libipa_hbac, libsss_idmap, libsss_nss_idmap, libsss_simpleifp, python, sssd security update

CentOS Errata and Security Advisory CESA-2015:2355 Updated sssd packages that fix one security issue, multiple bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability...

PT-2015-6840 · Red Hat +1 · Libreport +2

Name of the Vulnerable Software and Affected Versions: libreport versions 2.0.7 through 2.6.3 Description: The issue allows remote attackers to obtain sensitive information via unspecified vectors related to the backtrace, cmdline, environ, open fds, maps, smaps, hostname, remote, ks.cfg, or...

autofs: priv escalation via interpreter load path for program based automount maps

It was found that program-based automounter maps that used interpreted languages such as Python would use standard environment variables to locate and load modules of those languages. A local attacker could potentially use this flaw to escalate their privileges on the system...

WordPress Leaflet Maps Marker Plugin <= 3.5.3 - SQL Injection

This plugin is prone to tag multiple parameter SQL injection. Solution Upgrade the plugin...

Geotweet - Social engineering tool for human hacking

Another way to use Twitter and instagram. Geotweet is an osint application that allows you to track tweets and instagram and trace geographical locations and then export to google maps. Allows you to search on tags, world zones and user info and timeline. Requirements Python 2.7 PyQt4, tweepy,...

WordPress Google Maps Plugin <= 2.3.9 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

Visitor Maps & Who's Online <= 1.5.8.6 - Authenticated Stored Cross-Site Scripting (XSS)

The visitor-maps WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS security vulnerability...

autofs: priv escalation via interpreter load path for program based automount maps

It was found that program-based automounter maps that used interpreted languages such as Python would use standard environment variables to locate and load modules of those languages. A local attacker could potentially use this flaw to escalate their privileges on the system...

Mapbox: Disclosure of map information

In July 2015, @hussain submitted a report where a GET request to an internal API endpoint /core/api/Map disclosed details of public maps in a Mapbox user's account. The disclosed information included the name, description, map identifier, geographic center, map layers, date created, and date last...

CVE-2014-1750

Open redirect vulnerability in nokia-mapsplaces.php in the Nokia Maps & Places plugin 1.6.6 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the href parameter to page/place.html. NOTE: this was originally reported as a...

Cross site scripting

Open redirect vulnerability in nokia-mapsplaces.php in the Nokia Maps & Places plugin 1.6.6 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the href parameter to page/place.html. NOTE: this was originally reported as a...

CVE-2014-1750

Open redirect vulnerability in nokia-mapsplaces.php in the Nokia Maps & Places plugin 1.6.6 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the href parameter to page/place.html. NOTE: this was originally reported as a...

CVE-2014-1750

CVE-2014-1750 affects the Nokia Maps & Places WordPress plugin (version up to 1.6.6). The vulnerability is an open redirect via the href parameter to page/place.html, enabling an attacker to redirect users to arbitrary sites and potentially facilitate phishing. Some sources also reference XSS, bu...

WordPress Leaflet Maps Marker Plugin <= 2.3 - Multipe Vulnerabilities

This plugin is prone to multiple security issues. Solution Update the plugin...

WordPress Leaflet Maps Marker Pro Plugin - Multiple Vulnerabilities

This plugin is prone to SQL injection, cross site scripting, shell upload and file deletion vulnerabilities. Solution Update the plugin...

Battle of Wesnoth directory traversal

Directory traversal on maps loading...

[USN-2579-1] autofs vulnerability

========================================================================== Ubuntu Security Notice USN-2579-1 April 27, 2015 autofs vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubun...

Ubuntu 14.10 : autofs vulnerability (USN-2579-1)

It was discovered that autofs incorrectly filtered environment variables when using program maps. When program maps were configured, a local user could use this issue to escalate privileges. This update changes the default behaviour by adding a prefix to environment variables. Sites using program...

Ubuntu: Security Advisory (USN-2579-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2579-1: autofs vulnerability

It was discovered that autofs incorrectly filtered environment variables when using program maps. When program maps were configured, a local user could use this issue to escalate privileges. This update changes the default behaviour by adding a prefix to environment variables. Sites using program...