Maps & Navigation — OsmAnd - Corrupted files, Dangerous filesystem permissions, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Maps & Navigation — OsmAnd published at the 'play' market has multiple vulnerabilities...

WordPress Google Maps Plugin Cross-Site Request Forgery Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.Google Maps is one of the map plug-ins. A cross-site request forgery vulnerability exists in the admin.jsp pag...

WordPress Google Maps 6.3.14 Cross Site Request Forgery Vulnerability

WordPress Google Maps plugin version 6.3.14 suffers from a cross site request forgery vulnerability. ------------------------------------------------------------------------ Persistent Cross-Site Scripting in WP Google Maps Plugin via CSRF...

WordPress Google Maps 6.3.14 Cross Site Request Forgery

------------------------------------------------------------------------ Persistent Cross-Site Scripting in WP Google Maps Plugin via CSRF ------------------------------------------------------------------------ Sipke Mellema, July 2016...

WP Google Maps <= 6.3.14 - Authenticated Stored Cross-Site Scripting (XSS) via CSRF

The WP Google Maps WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS via CSRF security vulnerability...

les-mathematiques.net XSS vulnerability

Vulnerable URL: http://www.les-mathematiques.net/phorum/mods/googlemaps/maptool/mapframe.php?apikey="...

Linux kernel local elevation of privilege vulnerability (Dirty COW)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. The Linux Kernel local elevation of privilege vulnerability can be exploited by a low-privileged local attacker to gain write access to other read-only memory maps, which in...

Wordpress hero-maps-pro plugin cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the Wordpress hero-maps-pro plugin version 2.1.0. An attacker...

CVE-2016-1000137

Reflected XSS in wordpress plugin hero-maps-pro v2.1.0...

Cross site scripting

Reflected XSS in wordpress plugin hero-maps-pro v2.1.0...

CVE-2016-1000137

WordPress Hero Maps Pro plugin version 2.1.0 is affected by a reflected cross-site scripting (XSS) vulnerability. The Nuclei template documents a reflected XSS in Hero Maps Pro 2.1.0, allowing an attacker to execute arbitrary JavaScript in the victim’s browser in the context of the affected site....

CVE-2016-1000137

Reflected XSS in wordpress plugin hero-maps-pro v2.1.0...

[SECURITY] Fedora 25 Update: trytond-google-maps-4.0.2-1.fc25

google-maps module for Tryton application server...

Cry Ransomware Using UDP, Imgur, Google Maps

Ransomware purporting to come from a phony government agency, something called the Central Security Treatment Organization, has been making the rounds, researchers say. The ransomware, which is already known by a number of names including Cry, CSTO ransomware, or Central Security Treatment...

WordPress plugin Google Maps 'id' parameter cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Google Maps 'id' parameter due to the...

WordPress Google Maps 2.1.2 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Google Maps WordPress Plugin ------------------------------------------------------------------------ Julien Rentrop, July 2016...

Google Maps <= 2.1.3 - Authenticated Reflected Cross-Site Scripting (XSS)

The google-maps WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability...

WordPress Google Maps Plugin <= 2 2.1.3 - Cross Site Scripting (XSS)

Because of this vulnerability, the attackers can steal users' session tokens, or perform arbitrary actions on their behalf. Solution Update the plugin...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the print Maps function toolbox/lsof.c in the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating locally, to increase their privileges by using a specially created file with a long...

Ian Dunn: [Not just a server configuration issue] Full Path Disclosure

Hey, I've just found a 'full path disclosure' in basic-google-maps-placemarks, so it's not just a server configuration issue! I've tested it on different servers including windows, ubuntu, CentOS etc.. PoC So, if we visit wp-content/plugins/basic-google-maps-placemarks/unit-tests.php it is clearl...