CVE-2018-12649

An issue was discovered in app/Controller/UsersController.php in MISP 2.4.92. An adversary can bypass the brute-force protection by using a PUT HTTP method instead of a POST HTTP method in the login part, because this protection was only covering POST requests...

CVE-2018-11646

creationtimestamp| type| source ---|---|--- 2018-06-21 21:37:11+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/webkitplus.rb 2025-01-23 20:37:20+00:00| published-proof-of-concept| Telegram/gZVW49kuYoasZTY1tITTGZ5xDPxjlw-c5GyQ-w1Z3p3ssZo 2025-02-...

CVE-2018-4233

creationtimestamp| type| source ---|---|--- 2018-06-19 04:25:59+00:00| published-proof-of-concept| https://t.me/br0wsec/46 2018-06-19 07:51:57+00:00| published-proof-of-concept| https://t.me/antichat/1610 2018-12-13 19:58:13+00:00| seen|...

CVE-2016-5734

creationtimestamp| type| source ---|---|--- 2018-06-18 14:02:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/phpmyadminnullterminationexec.rb 2025-02-06 03:13:42+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:48+00:00...

CVE-2018-10088

creationtimestamp| type| source ---|---|--- 2018-06-18 09:04:01+00:00| seen| MISP/5b2774da-6bb4-46c0-8483-43e102de0b81 2023-03-29 02:14:51+00:00| seen| https://t.me/cibsecurity/60985 2023-05-05 20:05:56+00:00| seen| Telegram/UskLUPPJsW5F-XCtAwXzv2fO1a3ScvfiV6otDT-umY 2023-05-06 00:27:24+00:00|...

CVE-2018-0824

creationtimestamp| type| source ---|---|--- 2018-06-15 22:35:54+00:00| seen| https://t.me/canyoupwnme/3973 2018-10-25 18:31:34+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/escalate/unmarshalcmdexec.rb 2024-08-02 14:37:18+00:00| exploited|...

CVE-2017-118822

creationtimestamp| type| source ---|---|--- 2018-06-14 08:44:21+00:00| seen| MISP/5b221ee1-8dcc-43cc-bb0b-681aac12042b 2020-10-09 14:27:18+00:00| seen| MISP/8775b2b9-aeeb-4fff-b4d1-b4ce5e8db73c...

CVE-2018-5002

creationtimestamp| type| source ---|---|--- 2018-06-07 16:59:13+00:00| seen| https://t.me/SecLabNews/2383 2018-06-08 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=299 2018-06-08 12:04:25+00:00| exploited| https://t.me/informationsecuritychannel/17806 2018-06-08...

CVE-2018-10583

creationtimestamp| type| source ---|---|--- 2018-06-06 16:36:03+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/fileformat/odtbadodt.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:02+00:00| seen|...

CVE-2018-4241

creationtimestamp| type| source ---|---|--- 2018-06-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44849 2020-10-09 14:05:37+00:00| seen| MISP/6d574aa3-3f1c-4275-acc4-bf5bc91f11b6...

CVE-2018-8065

creationtimestamp| type| source ---|---|--- 2018-05-31 20:06:17+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/flexensehttpserverdos.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:09+00:00| seen|...

Design/Logic Flaw

An issue was discovered in MISP 2.4.91. A vulnerability in app/View/Elements/eventattribute.ctp allows reflected XSS if a user clicks on a malicious link for an event view and then clicks on the deleted attributes quick filter...

CVE-2018-11562

An issue was discovered in MISP 2.4.91. A vulnerability in app/View/Elements/eventattribute.ctp allows reflected XSS if a user clicks on a malicious link for an event view and then clicks on the deleted attributes quick filter...

CVE-2018-11562

An issue was discovered in MISP 2.4.91. A vulnerability in app/View/Elements/eventattribute.ctp allows reflected XSS if a user clicks on a malicious link for an event view and then clicks on the deleted attributes quick filter...

CVE-2018-11562

CVE-2018-11562 affects MISP 2.4.91 via a vulnerability in the template file app/View/Elements/eventattribute.ctp that allows reflected XSS when a user clicks a malicious link in an event view and then uses the deleted attributes quick filter. Root cause: improper handling in that view leading to ...

CVE-2018-11562

An issue was discovered in MISP 2.4.91. A vulnerability in app/View/Elements/eventattribute.ctp allows reflected XSS if a user clicks on a malicious link for an event view and then clicks on the deleted attributes quick filter...

CVE-2018-10094

creationtimestamp| type| source ---|---|--- 2018-05-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44805 2018-09-20 03:25:55+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/dolibarrcredssqli.rb 2025-02-06 03:13:43+00:00| seen|...

CVE-2017-9757

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ipfireoinkcodeexec.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:01+00:00| seen|...

CVE-2013-6117

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/misc/dahuadvrauthbypass.rb 2025-02-06 03:13:41+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:22+00:00| seen|...

CVE-2017-18369

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/trueonlinebillion5200wrce.rb 2019-05-02 20:26:38+00:00| seen| https://t.me/cibsecurity/4082 2025-02-06 03:13:43+00:00| seen|...