Lucene search
+L

6 matches found

Kitploit
Kitploit
added 2026/08/26 7:35 a.m.3 views

gaia

Gaia: Global API Integrity Assessor Dipendenze Installa opam per compilare le API di test. Installa git, python3, pip e .NET per compilare RESTler e Schemathesis. Installa cargo per compilare Gaia. Installa docker v26.0.1 e docker compose v2.26.1 per compilare Gaia con ELK Stack opzionale se non...

5.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/22 4:04 a.m.11 views

CVE-2018-8949

An issue was discovered in app/Model/Attribute.php in MISP before 2.4.89. There is a critical API integrity bug, potentially allowing users to delete attributes of other events. A crafted edit for an event without attribute UUIDs but attribute IDs set could overwrite an existing attribute...

5.5CVSS6.8AI score0.00753EPSS
SaveExploits0References1
Prion
Prion
added 2018/03/23 5:29 p.m.21 views

Code injection

An issue was discovered in app/Model/Attribute.php in MISP before 2.4.89. There is a critical API integrity bug, potentially allowing users to delete attributes of other events. A crafted edit for an event without attribute UUIDs but attribute IDs set could overwrite an existing attribute...

5.5CVSS4.7AI score0.00753EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2018/03/23 5:29 p.m.26 views

CVE-2018-8949

An issue was discovered in app/Model/Attribute.php in MISP before 2.4.89. There is a critical API integrity bug, potentially allowing users to delete attributes of other events. A crafted edit for an event without attribute UUIDs but attribute IDs set could overwrite an existing attribute...

5.5CVSS4.6AI score0.00753EPSS
SaveExploits0References1
OSV
OSV
added 2018/03/23 5:29 p.m.14 views

CVE-2018-8949

An issue was discovered in app/Model/Attribute.php in MISP before 2.4.89. There is a critical API integrity bug, potentially allowing users to delete attributes of other events. A crafted edit for an event without attribute UUIDs but attribute IDs set could overwrite an existing attribute...

4.3CVSS7AI score
SaveExploits0References1
CVE
CVE
added 2018/03/23 5:00 p.m.46 views

CVE-2018-8949

CVE-2018-8949 involves MISP before 2.4.89, where a flaw in app/Model/Attribute.php creates an API integrity risk that could let a user delete attributes of other events. A crafted event edit (no attribute UUIDs but with attribute IDs set) could overwrite an existing attribute, potentially impacti...

5.5CVSS4.5AI score0.00753EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder