Sangfor OSM - Arbitrary File Upload

Sangfor Operation and Maintenance Management System = 3.0.8 contains an unrestricted file upload vulnerability caused by manipulation of the "File" argument in /fort/trust/version/common/common.jsp, letting remote attackers upload arbitrary files, exploit requires no special privileges. id:...

Sangfor-CVE-2025-12916

Sangfor-CVE-2025-12916 Sangfor CVE-2025-12916 Remote Command Execution Vulnerability Batch Detection Tool || Author: Jinxia Security Sangfor OSM Vulnerability Batch Detection Tool A batch detection tool for the CVE-2025-12916 remote command execution vulnerability in Sangfor Operation and...

smartmap

Godview Godview is a map based entirely on LLMs Large Language Models and OSM Open Street Map. Uses Anthropic, DeepSeek or Open AI. Godview also runs locally with Ollama. Website: godview.ai Installation Pull repository git clone https://github.com/space0blaster/godview.git Install Install...

WordPress OSM – OpenStreetMap plugin < 6.1.15 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Naoya Takahashi nakko in WordPress Plugin OSM versions 6.1.15...

Malicious code in @zalastax/nolb-osm (npm)

The package @zalastax/nolb-osm was found to contain malicious code. --- Credit: OpenSSF source...

Kirona Dynamic Resource Scheduler - Information Disclosure Detection

Kirona Dynamic Resource Scheduler is susceptible to information disclosure. An unauthenticated user can directly access /osm/REGISTER.cmd aka /osmtiles/REGISTER.cmd, which contains sensitive information with exposed SQL queries, such as database version, table name, and column name. !/usr/bin/env...

ANT-2026-XGXD0ZVD · gdal · Heap-buffer-overflow

heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-XGXD0ZVD: Heap-buffer-overflow in gpb.h:288 GDAL's OS...

de.grundid.osmtools:osm-tools-api (>=1.0.m1, <=1.0.m3), de.grundid.osmtools:osm-tools-process (>=1.0.m1, <=1.0.m3) +3 more potentially affected by CVE-2026-50623 via org.apache.cxf:cxf-rt-rs-security-oauth2 (2.6.0)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - de.grundid.osmtools:osm-tools-api =1.0.m1, =1.0.m1, =1.0.m2, =1.0.m3 -...

de.grundid.osmtools:osm-tools-api (>=1.0.m1, <=1.0.m3), de.grundid.osmtools:osm-tools-process (>=1.0.m1, <=1.0.m3) +3 more potentially affected by CVE-2026-50627 via org.apache.cxf:cxf-rt-rs-security-oauth2 (2.6.0)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - de.grundid.osmtools:osm-tools-api =1.0.m1, =1.0.m1, =1.0.m2, =1.0.m3 -...

de.grundid.osmtools:osm-tools-api (>=1.0.m1, <=1.0.m3), de.grundid.osmtools:osm-tools-process (>=1.0.m1, <=1.0.m3) +3 more potentially affected by CVE-2026-50629 via org.apache.cxf:cxf-rt-rs-security-oauth2 (2.6.0)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - de.grundid.osmtools:osm-tools-api =1.0.m1, =1.0.m1, =1.0.m2, =1.0.m3 -...

de.grundid.osmtools:osm-tools-api (>=1.0.m1, <=1.0.m3), de.grundid.osmtools:osm-tools-process (>=1.0.m1, <=1.0.m3) +3 more potentially affected by CVE-2026-50628 via org.apache.cxf:cxf-rt-rs-security-oauth2 (2.6.0)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - de.grundid.osmtools:osm-tools-api =1.0.m1, =1.0.m1, =1.0.m2, =1.0.m3 -...

de.grundid.osmtools:osm-tools-api (>=1.0.m1, <=1.0.m3), de.grundid.osmtools:osm-tools-process (>=1.0.m1, <=1.0.m3) +3 more potentially affected by CVE-2026-50631 via org.apache.cxf:cxf-rt-rs-security-oauth2 (2.6.0)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - de.grundid.osmtools:osm-tools-api =1.0.m1, =1.0.m1, =1.0.m2, =1.0.m3 -...

CVE-2026-4429

The OSM – OpenStreetMap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'markername' and 'filecolorlist' shortcode attribute of the osmmapv3 shortcode in all versions up to and including 6.1.15. This is due to insufficient input sanitization and output escaping. This mak...

datacube (1.6.2), osm-export-tool (0.0.17) +1 more potentially affected by CVE-2026-8212 via gdal (2.3.3)

gdal PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on gdal and may be impacted: - datacube 1.6.2 - osm-export-tool 0.0.17 - pysy =0.0.8, =0.0.10 Source cves: CVE-2026-8212 Source advisory: OSV:GHSA-R5M4-5VWW-W9F5...

datacube (1.6.2), osm-export-tool (0.0.17) +1 more potentially affected by CVE-2026-8213 via gdal (2.3.3)

gdal PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on gdal and may be impacted: - datacube 1.6.2 - osm-export-tool 0.0.17 - pysy =0.0.8, =0.0.10 Source cves: CVE-2026-8213 Source advisory: OSV:PYSEC-2026-2157...

evaporation (>=0.1.0, <=1.0.0), hspatial (>=0.1.0, <=2.1.3) +4 more potentially affected by CVE-2026-8213 via gdal (2.4.4)

gdal PYPI version 2.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on gdal and may be impacted: - evaporation =0.1.0, =0.1.0, =0.0.4, =1.0.16, =0.9.0, =0.9.1 Source cves: CVE-2026-8213 Source advisory: OSV:PYSEC-2026-2157...

datacube (1.6.2), osm-export-tool (0.0.17) +1 more potentially affected by CVE-2026-8087 via gdal (2.3.3)

gdal PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on gdal and may be impacted: - datacube 1.6.2 - osm-export-tool 0.0.17 - pysy =0.0.8, =0.0.10 Source cves: CVE-2026-8087 Source advisory: OSV:GHSA-H9RH-5FFH-H669...

datacube (1.6.2), osm-export-tool (0.0.17) +1 more potentially affected by CVE-2026-8088 via gdal (2.3.3)

gdal PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on gdal and may be impacted: - datacube 1.6.2 - osm-export-tool 0.0.17 - pysy =0.0.8, =0.0.10 Source cves: CVE-2026-8088 Source advisory: OSV:GHSA-J3F5-RW74-G4RV...

evaporation (>=0.1.0, <=1.0.0), hspatial (>=0.1.0, <=2.1.3) +4 more potentially affected by CVE-2026-8088 via gdal (2.4.4)

gdal PYPI version 2.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on gdal and may be impacted: - evaporation =0.1.0, =0.1.0, =0.0.4, =1.0.16, =0.9.0, =0.9.1 Source cves: CVE-2026-8088 Source advisory: OSV:GHSA-J3F5-RW74-G4RV...

datacube (1.6.2), osm-export-tool (0.0.17) +1 more potentially affected by CVE-2026-8087 via gdal (2.3.3)

gdal PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on gdal and may be impacted: - datacube 1.6.2 - osm-export-tool 0.0.17 - pysy =0.0.8, =0.0.10 Source cves: CVE-2026-8087 Source advisory: OSV:PYSEC-2026-2155...