PT-2022-19683 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP versions prior to 2.4.158 Description: The issue is related to a Cross-Site Scripting XSS vulnerability in the app/Controller/OrganisationsController.php file, specifically in situations involving a "weird single checkbox page."...

CVE-2022-29533

CVE-2022-29533 affects MISP before 2.4.158 and is due to a cross-site scripting (XSS) flaw in the file app/Controller/OrganisationsController.php when handling a “weird single checkbox page.” Concrete details across connected sources confirm the vulnerable component and the impact is XSS; exploit...

CVE-2022-29531

An issue was discovered in MISP before 2.4.158. There is stored XSS in the event graph via a tag name...

CVE-2022-28108

creationtimestamp| type| source ---|---|--- 2022-04-19 07:23:25+00:00| seen| https://t.me/cibsecurity/41084 2025-01-07 10:17:16+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/seleniumgreedchromercecve202228108.rb 2025-01-08 12:52:55+00:00| seen...

CVE-2022-28810

creationtimestamp| type| source ---|---|--- 2022-04-18 16:24:09+00:00| seen| https://t.me/cibsecurity/41007 2022-04-20 19:41:20+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/manageengineadselfservicepluscve202228810.rb 2023-03-08...

CVE-2022-1329

creationtimestamp| type| source ---|---|--- 2022-04-17 06:23:53+00:00| published-proof-of-concept| https://t.me/proxybar/803 2022-04-17 22:20:29+00:00| published-proof-of-concept| https://t.me/MrVGunz/120 2022-04-18 04:21:33+00:00| published-proof-of-concept| https://t.me/LearnExploit/3397...

CVE-2022-1364

creationtimestamp| type| source ---|---|--- 2022-04-15 08:56:41+00:00| exploited| https://t.me/cKure/9368 2022-04-15 11:36:01+00:00| exploited| https://t.me/truesecator/2853 2022-04-17 12:32:15+00:00| exploited| https://t.me/CybersecurityCourse/189 2022-04-18 01:07:08+00:00| exploited|...

CVE-2022-23176

creationtimestamp| type| source ---|---|--- 2022-04-14 17:10:02+00:00| exploited| https://t.me/itsecnews/488 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:30:22+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971508 2025-01-30 02:17:49+00:00|...

CVE-2014-9118

creationtimestamp| type| source ---|---|--- 2022-04-14 15:17:01+00:00| exploited| https://t.me/NeKaspersky/2117 2022-07-13 13:02:16+00:00| seen| MISP/8bf50bb8-94dd-4004-a646-5f78db6f0b6a 2024-11-30 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-30 2024-12-19...

CVE-2022-24521

creationtimestamp| type| source ---|---|--- 2022-04-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=784 2022-04-13 08:18:48+00:00| seen| https://t.me/itsecnews/474 2022-04-13 16:05:03+00:00| exploited| https://t.me/truesecator/2844 2022-04-14 13:46:52+00:00| exploited|...

CVE-2022-28213

creationtimestamp| type| source ---|---|--- 2022-04-12 20:23:26+00:00| seen| https://t.me/cibsecurity/40660 2025-08-31 03:01:14+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

CVE-2022-22956

creationtimestamp| type| source ---|---|--- 2022-04-07 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=775 2022-05-01 21:40:40+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2076 2023-04-18 15:17:44+00:00| seen|...

CVE-2022-22954

creationtimestamp| type| source ---|---|--- 2022-04-07 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=775 2022-04-07 07:51:03+00:00| seen| https://t.me/thehackernews/2058 2022-04-07 15:10:55+00:00| seen| https://t.me/ptswarm/119 2022-04-11 10:48:25+00:00|...

CVE-2022-22957

creationtimestamp| type| source ---|---|--- 2022-04-07 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=775 2022-05-01 21:40:40+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2076 2023-04-18 15:17:44+00:00| seen|...

CVE-2022-22639

creationtimestamp| type| source ---|---|--- 2022-04-05 04:21:59+00:00| published-proof-of-concept| https://t.me/ctinow/49692 2022-04-05 05:18:56+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1855 2022-04-10 23:31:05+00:00| published-proof-of-concept|...

CVE-2021-22681

creationtimestamp| type| source ---|---|--- 2022-04-04 10:47:50+00:00| seen| https://t.me/truesecator/2801 2022-04-04 15:31:31+00:00| seen| https://t.me/SecLabNews/11893 2022-04-21 17:12:16+00:00| exploited| https://t.me/truesecator/2873 2024-05-22 17:00:07+00:00| seen|...

CVE-2022-28381

creationtimestamp| type| source ---|---|--- 2022-04-03 22:26:52+00:00| seen| https://t.me/cibsecurity/40069 2022-04-04 19:32:45+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/cve202228381allmediaserverbof.rb 2022-04-06 14:21:06+00:00| seen|...

CVE-2022-22674

creationtimestamp| type| source ---|---|--- 2022-04-01 07:45:33+00:00| seen| https://t.me/cKure/9241 2022-04-01 12:00:50+00:00| seen| https://t.me/itsecnews/415 2022-04-01 13:50:00+00:00| exploited| https://t.me/truesecator/2797 2022-04-01 20:38:56+00:00| exploited| https://t.me/NeKaspersky/2066...

CVE-2022-22675

creationtimestamp| type| source ---|---|--- 2022-04-01 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=768 2022-04-01 07:43:37+00:00| exploited| https://t.me/cKure/9240 2022-04-01 07:45:33+00:00| seen| https://t.me/cKure/9241 2022-04-01 12:00:50+00:00| seen|...

CVE-2022-22965

creationtimestamp| type| source ---|---|--- 2022-03-31 13:45:50+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1756 2022-03-31 14:20:55+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1757 2022-03-31 14:38:31+00:00| published-proof-of-concept|...