176 matches found
tinfoleak
tinfoleak The most complete open-source tool for Twitter intelligence analysis Introduction tinfoleak is an open-source tool within the OSINT Open Source Intelligence and SOCMINT Social Media Intelligence disciplines, that automates the extraction of information on Twitter and facilitates...
WP Go Maps < 10.0.10 - Unauthenticated Marker Information Disclosure
WP Go Maps WordPress plugin 10.0.10 contains an information disclosure vulnerability caused by lack of approval-state filtering on the public single-marker REST endpoint, letting unauthenticated users access unapproved marker records including PII and geographic coordinates, exploit requires no...
CVE-2026-82878
DataEase versions before 2.10.26 lack object-level authorization checks on REST endpoints for geographic information , dashboard linkage , and chart detail . This allows any authenticated user to access, overwrite, or delete resources belonging to other users by supplying arbitrary identifiers in...
next.js_cve-2025-29927
next.jscve-2025-29927 Una piccola e semplice applicazione Next.js che esegue la versione 14.2.24 utilizzata per testare CVE-2025-29927. Accedi all'area amministrativa /admin sfruttando la vulnerabilità o le credenziali hardcoded admin:admin. root@kitploit: » git clone...
How to fake a data trail (and maybe lower prices) (Lock and Code S07E16)
It may sound entirely bizarre but the prices you once paid for hotels, educational classes, or staplers could have all been higher because you used a Mac computer, lived in a certain zip code, or lacked an Office Depot in your neighborhood. No, really. In 2012, The Wall Street Journal reported th...
CVE-2026-63683
Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager - IP and GeoIP conditions trusted spoofable forwarded headers, allowing remote clients to bypass location-based rules...
CVE-2026-8386
The WP Go Maps WordPress plugin before 10.0.10 does not perform any approval-state filtering on its public single-marker REST endpoint, allowing unauthenticated users to retrieve marker records that an administrator has not yet approved for public display, including any PII placed in the address...
CVE-2026-8386 WP Go Maps < 10.0.10 - Unauthenticated Sensitive Information Disclosure via Marker ID
The WP Go Maps WordPress plugin before 10.0.10 does not perform any approval-state filtering on its public single-marker REST endpoint, allowing unauthenticated users to retrieve marker records that an administrator has not yet approved for public display, including any PII placed in the address...
PT-2026-49184
Name of the Vulnerable Software and Affected Versions WP Go Maps versions prior to 10.0.10 Description The plugin fails to perform approval-state filtering on its public single-marker REST endpoint. This allows unauthenticated users to retrieve marker records that have not been approved by an...
CVE-2020-25900
HelloTalk through 3.4.1 stores full-precision GPS coordinates even when the user had intended to share only a country or city. Furthermore, these coordinates are placed into a database on the client of other users. The client side was changed in 2019 to encrypt that database...
CVE-2026-6207
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2026-6209
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2026-6208
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
EUVD-2026-34841
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2026-6209
CVE-2026-6209 is rejected/not used; this ID does not represent an active vulnerability entry.
CVE-2026-6208
CVE-2026-6208 entry is rejected/not used and does not represent an active vulnerability.