trape

trape stable v2.0 People tracker on the Internet: Learn to track the world, to avoid being traced. Trape is an OSINT analysis and research tool, which allows people to track and execute intelligent social engineering attacks in real time. It was created with the aim of teaching the world how larg...

The vulnerabilities of Moxa TN-4900, Moxa EDR-8010, Moxa EDR-G9010, Moxa OnCell G4302-LTE4, and Moxa OnCell G4308-LTE4 microprogrammed software routers are related to deficiencies in access control. This allows attackers to gain access to confidential information.

The vulnerabilities of Moxa TN-4900, Moxa EDR-8010, Moxa EDR-G9010, Moxa OnCell G4302-LTE4, and Moxa OnCell G4308-LTE4 microprogrammed router software are related to deficiencies in access control. Exploiting these vulnerabilities can allow an attacker to gain access to confidential information...

ROS-20260806-73-0026

The vulnerability of the Linux operating system’s kernel Wi-Fi module is related to the exposure of sensitive information. Exploiting this vulnerability allows an attacker to gain access to confidential data...

The vulnerability of the MDaemon email server, related to the lack of protective measures for the website structure, allows attackers to execute arbitrary code and gain unauthorized access to confidential information.

The vulnerability of the MDaemon email server is related to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and gain unauthorized access to confidential information...

ROS-20260720-73-0043

The vulnerability of the MHTML component in Google Chrome relates to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to disclose confidential information remotely...

ROS-20260716-73-0014

The vulnerability of Google Chrome’s WebAudio component is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to disclose confidential information...

CVE-2026-11851

Improper Neutralization of Special Elements used in an SQL Command "SQL Injection" in the web management interface of certain ASUS router models allows a remote authenticated user to disclose confidential information via a crafted request that bypasses existing input validation Refer to the ' ...

CVE-2026-11851

Improper Neutralization of Special Elements used in an SQL Command "SQL Injection" in the web management interface of certain ASUS router models allows a remote authenticated user to disclose confidential information via a crafted request that bypasses existing input validation Refer to the ' ...

CVE-2026-11851: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command "SQL Injection" in the web management interface of certain ASUS router models allows a remote authenticated user to disclose confidential information via a crafted request that bypasses existing input validation Refer to the ' ...

CVE-2026-15389 Inadequate access control in Sesame Time session management

A vulnerability relating to insufficient access control has been identified in the session management of the Sesame Time web application and its REST v3 API. The flaw lies in the fact that the system uses the session identifier USID as the sole validation mechanism, without verifying whether that...

The vulnerability of ZTE MU5250 Wi-Fi routers’ microprogramming software, related to insufficient protection of operational data, allows attackers to disclose confidential information.

The vulnerability of ZTE MU5250 Wi-Fi router microprogramming software is related to insufficient protection for operational data. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

The vulnerability of the Exim mail server, related to the lack of initialization of resources, allows attackers to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the Exim mail server is related to the lack of initialization of resources. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and accessibility of the protected information...

The vulnerability of the SAP S/4HANA Finance financial management software lies in the lack of protective measures for SQL query structures, allowing attackers to gain unauthorized access to confidential information.

The vulnerability of the SAP S/4HANA Finance financial management software is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to confidential information...

PT-2026-53827

Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient authorization within the API. Successful exploitation could allow an authenticated attacker to retrieve confidential information beyond their assigned privileges...

CVE-2026-27708 FOSSBilling: IDOR in Servicecustom Client API allows cross-client data access

FOSSBilling is a free, open-source billing and client management system. In versions 0.7.2 and prior, the Servicecustom Client API's call method accepts an orderid parameter and fetches the associated order without verifying the authenticated client owns it, potentially exposing cross-client data...

The vulnerability of the DHCP server service for Windows operating systems allows a perpetrator to gain unauthorized access to confidential information.

The vulnerability of the DHCP server service for Windows operating systems is related to improper handling of values. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to confidential information...

postgresql: PostgreSQL oidvector discloses a few bytes of memory

A type validation flaw has been discovered in postgresql. Improper validation of the type "oidvector" in PostgreSQL allows a database user to disclose a few bytes of server memory. It is possible that this may expose confidential information but it is unlikely...

Open WebUI 信息泄露漏洞

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted WebUI under open source. Versions of Open WebUI prior to 0.9.5 had a vulnerability related to information leakage. This vulnerability occurred when group members were granted read access to model settings, allowing them to...

The vulnerability of the gso_features_check() function in Linux operating systems allows a hacker to gain unauthorized access to confidential information.

The vulnerability of the gsofeaturescheck function in Linux operating systems is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential information...

The vulnerability of the `tc_chain_fill_node()` function in Linux operating systems allows a hacker to gain unauthorized access to confidential information.

The vulnerability of the tcchainfillnode function in Linux operating systems is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential information...