bpf: Fix helper writes to read-only maps

...

WordPress Smooth Maps plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Smooth Maps versions = 1.1...

CVE-2024-10621

CVE-2024-10621 affects the Simple Shortcode for Google Maps WordPress plugin. It is a Stored XSS in the pw_map shortcode across all versions up to 1.5.4 due to insufficient input sanitization and output escaping. Exploitation requires authenticated access at contributor level or higher, enabling ...

CVE-2024-10621 Simple Shortcode for Google Maps <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Simple Shortcode for Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's pwmap shortcode in all versions up to, and including, 1.5.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

WordPress plugin Simple Shortcode for Google Maps 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin.... A security vulnerability exists ...

WordPress Smooth Maps Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)

Software Smooth Maps Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51901 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7ae7d310b6c4 Credits SOPROBRO Required privilege Contributor...

WordPress Simple Shortcode for Google Maps plugin <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Akbar Kustirama in WordPress Plugin Simple Shortcode for Google Maps versions = 1.5.4...

DEBIAN-CVE-2024-50164

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix overloading of MEMUNINIT's meaning Lonial reported an issue in the BPF verifier where checkmemsizereg has the following code: if !tnumisconstreg-varoff / For unprivileged variable accesses, disable raw mode so that the...

UBUNTU-CVE-2024-50164

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix overloading of MEMUNINIT's meaning Lonial reported an issue in the BPF verifier where checkmemsizereg has the following code: if !tnumisconstreg-varoff / For unprivileged variable accesses, disable raw mode so that the...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from allowing the BPF program to write read-only maps when handling the MEMUNINIT flag...

WordPress Simple Shortcode for Google Maps Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)

Software Simple Shortcode for Google Maps Type Plugin Vulnerable versions = 1.5.4 Fixed in 1.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10621 Patch priority Low CVSS severity Low 6.5 Developer Fullworks Plugins PSID 1c153bff9061 Credits Akbar...

CVE-2024-10715

The MapPress Maps for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Map block in all versions up to, and including, 2.94.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

CVE-2024-10715

The MapPress Maps for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Map block in all versions up to, and including, 2.94.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

CVE-2024-10715 MapPress Maps for WordPress <= 2.94.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Block

The MapPress Maps for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Map block in all versions up to, and including, 2.94.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

PT-2024-16485 · WordPress · Mappress Maps

Name of the Vulnerable Software and Affected Versions: MapPress Maps for WordPress versions up to, and including, 2.94.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's Map block due to insufficient input sanitization and output escaping on user-supplied...

WordPress plugin MapPress Maps for WordPress 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

WordPress MapPress Maps for WordPress plugin <= 2.94.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Block vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Map Block vulnerability discovered by Akbar Kustirama in WordPress Plugin MapPress Maps for WordPress versions = 2.94.1...

Malicious code in @maps-bc/i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d4aadf453111b6be9daf1b61a25c3d7201dbed9584797b6213c4608623e9dbeb The OpenSSF Package Analysis project identified '@maps-bc/i18n' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in @maps-bc/runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 10155ba7c84ace28dedd143dcb15c74cf718077864c2940d65e11f748f2b7db1 The OpenSSF Package Analysis project identified '@maps-bc/runtime' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

WordPress MapPress Maps for WordPress Plugin <= 2.94.1 is vulnerable to Cross Site Scripting (XSS)

Software MapPress Maps for WordPress Type Plugin Vulnerable versions = 2.94.1 Fixed in 2.94.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10715 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e896b2089ac1 Credits Akbar...