Lucene search
+L

2631 matches found

Cvelist
Cvelist
added 2018/07/12 4:0 p.m.25 views

CVE-2017-14709

The komoot GmbH "Komoot - Cycling & Hiking Maps" app before 9.3.2 -- aka komoot-cycling-hiking-maps/id447374873 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

6.8AI score0.00491EPSS
SaveExploits0References1
Check Point Advisories
Check Point Advisories
added 2018/06/28 12:0 a.m.2 views

WordPress Google Maps Plugin SQL Injection

An SQL injection vulnerability exists in the WordPress Google Maps Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

5.2AI score
SaveExploits0
Prion
Prion
added 2018/06/25 2:29 a.m.21 views

Cross site request forgery (csrf)

The API service on Google Home and Chromecast devices before mid-July 2018 does not prevent DNS rebinding attacks from reading the scanresults JSON data, which allows remote attackers to determine the physical location of most web browsers by leveraging the presence of one of these devices on its...

3.3CVSS4.7AI score0.00696EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2018/06/25 2:29 a.m.4 views

CVE-2018-12716

The API service on Google Home and Chromecast devices before mid-July 2018 does not prevent DNS rebinding attacks from reading the scanresults JSON data, which allows remote attackers to determine the physical location of most web browsers by leveraging the presence of one of these devices on its...

4.3CVSS5.1AI score0.00696EPSS
SaveExploits0References9
n0where
n0where
added 2018/06/16 9:24 a.m.19 views

Satellite Tracking Application: Gpredict

Gpredict is a real-time satellite tracking and orbit prediction application. It can track a large number of satellites and display their position and other data in lists, tables, maps, and polar plots radar view. Gpredict can also predict the time of future passes for a satellite, and provide you...

0.1AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2018/06/13 12:0 a.m.102 views

Microsoft Windows 10: Service: Downloaded Maps Manager

This test checks the setting for policy OpenVAS Vulnerability Test $Id: windownloadedmapsmanager.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Downloaded Maps Manager MapsBroker Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...

7.3AI score
SaveExploits0
HackRead
HackRead
added 2018/06/10 1:51 p.m.69 views

8 Google Maps hidden places You are not allowed to see

By Waqas If you thought you have seen it all then you This is a post from HackRead.com Read the original post: 8 Google Maps hidden places You are not allowed to see...

0.4AI score
SaveExploits0
Kitploit
Kitploit
added 2018/05/18 10:52 p.m.46 views

FireShodanMap - A Realtime Map That Integrates Firebase, Google Maps And Shodan

FireShodanMap is a Realtime map that integrates Firebase and Shodan. A search is carried out using Shodan searching vulnerable devices and they are showed on the map for analysis. All data updated in Firebase are Realtime. Changes We have a file named "fireshodan.py" responsible for fill Firebase...

7.3AI score
SaveExploits0References1
HackRead
HackRead
added 2018/05/10 11:18 a.m.47 views

Google Maps flaw lets hackers redirect users to malicious sites

By Uzair Amir Google Maps users need to stay vigilant as cybercriminals are taking This is a post from HackRead.com Read the original post: Google Maps flaw lets hackers redirect users to malicious sites...

1.8AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2018/04/27 5:15 a.m.5 views

WordPress plugin "WP Google Map Plugin" vulnerable to cross-site scripting

Overview The WordPress plugin "WP Google Map Plugin" provided by Flipper Code contains a reflected cross-site scripting vulnerability CWE-79. Chris Liu reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An...

6.1CVSS6AI score0.01066EPSS
SaveExploits0References5
0day.today
0day.today
added 2018/04/24 12:0 a.m.58 views

Open-AudIT 2.1 - CSV Macro Injection Vulnerability

Exploit for windows platform in category web applications Exploit Title: Open-AudIT 2.1 - CSV Macro Injection Vulnerability Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: https://opmantek.com Software Link: https://www.open-audit.org/downloads.php Affected...

0.02839EPSS
SaveExploits5
Exploit DB
Exploit DB
added 2018/04/24 12:0 a.m.38 views

Open-AudIT 2.1 - CSV Macro Injection

Hi Guys, Exploit Title: Open-AudIT 2.1 - CSV Macro Injection Vulnerability Google Dork: N/A Date: 21-04-2018 Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: https://opmantek.com Software Link: https://www.open-audit.org/downloads.php Affected Version: 2.1...

6.8CVSS6.5AI score0.02839EPSS
SaveExploits5
OpenVAS
OpenVAS
added 2018/04/23 12:0 a.m.106 views

Microsoft Windows 10: Send file samples when further analysis is required

This policy setting configures behaviour of samples submission when opt-in for MAPS telemetry is set. Possible settings: - 0: Always prompt - 1: Send safe samples automatically - 2: Never send - 3: Send all samples automatically OpenVAS Vulnerability Test $Id:...

7.4AI score
SaveExploits0
OpenVAS
OpenVAS
added 2018/04/23 12:0 a.m.199 views

Microsoft Windows: Join Microsoft MAPS

This policy setting allows you to join Microsoft MAPS. Microsoft MAPS is the online community that helps you choose how to respond to potential threats. The community also helps stop the spread of new malicious software infections. You can choose to send basic or additional information about...

6.9AI score
SaveExploits0References1
CNVD
CNVD
added 2018/04/18 12:0 a.m.6 views

DNN CATALooK.netStore Module Cross-Site Scripting Vulnerability

DNN formerly known as DotNetNuke is a set of U.S. DNN by Microsoft support , based on the ASP.NET platform for open source content management system CMS. The system is easy to install , scalable , feature-rich features such as CATALooK.netStore module is one of the CATALooK store module . A...

6.1CVSS6.4AI score0.00692EPSS
SaveExploits2References1
Prion
Prion
added 2018/04/16 8:29 p.m.27 views

Design/Logic Flaw

The CATALooK.netStore module through 7.2.8 for DNN formerly DotNetNuke allows XSS via the /ViewEditGoogleMaps.aspx PortalID or CATSkin parameter, or the /ImageViewer.aspx link or desc parameter...

4.3CVSS6AI score0.00692EPSS
SaveExploits2References1Affected Software1
Openbugbounty
Openbugbounty
added 2018/04/08 9:0 p.m.8 views

exactet.ca XSS vulnerability

Open Bug Bounty ID: OBB-599233 Description| Value ---|--- Affected Website:| exactet.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
CNVD
CNVD
added 2018/03/28 12:0 a.m.4 views

WordPress Events Manager Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers to set up personal blog sites.Events Manager plugin is used in one of the registration plugin. A cross-site scripting vulnerability exists in th...

5.4CVSS6.3AI score0.01058EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2018/03/26 2:29 a.m.2 views

CVE-2018-9020

The Events Manager plugin before 5.8.1.2 for WordPress allows XSS via the events-manager.js mapTitle parameter in the Google Maps miniature...

5.4CVSS5.4AI score0.01058EPSS
SaveExploits1References8
NVD
NVD
added 2018/03/26 2:29 a.m.20 views

CVE-2018-9020

The Events Manager plugin before 5.8.1.2 for WordPress allows XSS via the events-manager.js mapTitle parameter in the Google Maps miniature...

5.4CVSS5.3AI score0.01058EPSS
SaveExploits1References4
Rows per page
Query Builder