PT-2026-110967

Name of the Vulnerable Software and Affected Versions IBM Maximo Application Suite - Location Service for Esri Component versions 9.0 through 9.2 Description Command injection is possible due to improper sanitization of a user-controlled value passed to a shell command within a Kubernetes operato...

CVE-2026-18513: Improper Privilege Management

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper access control due to a schema-less Custom Resource Definition...

PT-2026-110968

Name of the Vulnerable Software and Affected Versions IBM Maximo Application Suite - Location Service for Esri versions 9.0 through 9.2 Description Improper input validation occurs due to an unsanitised container image configuration within a Kubernetes operator template. Recommendations At the...

CVE-2026-18537: Improper Control of Generation of Code

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image reference in a Kubernetes operator template...

CVE-2026-18517: Improper Access Control

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 IBM Maximo Application Suite — Location Service for Esri Component is vulnerable to unintended network egress due to a misconfigured Kubernetes NetworkPolicy...

CVE-2026-18533: Improper Control of Generation of Code

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image configuration in a Kubernetes operator template...

telegram-nearby-map

Telegram Nearby Map Telegram Nearby Map utiliza OpenStreetMap y la biblioteca oficial de Telegram para encontrar la posición de los usuarios cercanos. Ten en cuenta: La API de Telegram se actualizó hace un tiempo para hacer menos precisas las distancias de los usuarios cercanos, impidiendo el...

cve-2000-0649

CVE-2000-0649 for Apache CVE-2000-0649 is a low risk vulnerability that can potentially disclose the internal IP addresses of the server from the Location parameter in the respose header. Official details are here: Rapid7: https://www.rapid7.com/db/modules/auxiliary/scanner/http/iisinternalip/ CV...

seeker

Disponible en El concepto detrás de Seeker es simple: así como alojamos páginas de phishing para obtener credenciales, ¿por qué no alojar una página falsa que solicite tu ubicación como muchos sitios web populares basados en ubicación? Lee más en el blog de thewhiteh4t .Seeker aloja un sitio web...

CVE-2026-108720 phpIPAM through 1.8.3 Missing Authorization in Customers, Locations and NAT Pages

phpIPAM through 1.8.3 contains a missing authorization vulnerability that allows authenticated low-privilege users to view restricted subnets and addresses because customer, location and NAT pages skip Subnets::checkpermission. Attackers can open customer objects.php, single-location.php or...

twitter-intelligence

Inteligencia de Twitter Un proyecto escrito en Python para el seguimiento y análisis de Twitter sin usar la API de Twitter. Prerrequisitos Este proyecto es una aplicación de Python 3.x. Las dependencias del paquete están en el archivo requirements.txt. Ejecute ese comando para instalar las...

trape

trape estable v2.0 Rastreador de personas en Internet: Aprende a rastrear el mundo para evitar ser rastreado. Trape es una herramienta de análisis e investigación OSINT que permite a las personas rastrear y ejecutar ataques inteligentes de ingeniería social en tiempo real. Fue creada con el...

CVE-2025-27136-XXE-LocalS3

CVE-2025-27136 XXE-LocalS3 Proof of Concept for CVE-2025-27136 XXE in Local-S3 └─$ python3 exploit.py http://$ip:8080 /etc/passwd + S3 service detected + Creating bucket: xxe-32d14993 + Server response: ac3aaf20-e59a-4705-9505-3ebb01db7fc1 + Retrieving file via ?location + Response:...

instaloctrack

instaloctrack TL;DR : ascineema, video del proyecto Una herramienta para extraer ubicaciones georreferenciadas de perfiles de Instagram. Salida en JSON y mapa interactivo. requisitos sudo apt install chromium-chromedriver && chmod a+x /usr/bin/chromedriver 🛠️ instalación git clone...

PT-2026-108105

Name of the Vulnerable Software and Affected Versions Malcolm affected versions not specified Description The front nginx reverse proxy uses a case-insensitive regex matcher for the Dashboards to Arkime shortcut location, but employs a case-sensitive rewrite. If a request path is not in exact...

Security Bulletin:WebOb Open Redirect Vulnerability in HTTP Location Header Normalization

Summary WebOb provides objects for HTTP requests and responses. Prior to 1.8.10, the normalization of the HTTP Location header during a redirect is vulnerable to an open redirect: WebOb joins the redirect target to the request URI using Python's urljoin, and since Python 3.10 the underlying...

Incorrect Authorization

Overview @backstage/plugin-catalog-backend is a The Backstage backend plugin that provides the Backstage catalog Affected versions of this package are vulnerable to Incorrect Authorization in DefaultCatalogProcessingOrchestrator during catalog processing, where the type field of a registered...

CVE-2026-106496

A flaw was found in the Backstage plugin-catalog-backend component. Due to inconsistent enforcement of allowed location types during catalog processing, an authenticated remote attacker can submit location targets that should be restricted under specific configurations. This flaw can enable the...

CVE-2026-106496

Backstage is an open framework for building developer portals. Prior to 3.9.1, the @backstage/plugin-catalog-backend package is affected by inconsistent enforcement of allowed location types during catalog processing. Under certain configurations, the catalog backend could process location types...

CVE-2026-102159

An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality intended only for internal services. Successful exploitation may expose sensitive location information or disrupt affected services...