CVE-2008-0148

creationtimestamp| type| source ---|---|--- 2018-07-30 08:49:01+00:00| seen| MISP/5b5ece74-a5c8-40cd-87d6-d789950d210f...

CVE-2017-6884

creationtimestamp| type| source ---|---|--- 2018-07-30 08:48:18+00:00| seen| MISP/5b5ece74-a5c8-40cd-87d6-d789950d210f 2020-01-08 13:22:45+00:00| seen| MISP/5e15d698-a3b4-40fd-86e7-15cc02de0b81 2020-10-09 14:13:46+00:00| seen| MISP/b6fb39e0-8665-41f9-bc21-88d7f1945ec4 2020-10-09 16:07:57+00:00|...

CVE-2018-10661

creationtimestamp| type| source ---|---|--- 2018-07-25 19:52:39+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/axissrvparhandrce.rb 2018-07-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45100 2025-01-23 08:14:00+00:00| seen|...

CVE-2018-10660

creationtimestamp| type| source ---|---|--- 2018-07-25 19:52:39+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/axissrvparhandrce.rb 2018-07-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45100 2025-01-23 08:14:00+00:00| seen|...

CVE-2018-2893

creationtimestamp| type| source ---|---|--- 2018-07-18 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=310 2018-07-19 22:22:02+00:00| published-proof-of-concept| https://t.me/canyoupwnme/4126 2018-07-20 04:46:05+00:00| published-proof-of-concept| https://t.me/antichat/1765...

CVE-2018-0706

creationtimestamp| type| source ---|---|--- 2018-07-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45015 2018-07-14 15:26:26+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/qnapqcenterchangepasswdexec.rb 2018-07-17...

CVE-2018-0707

creationtimestamp| type| source ---|---|--- 2018-07-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45015 2018-07-14 15:26:26+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/qnapqcenterchangepasswdexec.rb 2018-07-17...

CVE-2017-18048

creationtimestamp| type| source ---|---|--- 2018-07-10 19:43:02+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/monstrafileuploadexec.rb 2020-05-27 07:46:37+00:00| seen| https://t.me/VulnerabilityNews/14804 2020-05-27 07:55:39+00:00| seen|...

CVE-2016-9722

creationtimestamp| type| source ---|---|--- 2018-07-10 17:02:11+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ibmqradarunauthrce.rb 2018-07-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45005 2025-02-06 03:13:42+00:00| seen...

CVE-2018-1612

creationtimestamp| type| source ---|---|--- 2018-07-10 17:02:11+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ibmqradarunauthrce.rb 2018-07-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45005 2025-02-06 03:13:43+00:00| seen...

CVE-2018-1418

creationtimestamp| type| source ---|---|--- 2018-07-10 17:02:11+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ibmqradarunauthrce.rb 2018-07-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45005 2025-02-06 03:13:43+00:00| seen...

CVE-2017-16995

creationtimestamp| type| source ---|---|--- 2018-07-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45010 2018-07-11 17:11:02+00:00| published-proof-of-concept| https://t.me/canyoupwnme/4095 2018-07-18 11:41:19+00:00| seen|...

CVE-2018-6961

creationtimestamp| type| source ---|---|--- 2018-07-02 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44959 2018-07-05 08:32:02+00:00| published-proof-of-concept| https://t.me/antichat/1694 2019-12-17 14:15:18+00:00| seen| MISP/5df8e293-8fe4-4dc0-a0c4-4c3502de0b81 2020-10-09...

CVE-2014-0130

creationtimestamp| type| source ---|---|--- 2018-06-30 21:50:00+00:00| published-proof-of-concept| https://t.me/cKure/160 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-05 02:47:53+00:00| seen| https://t.me/arpsyndicate/1372 2024-12-24 20:28:47+00:00| seen|...

CVE-2018-0296

creationtimestamp| type| source ---|---|--- 2018-06-28 09:11:54+00:00| published-proof-of-concept| https://t.me/LearnExploit/24 2018-06-28 10:12:29+00:00| exploited| https://t.me/SecLabNews/2533 2018-06-28 16:36:48+00:00| exploited| https://t.me/xakepru/3962 2018-06-29 04:00:00+00:00| seen|...

CVE-2018-9160

creationtimestamp| type| source ---|---|--- 2018-06-25 22:31:14+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/httpsickragepasswordleak.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:09+00:00|...

CVE-2018-12649

An issue was discovered in app/Controller/UsersController.php in MISP 2.4.92. An adversary can bypass the brute-force protection by using a PUT HTTP method instead of a POST HTTP method in the login part, because this protection was only covering POST requests...

CVE-2018-12649

An issue was discovered in app/Controller/UsersController.php in MISP 2.4.92. An adversary can bypass the brute-force protection by using a PUT HTTP method instead of a POST HTTP method in the login part, because this protection was only covering POST requests...

Design/Logic Flaw

An issue was discovered in app/Controller/UsersController.php in MISP 2.4.92. An adversary can bypass the brute-force protection by using a PUT HTTP method instead of a POST HTTP method in the login part, because this protection was only covering POST requests...

CVE-2018-12649

CVE-2018-12649 affects MISP 2.4.92 in app/Controller/UsersController.php, where brute-force protection for login only covers POST requests. An adversary can bypass protection by using PUT for login, enabling potential brute-force attempts. The recorded metrics show CVSS v3 base score 9.8 (CRITICA...