157 matches found
TileServer API - Cross Site Scripting
tileserver-gl up to v4.4.10 was discovered to contain a cross-site scripting XSS vulnerability via the component /data/v3/?key. id: CVE-2024-35627 info: name: TileServer API - Cross Site Scripting author: DhiyaneshDK severity: medium description: | tileserver-gl up to v4.4.10 was discovered to...
MapTiler Tileserver-php v2.0 - Unauthenticated File Read
MapTiler Tileserver-php v2.0 contains a directory traversal caused by improper sanitization of GET parameters in renderTile function, letting attackers read arbitrary files on the server, exploit requires crafted web requests id: CVE-2025-44137 info: name: MapTiler Tileserver-php v2.0 -...
TileServer GL <=3.0.0 - Cross-Site Scripting
TileServer GL through 3.0.0 is vulnerable to reflected cross-site scripting via server.js because the content of the key GET parameter is reflected unsanitized in an HTTP response for the application's main page. id: CVE-2020-15500 info: name: TileServer GL =3.0.0 - Cross-Site Scripting author:...
MapTiler Tileserver-php v2.0 - Unauthenticated XSS
MapTiler Tileserver-php v2.0 contains a reflected XSS caused by unencoded reflection of the GET parameter "layer" in an error message, letting unauthenticated attackers execute arbitrary script on victim browsers. id: CVE-2025-44136 info: name: MapTiler Tileserver-php v2.0 - Unauthenticated XSS...
CVE-2025-44137
CVE-2025-44137 Unauthenticated File Read in MapTiler Tileserver-php v2.0. Description MapTiler Tileserver-php v2.0 is vulnerable to Directory Traversal. The renderTile function within tileserver.php is responsible for delivering tiles that are stored as files on the server via web request. Creati...
CVE-2025-44136
CVE-2025-44136 Unauthenticated XSS in MapTiler Tileserver-php v2.0. Description MapTiler Tileserver-php v2.0 is vulnerable to Cross Site Scripting XSS. The GET parameter "layer" is reflected in an error message without html encoding. This leads to XSS and allows an unauthenticated attacker to...
GHSA-WQ5F-XC86-PV6W vulnerabilities
Vulnerabilities for packages: tileserver-gl...
GHSA-JQCG-44MW-7W3H vulnerabilities
Vulnerabilities for packages: thingsboard, langfuse, sqlpad, kubeflow-pipelines, tileserver-gl, kubeflow-centraldashboard, jupyter-base-notebook...
CVE-2026-90711 vulnerabilities
Vulnerabilities for packages: thingsboard, langfuse, sqlpad, kubeflow-pipelines, tileserver-gl, kubeflow-centraldashboard, jupyter-base-notebook...
GHSA-RGJ7-G3M4-5G8C vulnerabilities
Vulnerabilities for packages: tileserver-gl...
CVE-2026-45820 vulnerabilities
Vulnerabilities for packages: tileserver-gl, langfuse...
GHSA-P498-V437-472G vulnerabilities
Vulnerabilities for packages: tileserver-gl, vitess, langfuse...
GHSA-PX8P-9VWX-VF98 vulnerabilities
Vulnerabilities for packages: tileserver-gl, langfuse...
CVE-2026-45820 vulnerabilities
Vulnerabilities for packages: librechat, tileserver-gl-fips, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee, tileserver-gl, langfuse, langfuse-fips, lambda-nodejs...
GHSA-PX8P-9VWX-VF98 vulnerabilities
Vulnerabilities for packages: librechat, tileserver-gl-fips, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee, tileserver-gl, langfuse, langfuse-fips, lambda-nodejs...
CVE-2026-73569 vulnerabilities
Vulnerabilities for packages: thingsboard-fips, tileserver-gl-fips, jitsucom-jitsu, tileserver-gl, langfuse, langfuse-fips, kibana...
CVE-2026-73569 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, tileserver-gl...
TileServer GL Page - Detect
TileServer GL page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """TileServer GL page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'TileServer GL Page - Detect', 'description': 'TileServer ...
MapTiler Tileserver-php v2.0 - Unauthenticated File Read Detection
MapTiler Tileserver-php v2.0 contains a directory traversal caused by improper sanitization of GET parameters in renderTile function, letting attackers read arbitrary files on the server, exploit requires crafted web requests !/usr/bin/env python3 -- coding: utf-8 -- """MapTiler Tileserver-php...