map That Integrates Firebase, Google Maps And Shodan
FireShodanMap is a Realtime map that integrates Firebase and Shodan. A search is carried out using Shodan searching vulnerable devices and they are showed on the map for analysis. All data updated in Firebase are Realtime. Changes We have a file named "fireshodan.py" responsible for fill Firebase...
Google Maps flaw lets hackers redirect users to malicious sites
By Uzair Amir Google Maps users need to stay vigilant as cybercriminals are taking This is a post from HackRead.com Read the original post: Google Maps flaw lets hackers redirect users to malicious sites...
WordPress plugin "WP Google Map Plugin" vulnerable to cross-site scripting
Overview The WordPress plugin "WP Google Map Plugin" provided by Flipper Code contains a reflected cross-site scripting vulnerability CWE-79. Chris Liu reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An...
DNN CATALooK.netStore Module Cross-Site Scripting Vulnerability
DNN formerly known as DotNetNuke is a set of U.S. DNN by Microsoft support , based on the ASP.NET platform for open source content management system CMS. The system is easy to install , scalable , feature-rich features such as CATALooK.netStore module is one of the CATALooK store module . A...
Design/Logic Flaw
The CATALooK.netStore module through 7.2.8 for DNN formerly DotNetNuke allows XSS via the /ViewEditGoogleMaps.aspx PortalID or CATSkin parameter, or the /ImageViewer.aspx link or desc parameter...
WordPress Events Manager Plugin Cross-Site Scripting Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers to set up personal blog sites.Events Manager plugin is used in one of the registration plugin. A cross-site scripting vulnerability exists in th...
