EUVD-2025-29846

Malicious code in bioql PyPI...

CVE-2024-29846

CVE-2024-29846 is a SQL Injection in the Core server of Ivanti Endpoint Manager (EPM) 2022 SU5 and earlier. The vulnerability enables an authenticated attacker on the same network to execute arbitrary code via the server, per the NVD description. Connected sources corroborate this as an Ivanti EP...

CVE-2024-29846

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated attacker within the same network to execute arbitrary code...

CVE-2024-29846

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated attacker within the same network to execute arbitrary code...

CVE-2024-29846

creationtimestamp| type| source ---|---|--- 2024-05-24 23:27:46+00:00| seen| https://t.me/itsecnews/4463...

WhatsUp Gold Credentials Dump

This module exports and decrypts credentials from WhatsUp Gold to a CSV file; it is intended as a post-exploitation module for Windows hosts with WhatsUp Gold installed. The module has been tested on and can successfully decrypt credentials from WhatsUp versions 11.0 to the latest 22.x. Extracted...

CVE-2022-29846

creationtimestamp| type| source ---|---|--- 2022-05-11 22:40:48+00:00| seen| https://t.me/cibsecurity/42441 2023-03-17 21:59:16+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/gather/credentials/whatsupgoldcredentialdump.rb 2025-02-06 03:13:45+00:00|...

CVE-2022-29846

Progress WhatsUp Gold (versions 16.1–21.1.1 and 22.0.0) is affected by a vulnerability that allows an unauthenticated attacker to obtain the product installation serial number. The publicly provided documents confirm affected versions and the disclosure impact, but do not specify the root cause d...

CVE-2021-29846

creationtimestamp| type| source ---|---|--- 2022-01-26 20:19:46+00:00| seen| https://t.me/cibsecurity/36325...

CVE-2021-29846

IBM Security Guardium Insights 3.0 could allow an authenticated user to obtain sensitive information due to insufficient session expiration. IBM X-Force ID: 205256...

CVE-2021-29846

CVE-2021-29846 affects IBM Security Guardium Insights 3.0. The issue is caused by insufficient session expiration, allowing an authenticated user to obtain sensitive information. The conviction is limited to information disclosure under authenticated access; no remote exploit details are provided...