2695 matches found
OSM Offline Maps Android Wear - Apache license, LGPL license vulnerabilities
HackApp vulnerability scanner discovered that application OSM Offline Maps Android Wear published at the 'play' market has multiple vulnerabilities...
Open Source GPS Tracking System: Traccar
Traccar is an open source GPS tracking system for various GPS tracking devices. This Maven Project is written in Java and works on most platforms with installed Java Runtime Environment. System supports more than 80 different communication protocols from popular vendors. It includes web interface...
Apple Could Offer iMessage App for Android
Although Apple has its own operating system for both desktop Mac OS X and iPhone iOS, the company has always tried to port its in-house applications to other OS platforms. Apple debuted on its rival mobile OS platform last year with the launch of Apple Music on Android. However, iTunes and Safari...
Scientific Linux Security Update : sssd on SL7.x x86_64 (20151119)
It was found that SSSD's Privilege Attribute Certificate PAC responder plug-in would leak a small amount of memory on each authentication request. A remote attacker could potentially use this flaw to exhaust all available memory on the system by making repeated requests to a Kerberized daemon...
WordPress BestWebSoft Google Maps 1.2.1 Cross Site Scripting
Plugin Name : BestWebSoft Google Maps Effected Version : 1.2.1 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Administrator PoC - Proof of Concept : The following fields put the...
libipa_hbac, libsss_idmap, libsss_nss_idmap, libsss_simpleifp, python, sssd security update
CentOS Errata and Security Advisory CESA-2015:2355 Updated sssd packages that fix one security issue, multiple bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability...
PT-2015-6840 · Red Hat +1 · Libreport +2
Name of the Vulnerable Software and Affected Versions: libreport versions 2.0.7 through 2.6.3 Description: The issue allows remote attackers to obtain sensitive information via unspecified vectors related to the backtrace, cmdline, environ, open fds, maps, smaps, hostname, remote, ks.cfg, or...
autofs: priv escalation via interpreter load path for program based automount maps
It was found that program-based automounter maps that used interpreted languages such as Python would use standard environment variables to locate and load modules of those languages. A local attacker could potentially use this flaw to escalate their privileges on the system...
WordPress Leaflet Maps Marker Plugin <= 3.5.3 - SQL Injection
This plugin is prone to tag multiple parameter SQL injection. Solution Upgrade the plugin...
Geotweet - Social engineering tool for human hacking
Another way to use Twitter and instagram. Geotweet is an osint application that allows you to track tweets and instagram and trace geographical locations and then export to google maps. Allows you to search on tags, world zones and user info and timeline. Requirements Python 2.7 PyQt4, tweepy,...
WordPress Google Maps Plugin <= 2.3.9 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
Visitor Maps & Who's Online <= 1.5.8.6 - Authenticated Stored Cross-Site Scripting (XSS)
The visitor-maps WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS security vulnerability...
autofs: priv escalation via interpreter load path for program based automount maps
It was found that program-based automounter maps that used interpreted languages such as Python would use standard environment variables to locate and load modules of those languages. A local attacker could potentially use this flaw to escalate their privileges on the system...
Mapbox: Disclosure of map information
In July 2015, @hussain submitted a report where a GET request to an internal API endpoint /core/api/Map disclosed details of public maps in a Mapbox user's account. The disclosed information included the name, description, map identifier, geographic center, map layers, date created, and date last...
Cross site scripting
Open redirect vulnerability in nokia-mapsplaces.php in the Nokia Maps & Places plugin 1.6.6 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the href parameter to page/place.html. NOTE: this was originally reported as a...
CVE-2014-1750
Open redirect vulnerability in nokia-mapsplaces.php in the Nokia Maps & Places plugin 1.6.6 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the href parameter to page/place.html. NOTE: this was originally reported as a...
CVE-2014-1750
Open redirect vulnerability in nokia-mapsplaces.php in the Nokia Maps & Places plugin 1.6.6 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the href parameter to page/place.html. NOTE: this was originally reported as a...
CVE-2014-1750
CVE-2014-1750 affects the Nokia Maps & Places WordPress plugin (version up to 1.6.6). The vulnerability is an open redirect via the href parameter to page/place.html, enabling an attacker to redirect users to arbitrary sites and potentially facilitate phishing. Some sources also reference XSS, bu...
WordPress Leaflet Maps Marker Pro Plugin - Multiple Vulnerabilities
This plugin is prone to SQL injection, cross site scripting, shell upload and file deletion vulnerabilities. Solution Update the plugin...