817 matches found
CVE-2020-12675
The mappress-google-maps-for-wordpress plugin before 2.54.6 for WordPress does not correctly implement capability checks for AJAX functions related to creation/retrieval/deletion of PHP template files, leading to Remote Code Execution. NOTE: this issue exists because of an incomplete fix for...
PT-2020-13196 · WordPress · Mappress-Google-Maps-For-Wordpress
Name of the Vulnerable Software and Affected Versions: mappress-google-maps-for-wordpress plugin versions prior to 2.54.6 Description: The issue is related to incomplete capability checks for AJAX functions, specifically those involved in the creation, retrieval, and deletion of PHP template file...
Glassdoor: Unauthorized usage of External API Key (Usage of Google Maps API Key ==> $$$
A Google Maps API key was found in the source code of a Glassdoor webpage, which allowed unauthorized usage of the API. The API key was not configured securely...
CVE-2020-12077
The mappress-google-maps-for-wordpress plugin before 2.53.9 for WordPress does not correctly implement AJAX functions with nonces or capability checks, leading to remote code execution...
CVE-2020-12077
The WordPress plugin MapPress Maps for WordPress (mappress-google-maps-for-wordpress) is affected by CVE-2020-12077: versions before 2.53.9 implement AJAX actions without nonce or proper capability checks, enabling Remote Code Execution via admin-ajax.php. Red Hat and NVD entries corroborate the ...
WordPress mappress-google-maps-for-wordpress code issue vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. mappress-google-maps-for-wordpress is an interactive maps plugin used in it. A code issue vulnerability exists in WordPress...
PT-2020-13029 · WordPress · Mappress-Google-Maps-For-Wordpress
Name of the Vulnerable Software and Affected Versions: mappress-google-maps-for-wordpress plugin versions prior to 2.53.9 Description: The issue arises from the incorrect implementation of AJAX functions with nonces or capability checks in the mappress-google-maps-for-wordpress plugin, leading to...
WordPress 10Web Map Builder for Google Maps <= 1.0.63 - Unauthenticated Stored Cross-Site Scripting (XSS) via Plugin Settings Change vulnerability
Unauthenticated Stored Cross-Site Scripting XSS via Plugin Settings Change vulnerability found by Sean Murphy, QA Lead Matt Rusnak, and QA Engineer Ramuel Gall Wordfence in WordPress 10Web Map Builder for Google Maps = 1.0.63. Solution Update the WordPress 10Web Map Builder for Google Maps plugin...
Google Maps: online interventions with offline ramifications
The places where online life directly intersection with that lived offline will be forever fascinating, illustrated perfectly through a recent performance piece involving Google Maps, a cart, and an awful lot of mobile phones. Simon Weckert, an artist based in Berlin, Germany, showed how a little...
An Artist Used 99 Phones to Fake a Google Maps Traffic Jam
With his "Google Maps Hack," artist Simon Weckert draws attention to the systems we take for granted—and how we let them shape us...
Man uses 99 smartphones to cause traffic jam on Google Maps
By Sudais Asif He took 99 smartphones running the Google Maps app and then asked someone to roam them on the streets of Berlin. This is a post from HackRead.com Read the original post: Man uses 99 smartphones to cause traffic jam on Google Maps...
CVE-2014-7238
The WordPress plugin Contact Form Integrated With Google Maps 1.0-2.4 has Stored XSS...
Cross site scripting
The WordPress plugin Contact Form Integrated With Google Maps 1.0-2.4 has Stored XSS...
CVE-2014-7238
The CVE-2014-7238 entry concerns a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin “Contact Form Integrated With Google Maps” version 1.0–2.4. Descriptions in connected sources consistently identify the flaw as Stored XSS within that plugin; there are no details in the pro...
CVE-2014-7238
The WordPress plugin Contact Form Integrated With Google Maps 1.0-2.4 has Stored XSS...
Apk-Mitm - A CLI Application That Prepares Android APK Files For HTTPS Inspection
A CLI application that automatically prepares Android APK files for HTTPS inspection Inspecting a mobile app's HTTPS traffic using a proxy is probably the easiest way to figure out how it works. However, with the Network Security Configuration introduced in Android 7 and app developers trying to...
Sparrow-Wifi - Next-Gen GUI-based WiFi And Bluetooth Analyzer For Linux
Sparrow-wifi has been built from the ground up to be the next generation 2.4 GHz and 5 GHz Wifi spectral awareness tool. At its most basic it provides a more comprehensive GUI-based replacement for tools like inSSIDer and linssid that runs specifically on linux. In its most comprehensive use case...
Ping Identity: Google Maps API key leaked during device pairing
Summary: just on intercepting and going through the request i made from ort-admin.pingone.com . i found that the google map api key was leaking through get request . i was able to validate that the leaked key was a valid one Steps To Reproduce: 1.login to account goto setup tab ping iD device...
Joomla Google Maps 1.0.4 SQL Injection
Exploit Title : Joomla 1.5.26 Google Maps 1.0.4 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/10/2019 Vendor Homepage : mapdemo.110mb.com - joomla.org Joomla Affected Version : 1.5.16 and 1.5.26 Software Affected Version : 1.0.4 Owner of the...