CVE-2020-17506

creationtimestamp| type| source ---|---|--- 2020-09-21 20:38:44+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/articaproxyauthbypassservicecmdspeformcommandinjection.rb 2024-11-14 06:07:09+00:00| seen| MISP/c5be76fc-667f-4614-a326-c9b2726c0902...

CVE-2020-7460

creationtimestamp| type| source ---|---|--- 2020-09-19 20:38:57+00:00| published-proof-of-concept| https://t.me/HackerOne/2743 2022-07-19 05:12:18+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1687 2023-11-02 19:17:43+00:00| seen|...

CVE-2018-18556

creationtimestamp| type| source ---|---|--- 2020-09-19 13:26:48+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/ssh/vyosrestrictedshellprivesc.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:06+00:00|...

CVE-2020-25766

An issue was discovered in MISP before 2.4.132. It can perform an unwanted action because of a POST operation on a form that is not linked to the login page...

CVE-2020-25766

An issue was discovered in MISP before 2.4.132. It can perform an unwanted action because of a POST operation on a form that is not linked to the login page...

Code injection

An issue was discovered in MISP before 2.4.132. It can perform an unwanted action because of a POST operation on a form that is not linked to the login page...

CVE-2020-25766

An issue was discovered in MISP before 2.4.132. It can perform an unwanted action because of a POST operation on a form that is not linked to the login page...

CVE-2020-25766

CVE-2020-25766 affects MISP prior to 2.4.132. Root cause: a POST operation on a form not linked to the login page can trigger an unwanted action. Affects versions before 2.4.132; documented impact includes possible unauthorized action with low attack complexity (network vector) and no authenticat...

CVE-2020-12109

creationtimestamp| type| source ---|---|--- 2020-09-18 14:58:24+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/tplinkncxxxbonjourcommandinjection.rb 2024-11-14 06:07:14+00:00| seen| MISP/31e52c3d-a86d-4dbc-b75d-9d1508fba5b9 2025-02-06...

CVE-2020-16875

creationtimestamp| type| source ---|---|--- 2020-09-16 20:41:14+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/exchangeecpdlppolicy.rb 2020-12-23 13:09:12+00:00| exploited| https://t.me/CyberGovIL/1021 2020-12-23 14:15:56+00:00| exploited|...

CVE-2020-17132

creationtimestamp| type| source ---|---|--- 2020-09-16 20:41:14+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/exchangeecpdlppolicy.rb 2020-12-23 13:09:12+00:00| exploited| https://t.me/CyberGovIL/1021 2020-12-23 14:15:56+00:00| exploited|...

CVE-2020-15920

creationtimestamp| type| source ---|---|--- 2020-09-16 15:35:56+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/midasolutionseframeworkajaxreqrce.rb 2025-02-02 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities -...

CVE-2019-0230

creationtimestamp| type| source ---|---|--- 2020-09-14 20:55:04+00:00| seen| https://t.me/cibsecurity/14642 2020-12-23 17:47:29+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/struts2multievalognl.rb 2021-01-10 20:25:14+00:00|...

CVE-2020-15802

creationtimestamp| type| source ---|---|--- 2020-09-10 10:23:38+00:00| seen| https://t.me/truesecator/920 2020-09-10 12:14:16+00:00| seen| https://t.me/cKure/2162 2020-09-10 23:40:58+00:00| seen| https://t.me/thehackernews/836 2020-09-11 07:15:07+00:00| published-proof-of-concept|...

CVE-2020-9839

creationtimestamp| type| source ---|---|--- 2020-09-04 21:04:03+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/cfprefsdracecondition.rb 2020-09-08 11:12:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1712 2025-02-06...

CVE-2020-3566

creationtimestamp| type| source ---|---|--- 2020-08-31 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=507 2020-08-31 12:08:04+00:00| seen| https://t.me/icscert/337 2020-08-31 16:28:28+00:00| exploited| https://t.me/informationsecuritychannel/40069 2020-08-31 17:21:12+00:0...

CVE-2020-3398

creationtimestamp| type| source ---|---|--- 2020-08-28 06:14:44+00:00| seen| MISP/25484f6f-b8f1-4eeb-a1ea-e4ff2e1c972b...

CVE-2017-8835

creationtimestamp| type| source ---|---|--- 2020-08-27 21:59:46+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/peplinkbauthsqli.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:00+00:00| seen|...

CVE-2020-8218

creationtimestamp| type| source ---|---|--- 2020-08-27 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=506 2020-08-29 11:05:49+00:00| published-proof-of-concept| https://t.me/cKure/2007 2020-08-29 11:29:34+00:00| published-proof-of-concept|...

CVE-2020-16139

creationtimestamp| type| source ---|---|--- 2020-08-21 14:32:32+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/cisco/cisco7937gdosreboot.py 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:25+00:00| seen|...