PT-2020-12002 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP version 2.4.122 Description: The issue is related to reflected XSS via unsanitized URL parameters, specifically in the app/View/Users/statistics orgs.ctp file. Recommendations: For MISP version 2.4.122, update to a version that sanitizes...

PT-2020-12003 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP version 2.4.122 Description: The issue is related to a Persistent XSS in the sighting popover tool, specifically in the app/View/Elements/Events/View/sighting field.ctp file. Recommendations: For MISP version 2.4.122, consider disabling...

CVE-2020-10189

creationtimestamp| type| source ---|---|--- 2020-03-07 12:05:02+00:00| published-proof-of-concept| https://t.me/SecLabNews/7045 2020-03-10 07:25:28+00:00| seen| MISP/6315f41b-d131-41bc-8552-324644b65b15 2020-03-13 19:29:46+00:00| seen|...

CVE-2020-0069

creationtimestamp| type| source ---|---|--- 2020-03-03 06:33:39+00:00| exploited| https://t.me/androidMalware/710 2020-03-03 11:00:02+00:00| exploited| https://t.me/SecLabNews/7007 2020-03-04 07:16:40+00:00| exploited| https://t.me/informationsecuritychannel/35588 2020-03-24 16:08:58+00:00|...

Unspecified vulnerability in MISP (CNVD-2020-18630)

MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. MISP suffers from an unspecified vulnerability that stems from the program not taking HTTP...

CVE-2020-9465

creationtimestamp| type| source ---|---|--- 2020-03-02 21:31:51+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/eyesofnetworkautodiscoveryrce.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:32+00:00...

CVE-2020-8655

creationtimestamp| type| source ---|---|--- 2020-03-02 21:31:51+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/eyesofnetworkautodiscoveryrce.rb 2020-03-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48169 2021-11-08...

CVE-2020-8657

creationtimestamp| type| source ---|---|--- 2020-03-02 21:31:51+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/eyesofnetworkautodiscoveryrce.rb 2020-03-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48169 2021-11-08...

CVE-2020-8654

creationtimestamp| type| source ---|---|--- 2020-03-02 21:31:51+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/eyesofnetworkautodiscoveryrce.rb 2020-03-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48169 2025-02-06...

CVE-2020-8656

creationtimestamp| type| source ---|---|--- 2020-03-02 21:31:51+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/eyesofnetworkautodiscoveryrce.rb 2020-03-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48169 2025-02-06...

CVE-2020-1938

creationtimestamp| type| source ---|---|--- 2020-02-28 19:26:21+00:00| published-proof-of-concept| https://t.me/thehackernews/618 2020-03-01 09:32:53+00:00| seen| https://t.me/informationsecuritychannel/35509 2020-03-03 17:01:44+00:00| exploited| https://t.me/SecLabNews/7011 2020-03-04...

CVE-2020-0688

creationtimestamp| type| source ---|---|--- 2020-02-26 12:03:25+00:00| published-proof-of-concept| https://t.me/hybgl/39 2020-02-26 21:36:00+00:00| exploited| https://t.me/BleepingComputer/6860 2020-02-27 09:20:02+00:00| published-proof-of-concept| https://t.me/canyoupwnme/6305 2020-02-27...

CVE-2020-6418

creationtimestamp| type| source ---|---|--- 2020-02-25 13:08:04+00:00| exploited| https://t.me/ctinow/20700 2020-02-25 18:03:55+00:00| exploited| https://t.me/truesecator/214 2020-02-26 02:58:18+00:00| exploited| https://t.me/secinfosex/33 2020-02-27 04:00:00+00:00| seen|...

CVE-2020-8794

creationtimestamp| type| source ---|---|--- 2020-02-25 11:11:12+00:00| seen| https://t.me/antichat/7965 2020-02-25 12:01:48+00:00| exploited| https://t.me/thehackernews/611 2020-03-04 19:41:51+00:00| seen|...

CVE-2020-0668

creationtimestamp| type| source ---|---|--- 2020-02-23 00:04:08+00:00| published-proof-of-concept| https://t.me/hybgl/25 2020-05-07 13:57:22+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve20200668servicetracing.rb 2021-09-21 04:41:55+00:0...

CVE-2015-7611

creationtimestamp| type| source ---|---|--- 2020-02-20 09:52:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/smtp/apachejamesexec.rb 2020-02-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48130 2025-02-06 03:13:42+00:00| seen|...

CVE-2020-0618

creationtimestamp| type| source ---|---|--- 2020-02-19 09:52:19+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/3859 2020-03-12 17:37:06+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/ssrsnavcorrectorviewstate.rb 2020-09-18...

CVE-2019-12518

creationtimestamp| type| source ---|---|--- 2020-02-13 15:58:47+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/crosschexdevicebof.rb 2020-02-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48092 2024-03-05 09:42:25+00:00|...

CVE-2020-8894

An issue was discovered in MISP before 2.4.121. ACLs for discussion threads were mishandled in app/Controller/ThreadsController.php and app/Model/Thread.php...

CVE-2020-8890

An issue was discovered in MISP before 2.4.121. It mishandled time skew between the machine hosting the web server and the machine hosting the database when trying to block a brute-force series of invalid requests...