CVE-2024-38872

Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the monitoring module...

CVE-2024-38872 SQL Injection

Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the monitoring module...

CVE-2024-38872

CVE-2024-38872 concerns Zohocorp ManageEngine Exchange Reporter Plus, with affected versions 5717 and below. The issue arises in the monitoring module, where the SQL query structure is not properly protected, enabling an authenticated SQL injection vulnerability. Exploitation would require valid ...

CVE-2024-38872 SQL Injection

Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the monitoring module...

CVE-2024-38871 SQL Injection

Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the reports module...

CVE-2024-38871

CVE-2024-38871 affects ManageEngine Exchange Reporter Plus; versions 5717 and below are vulnerable to an authenticated SQL injection in the reports module. The root cause is a lack of protection against SQL query structure attacks in that component, enabling an attacker with valid credentials to ...

CVE-2024-38871 SQL Injection

Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the reports module...

ZOHO ManageEngine Exchange Reporter Plus 安全漏洞

ZOHO ManageEngine Exchange Reporter Plus is a Web-based Exchange Server reporting software from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine Exchange Reporter Plus version 5717 and prior versions. An attacker can exploit this vulnerability to perform SQL injection attacks...

ZOHO ManageEngine Exchange Reporter Plus 安全漏洞

ZOHO ManageEngine Exchange Reporter Plus is a Web-based Exchange Server reporting software from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine Exchange Reporter Plus version 5717 and prior versions. An attacker can exploit this vulnerability to perform SQL injection attacks...

abczech.cz Cross Site Scripting vulnerability OBB-3950614

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

reporter.akipress.org Cross Site Scripting vulnerability OBB-3949618

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2024-5296

Name of the Vulnerable Software and Affected Versions Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below Description The issue is related to the monitoring module of Zohocorp ManageEngine Exchange Reporter Plus, where the software fails to properly protect the SQL query structur...

WordPress IdeaPush plugin <= 8.65 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by piro Patchstack Alliance in WordPress Plugin IdeaPush versions = 8.65...

Malicious code in codestats_metrics-reporter (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6836 Malicious code in codestats_metrics-reporter (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2577 Malicious code in karma-console-reporter (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in karma-console-reporter (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @tabby.ai/qaseio-playwright-reporter (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2906 Malicious code in @tabby.ai/qaseio-playwright-reporter (npm)

--- -= Per source details. Do not edit below this line.=-...

Google Introduces Project Naptime for AI-Powered Vulnerability Research

Google has developed a new framework called Project Naptime that it says enables a large language model LLM to carry out vulnerability research with an aim to improve automated discovery approaches. "The Naptime architecture is centered around the interaction between an AI agent and a target...