CVE-2024-3094

creationtimestamp| type| source ---|---|--- 2024-03-29 17:08:40+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6881 2024-03-29 17:57:26+00:00| seen| https://www.cert.at/de/warnungen/2024/3/kritische-sicherheitslucke-in-fedora-41-und-fedora-rawhide-bibliothek-xz 2024-03-29...

CVE-2024-29059

creationtimestamp| type| source ---|---|--- 2024-03-25 13:00:53+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6850 2024-03-25 15:32:15+00:00| published-proof-of-concept| https://t.me/CNArsenal/2179 2024-03-25 15:32:50+00:00| published-proof-of-concept|...

CVE-2024-1800

creationtimestamp| type| source ---|---|--- 2024-03-21 23:00:21+00:00| seen| https://t.me/arpsyndicate/4292 2024-06-03 12:53:24+00:00| published-proof-of-concept| https://t.me/orderofsixangles/2311 2024-06-04 09:30:41+00:00| seen| https://t.me/lostsec/565 2024-06-04 18:48:59+00:00|...

CVE-2024-29858

In MISP before 2.4.187, uploadLogo in app/Controller/OrganisationsController.php does not properly check for a valid logo upload...

CVE-2024-29859

In MISP before 2.4.187, addmispexport in app/Controller/EventsController.php does not properly check for a valid file upload...

CVE-2024-29858

In MISP before 2.4.187, uploadLogo in app/Controller/OrganisationsController.php does not properly check for a valid logo upload...

PT-2024-23087 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP versions prior to 2.4.187 Description: The issue arises from the add misp export function in app/Controller/EventsController.php not properly checking for a valid file upload. This could potentially lead to security weaknesses...

CVE-2024-29859

In MISP before 2.4.187, addmispexport in app/Controller/EventsController.php does not properly check for a valid file upload...

CVE-2024-29859

In MISP before 2.4.187, addmispexport in app/Controller/EventsController.php does not properly check for a valid file upload...

PT-2024-23086 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP versions prior to 2.4.187 Description: The issue concerns a weak security check in the uploadLogo function within the OrganisationsController.php file. This function does not properly validate logo uploads. Recommendations: For versions...

MISP 安全漏洞

MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics with features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP versions prior to 2.4.187 that stems from...

CVE-2024-29858

In MISP before 2.4.187, uploadLogo in app/Controller/OrganisationsController.php does not properly check for a valid logo upload...

CVE-2024-29859

CVE-2024-29859 affects MISP prior to 2.4.187. The issue is in add_misp_export (app/Controller/EventsController.php) where there is an insufficient check for a valid file upload, constituting the root cause. Documented impact indicates potential exposure related to file uploads, with high-severity...

CVE-2024-29858

CVE-2024-29858 affects MISP prior to 2.4.187. The issue is in the uploadLogo function (app/Controller/OrganisationsController.php) which does not properly validate uploaded logos, i.e., it does not correctly check for a valid logo file. This could lead to unsafe logo uploads. Remediation: upgrade...

CVE-2024-29858

In MISP before 2.4.187, uploadLogo in app/Controller/OrganisationsController.php does not properly check for a valid logo upload...

CVE-2024-29859

In MISP before 2.4.187, addmispexport in app/Controller/EventsController.php does not properly check for a valid file upload...

CVE-2019-19585

creationtimestamp| type| source ---|---|--- 2024-03-19 17:41:24+00:00| seen| https://t.me/ctinow/211752 2024-11-14 06:10:04+00:00| seen| MISP/960cd098-d4ae-49ca-8c3a-8183adcce170 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:15+00:00| seen|...

CVE-2024-24578

creationtimestamp| type| source ---|---|--- 2024-03-18 23:26:26+00:00| seen| https://t.me/ctinow/211028 2024-03-18 23:26:35+00:00| seen| https://t.me/ctinow/211036 2025-02-21 01:30:23+00:00| seen|...

CVE-2024-20767

creationtimestamp| type| source ---|---|--- 2024-03-18 13:21:35+00:00| seen| https://t.me/ctinow/210495 2024-03-18 13:26:38+00:00| seen| https://t.me/ctinow/210496 2024-03-26 06:53:59+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6855 2024-03-26 08:54:10+00:00|...

CVE-2023-6019

creationtimestamp| type| source ---|---|--- 2024-03-18 10:01:05+00:00| published-proof-of-concept| https://github.com/google/tsunami-security-scanner-plugins/tree/master/google/detectors/rce/ai/cve20236019 2024-03-27 17:30:05+00:00| exploited| https://t.me/truesecator/5575 2024-04-10...