WP Go Maps < 10.0.10 - Unauthenticated Marker Information Disclosure

WP Go Maps WordPress plugin 10.0.10 contains an information disclosure vulnerability caused by lack of approval-state filtering on the public single-marker REST endpoint, letting unauthenticated users access unapproved marker records including PII and geographic coordinates, exploit requires no...

tinfoleak

tinfoleak The most complete open-source tool for Twitter intelligence analysis Introduction tinfoleak is an open-source tool within the OSINT Open Source Intelligence and SOCMINT Social Media Intelligence disciplines, that automates the extraction of information on Twitter and facilitates...

next.js_cve-2025-29927

next.jscve-2025-29927 A small and simple Next.js application running version 14.2.24 used to test CVE-2025-29927. Access the admin area /admin by utilizing the vulnerability or the hardcoded credentials admin:admin. » git clone [email protected]:0xPThree/next.jscve-2025-29927.git » docker...

CVE-2026-101756

A flaw was found in the Geographic Information System GIS component of MySQL. An authenticated remote attacker with high privileges can exploit this vulnerability over the network to cause a Denial of Service DoS. Successful exploitation causes the database server to hang or crash repeatedly,...

Not Where You Think: Protecting Location Privacy against Reasoning-Based Geolocation

Recent large reasoning models can infer where ordinary photos were taken using only visual information, creating a serious location privacy risk even when metadata and obvious geographic identifiers are removed. To understand the mechanism behind such fine-grained localization, we develop GeoTrac...

CVE-2026-57537

Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization...

CVE-2026-57537 Use After Free in DSP Service

Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization...

CVE-2026-57537

A Use After Free vulnerability exists in the DSP Service due to a lack of proper synchronization when concurrently accessing and modifying geographic mapping data . This memory corruption flaw can result in high impact across confidentiality, integrity, and availability . No specific affected ver...

CVE-2026-57537 Use After Free in DSP Service

Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization...

EUVD-2026-92979

Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization...

CVE-2026-57537: Use After Free

Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization...

PT-2026-106353

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description Memory corruption occurs when geographic mapping data is accessed and modified concurrently without proper synchronization. This issue stems from a race...

[SECURITY] Fedora 45 Update: postgresql18-postgis-3.6.4-6.fc45

PostGIS adds support for geographic objects to the PostgreSQL object-relation al database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic informati on systems GIS, much like ESRI's SDE or Oracle's Spatial extension...

[SECURITY] Fedora 45 Update: postgresql17-postgis-3.6.4-6.fc45

PostGIS adds support for geographic objects to the PostgreSQL object-relation al database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic informati on systems GIS, much like ESRI's SDE or Oracle's Spatial extension...

[SECURITY] Fedora 45 Update: postgresql16-postgis-3.6.4-6.fc45

PostGIS adds support for geographic objects to the PostgreSQL object-relation al database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic informati on systems GIS, much like ESRI's SDE or Oracle's Spatial extension...

[SECURITY] Fedora 43 Update: postgresql16-postgis-3.6.4-5.fc43

PostGIS adds support for geographic objects to the PostgreSQL object-relation al database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic informati on systems GIS, much like ESRI's SDE or Oracle's Spatial extension...

[SECURITY] Fedora 43 Update: postgresql18-postgis-3.6.4-5.fc43

PostGIS adds support for geographic objects to the PostgreSQL object-relation al database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic informati on systems GIS, much like ESRI's SDE or Oracle's Spatial extension...

[SECURITY] Fedora 44 Update: postgresql16-postgis-3.6.4-5.fc44

PostGIS adds support for geographic objects to the PostgreSQL object-relation al database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic informati on systems GIS, much like ESRI's SDE or Oracle's Spatial extension...

CVE-2026-82878 DataEase before 2.10.26 Missing Object-Level Authorization on Geographic, Linkage and Chart Endpoints

DataEase versions before 2.10.26 omit object-level authorization checks on geographic information, dashboard linkage, and chart detail REST endpoints, allowing authenticated users to access resources belonging to other users. Attackers can overwrite or delete map geometry, modify dashboard...

CVE-2026-82878

DataEase versions before 2.10.26 lack object-level authorization checks on REST endpoints for geographic information , dashboard linkage , and chart detail . This allows any authenticated user to access, overwrite, or delete resources belonging to other users by supplying arbitrary identifiers in...