Malicious Package

Overview @uc-maps/test1 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

Exploit for NULL Pointer Dereference in Linux Linux_Kernel

Proof of Concept Exploit Code for CVE-2022-23222 This is a POC...

WordPress plugin Inline Google Maps cross-site request forgery vulnerability

WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL. WordPress plugin Inline Google Maps 5.11 and earlier versions are vulnerable to cross-site request forgery, which stems from not...

MAL-2022-2829 Malicious code in eslint-plugin-yandex-maps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14666129d0fc309e24efbcdc0bd4595a45bbf3b02d9a031a0a29413961fb2cac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-yandex-maps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14666129d0fc309e24efbcdc0bd4595a45bbf3b02d9a031a0a29413961fb2cac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7305 Malicious code in xyz-maps-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 068b7cef9e2b8e7f9f23592b6f84bd995a7195e8c952d1f85cd8e18ca9b1d2e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xyz-maps-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 068b7cef9e2b8e7f9f23592b6f84bd995a7195e8c952d1f85cd8e18ca9b1d2e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @eg-maps/commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 683771ccbf7865145f726b98e031ef733f7c549710df47bd019217e6373df1e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-227 Malicious code in @eg-maps/commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 683771ccbf7865145f726b98e031ef733f7c549710df47bd019217e6373df1e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4480 Malicious code in maps-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77941a159908349eb82d90ae8105f74c66d5bfaeb4879e9e0f96bffcdd1b4b9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in maps-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77941a159908349eb82d90ae8105f74c66d5bfaeb4879e9e0f96bffcdd1b4b9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-677 Malicious code in @uc-maps/api.react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f409bbd4d44a1d019c99abc6d3f4c3fdb6caf61568a7a1235c25fe5ff3995c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-678 Malicious code in @uc-maps/boundaries-core.react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f279f06f2a6375dfe5f8632d2e53e7c315fed145e3d5babe3fe2338fd70e1e8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-679 Malicious code in @uc-maps/geospatial (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6991935d20b411c2ed3710ebf423c8b205e514c20f5ca2937bd0cfc55ad8d2f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-680 Malicious code in @uc-maps/layer-select.react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e16c28c35ea063cec1fb2f23764d6be10526f72c11c42bc40879a61a2383ff0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-683 Malicious code in @uc-maps/provider-google.react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96b2ee3e9a228c29b1fa9a48eab565e4eee93260225f30d535417f36ee2b48d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-682 Malicious code in @uc-maps/parcel-shapes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a5355ff2e8d842acde41df4dad7dba63eabaac16403d4789e204cdcbd93035e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-686 Malicious code in @uc-maps/tile-layers.react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af3f6d0d5c3454a78142a0ac415c1e72c55d7f50e15e914045f1c9940ae83d3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-1829

The Inline Google Maps WordPress plugin through 5.11 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack, and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping...

CVE-2022-1829

The Inline Google Maps WordPress plugin through 5.11 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack, and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping...