WordPress AB Google Map Travel (AB-MAP) plugin cross-site request forgery vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.WordPress AB Google Map Travel is a wordpress plugin for Google Maps. WordPress AB Google Map Travel suffers from a...

CVE-2015-2755

Multiple cross-site request forgery CSRF vulnerabilities in the AB Google Map Travel AB-MAP plugin before 4.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 lat Latitude, 2 long Longitude, 3...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the AB Google Map Travel AB-MAP plugin before 4.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 lat Latitude, 2 long Longitude, 3...

CVE-2015-2755

Multiple cross-site request forgery CSRF vulnerabilities in the AB Google Map Travel AB-MAP plugin before 4.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 lat Latitude, 2 long Longitude, 3...

CVE-2015-2755

The CVE-2015-2755 entry documentsStored CSRF/XSS in the WordPress AB Google Map Travel (AB-MAP) plugin. Affected versions are up to 3.4, with mitigation via update to version 4.0 or applying vendor patches. The vulnerability enables CSRF-induced requests from an admin session to perform XSS by ma...

WordPress Google Map Travel 3.4 XSS / CSRF

=============================================================================== CSRF/Stored XSS Vulnerability in AB Google Map Travel AB-MAP Wordpress Plugin =============================================================================== . contents:: Table Of Content Overview ======== Title :Stor...

WordPress AB Google Map Travel Plugin <= 3.9 - Multiple CSRF

Because of these vulnerabilities, the attackers can hijack the authentication of administrators for requests that conduct cross site scripting attacks via the "lat", "long", "zoom", "mapheight" or "mapwidth" parameters in the abmapoptions page to wp-admin/admin.php. Solution Update the plugin...

WordPress AB Google Map Travel CSRF / XSS

=============================================================================== CSRF/Stored XSS Vulnerability in AB Google Map Travel AB-MAP Wordpress Plugin =============================================================================== . contents:: Table Of Content Overview ======== Title :Stor...

[SECURITY] Fedora 21 Update: mapserver-6.2.2-1.fc21

Mapserver is an internet mapping program that converts GIS data to map images in real time. With appropriate interface pages, Mapserver can provide an interactive internet map based on custom GIS data...

linux/x86 - Obfuscated - map google.com to 127.1.1.1 98 bytes

linux/x86 - Obfuscated - map google.com to 127.1.1.1 98 bytes. Shellcode exploit for linx86 platform / Linux x86 - map google.com to 127.1.1.1 in /etc/hosts Obfuscated version - 98 bytes Original: http://shell-storm.org/shellcode/files/shellcode-893.php Author: xmgv Details:...

kernel: kvm: excessive pages un-pinning in kvm_iommu_map error path

It was found that the fix for CVE-2014-3601 was incomplete: the Linux kernel's kvmiommumappages function still handled IOMMU mapping failures incorrectly. A privileged user in a guest with an assigned host device could use this flaw to crash the host...

chromium-browser: Use-after-free in service workers

Multiple use-after-free vulnerabilities in the ServiceWorkerScriptCacheMap implementation in content/browser/serviceworker/serviceworkerscriptcachemap.cc in Google Chrome before 41.0.2272.76 allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors...

Linux/ARM - Add Map (127.1.1.1 google.lk) In /etc/hosts Shellcode (79 bytes)

Linux/ARM - Add Map 127.1.1.1 google.lk In /etc/hosts Shellcode 79 bytes. Shellcode exploit for ARM platform / Title: Add map in /etc/hosts file - 79 bytes Date: 2015-03-02 Architecture: armv6l GNU/Linux Website: http://osandamalith.wordpress.com E-Mail: osandacatunseen.is Author: Osanda Malith...

UBUNTU-CVE-2014-5332

Race condition in NVMap in NVIDIA Tegra Linux Kernel 3.10 allows local users to gain privileges via a crafted NVMAPIOCCREATE IOCTL call, which triggers a use-after-free error, as demonstrated by using a race condition to escape the Chrome sandbox...

Vala 'Gst.MapInfo()' Function Denial of Service Vulnerability

Vala is a programming language for the GObject system based on Gnome, developed by software developers Jurg Billeter and Raffaele Sandrini. A denial of service vulnerability exists in the Vala 'Gst.MapInfo' function, which could allow a context-sensitive attacker to launch a denial of service...

DEBIAN-CVE-2014-9496

The sd2parsersrcfork function in sd2.c in libsndfile allows attackers to have unspecified impact via vectors related to a 1 map offset or 2 rsrc marker, which triggers an out-of-bounds read...

Out-of-bounds

The sd2parsersrcfork function in sd2.c in libsndfile allows attackers to have unspecified impact via vectors related to a 1 map offset or 2 rsrc marker, which triggers an out-of-bounds read...

CVE-2014-100006

Multiple cross-site scripting XSS vulnerabilities in modulesv3/googlemap/wtv3streetview.php in webtrees before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the 1 map, 2 streetview, or 3 reset parameter...

UBUNTU-CVE-2014-9805

ImageMagick allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted pnm file...

Cellular Privacy, SS7 Security Shattered at 31C3

The recently concluded Chaos Communications Congress 31c3 in Hamburg, Germany was an all-out assault on cellular call privacy and security. Of particular interest was the SS7 protocol used to route calls between switching centers. Researchers, doing parallel research as it turns out, found gaping...