CVE-2019-12868

CVE-2019-12868 (MISP 2.4.109) is a remote command execution vulnerability in the PHP component at app/Model/Server.php . The root cause is the use of PHP’s file_exists with user-controlled entries combined with phar:// URLs, which can trigger deserialization and allow a super administrator to exe...

PT-2019-12993 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP version 2.4.109 Description: The issue allows remote command execution by a super administrator due to the use of the PHP file exists function with user-controlled entries. Specifically, phar:// URLs can trigger deserialization, leading ...

CVE-2019-1040

creationtimestamp| type| source ---|---|--- 2019-06-14 09:16:51+00:00| published-proof-of-concept| https://t.me/canyoupwnme/5627 2019-06-14 12:15:26+00:00| published-proof-of-concept| https://t.me/antichat/5409 2019-06-15 11:10:30+00:00| published-proof-of-concept| https://t.me/misteam/97...

CVE-2010-5330

creationtimestamp| type| source ---|---|--- 2019-06-12 00:30:28+00:00| seen| https://t.me/cibsecurity/4851 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:30:35+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971521 2025-02-23 02:10:01+00:00| see...

CVE-2013-7471

creationtimestamp| type| source ---|---|--- 2019-06-12 00:30:27+00:00| seen| https://t.me/cibsecurity/4850 2025-03-03 10:15:47+00:00| seen| MISP/28347c8a-8fa9-4d49-bd73-98a955d83c02 2025-03-04 04:19:36+00:00| seen| MISP/28347c8a-8fa9-4d49-bd73-98a955d83c02 2026-07-16 12:15:02+00:00| seen|...

CVE-2017-18377

creationtimestamp| type| source ---|---|--- 2019-06-12 00:30:26+00:00| published-proof-of-concept| https://t.me/cibsecurity/4848 2020-10-15 15:07:03+00:00| seen| MISP/cbd9bbb3-3f53-4610-9d91-9191ff0a9ca8 2020-10-16 06:56:57+00:00| seen| MISP/25aef508-b116-4d75-84b2-b6ceff906e44 2026-07-16...

Design/Logic Flaw

An issue was discovered in MISP 2.4.108. Organization admins could reset credentials for site admins organization admins have the inherent ability to reset passwords for all of their organization's users. This, however, could be abused in a situation where the host organization of an instance...

CVE-2019-12794

An issue was discovered in MISP 2.4.108. Organization admins could reset credentials for site admins organization admins have the inherent ability to reset passwords for all of their organization's users. This, however, could be abused in a situation where the host organization of an instance...

CVE-2019-12794

An issue was discovered in MISP 2.4.108. Organization admins could reset credentials for site admins organization admins have the inherent ability to reset passwords for all of their organization's users. This, however, could be abused in a situation where the host organization of an instance...

CVE-2019-12794

An issue was discovered in MISP 2.4.108. Organization admins could reset credentials for site admins organization admins have the inherent ability to reset passwords for all of their organization's users. This, however, could be abused in a situation where the host organization of an instance...

CVE-2019-12794

The CVE concerns MISP 2.4.108 where organization admins can reset credentials for site admins, enabling credential abuse when host organizations create lower-privilege admins. An org admin could manually set a site admin password or use the site admin’s API key to impersonate them, with abuse res...

CVE-2019-12840

creationtimestamp| type| source ---|---|--- 2019-06-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46984 2019-06-19 13:57:30+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/webminpackageuprce.rb 2020-12-21 22:52:17+00:00| seen...

CVE-2018-13382

creationtimestamp| type| source ---|---|--- 2019-06-05 00:26:12+00:00| seen| https://t.me/cibsecurity/4683 2019-08-14 01:53:52+00:00| exploited| https://t.me/Pen7esting/339 2022-06-08 19:35:04+00:00| published-proof-of-concept| https://t.me/truesecator/3042 2022-06-13 12:18:44+00:00| seen|...

CVE-2019-4279

creationtimestamp| type| source ---|---|--- 2019-06-04 17:26:24+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ibm/ibmwasdmgrjavadeserializationrce.rb 2019-06-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46969 2024-01-06...

CVE-2019-2557

creationtimestamp| type| source ---|---|--- 2019-05-24 12:00:04+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/oatsdownloadservlettraversal.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:15+00:00|...

CVE-2019-1069

creationtimestamp| type| source ---|---|--- 2019-05-23 08:09:25+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/nollapaivahaavoittuvuuksia-windows-10-kayttojarjestelmassa 2020-10-09 13:20:00+00:00| seen| MISP/fbff27c0-f30f-445c-92af-76781df1856d 2020-10-26 14:14:23+00:00| seen|...

CVE-2019-6814

creationtimestamp| type| source ---|---|--- 2019-05-22 20:48:28+00:00| seen| https://t.me/cvemitreorg/167 2019-07-22 19:56:03+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/schneiderelectricnet55xxencoder.rb 2019-07-29 00:00:00+00:00| exploited|...

CVE-2019-11634

creationtimestamp| type| source ---|---|--- 2019-05-22 17:48:31+00:00| seen| https://t.me/cvemitreorg/132 2021-02-01 14:56:35+00:00| seen| MISP/40f8e511-0605-4f1c-8112-5fe43ed25af0 2021-10-25 22:30:42+00:00| seen| MISP/63ddead6-4b82-414c-ad8e-c516b950b446 2021-11-08 08:58:17+00:00| seen|...

CVE-2019-8605

creationtimestamp| type| source ---|---|--- 2019-05-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46892 2019-08-20 17:05:55+00:00| exploited| https://t.me/thehackernews/429 2020-10-09 14:05:40+00:00| seen| MISP/6d574aa3-3f1c-4275-acc4-bf5bc91f11b6 2021-03-20 18:08:16+00:00|...

CVE-2019-12799

creationtimestamp| type| source ---|---|--- 2019-05-17 23:32:16+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/shopwarecreateinstancefromnamedargumentsrce.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23...