CVE-2026-81820 Flowintel HTML Injection in MISP Case History Timeline via Crafted Object Attributes

Affected versions of Flowintel construct timeline HTML using attacker-controllable MISP object fields such as: object UUID; object name; attribute value; attribute type; comment; first/last seen values; IDS flag. Those values were concatenated directly into HTML strings before rendering. The...

CVE-2018-4990

creationtimestamp| type| source ---|---|--- 2018-05-15 15:30:45+00:00| seen| MISP/5afafce0-0598-4ca0-b52a-41f4950d210f 2018-05-16 15:25:03+00:00| seen| https://t.me/informationsecuritychannel/17217 2018-07-03 12:27:59+00:00| seen| MISP/5b3b6b45-1890-40d0-9344-ab9102de0b81 2018-07-04 08:11:12+00:0...

CVE-2016-0709

creationtimestamp| type| source ---|---|--- 2016-03-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39643 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apachejetspeedfileupload.rb 2025-02-06 03:13:42+00:00...

CVE-2007-1036

creationtimestamp| type| source ---|---|--- 2010-10-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16318 2012-09-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/21080 2018-05-29 15:50:33+00:00| seen|...