Malicious code in amap-core (npm)

--- Credit: OpenSSF source...

CVE-2026-6580

A security vulnerability has been detected in liangliangyy DjangoBlog up to 2.1.0.0. Affected is an unknown function of the file owntracks/views.py of the component Amap API Call Handler. Such manipulation of the argument key leads to use of hard-coded cryptographic key . The attack may be launch...

EUVD-2026-23714

A security vulnerability has been detected in liangliangyy DjangoBlog up to 2.1.0.0. Affected is an unknown function of the file owntracks/views.py of the component Amap API Call Handler. Such manipulation of the argument key leads to use of hard-coded cryptographic key . The attack may be launch...

CVE-2026-6580

A security vulnerability has been detected in liangliangyy DjangoBlog up to 2.1.0.0. Affected is an unknown function of the file owntracks/views.py of the component Amap API Call Handler. Such manipulation of the argument key leads to use of hard-coded cryptographic key . The attack may be launch...

CVE-2026-6580 liangliangyy DjangoBlog Amap API Call views.py hard-coded key

A security vulnerability has been detected in liangliangyy DjangoBlog up to 2.1.0.0. Affected is an unknown function of the file owntracks/views.py of the component Amap API Call Handler. Such manipulation of the argument key leads to use of hard-coded cryptographic key . The attack may be launch...

CVE-2026-6580

A security vulnerability has been detected in liangliangyy DjangoBlog up to 2.1.0.0. Affected is an unknown function of the file owntracks/views.py of the component Amap API Call Handler. Such manipulation of the argument key leads to use of hard-coded cryptographic key . The attack may be launch...

CVE-2026-6580 liangliangyy DjangoBlog Amap API Call views.py hard-coded key

A security vulnerability has been detected in liangliangyy DjangoBlog up to 2.1.0.0. Affected is an unknown function of the file owntracks/views.py of the component Amap API Call Handler. Such manipulation of the argument key leads to use of hard-coded cryptographic key . The attack may be launch...

CVE-2026-6580

The CVE describes a vulnerability in liangliangyy DjangoBlog (up to 2.1.0.0) affecting an unknown function in owntracks/views.py within the Amap API Call Handler. The issue arises from manipulation of the argument key that causes the use of a hard-coded cryptographic key. It can be exploited remo...

CVE-2026-6580

A security vulnerability has been detected in liangliangyy DjangoBlog up to 2.1.0.0. Affected is an unknown function of the file owntracks/views.py of the component Amap API Call Handler. Such manipulation of the argument key leads to use of hard-coded cryptographic key . The attack may be launch...

CVE-2026-6580: Use of Hard-coded Cryptographic Key

A security vulnerability has been detected in liangliangyy DjangoBlog up to 2.1.0.0. Affected is an unknown function of the file owntracks/views.py of the component Amap API Call Handler. Such manipulation of the argument key leads to use of hard-coded cryptographic key . The attack may be launch...

PT-2026-33650

Name of the Vulnerable Software and Affected Versions liangliangyy DjangoBlog versions prior to 2.1.0.0 Description An issue exists in the Amap API Call Handler component within the file 'owntracks/views.py'. Manipulation of the key argument leads to the use of a hard-coded cryptographic key. Thi...

MAL-2024-1750 Malicious code in amap-core (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in amap-core (npm)

--- -= Per source details. Do not edit below this line.=-...

club.mrxiao:map-java-amap (3.0.2), club.mrxiao:map-java-amap-spring-boot-starter (3.0.2) +8 more potentially affected by CVE-2023-42278 via cn.hutool:hutool-json (4.6.8)

cn.hutool:hutool-json MAVEN version 4.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - club.mrxiao:map-java-amap 3.0.2 - club.mrxiao:map-java-amap-spring-boot-starter 3.0.2 - club.mrxiao:map-java-baidu...

club.mrxiao:map-java-amap (3.0.2), club.mrxiao:map-java-amap-spring-boot-starter (3.0.2) +8 more potentially affected by CVE-2023-42277 via cn.hutool:hutool-json (4.6.8)

cn.hutool:hutool-json MAVEN version 4.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - club.mrxiao:map-java-amap 3.0.2 - club.mrxiao:map-java-amap-spring-boot-starter 3.0.2 - club.mrxiao:map-java-baidu...

club.mrxiao:map-java-amap (3.0.2), club.mrxiao:map-java-amap-spring-boot-starter (3.0.2) +23 more potentially affected by CVE-2023-42277 via cn.hutool:hutool-core (4.6.8)

cn.hutool:hutool-core MAVEN version 4.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-core and may be impacted: - club.mrxiao:map-java-amap 3.0.2 - club.mrxiao:map-java-amap-spring-boot-starter 3.0.2 - club.mrxiao:map-java-baidu...

amap-aura.org Cross Site Scripting vulnerability OBB-3616697

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

club.mrxiao:map-java-amap (3.0.2), club.mrxiao:map-java-amap-spring-boot-starter (3.0.2) +8 more potentially affected by CVE-2022-45690 via cn.hutool:hutool-json (4.6.8)

cn.hutool:hutool-json MAVEN version 4.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - club.mrxiao:map-java-amap 3.0.2 - club.mrxiao:map-java-amap-spring-boot-starter 3.0.2 - club.mrxiao:map-java-baidu...

club.mrxiao:map-java-amap (3.0.2), club.mrxiao:map-java-amap-spring-boot-starter (3.0.2) +8 more potentially affected by CVE-2022-45689 via cn.hutool:hutool-json (4.6.8)

cn.hutool:hutool-json MAVEN version 4.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-json and may be impacted: - club.mrxiao:map-java-amap 3.0.2 - club.mrxiao:map-java-amap-spring-boot-starter 3.0.2 - club.mrxiao:map-java-baidu...

club.mrxiao:map-java-amap (3.0.2), club.mrxiao:map-java-amap-spring-boot-starter (3.0.2) +6 more potentially affected by CVE-2022-22885 via cn.hutool:hutool-http (4.6.8)

cn.hutool:hutool-http MAVEN version 4.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-http and may be impacted: - club.mrxiao:map-java-amap 3.0.2 - club.mrxiao:map-java-amap-spring-boot-starter 3.0.2 - club.mrxiao:map-java-baidu...