295 matches found
CVE-2024-4358
CVE-2024-4358 / CVE-2024-1800 Telerik Report Server 反序列化和认证绕过漏洞链，针对 CVE-2024-4358/CVE-2024-1800 技术分析 关于该漏洞的根因分析可在我的博客中找到 poc 概述 支持的版本？ 在漏洞发布时基本支持所有版本，为便于未来参考，以下列表中的每个主/次版本： root@kitploit: 2012 2017 2018 2019 2020 2021 2022 2023 2024 用法 root@kitploit: python CVE-2024-4358.py --target...
CVE-2024-4358
Telerik Report Server Bypass de Autenticación - CVE-2024-4358 Descargo de responsabilidad : Esta Prueba de Concepto POC está realizada únicamente con fines educativos y de pruebas éticas. El uso de esta herramienta para atacar objetivos sin consentimiento mutuo previo es ilegal. Es responsabilida...
CVE-2024-4358
CVE-2024-4358 / CVE-2024-1800 针对 CVE-2024-4358/CVE-2024-1800 的 Telerik Report Server 反序列化和认证绕过利用链 技术分析 漏洞的根因分析可在我的博客上找到 用法 root@kitploit: python CVE-2024-4358.py --target http://192.168.253.128:83 -c "whoami" ^^ Progress Telerik Report Server 预认证 RCE CVE-2024-4358/CVE-2024-1800 || Sina Kheirkhah...
CVE-2024-4358
Telerik Report Server 认证绕过 - CVE-2024-4358 概述 在 Progress Telerik Report Server 2024 Q1 10.0.24.305 及更早版本中，在 IIS 上，未经身份验证的攻击者可以通过身份验证绕过漏洞获取对 Telerik Report Server 受限功能的访问权限。 了解更多 — CVE-2024-4358 免责声明...
KLA91211 ACE vulnerability in Microsoft SQL Server
Arbitrary code execution vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2026-65811 Exploitation Related products Microsoft-Power-BI CVE list CVE-2026-65811 critical KB list Solution Install necessa...
Security Update for Microsoft Power BI Report Server (August 2026)
The Microsoft Power BI Report Server on the remote host is missing the February 2026 security update. It is, therefore, affected by an RCE vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 809...
Security Updates for Power BI Report Server (July 2026)
The Power BI Report Server installation on the remote host is missing a security update. It is, therefore, affected by a spoofing vulnerability: - Improper neutralization of input during web page generation 'cross-site scripting' in Power BI allows an authorized attacker to perform spoofing over ...
CVE-2026-58647 Microsoft PowerBI Report Server Spoofing Vulnerability
...
Microsoft PowerBI Report Server Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Power BI allows an authorized attacker to perform spoofing over a network...
KLA91151 Multiple vulnerabilities in Microsoft SQL Server
Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation...
📄 Telerik Report Server 2024 Q1-10.0.24.305 Remote Code Execution
Telerik Report Server versions 2024 Q1 10.0.24.305 and potentially earlier contain a critical vulnerability that allows unauthenticated attackers to achieve remote code execution through insecure deserialization in report processing functionality. The vulnerability exists due to improper input...
Security Update for Microsoft Power BI Report Server (February 2026)
The Microsoft Power BI Report Server on the remote host is missing the February 2026 security update. It is, therefore, affected by an RCE vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 809...
KLA90873 ACE vulnerability in Microsoft SQL Server
A remote code execution vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2026-21229 Exploitation Related products Microsoft-Power-BI CVE list CVE-2026-21229 critical Solution Install necessary update...
EUVD-2011-4723
Malware in sbrugna...
EUVD-2005-3448
Malware in sbrugna...
EUVD-2016-0326
Malware in sbrugna...
EUVD-2024-48887
Malicious code in bioql PyPI...
EUVD-2024-54924
Malicious code in bioql PyPI...