PT-2022-33197

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.17 through 4.9.320 Description The issue is related to a refcount leak in the exynos map pmu function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 3.17...

CVE-2021-33057

The QQ application 8.7.1 for Android and iOS does not enforce the permission requirements e.g., android.permission.ACCESSFINELOCATION for determining the device's physical location. An attacker can use qq.createMapContext to create a MapContext object, use MapContext.moveToLocation to move the...

The vulnerability of the sourceMapURL function in the DevTools set of web development tools for the Firefox browser allows attackers to disclose sensitive information.

The vulnerability of the sourceMapURL function in the DevTools browser extension for web development is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

Tencent QQ 安全漏洞

Tencent QQ is a multi-platform instant messaging software from China's Tencent. It supports text, voice and video chatting, as well as file sharing, network hard disk, mailboxes, games, forums, online shopping, renting and job hunting. A security vulnerability exists in Tencent QQ version 8.7.1,...

PT-2022-10197 · Tencent · Qq

Name of the Vulnerable Software and Affected Versions: QQ application version 8.7.1 Description: The issue concerns the QQ application's failure to enforce permission requirements for determining a device's physical location, such as android.permission.ACCESS FINE LOCATION. An attacker can exploi...

Malicious code in deere-map-features (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecf01480d483812d03ead6ec633c050d070eb0b88e31cedfdf174cf90012e914 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2400 Malicious code in deere-map-features (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecf01480d483812d03ead6ec633c050d070eb0b88e31cedfdf174cf90012e914 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

A memory leak vulnerability was found in the Linux kernel's eBPF for the Simulated networking device driver in the way user uses BPF for the device such that function nsim_map_alloc_elem being called. A local user could use this flaw to get unauthorized access to some data.

...

WP DS Blog Map <= 3.1.3 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup PoC Put the following payload in any of the settings...

WP DS Blog Map <= 3.1.3 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup Put the following payload in any of the settings...

PT-2025-8525

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version that includes the fix for the dma queue left shift overflow issue Description A left shift overflow issue has been identified in the Linux kernel when the queue number is greater than 4, due to a 32-b...

WordPress WP DS Blog Map plugin <= 3.1.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Vinay Varma Mudunuri, Krishna Harsha Kondaveeti in WordPress WP DS Blog Map plugin versions = 3.1.3. Solution Deactivate and delete. This plugin has been closed as of July 15, 2022 and is not available for download. This...

Malicious Package

Overview deere-map-features is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

CVE-2022-32406

GtkRadiant v1.6.6 was discovered to contain a buffer overflow via the component q3map2. This vulnerability can cause a Denial of Service DoS via a crafted MAP file...

CVE-2022-32406

GtkRadiant v1.6.6 was discovered to contain a buffer overflow via the component q3map2. This vulnerability can cause a Denial of Service DoS via a crafted MAP file...

CVE-2022-32406

GtkRadiant v1.6.6 was discovered to contain a buffer overflow via the component q3map2. This vulnerability can cause a Denial of Service DoS via a crafted MAP file...

CVE-2022-32406

GtkRadiant v1.6.6 was discovered to contain a buffer overflow via the component q3map2. This vulnerability can cause a Denial of Service DoS via a crafted MAP file...

CVE-2022-32406

GtkRadiant 1.6.6 contains a buffer overflow in the q3map2 component that can be triggered by a crafted MAP file, leading to a Denial of Service. Affected software is GtkRadiant v1.6.6; root cause is a buffer overflow in q3map2. Impact is DoS as described in CVE-2022-32406. No remediation details ...

CVE-2022-32406: Buffer Copy without Checking Size of Input

GtkRadiant v1.6.6 was discovered to contain a buffer overflow via the component q3map2. This vulnerability can cause a Denial of Service DoS via a crafted MAP file...

PT-2022-21303

Name of the Vulnerable Software and Affected Versions GtkRadiant version 1.6.6 Description A buffer overflow issue was found in the q3map2 component, which can lead to a Denial of Service DoS when a crafted MAP file is processed. Recommendations For GtkRadiant version 1.6.6, consider avoiding the...