CVE-2024-29858

In MISP before 2.4.187, uploadLogo in app/Controller/OrganisationsController.php does not properly check for a valid logo upload...

CVE-2024-29859

In MISP before 2.4.187, addmispexport in app/Controller/EventsController.php does not properly check for a valid file upload...

PT-2024-23087 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP versions prior to 2.4.187 Description: The issue arises from the add misp export function in app/Controller/EventsController.php not properly checking for a valid file upload. This could potentially lead to security weaknesses...

PT-2024-23086 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP versions prior to 2.4.187 Description: The issue concerns a weak security check in the uploadLogo function within the OrganisationsController.php file. This function does not properly validate logo uploads. Recommendations: For versions...

CVE-2024-29859

In MISP before 2.4.187, addmispexport in app/Controller/EventsController.php does not properly check for a valid file upload...

CVE-2024-29858

In MISP before 2.4.187, uploadLogo in app/Controller/OrganisationsController.php does not properly check for a valid logo upload...

CVE-2019-19585

creationtimestamp| type| source ---|---|--- 2024-03-19 17:41:24+00:00| seen| https://t.me/ctinow/211752 2024-11-14 06:10:04+00:00| seen| MISP/960cd098-d4ae-49ca-8c3a-8183adcce170 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:15+00:00| seen|...

CVE-2024-24578

creationtimestamp| type| source ---|---|--- 2024-03-18 23:26:26+00:00| seen| https://t.me/ctinow/211028 2024-03-18 23:26:35+00:00| seen| https://t.me/ctinow/211036 2025-02-21 01:30:23+00:00| seen|...

CVE-2024-20767

creationtimestamp| type| source ---|---|--- 2024-03-18 13:21:35+00:00| seen| https://t.me/ctinow/210495 2024-03-18 13:26:38+00:00| seen| https://t.me/ctinow/210496 2024-03-26 06:53:59+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6855 2024-03-26 08:54:10+00:00|...

CVE-2023-6019

creationtimestamp| type| source ---|---|--- 2024-03-18 10:01:05+00:00| published-proof-of-concept| https://github.com/google/tsunami-security-scanner-plugins/tree/master/google/detectors/rce/ai/cve20236019 2024-03-27 17:30:05+00:00| exploited| https://t.me/truesecator/5575 2024-04-10...

CVE-2024-28254

creationtimestamp| type| source ---|---|--- 2024-03-15 21:22:16+00:00| seen| https://t.me/ctinow/209160 2024-03-15 21:26:26+00:00| seen| https://t.me/ctinow/209173 2024-04-18 12:37:11+00:00| exploited| https://t.me/itsecnews/4333 2024-04-18 15:16:29+00:00| seen| https://t.me/ctinow/215638...

CVE-2024-2044

creationtimestamp| type| source ---|---|--- 2024-03-07 22:27:08+00:00| seen| https://t.me/ctinow/202843 2024-03-14 03:09:40+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10130 2024-04-16 21:37:56+00:00| seen|...

CVE-2024-23296

creationtimestamp| type| source ---|---|--- 2024-03-05 21:26:36+00:00| seen| https://t.me/ctinow/200707 2024-03-05 21:26:48+00:00| seen| https://t.me/ctinow/200716 2024-03-06 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1239 2024-03-06 06:58:06+00:00| exploited|...

CVE-2024-23225

creationtimestamp| type| source ---|---|--- 2024-03-05 21:26:33+00:00| seen| https://t.me/ctinow/200704 2024-03-05 21:26:45+00:00| seen| https://t.me/ctinow/200713 2024-03-06 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1239 2024-03-06 06:58:06+00:00| exploited|...

CVE-2024-1071

creationtimestamp| type| source ---|---|--- 2024-02-27 06:46:34+00:00| seen| https://t.me/thehackernews/4603 2024-02-27 08:12:34+00:00| seen| https://t.me/KomunitiSiber/1550 2024-02-27 09:12:32+00:00| published-proof-of-concept| Telegram/oUVEUqdL5OMBlDBVeR0Zfuwm2SrJKqWCEK-BgHxBeDkUlQ 2024-02-27...

CVE-2023-33012

creationtimestamp| type| source ---|---|--- 2024-02-21 19:32:40+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/8376 2024-07-03 18:47:21+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/zyxelparseconfigrce.rb 2025-02-06...

CVE-2024-1708

creationtimestamp| type| source ---|---|--- 2024-02-21 17:22:10+00:00| seen| https://t.me/ctinow/189797 2024-02-21 17:31:30+00:00| seen| https://t.me/ctinow/189811 2024-02-22 10:40:05+00:00| exploited| https://t.me/truesecator/5446 2024-02-22 10:40:07+00:00| seen|...

CVE-2023-36661

creationtimestamp| type| source ---|---|--- 2024-02-20 23:56:50+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ivanticonnectsecurercecve202421893.rb 2024-03-18 16:03:48+00:00| seen| MISP/b832113b-e603-406a-ba62-aae9ba13b1b4 2025-02-06...

CVE-2019-18938

creationtimestamp| type| source ---|---|--- 2024-02-20 14:51:24+00:00| seen| https://t.me/ctinow/188539 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:14+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd...

CVE-2024-1512

creationtimestamp| type| source ---|---|--- 2024-02-17 09:21:39+00:00| seen| https://t.me/ctinow/186828 2024-02-17 09:26:22+00:00| seen| https://t.me/ctinow/186839 2024-03-01 11:12:52+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6700 2024-03-01 15:28:28+00:00|...