3399 matches found
CVE-2026-105222
The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets sslverifypeer to FALSE, which is passed to CURLOPTSSLVERIFYPEER. On-path attackers can present any certificate to intercept Google Maps web-service requests...
CVE-2026-105222 alexpechkarev/google-maps through 12.16 Disabled TLS Certificate Verification via ssl_verify_peer
The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets sslverifypeer to FALSE, which is passed to CURLOPTSSLVERIFYPEER. On-path attackers can present any certificate to intercept Google Maps web-service requests...
CVE-2026-105222 alexpechkarev/google-maps through 12.16 Disabled TLS Certificate Verification via ssl_verify_peer
The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets sslverifypeer to FALSE, which is passed to CURLOPTSSLVERIFYPEER. On-path attackers can present any certificate to intercept Google Maps web-service requests...
CVE-2026-105222
The alexpechkarev/google-maps Laravel package, through version 12.16 , is vulnerable to a Disabled TLS Certificate Verification flaw. The bundled configuration sets ssl_verify_peer to FALSE , which is then passed to CURLOPT_SSL_VERIFYPEER. This allows on-path attackers to present arbitrary certif...
CVE-2026-105222 alexpechkarev/google-maps through 12.16 Disabled TLS Certificate Verification via ssl_verify_peer
The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets sslverifypeer to FALSE, which is passed to CURLOPTSSLVERIFYPEER. On-path attackers can present any certificate to intercept Google Maps web-service requests...
CVE-2026-8732
⚔️ CVE-2026-8732 WP Maps Pro ≤ 6.1.0 — Escalada de Privilegios sin Autenticación Automatización de Explotación en 8 Fases | Multiprocessing + Asyncio | Creación de Admin Verificada 🎯 Acerca de la Vulnerabilidad El plugin de WordPress WP Maps Pro versión ≤ 6.1.0 tiene una vulnerabilidad de escalada...
CVE-2026-8732
CVE-2026-8732 — WP Maps Pro ≤ 6.1.0 ♡ Unauthenticated Privilege Escalation via Administrator Account Creation ♡ === shadow ♡ & friska === 📋 Vulnerability Info Field| Details ---|--- CVE ID| CVE-2026-8732 CVSS Score| 9.8 Critical CVSS Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Type|...
CVE-2026-105222: Improper Certificate Validation
The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets sslverifypeer to FALSE, which is passed to CURLOPTSSLVERIFYPEER. On-path attackers can present any certificate to intercept Google Maps web-service requests...
PT-2026-104656
The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets ssl verify peer to FALSE, which is passed to CURLOPT SSL VERIFYPEER. On-path attackers can present any certificate to intercept Google Maps web-service...
CVE-2022-43980
CVE-2022-43980 Vulnerabilidad de Cross Site Scripting Almacenado en la funcionalidad de edición de mapas de red de PandoraFMS Título del Exploit: Cross Site Scripting Almacenado Fecha: 15/02/2023 Autor del Exploit: Gaurish Kauthankar Página del proveedor: https://pandorafms.com/en/ Enlace del...
[SECURITY] Fedora 45 Update: gnome-maps-51.1-2.fc45
GNOME Maps is a simple map application for the GNOME desktop...
CVE-2026-23929
A flaw was found in Zabbix. This prototype pollution vulnerability, specifically within the searchParamsToObject function, allows an attacker to inject malicious data into web pages. By manipulating URL parameters that are not properly filtered, an attacker can achieve persistent Cross-Site...
SUSE CVE-2019-7621
Kibana versions before 6.8.6 and 7.5.1 contain a cross site scripting XSS flaw in the coordinate and region map visualizations. An attacker with the ability to create coordinate map visualizations could create a malicious visualization. If another Kibana user views that visualization or a dashboa...
CVE-2026-102397
Unauthenticated Broken Access Control in Ultimate Maps by Supsystic = 1.5.5 versions...
CVE-2026-102397
The WordPress Ultimate Maps by Supsystic plugin, version 1.5.5 and below , is affected by an unauthenticated Broken Access Control vulnerability. While the vulnerability allows for unauthorized access, the provided documents do not specify the exact component, root cause, or practical consequence...
CVE-2026-102397 WordPress Ultimate Maps by Supsystic plugin <= 1.5.5 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Ultimate Maps by Supsystic = 1.5.5 versions...
CVE-2026-102397 WordPress Ultimate Maps by Supsystic plugin <= 1.5.5 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Ultimate Maps by Supsystic = 1.5.5 versions...
EUVD-2026-90213
Unauthenticated Broken Access Control in Ultimate Maps by Supsystic = 1.5.5 versions...
WordPress Ultimate Maps by Supsystic plugin <= 1.5.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin Ultimate Maps by Supsystic versions = 1.5.5...