Cross site scripting

The WordPress plugin Contact Form Integrated With Google Maps 1.0-2.4 has Stored XSS...

CVE-2014-7238

The WordPress plugin Contact Form Integrated With Google Maps 1.0-2.4 has Stored XSS...

CVE-2014-7238

The CVE-2014-7238 entry concerns a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin “Contact Form Integrated With Google Maps” version 1.0–2.4. Descriptions in connected sources consistently identify the flaw as Stored XSS within that plugin; there are no details in the pro...

AttackSurfaceMapper - A Tool That Aims To Automate The Reconnaissance Process

Attack Surface Mapper is a reconnaissance tool that uses a mixture of open source intellgence and active techniques to expand the attack surface of your target. You feed in a mixture of one or more domains, subdomains and IP addresses and it uses numerous techniques to find more targets. It...

Apk-Mitm - A CLI Application That Prepares Android APK Files For HTTPS Inspection

A CLI application that automatically prepares Android APK files for HTTPS inspection Inspecting a mobile app's HTTPS traffic using a proxy is probably the easiest way to figure out how it works. However, with the Network Security Configuration introduced in Android 7 and app developers trying to...

Sparrow-Wifi - Next-Gen GUI-based WiFi And Bluetooth Analyzer For Linux

Sparrow-wifi has been built from the ground up to be the next generation 2.4 GHz and 5 GHz Wifi spectral awareness tool. At its most basic it provides a more comprehensive GUI-based replacement for tools like inSSIDer and linssid that runs specifically on linux. In its most comprehensive use case...

Ping Identity: Google Maps API key leaked during device pairing

Summary: just on intercepting and going through the request i made from ort-admin.pingone.com . i found that the google map api key was leaking through get request . i was able to validate that the leaked key was a valid one Steps To Reproduce: 1.login to account goto setup tab ping iD device...

Joomla Google Maps 1.0.4 SQL Injection

Exploit Title : Joomla 1.5.26 Google Maps 1.0.4 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/10/2019 Vendor Homepage : mapdemo.110mb.com - joomla.org Joomla Affected Version : 1.5.16 and 1.5.26 Software Affected Version : 1.0.4 Owner of the...

CVE-2019-17382

An issue was discovered in zabbix.php?action=dashboard.view&dashboardid=1 in Zabbix through 4.4. An attacker can bypass the login page and access the dashboard page, and then create a Dashboard, Report, Screen, or Map without any Username/Password i.e., anonymously. All created elements...

How Incognito Google Maps Protects You—and How It Doesn't

Turning on the new Incognito Mode in Google Maps won't make you as invisible as it might sound...

Security update for teeworlds (moderate)

openSUSE Security Update: Security update for teeworlds Announcement ID: openSUSE-SU-2019:1999-1 Rating: moderate References: 1112910 1131729 Cross-References: CVE-2018-18541 CVE-2019-10877 CVE-2019-10878 CVE-2019-10879 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes four...

WordPress bws-google-maps plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress bws-google-maps plugin. An attacker can exploit...

CVE-2017-18557

The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues...

CVE-2017-18557

The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues...

Cross site scripting

The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues...

CVE-2017-18557

The CVE-2017-18557 entry concerns the WordPress plugin bws-google-maps (BestWebSoft) prior to version 1.3.6, with multiple XSS issues. The connected nuclei template confirms the vulnerability is Cross-Site Scripting and that exploitation would allow authenticated attackers to execute arbitrary Ja...

CVE-2017-18557

The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues...

Design/Logic Flaw

The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit category feature...

WordPress Google Maps Plugin < 7.11.35 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:codecabin:wpgomaps"; if description...

WordPress WP Google Maps Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-google-maps plugin is a Google Maps plugin used in it. A cross-site scripting vulnerability exists in WordPress WP...