180 matches found
WordPress OSM – OpenStreetMap plugin <= 6.0.1 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability leading to Plugin Settings Update discovered by Rasi Afeef Patchstack Alliance in WordPress OSM – OpenStreetMap plugin versions = 6.0.1. Solution No patched version is available. No reply from the vendor...
taginfo.openstreetmap.org Cross Site Scripting vulnerability OBB-1386447
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
taginfo.openstreetmap.org Cross Site Scripting vulnerability OBB-1383140
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Man-in-the-Middle (MitM)
com.liferay.map.openstreetmap is vulnerable to man-in-the-middle attacks. The bundle loads the npm package leaflet using HTTP instead of HTTPS. This allows an attacker to perform a man-in-the-middle attack to modify the package contents...
Liberapay: Leaking Of Sensitive Information on Github
Summary: Sensitive Data were leaked in https://github.com/liberapay/liberapay.com Steps To Reproduce: 1. Install gitleaks from https://github.com/zricethezav/gitleaks 2. Run the following command in a Linux terminal gitleaks -v --pretty -r=https://github.com/liberapay/liberapay.com The following...
openstreetmap.realhomes.io Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1001926 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting openstreetmap.realhomes.i...
Joomla PhocaMaps 3.0.5 Database Disclosure / SQL Injection
Exploit Title : Joomla PhocaMaps 3.0.5 SQL Injection / Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : phoca.cz/phocamaps Software Download Link : phoca.cz/download/category/38-phoca-maps-plugin Software Informati...
trac.openstreetmap.org Improper Access Control vulnerability
Open Bug Bounty ID: OBB-608042 Description| Value ---|--- Affected Website:| trac.openstreetmap.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...
cmb.fr XSS vulnerability
Vulnerable URL: https://www.cmb.fr/creditmutuel/public/commun/refonte/openstreetmap/villes.jsp?federation=" Details: Description| Value ---|--- Patched:| Yes, at 27.06.2017 Latest check for patch:| 27.06.2017 13:50 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
Open Source GPS Tracking System: Traccar
Traccar is an open source GPS tracking system for various GPS tracking devices. This Maven Project is written in Java and works on most platforms with installed Java Runtime Environment. System supports more than 80 different communication protocols from popular vendors. It includes web interface...
taginfo.openstreetmap.org XSS vulnerability
Vulnerable URL: https://taginfo.openstreetmap.org/search?q=%3C%2Fscript%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknow...
taginfo.openstreetmap.fr XSS vulnerability
Open Bug Bounty ID: OBB-87447 Description| Value ---|--- Affected Website:| taginfo.openstreetmap.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...
Leaflet Maps Marker 3.5.2 - Two SQL Injection Vulnerabilities
The Leaflet Maps Marker Google Maps, OpenStreetMap, Bing Maps WordPress plugin was affected by a Two SQL Injection Vulnerabilities security vulnerability...
Mobile Atlas Creator 1.9.12 - Command Inject Vulnerability
Document Title: =============== Mobile Atlas Creator 1.9.12 - Command Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=945 Release Date: ============= 2013-09-08 Vulnerability Laboratory ID VL-ID: ====================================...
Wordpress Plugins - leaflet maps marker Blind SQL Injection Vulnerability
Exploit for php platform in category web applications ================================================================================ || | | || || || |/ | || |/ | | | | | | | | | | | \ | | | | \ ================================================================================ Exploit Title:...
Fedora Update for merkaartor FEDORA-2011-5200
Check for the Version of merkaartor OpenVAS Vulnerability Test Fedora Update for merkaartor FEDORA-2011-5200 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
[SECURITY] Fedora 14 Update: merkaartor-0.17.2-2.fc14
Merkaartor is a small editor for OpenStreetMap available under the GNU General Public License and developed using the Qt toolkit. It has some unique features like anti-aliased displaying, transparent display of map features like roads and curved roads...
[SECURITY] Fedora 12 Update: merkaartor-0.14-2.fc12
Merkaartor is a small editor for OpenStreetMap available under the GNU General Public License and developed using the Qt toolkit. It has some unique features like anti-aliased displaying, transparent display of map features like roads and curved roads...
[SECURITY] Fedora 11 Update: merkaartor-0.14-2.fc11
Merkaartor is a small editor for OpenStreetMap available under the GNU General Public License and developed using the Qt toolkit. It has some unique features like anti-aliased displaying, transparent display of map features like roads and curved roads...
Fixed XSS vulnerability at www.openstreetmap.org
Security researcher Lars Strojny, has submitted on 08/07/2007 a cross-site-scripting XSS vulnerability affecting www.openstreetmap.org, which at the time of submission ranked 49580 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2007. It ...