CVE-2019-11231

creationtimestamp| type| source ---|---|--- 2019-05-16 16:47:53+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/getsimplecmsunauthcodeexec.rb 2019-05-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46880 2019-05-22...

CVE-2018-7841

creationtimestamp| type| source ---|---|--- 2019-05-15 09:07:02+00:00| published-proof-of-concept| https://t.me/antichat/4930 2019-12-17 14:15:18+00:00| seen| MISP/5df8e293-8fe4-4dc0-a0c4-4c3502de0b81 2020-10-09 14:49:39+00:00| seen| MISP/08d290fb-f97b-4471-b4fb-65cd5672f476 2020-10-15...

CVE-2019-0863

creationtimestamp| type| source ---|---|--- 2019-05-15 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=391 2019-05-15 15:45:13+00:00| exploited| https://t.me/CyberGovIL/451 2019-05-23 15:16:05+00:00| seen| https://t.me/ctinow/11701 2019-07-04 06:07:15+00:00|...

CVE-2019-0708

creationtimestamp| type| source ---|---|--- 2019-05-14 05:00:00+00:00| seen| https://msrc.microsoft.com/blog/2019/05/prevent-a-worm-by-updating-remote-desktop-services-cve-2019-0708/ 2019-05-14 20:27:23+00:00| seen| https://t.me/thehackernews/305 2019-05-14 21:31:48+00:00| seen|...

CVE-2019-3568

creationtimestamp| type| source ---|---|--- 2019-05-14 03:05:59+00:00| exploited| https://t.me/alexmakus/2832 2019-05-14 04:54:25+00:00| exploited| https://t.me/antichat/4889 2019-05-14 06:21:19+00:00| exploited| https://t.me/MajorHacker/62 2019-05-14 07:28:07+00:00| exploited|...

Cross site scripting

An issue was discovered in app/webroot/js/misp.js in MISP before 2.4.107. There is persistent XSS via image names in titles, as demonstrated by a screenshot...

Cross site scripting

A persistent XSS issue was discovered in app/View/Helper/CommandHelper.php in MISP before 2.4.107. JavaScript can be included in the discussion interface, and can be triggered by clicking on the link...

CVE-2019-11813

An issue was discovered in app/View/Elements/Events/View/valuefield.ctp in MISP before 2.4.107. There is persistent XSS via link type attributes with javascript:// links...

CVE-2019-11812

A persistent XSS issue was discovered in app/View/Helper/CommandHelper.php in MISP before 2.4.107. JavaScript can be included in the discussion interface, and can be triggered by clicking on the link...

Design/Logic Flaw

An issue was discovered in app/View/Elements/Events/View/valuefield.ctp in MISP before 2.4.107. There is persistent XSS via link type attributes with javascript:// links...

CVE-2019-11812

A persistent XSS issue was discovered in app/View/Helper/CommandHelper.php in MISP before 2.4.107. JavaScript can be included in the discussion interface, and can be triggered by clicking on the link...

CVE-2019-11813

An issue was discovered in app/View/Elements/Events/View/valuefield.ctp in MISP before 2.4.107. There is persistent XSS via link type attributes with javascript:// links...

CVE-2019-11814

An issue was discovered in app/webroot/js/misp.js in MISP before 2.4.107. There is persistent XSS via image names in titles, as demonstrated by a screenshot...

CVE-2019-11814

An issue was discovered in app/webroot/js/misp.js in MISP before 2.4.107. There is persistent XSS via image names in titles, as demonstrated by a screenshot...

CVE-2019-11814

The CVE-2019-11814 entry concerns MISP prior to version 2.4.107. Affected: the web UI script at app/webroot/js/misp.js. Description: persistent XSS via image names in titles, demonstrated by a screenshot. Impact as stated centers on XSS exposure in title fields. Exploitation details are not provi...

CVE-2019-11814

An issue was discovered in app/webroot/js/misp.js in MISP before 2.4.107. There is persistent XSS via image names in titles, as demonstrated by a screenshot...

CVE-2019-11813

CVE-2019-11813 applies to MISP before 2.4.107, affecting the view component app/View/Elements/Events/View/value_field.ctp. The issue is a persistent XSS via link type attributes using javascript:// links, enabling potentially scripted payloads in affected installations. Root cause is improper han...

CVE-2019-11813

An issue was discovered in app/View/Elements/Events/View/valuefield.ctp in MISP before 2.4.107. There is persistent XSS via link type attributes with javascript:// links...

CVE-2019-11812

A persistent XSS issue was discovered in app/View/Helper/CommandHelper.php in MISP before 2.4.107. JavaScript can be included in the discussion interface, and can be triggered by clicking on the link...

CVE-2019-11812

CVE-2019-11812 is a persistent XSS in MISP prior to 2.4.107. The vulnerability is in the PHP component app/View/Helper/CommandHelper.php, where JavaScript can be injected via the discussion interface and triggered by clicking a link. Affected product/version: MISP (before 2.4.107). Root cause is ...