CVE-2024-58130

The CVE-2024-58130 affects MISP prior to 2.4.193 in RestResponseComponent.php where non-JSON REST responses are not sanitized. This could allow processing of non-JSON outputs through REST endpoints. Remediation: upgrade to MISP 2.4.193 (or later).

CVE-2024-58129

In MISP before 2.4.193, menucustomrightlinkhtml parameters can be set via the UI i.e., without using the CLI and thus attackers with admin privileges can conduct XSS attacks against every page...

CVE-2024-58129

In MISP before 2.4.193, menucustomrightlinkhtml parameters can be set via the UI i.e., without using the CLI and thus attackers with admin privileges can conduct XSS attacks against every page...

CVE-2025-25036

creationtimestamp| type| source ---|---|--- 2025-03-21 20:24:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8428 2025-03-21 22:39:52+00:00| seen| https://t.me/cvedetector/20836 2025-08-11 18:27:48+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

CVE-2025-25035

creationtimestamp| type| source ---|---|--- 2025-03-21 19:19:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8411 2025-03-21 22:39:54+00:00| seen| https://t.me/cvedetector/20839 2025-08-11 18:27:49+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

CVE-2024-53348

creationtimestamp| type| source ---|---|--- 2025-03-21 15:19:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8351 2025-03-21 18:29:03+00:00| seen| https://t.me/cvedetector/20816 2025-03-24 18:23:00+00:00| published-proof-of-concept|...

CVE-2024-8101

creationtimestamp| type| source ---|---|--- 2025-03-20 10:19:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8196 2025-08-11 18:27:49+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

CVE-2023-2359

creationtimestamp| type| source ---|---|--- 2025-03-19 15:49:02+00:00| seen| MISP/2bb5c40c-5583-4a30-bc62-81e5a7af21a7...

CVE-2024-3809

creationtimestamp| type| source ---|---|--- 2025-03-19 15:48:49+00:00| seen| MISP/2bb5c40c-5583-4a30-bc62-81e5a7af21a7...

CVE-2024-3806

creationtimestamp| type| source ---|---|--- 2025-03-19 15:48:34+00:00| seen| MISP/2bb5c40c-5583-4a30-bc62-81e5a7af21a7...

CVE-2025-30154

creationtimestamp| type| source ---|---|--- 2025-03-19 15:45:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114189869676629359 2025-03-19 16:30:54+00:00| seen| Telegram/1nxUJd1r2Vli3BcLbYFmcRkQRAx1kOCE3f---QAF-WqkIU 2025-03-19 17:21:01+00:00| published-proof-of-concept|...

CVE-2024-44228

creationtimestamp| type| source ---|---|--- 2025-03-13 17:45:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7448 2025-10-01 18:11:57+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6 2025-10-08 21:59:29+00:00| seen| MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6...

CVE-2025-0652

creationtimestamp| type| source ---|---|--- 2025-03-13 08:55:43+00:00| seen| https://t.me/cvedetector/20193 2025-08-13 13:26:34+00:00| seen| MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868...

CVE-2025-24993

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 17:09:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114144902283889820 2025-03-11 17:39:51+00:00| seen|...

CVE-2025-24991

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 17:09:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114144902283889820 2025-03-11 17:39:50+00:00| seen|...

CVE-2025-24985

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 17:09:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114144902283889820 2025-03-11 17:39:50+00:00| seen|...

CVE-2025-2194

creationtimestamp| type| source ---|---|--- 2025-03-11 13:39:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7132 2025-08-13 13:26:35+00:00| seen| MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868...

CVE-2024-38638

creationtimestamp| type| source ---|---|--- 2025-03-07 20:48:14+00:00| seen| https://t.me/cvedetector/19856 2025-08-16 01:45:14+00:00| seen| MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0 2025-08-19 04:06:35+00:00| seen| MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0...

CVE-2025-0087

creationtimestamp| type| source ---|---|--- 2025-03-05 13:37:32+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/17039 2025-03-05 22:00:05+00:00| published-proof-of-concept| Telegram/hCfCsWkJLNX-4ZZS6AKhD47aw1Wu0GxnlvM04EnHwON9-Gg 2025-08-18 13:31:24+00:00| seen|...

CVE-2025-1966

creationtimestamp| type| source ---|---|--- 2025-03-05 02:31:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6476 2025-03-05 04:00:29+00:00| published-proof-of-concept| Telegram/2TYLY8Gi5-0bl--R5jcV7oHn2mRqjc1hGZTQi41ZwOfEcH4 2025-03-05 04:23:37+00:00| seen|...