CVE-2024-25675

An issue was discovered in MISP before 2.4.184. A client does not need to use POST to start an export generation process. This is related to app/Controller/JobsController.php and app/View/Events/export.ctp...

CVE-2024-25674

An issue was discovered in MISP before 2.4.184. Organisation logo upload is insecure because of a lack of checks for the file extension and MIME type...

PT-2024-21082 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP versions prior to 2.4.184 Description: An issue was discovered in the organisation logo upload feature due to a lack of checks for the file extension and MIME type, making it insecure. Recommendations: For versions prior to 2.4.184, upda...

CVE-2024-25675

CVE-2024-25675 affects MISP prior to 2.4.184. The issue allows a client to start an export generation process without using POST, related to files app/Controller/JobsController.php and app/View/Events/export.ctp. According to connected sources, this could enable unintended initiation of export ta...

MISP 2.4.171 Cross Site Scripting

Exploit Title: MISP 2.4.171 Stored XSS CVE-2023-37307 Authenticated Date: 8th October 2023 Exploit Author: Mücahit Çeri Vendor Homepage: https://www.circl.lu/ Software Link: https://github.com/MISP/MISP Version: 2.4.171 Tested on: Ubuntu 20.04 CVE : CVE-2023-37307 Exploit: Logged in as low...

MISP 2.4.171 - Stored XSS Vulnerability

Exploit Title: MISP 2.4.171 Stored XSS CVE-2023-37307 Authenticated Exploit Author: Mücahit Çeri Vendor Homepage: https://www.circl.lu/ Software Link: https://github.com/MISP/MISP Version: 2.4.171 Tested on: Ubuntu 20.04 CVE : CVE-2023-37307 Exploit: Logged in as low privileged account 1Click on...

MISP 2.4.171 - Stored XSS

Exploit Title: MISP 2.4.171 Stored XSS CVE-2023-37307 Authenticated Date: 8th October 2023 Exploit Author: Mücahit Çeri Vendor Homepage: https://www.circl.lu/ Software Link: https://github.com/MISP/MISP Version: 2.4.171 Tested on: Ubuntu 20.04 CVE : CVE-2023-37307 Exploit: Logged in as low...

CVE-2024-21626

creationtimestamp| type| source ---|---|--- 2024-01-31 22:35:37+00:00| seen| Telegram/g77oYQgQgNWeGzTKzEzBqvOnDry1Bvbe5EDmpRTUMlzAQ 2024-01-31 22:56:31+00:00| seen| https://t.me/ctinow/177150 2024-01-31 23:07:57+00:00| seen| https://t.me/KomunitiSiber/1424 2024-01-31 23:26:18+00:00| seen|...

CVE-2023-5612

creationtimestamp| type| source ---|---|--- 2024-01-26 03:26:10+00:00| seen| https://t.me/ctinow/173971 2024-03-06 17:00:31+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/gitlabtagsrssfeedemaildisclosure.rb 2024-03-08 08:17:01+00:00| seen|...

CVE-2023-52251

creationtimestamp| type| source ---|---|--- 2024-01-25 22:26:20+00:00| seen| https://t.me/ctinow/173834 2024-01-26 14:49:19+00:00| seen| https://t.me/arpsyndicate/2973 2024-02-01 03:16:26+00:00| seen| https://t.me/ctinow/177279 2024-02-16 20:55:39+00:00| seen|...

CVE-2024-22729

creationtimestamp| type| source ---|---|--- 2024-01-25 16:27:28+00:00| seen| https://t.me/ctinow/173555 2024-02-01 20:16:35+00:00| seen| https://t.me/ctinow/177765 2024-02-18 15:11:57+00:00| seen| https://t.me/ctinow/187269 2024-06-24 12:06:04+00:00| seen|...

CVE-2024-23897

creationtimestamp| type| source ---|---|--- 2024-01-24 19:27:02+00:00| seen| https://t.me/ctinow/173030 2024-01-25 08:44:45+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6490 2024-01-25 12:59:42+00:00| seen| https://t.me/thehackernews/4456 2024-01-25 14:20:45+00:00|...

CVE-2024-23222

creationtimestamp| type| source ---|---|--- 2024-01-22 21:16:41+00:00| seen| https://t.me/ctinow/171433 2024-01-22 22:06:56+00:00| exploited| https://t.me/ctinow/171464 2024-01-22 22:06:57+00:00| exploited| https://t.me/ctinow/171465 2024-01-22 22:16:30+00:00| seen| https://t.me/ctinow/171467...

CVE-2024-21320

creationtimestamp| type| source ---|---|--- 2024-01-19 17:29:47+00:00| seen| https://t.me/arpsyndicate/2945 2024-03-19 13:05:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6816 2024-03-26 02:03:18+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10110...

CVE-2023-35636

creationtimestamp| type| source ---|---|--- 2024-01-18 23:53:43+00:00| published-proof-of-concept| https://t.me/RalfHackerChannel/1439 2024-01-23 05:57:55+00:00| seen| https://t.me/apsecurity/407 2024-01-23 13:05:05+00:00| seen| https://t.me/truesecator/5322 2024-01-24 09:55:25+00:00| seen|...

CVE-2023-6549

creationtimestamp| type| source ---|---|--- 2024-01-17 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1203 2024-01-17 06:30:38+00:00| exploited| https://t.me/thehackernews/4412 2024-01-17 08:47:54+00:00| seen| https://t.me/CyberSecurityIL/36628 2024-01-17 10:06:28+00:00|...

CVE-2023-6548

creationtimestamp| type| source ---|---|--- 2024-01-17 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1203 2024-01-17 06:03:43+00:00| exploited| https://t.me/KomunitiSiber/1350 2024-01-17 06:20:00+00:00| exploited| Telegram/JiTroEo33lWWkvgdwMzlaTnF4xjfMEwJdtiFfjCCuvaYg...

CVE-2024-0519

creationtimestamp| type| source ---|---|--- 2024-01-16 19:18:02+00:00| exploited| https://t.me/alexmakus/5234 2024-01-16 20:12:40+00:00| published-proof-of-concept| https://t.me/ctinow/168975 2024-01-16 22:55:51+00:00| exploited| https://t.me/informationsecuritychannel/51341 2024-01-16...

CVE-2023-7028

creationtimestamp| type| source ---|---|--- 2024-01-12 10:15:15+00:00| published-proof-of-concept| https://t.me/techb0ltGenona/4222 2024-01-12 10:50:50+00:00| published-proof-of-concept| https://t.me/LearnExploit/5995 2024-01-12 12:51:42+00:00| seen| https://t.me/ctinow/167227 2024-01-12...

CVE-2023-50919

creationtimestamp| type| source ---|---|--- 2024-01-12 09:26:42+00:00| seen| https://t.me/ctinow/167149 2024-01-19 08:17:07+00:00| seen| https://t.me/ctinow/170095 2024-01-23 20:16:11+00:00| seen|...