WordPress Google Map Travel 3.4 XSS / CSRF

=============================================================================== CSRF/Stored XSS Vulnerability in AB Google Map Travel AB-MAP Wordpress Plugin =============================================================================== . contents:: Table Of Content Overview ======== Title :Stor...

WordPress AB Google Map Travel Plugin <= 3.9 - Multiple CSRF

Because of these vulnerabilities, the attackers can hijack the authentication of administrators for requests that conduct cross site scripting attacks via the "lat", "long", "zoom", "mapheight" or "mapwidth" parameters in the abmapoptions page to wp-admin/admin.php. Solution Update the plugin...

WordPress AB Google Map Travel CSRF / XSS

=============================================================================== CSRF/Stored XSS Vulnerability in AB Google Map Travel AB-MAP Wordpress Plugin =============================================================================== . contents:: Table Of Content Overview ======== Title :Stor...

[SECURITY] Fedora 21 Update: mapserver-6.2.2-1.fc21

Mapserver is an internet mapping program that converts GIS data to map images in real time. With appropriate interface pages, Mapserver can provide an interactive internet map based on custom GIS data...

linux/x86 - Obfuscated - map google.com to 127.1.1.1 98 bytes

linux/x86 - Obfuscated - map google.com to 127.1.1.1 98 bytes. Shellcode exploit for linx86 platform / Linux x86 - map google.com to 127.1.1.1 in /etc/hosts Obfuscated version - 98 bytes Original: http://shell-storm.org/shellcode/files/shellcode-893.php Author: xmgv Details:...

kernel: kvm: excessive pages un-pinning in kvm_iommu_map error path

It was found that the fix for CVE-2014-3601 was incomplete: the Linux kernel's kvmiommumappages function still handled IOMMU mapping failures incorrectly. A privileged user in a guest with an assigned host device could use this flaw to crash the host...

chromium-browser: Use-after-free in service workers

Multiple use-after-free vulnerabilities in the ServiceWorkerScriptCacheMap implementation in content/browser/serviceworker/serviceworkerscriptcachemap.cc in Google Chrome before 41.0.2272.76 allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors...

Linux/ARM - Add Map (127.1.1.1 google.lk) In /etc/hosts Shellcode (79 bytes)

Linux/ARM - Add Map 127.1.1.1 google.lk In /etc/hosts Shellcode 79 bytes. Shellcode exploit for ARM platform / Title: Add map in /etc/hosts file - 79 bytes Date: 2015-03-02 Architecture: armv6l GNU/Linux Website: http://osandamalith.wordpress.com E-Mail: osandacatunseen.is Author: Osanda Malith...

UBUNTU-CVE-2014-5332

Race condition in NVMap in NVIDIA Tegra Linux Kernel 3.10 allows local users to gain privileges via a crafted NVMAPIOCCREATE IOCTL call, which triggers a use-after-free error, as demonstrated by using a race condition to escape the Chrome sandbox...

Vala 'Gst.MapInfo()' Function Denial of Service Vulnerability

Vala is a programming language for the GObject system based on Gnome, developed by software developers Jurg Billeter and Raffaele Sandrini. A denial of service vulnerability exists in the Vala 'Gst.MapInfo' function, which could allow a context-sensitive attacker to launch a denial of service...

DEBIAN-CVE-2014-9496

The sd2parsersrcfork function in sd2.c in libsndfile allows attackers to have unspecified impact via vectors related to a 1 map offset or 2 rsrc marker, which triggers an out-of-bounds read...

Out-of-bounds

The sd2parsersrcfork function in sd2.c in libsndfile allows attackers to have unspecified impact via vectors related to a 1 map offset or 2 rsrc marker, which triggers an out-of-bounds read...

CVE-2014-100006

Multiple cross-site scripting XSS vulnerabilities in modulesv3/googlemap/wtv3streetview.php in webtrees before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the 1 map, 2 streetview, or 3 reset parameter...

UBUNTU-CVE-2014-9805

ImageMagick allows remote attackers to cause a denial of service segmentation fault and application crash via a crafted pnm file...

Cellular Privacy, SS7 Security Shattered at 31C3

The recently concluded Chaos Communications Congress 31c3 in Hamburg, Germany was an all-out assault on cellular call privacy and security. Of particular interest was the SS7 protocol used to route calls between switching centers. Researchers, doing parallel research as it turns out, found gaping...

Next Generation Snort IPS: Snort3

The Snort++ project has been hard at work for a while now and we have released the third alpha of the next generation Snort IPS Intrusion Prevention System. This file will show you what Snort++ has to offer and guide you through the steps from download to demo. If you are unfamiliar with Snort yo...

Updated moodle package fixes security vulnerabilities

In Moodle before 2.6.5, without forcing encoding, it was possible that UTF7 characters could be used to force cross-site scripts to AJAX scripts although this is unlikely on modern browsers and on most Moodle pages MSA-14-0035. In Moodle before 2.6.5, an XSS issue through $searchcourse in...

CVE-2014-8369

The kvmiommumappages function in virt/kvm/iommu.c in the Linux kernel through 3.17.2 miscalculates the number of pages during the handling of a mapping failure, which allows guest OS users to cause a denial of service host OS page unpinning or possibly have unspecified other impact by leveraging...

[SECURITY] Fedora 21 Update: slapi-nis-0.54.1-1.fc21

This package provides two plugins for Red Hat and 389 Directory Server. The NIS Server plugin allows the directory server to act as a NIS server for clients, dynamically generating and updating NIS maps according to its configuration and the contents of the DIT, and serving the results to clients...

Visitors Google Map Lite module mod_visitorsgooglemap SQL Injection

An SQL injection vulnerability has been reported in Visitors Google Map Lite module Mod Visitorsgooglemap. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...