Lucene search
+L

27 matches found

NVD
NVD
•added 2026/09/04 7:17 p.m.•7 views

CVE-2026-85639

A security vulnerability has been detected in jofpin trape 2.0. This vulnerability affects unknown code of the file core/user.py of the component Telemetry Endpoint. Such manipulation of the argument vId leads to race condition. The attack can be executed remotely. Attacks of this nature are high...

6.3CVSS0.00346EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/04 7:17 p.m.•7 views

CVE-2026-85637

A security flaw has been discovered in jofpin trape 1.0.0/2.0. Affected by this issue is the function joinroom of the file core/sockets.py of the component Admin Endpoint. The manipulation results in missing authentication. The attack may be launched remotely. The exploit has been released to the...

6.9CVSS0.00743EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/04 7:17 p.m.•7 views

CVE-2026-85638

A weakness has been identified in jofpin trape 2.0. This affects an unknown part of the file core/user.py. This manipulation of the argument vId/id causes authorization bypass. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for...

7.5CVSS0.0052EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/04 7:00 p.m.•10 views

EUVD-2026-71693

A security vulnerability has been detected in jofpin trape 2.0. This vulnerability affects unknown code of the file core/user.py of the component Telemetry Endpoint. Such manipulation of the argument vId leads to race condition. The attack can be executed remotely. Attacks of this nature are high...

6.3CVSS5.4AI score0.00346EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/04 7:00 p.m.•18 views

CVE-2026-85639

CVE-2026-85639 is a race condition vulnerability in jofpin trape 2.0 , specifically in the Telemetry Endpoint component within the file core/user.py. Manipulating the vId argument triggers the race condition, allowing a remote, unauthenticated attacker to exploit it—though the attack is rated as ...

6.3CVSS5.4AI score0.00346EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/04 7:00 p.m.•9 views

CVE-2026-85639 jofpin trape Telemetry Endpoint user.py race condition

A security vulnerability has been detected in jofpin trape 2.0. This vulnerability affects unknown code of the file core/user.py of the component Telemetry Endpoint. Such manipulation of the argument vId leads to race condition. The attack can be executed remotely. Attacks of this nature are high...

6.3CVSS5AI score0.00346EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/04 7:00 p.m.•37 views

CVE-2026-85639 jofpin trape Telemetry Endpoint user.py race condition

A security vulnerability has been detected in jofpin trape 2.0. This vulnerability affects unknown code of the file core/user.py of the component Telemetry Endpoint. Such manipulation of the argument vId leads to race condition. The attack can be executed remotely. Attacks of this nature are high...

6.3CVSS0.00346EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/04 6:45 p.m.•8 views

CVE-2026-85638 jofpin trape user.py authorization

A weakness has been identified in jofpin trape 2.0. This affects an unknown part of the file core/user.py. This manipulation of the argument vId/id causes authorization bypass. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for...

7.5CVSS6.8AI score0.0052EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/04 6:45 p.m.•13 views

EUVD-2026-71691

A weakness has been identified in jofpin trape 2.0. This affects an unknown part of the file core/user.py. This manipulation of the argument vId/id causes authorization bypass. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for...

7.5CVSS7.3AI score0.0052EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/04 6:45 p.m.•35 views

CVE-2026-85638 jofpin trape user.py authorization

A weakness has been identified in jofpin trape 2.0. This affects an unknown part of the file core/user.py. This manipulation of the argument vId/id causes authorization bypass. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for...

7.5CVSS0.0052EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/04 6:45 p.m.•18 views

CVE-2026-85638

jofpin trape 2.0 contains an authorization bypass in the file core/user.py , caused by manipulation of the argument vId/id . The vulnerability allows remote, unauthenticated exploitation over the network with low complexity. CVSS 3.1 scores it 7.3 (HIGH) , with low impacts to confidentiality, int...

7.5CVSS7.3AI score0.0052EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/04 6:30 p.m.•14 views

CVE-2026-85637 jofpin trape Admin Endpoint sockets.py join_room missing authentication

A security flaw has been discovered in jofpin trape 1.0.0/2.0. Affected by this issue is the function joinroom of the file core/sockets.py of the component Admin Endpoint. The manipulation results in missing authentication. The attack may be launched remotely. The exploit has been released to the...

6.9CVSS5.4AI score0.00743EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/04 6:30 p.m.•10 views

EUVD-2026-71682

A security flaw has been discovered in jofpin trape 1.0.0/2.0. Affected by this issue is the function joinroom of the file core/sockets.py of the component Admin Endpoint. The manipulation results in missing authentication. The attack may be launched remotely. The exploit has been released to the...

6.9CVSS5.4AI score0.00743EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/04 6:30 p.m.•39 views

CVE-2026-85637 jofpin trape Admin Endpoint sockets.py join_room missing authentication

A security flaw has been discovered in jofpin trape 1.0.0/2.0. Affected by this issue is the function joinroom of the file core/sockets.py of the component Admin Endpoint. The manipulation results in missing authentication. The attack may be launched remotely. The exploit has been released to the...

6.9CVSS0.00743EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/04 6:30 p.m.•19 views

CVE-2026-85637

jofpin trape (versions 1.0.0/2.0) is affected by a missing authentication flaw in the join_room function within core/sockets.py of the Admin Endpoint component. An unauthenticated remote attacker can exploit this to access the admin endpoint, resulting in low confidentiality impact (CVSS 3.1 base...

6.9CVSS5.4AI score0.00743EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/04 6:18 p.m.•13 views

CVE-2026-85636

A vulnerability was identified in jofpin trape 1.0.0. Affected by this vulnerability is an unknown functionality of the file core/stats.py of the component Login Endpoint. The manipulation leads to missing authentication. The attack may be initiated remotely. The exploit is publicly available and...

6.9CVSS0.0075EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/09/04 6:00 p.m.•8 views

CVE-2026-85636 jofpin trape Login Endpoint stats.py missing authentication

A vulnerability was identified in jofpin trape 1.0.0. Affected by this vulnerability is an unknown functionality of the file core/stats.py of the component Login Endpoint. The manipulation leads to missing authentication. The attack may be initiated remotely. The exploit is publicly available and...

6.9CVSS5.4AI score0.0075EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/09/04 6:00 p.m.•38 views

CVE-2026-85636 jofpin trape Login Endpoint stats.py missing authentication

A vulnerability was identified in jofpin trape 1.0.0. Affected by this vulnerability is an unknown functionality of the file core/stats.py of the component Login Endpoint. The manipulation leads to missing authentication. The attack may be initiated remotely. The exploit is publicly available and...

6.9CVSS0.0075EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/09/04 6:00 p.m.•12 views

EUVD-2026-71632

A vulnerability was identified in jofpin trape 1.0.0. Affected by this vulnerability is an unknown functionality of the file core/stats.py of the component Login Endpoint. The manipulation leads to missing authentication. The attack may be initiated remotely. The exploit is publicly available and...

6.9CVSS5.4AI score0.0075EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/04 12:00 a.m.•14 views

PT-2026-86235

A weakness has been identified in jofpin trape 2.0. This affects an unknown part of the file core/user.py. This manipulation of the argument vId/id causes authorization bypass. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for...

7.5CVSS7.3AI score0.0052EPSS
SaveExploits0References7
Rows per page
Query Builder