912 matches found
EUVD-2022-35601
Malicious code in bioql PyPI...
EUVD-2022-29216
Malicious code in bioql PyPI...
WordPress WP Geo plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin WP Geo versions = 3.5.1...
CLSA-2025-1757427057 grafana: Fix of CVE-2022-23552
CVE-2022-23552: sanitize SVG inputs in GeoMap by adding a dompurify preprocessor step, preventing stored XSS where malicious SVG could execute arbitrary JavaScript...
CVE-2025-48293
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows PHP Local File Inclusion.This issue affects Geo Mashup: from n/a through = 1.13.16...
Malicious code in yandex-geo-utils (npm)
The package yandex-geo-utils was found to contain malicious code...
Malicious code in g2plot-geo-world-map (npm)
The package g2plot-geo-world-map was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
Malicious code in kintisheff-geo (npm)
The package kintisheff-geo was found to contain malicious code...
MAL-2025-40215 Malicious code in yandex-geo-utils (npm)
The package yandex-geo-utils was found to contain malicious code...
MAL-2025-21103 Malicious code in g2plot-geo-world-map (npm)
The package g2plot-geo-world-map was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-24535 Malicious code in kintisheff-geo (npm)
The package kintisheff-geo was found to contain malicious code...
CVE-2025-48293
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows PHP Local File Inclusion.This issue affects Geo Mashup: from n/a through = 1.13.16...
CVE-2025-48293 WordPress Geo Mashup plugin <= 1.13.16 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows PHP Local File Inclusion.This issue affects Geo Mashup: from n/a through = 1.13.16...
CVE-2025-48293 WordPress Geo Mashup plugin <= 1.13.16 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Dylan Kuhn Geo Mashup allows PHP Local File Inclusion. This issue affects Geo Mashup: from n/a through 1.13.16...
CVE-2025-48293
CVE-2025-48293 affects WordPress Geo Mashup plugin (
PT-2025-33173 · Unknown · Geo Mashup
Name of the Vulnerable Software and Affected Versions: Geo Mashup versions through 1.13.16 Description: A flaw exists in the handling of filename control for include/require statements within a PHP program, specifically a PHP Local File Inclusion issue in Dylan Kuhn Geo Mashup. This allows for th...
WordPress plugin Geo Mashup 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
OpenSearch unauthorized data access on fields protected by field masking for fields of type ip, geo_point, geo_shape, xy_point, xy_shape
Impact OpenSearch versions 2.19.2 and earlier improperly apply field masking rules on fields of the types ip, geopoint, geoshape, xypoint, xyshape. While the content of these fields is properly redacted in the source document returned by search operations, the original unredacted values remain...
PT-2025-32598 · Maven · Org.Opensearch.Plugin:Opensearch-Security
Impact OpenSearch versions 2.19.2 and earlier improperly apply field masking rules on fields of the types ip, geo point, geo shape, xy point, xy shape. While the content of these fields is properly redacted in the source document returned by search operations, the original unredacted values remai...
Digital Privacy Everywhere
The increasing proliferation of digital and mobile devices equipped with cameras, microphones, GPS, and other privacy invasive components has raised significant concerns for businesses operating in sensitive or policy restricted environments. Current solutions rely on passive enforcement, such as...