routeros-mobile-networking

This is a vehicle-tracking proof of concept that intentionally sends GPS coordinates to a server and stores them in sqlite_db/coord.db. It is not evident malware, but the unauthenticated HTTP endpoint permits location disclosure, spoofing, and unbounded database writes; the globally writable directory and unescaped JavaScript output add security concerns. Severity is moderate for deployment with real location data; the example targets http://YOURSERVER[.]com/index.php and loads Leaflet from unpkg[.]com and map tiles from tile[.]osm[.]org. No credentials or environment variables are targeted.