CVE-2024-12692

creationtimestamp| type| source ---|---|--- 2024-12-18 21:49:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113676028499435854 2024-12-18 22:16:24+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113676136226017385 2024-12-18 23:44:26+00:00| seen|...

CVE-2024-56337

creationtimestamp| type| source ---|---|--- 2024-12-18 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1447 2024-12-20 15:35:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113685883850360893 2024-12-20 16:15:55+00:00| seen|...

Exploit for CVE-2024-54160

CVE-2024-54160-Opensearch-HTML-Injection + Stored XSS It w...

Exploit for CVE-2024-54160

CVE-2024-54160-Opensearch-HTML-Injection + Stored XSS It w...

CVE-2017-9833

creationtimestamp| type| source ---|---|--- 2024-12-16 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-16 2024-12-23 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-23 2024-12-26 00:00:00+00:00| seen| The Shadowserver...

TCP-Vuln-Report

TCP-Vuln-Repor...

CVE-2024-31891

creationtimestamp| type| source ---|---|--- 2024-12-14 13:05:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113651319061859524 2024-12-14 13:55:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113651515652027586 2024-12-14 15:11:21+00:00| seen|...

CVE-2024-11901 PowerBI Embed Reports <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

The PowerBI Embed Reports plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'MOAPIPOWERBI' shortcode in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

WordPress plugin PowerBI Embed Reports 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Fedora: Security Advisory (FEDORA-2024-d4d1e89e61)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-ab8945c2bd)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Security Advisory: Cost Management Metrics Operator Update

Cost Management Metrics Operator version 3.3.2 release. The Cost Management Metrics Operator is a component of the Red Hat Cost Managment service for Openshift. The operator runs on the latest supported versions of Openshift. This operator obtains OpenShift usage data by querying Prometheus every...

CVE-2024-49041

creationtimestamp| type| source ---|---|--- 2024-12-06 01:36:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113603311783623292 2024-12-06 03:47:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113603826500151223 2024-12-06 03:54:42+00:00| seen|...

IBM Cognos Controller Information Disclosure Vulnerability (CNVD-2025-01791)

IBM Cognos Controller is a suite of business intelligence and planning solutions from International Business Machines IBM. The product features process automation, financial audit control, and the creation and management of financial reports. An information disclosure vulnerability exists in IBM...

IBM Cognos Controller Information Disclosure Vulnerability (CNVD-2025-01787)

IBM Cognos Controller is a suite of business intelligence and planning solutions from International Business Machines IBM. The product features process automation, financial audit control, and the creation and management of financial reports. An information disclosure vulnerability exists in IBM...

IBM Cognos Controller File Upload Vulnerability (CNVD-2025-01788)

IBM Cognos Controller is a suite of business intelligence and planning solutions from International Business Machines IBM. The product features process automation, financial audit control, and the creation and management of financial reports. A file upload vulnerability exists in IBM Cognos...

CVE-2024-53442

whapa v1.59 is vulnerable to Command Injection via a crafted filename to the HTML reports component...

CVE-2024-11610

creationtimestamp| type| source ---|---|--- 2024-12-05 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-340-01 2024-12-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1674/ 2025-01-30 20:20:45+00:00| seen|...

CVE-2024-53442

whapa v1.59 is vulnerable to Command Injection via a crafted filename to the HTML reports component...

CVE-2024-53442

CVE-2024-53442 affects whapa v1.59; a command injection can be triggered by a crafted filename in the HTML reports component. The CVSSv3.1 base score is 9.8 (CRITICAL). Reported by multiple sources (NVD/Red Hat/CNNVD) with exploitation considerations and references. Practical impact is potential ...