EUVD-2026-51261

IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to redirect users to arbitrary external websites via a crafted URL. If used in SSO authentication flows, this could result in exposure of session tokens and allow attackers to hijack user...

CVE-2026-10545

IBM Planning Analytics Local 2.1.0–2.1.21 is vulnerable to an open redirect via a crafted URL, enabling redirection to arbitrary external sites. In SSO authentication flows, this could expose session tokens and allow session hijacking. Affected component: open redirect in the web flow; root cause...

CVE-2026-10545

IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to redirect users to arbitrary external websites via a crafted URL. If used in SSO authentication flows, this could result in exposure of session tokens and allow attackers to hijack user...

CVE-2026-10545 IBM Planning Analytics Local is affected by Open Redirect

IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to redirect users to arbitrary external websites via a crafted URL. If used in SSO authentication flows, this could result in exposure of session tokens and allow attackers to hijack user...

CVE-2026-10545 IBM Planning Analytics Local is affected by Open Redirect

IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to redirect users to arbitrary external websites via a crafted URL. If used in SSO authentication flows, this could result in exposure of session tokens and allow attackers to hijack user...

PT-2026-66556

Name of the Vulnerable Software and Affected Versions IBM Planning Analytics Local versions 2.1.0 through 2.1.21 Description An open redirect exists that allows an attacker to redirect users to arbitrary external websites using a crafted URL. When this occurs within Single Sign-On SSO...

CVE-2024-40683: Insufficient Session Expiration

IBM Operations Analytics - Log Analysis 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0, 1.3.6.1, 1.3.7.0, 1.3.7.1, 1.3.7.2, and 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4 does not invalidate session after a password chance which could allow an authenticated user to impersonate another user on the...

CVE-2026-10545: URL Redirection to Untrusted Site

IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to redirect users to arbitrary external websites via a crafted URL. If used in SSO authentication flows, this could result in exposure of session tokens and allow attackers to hijack user...

EUVD-2026-50113

The ShinyStat Analytics WordPress plugin before 1.0.17 does not perform any authorization check on one of its REST API endpoints, allowing unauthenticated users to retrieve information about non-published e.g. draft, pending or private WooCommerce products...

CVE-2026-11351 ShinyStat Analytics < 1.0.17 - Unauthenticated Non-Published Product Information Disclosure

The ShinyStat Analytics WordPress plugin before 1.0.17 does not perform any authorization check on one of its REST API endpoints, allowing unauthenticated users to retrieve information about non-published e.g. draft, pending or private WooCommerce products...

CVE-2026-11351

The ShinyStat Analytics WordPress plugin before 1.0.17 does not perform any authorization check on one of its REST API endpoints, allowing unauthenticated users to retrieve information about non-published e.g. draft, pending or private WooCommerce products...

CVE-2026-11351

The ShinyStat Analytics WordPress plugin, specifically versions 1.0.12 through 1.0.17 , is vulnerable to an unauthenticated information disclosure flaw. The root cause is a missing authorization check on one of the plugin's REST API endpoints . This allow unauthenticated users to retrieve sensiti...

CVE-2026-11351 ShinyStat Analytics < 1.0.17 - Unauthenticated Non-Published Product Information Disclosure

The ShinyStat Analytics WordPress plugin before 1.0.17 does not perform any authorization check on one of its REST API endpoints, allowing unauthenticated users to retrieve information about non-published e.g. draft, pending or private WooCommerce products...

CVE-2026-11351: Exposure of Sensitive Information to an Unauthorized Actor

The ShinyStat Analytics WordPress plugin before 1.0.17 does not perform any authorization check on one of its REST API endpoints, allowing unauthenticated users to retrieve information about non-published e.g. draft, pending or private WooCommerce products...

WSO2 Data Analytics Server 3.1.0 - Cross-Site Scripting Detection

WSO2 Data Analytics Server 3.1.0 is susceptible to cross-site scripting in carbon/resources/addcollectionajaxprocessor.jsp via the collectionName or parentPath parameter. !/usr/bin/env python3 -- coding: utf-8 -- """WSO2 Data Analytics Server 3.""" from kittysploit import from...

Hotjar RUM - Detect

Detects Hotjar Web Analytics & Session Recording artifacts. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Hotjar Web Analytics & Session Recording artifacts.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

SAP Analytics Cloud Panel - Detect

SAP Analytics Cloud panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SAP Analytics Cloud panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SAP Analytics Cloud Panel - Detect',...

Veritas NetBackup OpsCenter Analytics Login - Detect

A Veritas NetBackup OpsCenter Analytics page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """A Veritas NetBackup OpsCenter Analytics page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Verit...

Versa Analytics Server Detection

Detects Versa Analytics Server Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Versa Analytics Server Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Versa Analytics Server Detection',...

SonicWall Analytics - Login Panel Detection

SonicWall Analytics formerly SGMS is SonicWall's centralised network security analytics and reporting platform used to aggregate and visualise threat data across SonicWall firewall deployments. !/usr/bin/env python3 -- coding: utf-8 -- """SonicWall Analytics formerly SGMS is SonicWall's centralis...