Lucene search
+L

34 matches found

Kitploit
Kitploit
•added 2026/10/13 11:27 a.m.•19 views

WEFFLES

WEFFLES WEFFLES is a way to build a fast, free, and effective threat hunting console using Windows Event Forwarding and PowerBI. You can find a full blog post on it at https://aka.ms/weffles but if you're impatient wefsetup.ps1 is the file to start with. Thanks, -Jessica...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/13 3:31 a.m.•19 views

CVE-Vulnerability-Information-Downloader

CVE Vulnerability Information Downloader Common Vulnerability Scoring System CVSS is a free and open industry standard for assessing the severity of computer system security vulnerabilities. Exploit Prediction Scoring System EPSS estimates the likelihood that a software vulnerability will be...

10CVSS7.9AI score0.99999EPSS
SaveExploits383
Snyk
Snyk
•added 2026/09/17 7:19 a.m.•14 views

Malicious Package

Overview leadconduit-powerbi is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Patchstack
Patchstack
•added 2026/02/03 6:50 a.m.•20 views

WordPress PowerBI Embed Reports plugin <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin PowerBI Embed Reports versions = 1.1.7...

6.4CVSS5.3AI score0.00489EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2025/10/29 10:51 p.m.•16 views

EUVD-2025-36776

Malicious code in powerbi-visuals-sunburst npm...

6.6AI score
SaveExploits0References1
OSV
OSV
•added 2025/10/29 10:51 p.m.•13 views

MAL-2025-49031 Malicious code in powerbi-visuals-sunburst (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 707c0139d214cc2c615245cb618d8e272c7868e912755bc359aaadb5415b1273 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/10/19 7:43 a.m.•82 views

CVE-2025-10750

The PowerBI Embed Reports plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 1.2.0. This is due to missing capability checks and authentication verification on the 'testUser' endpoint accessible via the moepbradminobserver function hooked ...

5.3CVSS5.7AI score0.00471EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/18 8:15 a.m.•24 views

CVE-2025-10750

The PowerBI Embed Reports plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 1.2.0. This is due to missing capability checks and authentication verification on the 'testUser' endpoint accessible via the moepbradminobserver function hooked ...

5.3CVSS0.00471EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2025/10/18 7:26 a.m.•36 views

CVE-2025-10750 PowerBI Embed Reports <= 1.2.0 - Unauthenticated Sensitive Information Disclosure

The PowerBI Embed Reports plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 1.2.0. This is due to missing capability checks and authentication verification on the 'testUser' endpoint accessible via the moepbradminobserver function hooked ...

5.3CVSS0.00471EPSS
SaveExploits0References5
CVE
CVE
•added 2025/10/18 7:26 a.m.•51 views

CVE-2025-10750

The CVE CVE-2025-10750 concerns the WordPress PowerBI Embed Reports plugin (

5.3CVSS5.8AI score0.00471EPSS
SaveExploits0References5
Patchstack
Patchstack
•added 2025/10/18 1:22 a.m.•24 views

WordPress PowerBI Embed Reports plugin <= 1.2.0 - Unauthenticated Sensitive Information Disclosure vulnerability

Unauthenticated Sensitive Information Disclosure vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin PowerBI Embed Reports versions = 1.2.0...

5.3CVSS5.8AI score0.00471EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/10/18 12:00 a.m.•18 views

WordPress plugin PowerBI Embed Reports 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. An information...

5.3CVSS5.8AI score0.00471EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/10/18 12:00 a.m.•6 views

PT-2025-42704

Name of the Vulnerable Software and Affected Versions PowerBI Embed Reports plugin for WordPress versions prior to 1.2.1 Description The PowerBI Embed Reports plugin for WordPress is susceptible to unauthorized disclosure of sensitive information. This is a result of inadequate capability checks...

5.3CVSS5.8AI score0.00471EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/18 12:00 a.m.•9 views

CVE-2025-10750: Exposure of Sensitive Information to an Unauthorized Actor

The PowerBI Embed Reports plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 1.2.0. This is due to missing capability checks and authentication verification on the 'testUser' endpoint accessible via the moepbradminobserver function hooked ...

5.3CVSS5.7AI score0.00471EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2024-34221

Malicious code in bioql PyPI...

6.4CVSS8.9AI score0.00489EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•11 views

Malicious code in powerbi-visuals-test2 (npm)

The package powerbi-visuals-test2 was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•11 views

Malicious code in leadconduit-powerbi (npm)

The package leadconduit-powerbi was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•9 views

MAL-2025-29554 Malicious code in powerbi-visuals-test2 (npm)

The package powerbi-visuals-test2 was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•8 views

MAL-2025-25042 Malicious code in leadconduit-powerbi (npm)

The package leadconduit-powerbi was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•10 views

MAL-2025-29553 Malicious code in powerbi-client-beta (npm)

The package powerbi-client-beta was found to contain malicious code...

7.2AI score
SaveExploits0
Rows per page
Query Builder