CVE-2024-29988

creationtimestamp| type| source ---|---|--- 2024-04-09 21:41:41+00:00| exploited| https://t.me/ctinow/214562 2024-04-10 00:21:48+00:00| exploited| https://t.me/ctinow/214580 2024-04-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1267 2024-04-10 09:11:17+00:00| seen|...

CVE-2024-31819

creationtimestamp| type| source ---|---|--- 2024-04-09 19:18:55+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6996 2024-04-10 03:56:02+00:00| published-proof-of-concept| https://t.me/CNArsenal/2282 2024-04-10 06:02:35+00:00| published-proof-of-concept|...

CVE-2024-30851

creationtimestamp| type| source ---|---|--- 2024-04-08 15:48:19+00:00| published-proof-of-concept| https://t.me/truesecator/5611 2024-04-09 19:49:19+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10302 2024-05-27 09:53:04+00:00| seen|...

CVE-2024-3272

creationtimestamp| type| source ---|---|--- 2024-04-08 13:56:56+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6982 2024-04-09 08:20:54+00:00| exploited| https://t.me/thehackernews/4790 2024-04-09 08:44:03+00:00| exploited| https://t.me/KomunitiSiber/1750 2024-04-09 08:52:14+00:00|...

CVE-2024-3116

creationtimestamp| type| source ---|---|--- 2024-04-07 23:03:55+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6973 2024-04-07 23:08:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6974 2024-07-30 07:06:00+00:00| published-proof-of-concept|...

CVE-2024-3273

creationtimestamp| type| source ---|---|--- 2024-04-07 09:31:33+00:00| published-proof-of-concept| https://t.me/proxybar/1994 2024-04-07 09:32:42+00:00| published-proof-of-concept| https://t.me/CNArsenal/2265 2024-04-07 15:40:36+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6970...

CVE-2024-30850

creationtimestamp| type| source ---|---|--- 2024-04-05 21:39:16+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6955 2024-04-06 06:05:52+00:00| published-proof-of-concept| https://t.me/CNArsenal/2253 2024-04-06 06:08:44+00:00| published-proof-of-concept|...

CVE-2024-24725

creationtimestamp| type| source ---|---|--- 2024-04-05 14:39:59+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gibbonauthrcecve202424725.rb 2024-04-07 23:07:24+00:00| seen| https://t.me/arpsyndicate/4387 2025-02-06 03:13:46+00:00| seen|...

CVE-2024-29745

creationtimestamp| type| source ---|---|--- 2024-04-03 18:11:05+00:00| exploited| https://t.me/thehackernews/4773 2024-04-03 18:52:14+00:00| exploited| Telegram/t2A5Sw8v34JHXVdTZz5ErsJUM1Paguv9OFbCT2bysC8r4 2024-04-03 19:30:59+00:00| exploited| Telegram/6Xee1DRA00BD3p5FTVknidpMD1RGFUJArRoLX5-y9mg...

CVE-2024-29748

creationtimestamp| type| source ---|---|--- 2024-04-03 18:11:05+00:00| exploited| https://t.me/thehackernews/4773 2024-04-03 18:52:14+00:00| exploited| Telegram/t2A5Sw8v34JHXVdTZz5ErsJUM1Paguv9OFbCT2bysC8r4 2024-04-03 19:30:59+00:00| exploited| Telegram/6Xee1DRA00BD3p5FTVknidpMD1RGFUJArRoLX5-y9mg...

CVE-2024-3094

creationtimestamp| type| source ---|---|--- 2024-03-29 17:08:40+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6881 2024-03-29 17:57:26+00:00| seen| https://www.cert.at/de/warnungen/2024/3/kritische-sicherheitslucke-in-fedora-41-und-fedora-rawhide-bibliothek-xz 2024-03-29...

CVE-2024-29059

creationtimestamp| type| source ---|---|--- 2024-03-25 13:00:53+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6850 2024-03-25 15:32:15+00:00| published-proof-of-concept| https://t.me/CNArsenal/2179 2024-03-25 15:32:50+00:00| published-proof-of-concept|...

CVE-2024-1800

creationtimestamp| type| source ---|---|--- 2024-03-21 23:00:21+00:00| seen| https://t.me/arpsyndicate/4292 2024-06-03 12:53:24+00:00| published-proof-of-concept| https://t.me/orderofsixangles/2311 2024-06-04 09:30:41+00:00| seen| https://t.me/lostsec/565 2024-06-04 18:48:59+00:00|...

CVE-2024-29858

In MISP before 2.4.187, uploadLogo in app/Controller/OrganisationsController.php does not properly check for a valid logo upload...

CVE-2024-29859

In MISP before 2.4.187, addmispexport in app/Controller/EventsController.php does not properly check for a valid file upload...

MISP 安全漏洞

MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics with features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP versions prior to 2.4.187 that stems from...

CVE-2024-29859

In MISP before 2.4.187, addmispexport in app/Controller/EventsController.php does not properly check for a valid file upload...

CVE-2024-29858

In MISP before 2.4.187, uploadLogo in app/Controller/OrganisationsController.php does not properly check for a valid logo upload...

CVE-2024-29858

CVE-2024-29858 affects MISP prior to 2.4.187. The issue is in the uploadLogo function (app/Controller/OrganisationsController.php) which does not properly validate uploaded logos, i.e., it does not correctly check for a valid logo file. This could lead to unsafe logo uploads. Remediation: upgrade...

CVE-2024-29859

CVE-2024-29859 affects MISP prior to 2.4.187. The issue is in add_misp_export (app/Controller/EventsController.php) where there is an insufficient check for a valid file upload, constituting the root cause. Documented impact indicates potential exposure related to file uploads, with high-severity...