CVE-2022-29848

creationtimestamp| type| source ---|---|--- 2022-05-11 22:40:35+00:00| seen| https://t.me/cibsecurity/42429 2023-03-17 21:59:16+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/gather/credentials/whatsupgoldcredentialdump.rb 2025-02-06 03:13:45+00:00|...

CVE-2022-26923

creationtimestamp| type| source ---|---|--- 2022-05-11 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=801 2022-05-12 02:37:16+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2166 2022-05-12 11:01:01+00:00| seen| https://t.me/CyberSecurityTechnologies/5987...

CVE-2022-26925

creationtimestamp| type| source ---|---|--- 2022-05-11 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=801 2022-05-11 08:29:32+00:00| exploited| https://t.me/cKure/9501 2022-05-11 16:04:01+00:00| seen| https://t.me/truesecator/2928 2022-05-17 16:15:03+00:00| exploited|...

CVE-2022-30333

creationtimestamp| type| source ---|---|--- 2022-05-09 12:31:04+00:00| seen| https://t.me/cibsecurity/42166 2022-06-29 05:00:04+00:00| exploited| https://t.me/cKure/9862 2022-06-29 07:20:27+00:00| published-proof-of-concept| https://t.me/TopCyberTechNews/51 2022-06-30 10:57:20+00:00| seen|...

CVE-2022-27925

creationtimestamp| type| source ---|---|--- 2022-05-05 14:03:26+00:00| seen| https://t.me/ptswarm/123 2022-06-22 11:01:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6249 2022-08-12 12:07:32+00:00| exploited| https://t.me/truesecator/3286 2022-08-12 18:43:37+00:00|...

CVE-2022-22960

creationtimestamp| type| source ---|---|--- 2022-05-01 21:40:40+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2076 2022-06-01 19:38:01+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2356 2022-06-02 11:01:01+00:00| published-proof-of-concept|...

CVE-2022-24706

creationtimestamp| type| source ---|---|--- 2022-04-26 14:36:58+00:00| seen| https://t.me/cibsecurity/41424 2022-04-28 17:51:45+00:00| published-proof-of-concept| https://t.me/cKure/9439 2022-04-29 17:20:21+00:00| published-proof-of-concept| https://t.me/ShlezySecChannel/39 2022-05-22...

CVE-2022-29806

creationtimestamp| type| source ---|---|--- 2022-04-26 07:50:55+00:00| seen| https://t.me/cibsecurity/41422 2022-05-04 22:56:15+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/zoneminderlangexec.rb 2025-02-06 03:13:45+00:00| seen|...

CVE-2022-29499

creationtimestamp| type| source ---|---|--- 2022-04-26 07:47:52+00:00| seen| https://t.me/cibsecurity/41421 2022-06-27 19:30:04+00:00| exploited| https://t.me/truesecator/3104 2022-09-13 15:35:06+00:00| exploited| https://t.me/truesecator/3409 2022-09-14 09:47:43+00:00| seen|...

MISP Cross-Site Scripting Vulnerability (CNVD-2022-64092)

MISP is an open source software solution. The product is used to collect, store, distribute, and share network security metrics and has features such as threat network security event analysis and malware analysis. cross-site scripting vulnerability exists in versions prior to MISP 2.4.158, which...

MISP Cross-Site Scripting Vulnerability (CNVD-2022-64091)

MISP is an open source software solution. The product is used to collect, store, distribute, and share network security metrics and has features such as threat network security event analysis and malware analysis. cross-site scripting vulnerability exists in versions prior to MISP 2.4.158, which...

MISP Cross-Site Scripting Vulnerability (CNVD-2022-64093)

MISP is an open source software solution. The product is used to collect, store, distribute, and share network security metrics and has features such as threat network security event analysis and malware analysis. cross-site scripting vulnerability exists in versions prior to MISP 2.4.158, which...

MISP Cross-Site Scripting Vulnerability (CNVD-2022-64095)

MISP is an open source software solution. The product is used to collect, store, distribute, and share network security metrics, and has features such as threat network security event analysis and malware analysis. cross-site scripting vulnerabilities exist in versions of MISP prior to 2.4.158,...

MISP Cross-Site Scripting Vulnerability (CNVD-2022-64094)

MISP is an open source software solution. The product is used to collect, store, distribute, and share network security metrics, and has features such as threat network security event analysis and malware analysis. cross-site scripting vulnerabilities exist in versions of MISP prior to 2.4.158,...

Vulnerabilities fixed in MISP

Vulnerabilities have been fixed in MISP. The vulnerabilities allow a malicious person to perform attacks that result in the following categories of damage: Cross-Site Scripting XSS. Bypassing authentication Remote code execution Administrator/Root rights For these vulnerabilities, at the time of...

CVE-2022-29530

An issue was discovered in MISP before 2.4.158. There is stored XSS in the galaxy clusters...

CVE-2022-29530

An issue was discovered in MISP before 2.4.158. There is stored XSS in the galaxy clusters...

CVE-2022-29529

An issue was discovered in MISP before 2.4.158. There is stored XSS via the LinOTP login field...

CVE-2022-29531

An issue was discovered in MISP before 2.4.158. There is stored XSS in the event graph via a tag name...

CVE-2022-29532

An issue was discovered in MISP before 2.4.158. There is XSS in the cerebrate view if one administrator puts a javascript: URL in the URL field, and another administrator clicks on it...