CVE-2024-38217

creationtimestamp| type| source ---|---|--- 2024-09-10 17:25:32+00:00| seen| https://www.thezdi.com/blog/2024/9/10/the-september-2024-security-update-review 2024-09-11 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1368 2024-09-11 09:47:58+00:00| exploited|...

CVE-2024-38226

creationtimestamp| type| source ---|---|--- 2024-09-10 17:25:32+00:00| seen| https://www.thezdi.com/blog/2024/9/10/the-september-2024-security-update-review 2024-09-11 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1368 2024-09-11 09:47:58+00:00| exploited|...

CVE-2024-43491

creationtimestamp| type| source ---|---|--- 2024-09-10 17:25:32+00:00| seen| https://www.thezdi.com/blog/2024/9/10/the-september-2024-security-update-review 2024-09-10 20:06:11+00:00| seen| https://t.me/cvedetector/5278 2024-09-11 04:00:00+00:00| seen|...

CVE-2024-43461

creationtimestamp| type| source ---|---|--- 2024-09-10 17:25:32+00:00| seen| https://www.thezdi.com/blog/2024/9/10/the-september-2024-security-update-review 2024-09-10 20:06:31+00:00| seen| https://t.me/cvedetector/5292 2024-09-11 04:00:00+00:00| seen|...

CVE-2024-38014

creationtimestamp| type| source ---|---|--- 2024-09-10 17:25:32+00:00| seen| https://www.thezdi.com/blog/2024/9/10/the-september-2024-security-update-review 2024-09-11 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1368 2024-09-11 09:47:58+00:00| exploited|...

CVE-2024-39205

creationtimestamp| type| source ---|---|--- 2024-09-09 02:35:15+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8488 2024-10-26 01:04:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8843 2024-10-27 12:18:42+00:00| published-proof-of-concept|...

CVE-2024-8517

creationtimestamp| type| source ---|---|--- 2024-09-06 19:06:41+00:00| seen| https://t.me/cvedetector/4981 2024-09-06 23:16:37+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8470 2024-09-11 14:58:11+00:00| seen|...

CVE-2024-44000

creationtimestamp| type| source ---|---|--- 2024-09-05 14:18:45+00:00| published-proof-of-concept| https://t.me/WARLOCKDARKARMYOFFICIALS/4554 2024-09-05 16:31:47+00:00| published-proof-of-concept| Telegram/iqzr0evsZIMMy3NnASIGxZl2nBENTlvbGPIFKVphLoM3UsM 2024-09-06 03:57:32+00:00|...

CVE-2024-45509

In MISP through 2.4.196, app/Controller/BookmarksController.php does not properly restrict access to bookmarks data in the case where the user is not an org admin...

CVE-2024-45509

In MISP through 2.4.196, app/Controller/BookmarksController.php does not properly restrict access to bookmarks data in the case where the user is not an org admin...

CVE-2024-45509

In MISP through 2.4.196, app/Controller/BookmarksController.php does not properly restrict access to bookmarks data in the case where the user is not an org admin...

PT-2024-31669 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP versions 2.4.196 and earlier Description: The issue concerns improper access restriction to bookmarks data in MISP when the user is not an org admin, specifically within the app/Controller/BookmarksController.php file. Recommendations: F...

CVE-2024-45509

In MISP up to 2.4.196, there is an access control vulnerability in app/Controller/BookmarksController.php that allows non-org-admin users to access bookmarks data. Root cause: insufficient restriction for non-admin users in the BookmarksController. Impact: exposure of bookmarks data with confiden...

CVE-2024-45509

In MISP through 2.4.196, app/Controller/BookmarksController.php does not properly restrict access to bookmarks data in the case where the user is not an org admin...

CVE-2024-43917

creationtimestamp| type| source ---|---|--- 2024-08-29 17:53:42+00:00| seen| https://t.me/cvedetector/4411 2024-09-28 07:20:44+00:00| seen| https://t.me/CyberBulletin/976 2024-09-28 09:34:33+00:00| seen| https://t.me/CyberBulletin/25859 2024-09-28 10:56:34+00:00| published-proof-of-concept|...

CVE-2024-43425

creationtimestamp| type| source ---|---|--- 2024-08-28 09:02:28+00:00| published-proof-of-concept| Telegram/sV1gHuMmsF6Obkl4pHuEINogRh1QzHPw2lXaflMTbK27AeDb 2024-08-29 09:08:14+00:00| published-proof-of-concept| https://t.me/HackingInsights/11532 2024-08-29 14:20:05+00:00|...

CVE-2024-7965

creationtimestamp| type| source ---|---|--- 2024-08-27 06:51:31+00:00| exploited| https://t.me/thehackernews/5480 2024-08-27 07:16:14+00:00| exploited| Telegram/DqkT5EqFU3fzN5AmQYNYjKx3-CfOMxfm2wAsdilE9sjdLvx 2024-08-27 08:29:34+00:00| exploited|...

CVE-2024-24809

creationtimestamp| type| source ---|---|--- 2024-08-26 14:44:44+00:00| seen| https://t.me/truesecator/6131 2024-08-29 09:08:08+00:00| seen| https://t.me/HackingInsights/11505 2024-08-30 16:48:36+00:00| seen| Telegram/2SeTCIiHBvCs4LVhVvK9AryaSJ2WidRT7xDqlZDi98wEGdQ 2024-09-24 09:29:35+00:00| seen|...

CVE-2024-31214

creationtimestamp| type| source ---|---|--- 2024-08-26 14:44:44+00:00| seen| https://t.me/truesecator/6131 2024-08-29 09:08:08+00:00| seen| https://t.me/HackingInsights/11505 2024-08-30 16:48:36+00:00| seen| Telegram/2SeTCIiHBvCs4LVhVvK9AryaSJ2WidRT7xDqlZDi98wEGdQ 2024-09-24 09:29:35+00:00| seen|...

CVE-2024-45256

creationtimestamp| type| source ---|---|--- 2024-08-26 09:31:40+00:00| seen| https://t.me/cvedetector/4103 2024-10-15 15:35:55+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/byobunauthrce.rb 2025-02-06 03:13:46+00:00| seen|...