WP Google Maps <= 6.3.14 - Authenticated Stored Cross-Site Scripting (XSS) via CSRF

The WP Google Maps WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS via CSRF security vulnerability...

les-mathematiques.net XSS vulnerability

Vulnerable URL: http://www.les-mathematiques.net/phorum/mods/googlemaps/maptool/mapframe.php?apikey="...

Linux kernel local elevation of privilege vulnerability (Dirty COW)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. The Linux Kernel local elevation of privilege vulnerability can be exploited by a low-privileged local attacker to gain write access to other read-only memory maps, which in...

Wordpress hero-maps-pro plugin cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the Wordpress hero-maps-pro plugin version 2.1.0. An attacker...

CVE-2016-1000137

Reflected XSS in wordpress plugin hero-maps-pro v2.1.0...

Cross site scripting

Reflected XSS in wordpress plugin hero-maps-pro v2.1.0...

CVE-2016-1000137

WordPress Hero Maps Pro plugin version 2.1.0 is affected by a reflected cross-site scripting (XSS) vulnerability. The Nuclei template documents a reflected XSS in Hero Maps Pro 2.1.0, allowing an attacker to execute arbitrary JavaScript in the victim’s browser in the context of the affected site....

CVE-2016-1000137

Reflected XSS in wordpress plugin hero-maps-pro v2.1.0...

[SECURITY] Fedora 25 Update: trytond-google-maps-4.0.2-1.fc25

google-maps module for Tryton application server...

Cry Ransomware Using UDP, Imgur, Google Maps

Ransomware purporting to come from a phony government agency, something called the Central Security Treatment Organization, has been making the rounds, researchers say. The ransomware, which is already known by a number of names including Cry, CSTO ransomware, or Central Security Treatment...

WordPress plugin Google Maps 'id' parameter cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Google Maps 'id' parameter due to the...

Google Maps <= 2.1.3 - Authenticated Reflected Cross-Site Scripting (XSS)

The google-maps WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability...

WordPress Google Maps 2.1.2 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Google Maps WordPress Plugin ------------------------------------------------------------------------ Julien Rentrop, July 2016...

WordPress Google Maps Plugin <= 2 2.1.3 - Cross Site Scripting (XSS)

Because of this vulnerability, the attackers can steal users' session tokens, or perform arbitrary actions on their behalf. Solution Update the plugin...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the print Maps function toolbox/lsof.c in the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating locally, to increase their privileges by using a specially created file with a long...

Ian Dunn: [Not just a server configuration issue] Full Path Disclosure

Hey, I've just found a 'full path disclosure' in basic-google-maps-placemarks, so it's not just a server configuration issue! I've tested it on different servers including windows, ubuntu, CentOS etc.. PoC So, if we visit wp-content/plugins/basic-google-maps-placemarks/unit-tests.php it is clearl...

Ian Dunn: CSRF in changing settings of Basic Google Maps Placemarks

Hey, this is Ahsan Tahir! I was just pentesting Basic Google Maps Placemarks in Wordpress, I found a CSRF Cross-Site Request Forgery So, by exploiting this CSRF issue, an attacker can edit the settings e.g Map Width, Map Height, Map Center Address etc.. PoC There is not CSRF token/Authentication...

UBUNTU-CVE-2016-3757

The printmaps function in toolbox/lsof.c in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows user-assisted attackers to gain privileges via a crafted application that attempts to list a long name of a memory-mapped file, aka internal bug 28175237...

Source code of Old_GSI_Maps prior to January, 2015 vulnerable to directory traversal

Overview kml2jsonp.php contained in source code of OldGSIMaps prior to January, 2015 provided by the Geospatial Information Authority of Japan GSI contains a directory traversal vulnerability CWE-22. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

Xen elevation of privilege vulnerability (CNVD-2016-03338)

Xen is an open source virtual machine monitor product developed at the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. There is a security vulnerability in...