MISP 安全漏洞

MISP is an open source software solution from MISP Open Source. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP 2.5.2 and earlier versions,...

CVE-2024-54675

app/webroot/js/workflows-editor/workflows-editor.js in MISP through 2.5.2 has stored XSS in the editor interface for an ad-hoc workflow...

CVE-2024-42449

creationtimestamp| type| source ---|---|--- 2024-12-03 21:45:08+00:00| seen| https://infosec.exchange/users/edwardk/statuses/113591078514826699 2024-12-04 01:42:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113592013388424843 2024-12-04 04:12:24+00:00| seen|...

CVE-2024-11680

creationtimestamp| type| source ---|---|--- 2024-11-21 17:59:45+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/projectsendunauthrce.rb 2024-11-26 09:58:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113548665618022004 2024-11-27...

CVE-2024-47407

creationtimestamp| type| source ---|---|--- 2024-11-21 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-326-07 2025-02-11 08:32:04+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/mypromgrcmd.rb 2025-02-11...

CVE-2024-11320

creationtimestamp| type| source ---|---|--- 2024-11-21 10:11:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113520403781165691 2024-12-01 12:59:15+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9279 2024-12-02 03:04:28+00:00| published-proof-of-concept|...

CVE-2024-28185

creationtimestamp| type| source ---|---|--- 2024-11-20 22:41:34+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/judge0sandboxescapecve202428189.rb 2025-02-06 03:13:46+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23...

CVE-2024-28189

creationtimestamp| type| source ---|---|--- 2024-11-20 22:41:34+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/judge0sandboxescapecve202428189.rb 2025-02-06 03:13:46+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23...

CVE-2024-48990

creationtimestamp| type| source ---|---|--- 2024-11-20 18:45:21+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9102 2024-11-21 13:05:05+00:00| seen| https://t.me/truesecator/6456 2024-11-22 00:03:09+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9121 2024-11-22...

CVE-2024-11477

creationtimestamp| type| source ---|---|--- 2024-11-20 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1532/ 2024-11-22 16:40:16+00:00| seen| https://t.me/truesecator/6464 2024-11-23 09:01:40+00:00| exploited| https://t.me/kasperskyb2b/1513 2024-11-23 12:18:03+00:00| seen...

CVE-2023-28461

creationtimestamp| type| source ---|---|--- 2024-11-20 04:47:00+00:00| seen| https://infosec.exchange/users/edwardk/statuses/113513465135891182 2024-11-25 15:59:35+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113544421331313601 2024-11-25 16:25:12+00:00| seen|...

CVE-2024-44309

creationtimestamp| type| source ---|---|--- 2024-11-19 18:58:42+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113511151778117019 2024-11-20 02:02:32+00:00| exploited| https://t.me/cvedetector/11554 2024-11-20 04:00:00+00:00| seen|...

CVE-2024-44757

creationtimestamp| type| source ---|---|--- 2024-11-18 19:03:48+00:00| seen| https://t.me/cvedetector/11366 2025-09-25 00:36:28+00:00| seen| MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51...

CVE-2024-52436

creationtimestamp| type| source ---|---|--- 2024-11-18 17:23:09+00:00| seen| https://t.me/cvedetector/11342 2025-09-25 00:36:29+00:00| seen| MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51 2026-04-04 17:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3miopj2vlau2f...

CVE-2023-39179

creationtimestamp| type| source ---|---|--- 2024-11-18 12:22:17+00:00| seen| https://t.me/cvedetector/11324 2025-09-25 00:36:29+00:00| seen| MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51...

CVE-2023-39176

creationtimestamp| type| source ---|---|--- 2024-11-18 12:22:16+00:00| seen| https://t.me/cvedetector/11323 2025-09-25 00:36:29+00:00| seen| MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51...

CVE-2024-41967

creationtimestamp| type| source ---|---|--- 2024-11-18 10:41:39+00:00| seen| https://t.me/cvedetector/11302 2025-09-25 00:36:29+00:00| seen| MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51...

CVE-2023-7261

creationtimestamp| type| source ---|---|--- 2024-11-16 16:34:12+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/11440 2024-11-17 02:59:36+00:00| published-proof-of-concept| https://t.me/CNArsenal/3459 2024-11-20 11:20:03+00:00| published-proof-of-concept|...

CVE-2024-8856

creationtimestamp| type| source ---|---|--- 2024-11-16 06:52:51+00:00| seen| https://t.me/cvedetector/11225 2024-11-17 06:17:37+00:00| seen| https://t.me/CyberBulletin/26463 2024-11-17 06:17:37+00:00| seen| https://t.me/CyberBulletin/1490 2024-11-22 10:05:08+00:00| published-proof-of-concept|...

CVE-2024-9935

creationtimestamp| type| source ---|---|--- 2024-11-16 04:25:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113490730333560797 2024-11-16 06:02:21+00:00| seen| https://t.me/cvedetector/11206 2024-11-21 00:10:02+00:00| confirmed|...