PYSEC-2020-66

MISP MISP-maltego 1.4.4 incorrectly shares a MISP connection across users in a remote-transform use case...

CVE-2020-12889

MISP MISP-maltego 1.4.4 incorrectly shares a MISP connection across users in a remote-transform use case...

CVE-2020-12889

The CVE-2020-12889 entry concerns MISP-maltego 1.4.4, where the MISP connection is incorrectly shared across users during a remote-transform use case. The issue implies a faulty isolation mechanism between user sessions, allowing cross-user access to the MISP connection. Remediation is noted as a...

Open-sourcing new COVID-19 threat intelligence

A global threat requires a global response. While the world faces the common threat of COVID-19, defenders are working overtime to protect users all over the globe from cybercriminals using COVID-19 as a lure to mount attacks. As a security intelligence community, we are stronger when we share...

CVE-2020-1054

creationtimestamp| type| source ---|---|--- 2020-05-14 11:25:09+00:00| published-proof-of-concept| https://t.me/cKure/554 2020-05-17 23:19:57+00:00| published-proof-of-concept| Telegram/S6cKiaRN2UkEobcxhQf6vSUnVPFGFqMX2ieCw0Y3BuGN 2020-05-28 00:37:34+00:00| published-proof-of-concept|...

CVE-2020-1048

creationtimestamp| type| source ---|---|--- 2020-05-13 22:58:05+00:00| published-proof-of-concept| https://t.me/hybgl/209 2020-05-14 10:01:29+00:00| published-proof-of-concept| https://t.me/misteam/160 2020-08-11 20:41:51+00:00| published-proof-of-concept| https://t.me/cKure/1791 2020-08-12...

CVE-2020-11060

creationtimestamp| type| source ---|---|--- 2020-05-12 14:45:16+00:00| published-proof-of-concept| https://t.me/canyoupwnme/6428 2020-05-12 14:52:48+00:00| published-proof-of-concept| https://t.me/techpwnews/635 2021-06-15 01:19:34+00:00| seen| https://t.me/pwnwikizhchannel/649 2024-10-23...

CVE-2020-12720

creationtimestamp| type| source ---|---|--- 2020-05-11 21:20:17+00:00| seen| https://t.me/thehackernews/694 2020-05-12 15:30:02+00:00| seen| https://t.me/SecLabNews/7557 2020-05-13 07:10:59+00:00| seen| https://t.me/informationsecuritychannel/37769 2020-05-15 08:42:43+00:00|...

CVE-2020-11108

creationtimestamp| type| source ---|---|--- 2020-05-11 17:21:08+00:00| published-proof-of-concept| https://t.me/cybershit/749 2020-05-12 10:03:03+00:00| published-proof-of-concept| https://t.me/androidMalware/822 2020-05-12 14:45:39+00:00| published-proof-of-concept| https://t.me/canyoupwnme/6431...

CVE-2019-10068

creationtimestamp| type| source ---|---|--- 2020-05-06 14:27:21+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/kenticostagingsyncserver.rb 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 08:03:59+00:00|...

CVE-2020-4429

creationtimestamp| type| source ---|---|--- 2020-05-05 17:17:40+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/ibmdrmdownload.rb 2020-05-05 17:17:40+00:00| seen|...

CVE-2020-4427

creationtimestamp| type| source ---|---|--- 2020-05-05 17:17:40+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/ibmdrmdownload.rb 2020-05-05 17:17:40+00:00| seen|...

CVE-2020-4428

creationtimestamp| type| source ---|---|--- 2020-05-05 17:17:40+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ibmdrmrce.rb 2021-11-08 08:58:18+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen|...

CVE-2020-7351

creationtimestamp| type| source ---|---|--- 2020-05-04 21:23:04+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/trixboxceendpointdevicemaprce.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:30+00:0...

CVE-2020-11652

creationtimestamp| type| source ---|---|--- 2020-05-03 19:21:42+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/saltstack-salt-hallintakehikossa-kriittisia-haavoittuvuuksia 2020-05-05 09:45:03+00:00| exploited| https://t.me/SecLabNews/7504 2020-05-12 18:48:12+00:00| seen|...

CVE-2020-10915

creationtimestamp| type| source ---|---|--- 2020-05-01 20:31:39+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/veeamoneagentdeserialization.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:21+00:0...

CVE-2020-10914

creationtimestamp| type| source ---|---|--- 2020-05-01 20:31:39+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/veeamoneagentdeserialization.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:21+00:0...

CVE-2014-2630

creationtimestamp| type| source ---|---|--- 2020-05-01 15:29:31+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/hpxglanceprivesc.rb 2024-10-09 22:58:28+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/614 2025-02-06...

CVE-2020-1631

creationtimestamp| type| source ---|---|--- 2020-04-30 10:30:02+00:00| seen| https://t.me/SecLabNews/7490 2020-10-13 06:50:38+00:00| seen| MISP/453274cf-e60d-452a-b88e-0bf6a5a6dae4 2020-10-13 15:16:18+00:00| seen| MISP/f628d96f-2958-4717-91da-e86aace4925d 2023-06-14 21:10:04+00:00| seen|...

CVE-2019-3999

creationtimestamp| type| source ---|---|--- 2020-04-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48400 2020-05-12 18:48:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/druvainsyncinsynccphwnet64rcptype5privesc.rb...