37 matches found
CVE-Vulnerability-Information-Downloader
CVE Vulnerability Information Downloader Common Vulnerability Scoring System CVSS is a free and open industry standard for assessing the severity of computer system security vulnerabilities. Exploit Prediction Scoring System EPSS estimates the likelihood that a software vulnerability will be...
WEFFLES
WEFFLES WEFFLES is a way to build a fast, free, and effective threat hunting console using Windows Event Forwarding and PowerBI. You can find a full blog post on it at https://aka.ms/weffles but if you're impatient wefsetup.ps1 is the file to start with. Thanks, -Jessica...
Malicious code in leadconduit-powerbi (npm)
The package leadconduit-powerbi was found to contain malicious code. --- Credit: OpenSSF source...
Malicious Package
Overview leadconduit-powerbi is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
PowerBI Report Server - Detect
PowerBI Report Server was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PowerBI Report Server was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PowerBI Report Server - Detect', 'description':...
WordPress PowerBI Embed Reports plugin <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin PowerBI Embed Reports versions = 1.1.7...
MAL-2025-49031 Malicious code in powerbi-visuals-sunburst (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 707c0139d214cc2c615245cb618d8e272c7868e912755bc359aaadb5415b1273 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-36776
Malicious code in powerbi-visuals-sunburst npm...
Malware in powerbi-visuals-sunburst
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CVE-2025-10750
The PowerBI Embed Reports plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 1.2.0. This is due to missing capability checks and authentication verification on the 'testUser' endpoint accessible via the moepbradminobserver function hooked ...
CVE-2025-10750
The PowerBI Embed Reports plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 1.2.0. This is due to missing capability checks and authentication verification on the 'testUser' endpoint accessible via the moepbradminobserver function hooked ...
CVE-2025-10750 PowerBI Embed Reports <= 1.2.0 - Unauthenticated Sensitive Information Disclosure
The PowerBI Embed Reports plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 1.2.0. This is due to missing capability checks and authentication verification on the 'testUser' endpoint accessible via the moepbradminobserver function hooked ...
CVE-2025-10750
The CVE CVE-2025-10750 concerns the WordPress PowerBI Embed Reports plugin (
WordPress PowerBI Embed Reports plugin <= 1.2.0 - Unauthenticated Sensitive Information Disclosure vulnerability
Unauthenticated Sensitive Information Disclosure vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin PowerBI Embed Reports versions = 1.2.0...
CVE-2025-10750: Exposure of Sensitive Information to an Unauthorized Actor
The PowerBI Embed Reports plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 1.2.0. This is due to missing capability checks and authentication verification on the 'testUser' endpoint accessible via the moepbradminobserver function hooked ...
WordPress plugin PowerBI Embed Reports has a vulnerability related to information leakage.
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. An information...
PT-2025-42704
Name of the Vulnerable Software and Affected Versions PowerBI Embed Reports plugin for WordPress versions prior to 1.2.1 Description The PowerBI Embed Reports plugin for WordPress is susceptible to unauthorized disclosure of sensitive information. This is a result of inadequate capability checks...
EUVD-2024-34221
Malicious code in bioql PyPI...