5396 matches found
CVE-2023-45499
creationtimestamp| type| source ---|---|--- 2023-12-20 18:17:22+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/vinchinbackuprecoverycmdinject.rb 2023-12-22 19:31:15+00:00| seen| https://t.me/arpsyndicate/2065 2023-12-28 13:03:10+00:00|...
CVE-2023-49147
creationtimestamp| type| source ---|---|--- 2023-12-20 13:53:25+00:00| seen| https://t.me/ctinow/156990 2024-01-02 18:16:23+00:00| seen| https://t.me/ctinow/161935 2024-01-07 02:32:16+00:00| seen| https://t.me/ctinow/164042 2024-10-24 09:07:24+00:00| seen| MISP/22a082e7-37ab-405b-8c3a-9893aa2c84c...
CVE-2023-46944
creationtimestamp| type| source ---|---|--- 2023-12-20 09:42:30+00:00| seen| https://t.me/ctinow/156827 2024-04-19 00:45:19+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/fileformat/gitlenslocalconfigexec.rb 2024-04-20 00:44:19+00:00| seen|...
CVE-2023-47565
creationtimestamp| type| source ---|---|--- 2023-12-18 09:41:54+00:00| seen| https://t.me/itsecnews/3861 2023-12-18 10:17:57+00:00| seen| https://t.me/ctinow/155788 2023-12-18 12:17:45+00:00| seen| https://t.me/truesecator/5210 2023-12-21 18:10:02+00:00| seen|...
CVE-2023-49897
creationtimestamp| type| source ---|---|--- 2023-12-18 09:41:54+00:00| seen| https://t.me/itsecnews/3861 2023-12-18 10:17:56+00:00| seen| https://t.me/ctinow/155787 2023-12-18 12:17:45+00:00| seen| https://t.me/truesecator/5210 2023-12-21 18:10:03+00:00| seen|...
CVE-2023-50917
creationtimestamp| type| source ---|---|--- 2023-12-18 01:20:19+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6219 2023-12-19 23:23:25+00:00| seen| https://t.me/ctinow/156650 2023-12-20 11:00:39+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9620...
CVE-2023-48022
creationtimestamp| type| source ---|---|--- 2023-12-17 16:42:32+00:00| seen| https://t.me/ctinow/155636 2024-02-14 12:16:10+00:00| published-proof-of-concept| https://github.com/google/tsunami-security-scanner-plugins/tree/master/google/detectors/rce/ai/cve202348022 2024-03-27 10:34:26+00:00| see...
CVE-2023-6329
creationtimestamp| type| source ---|---|--- 2023-12-17 09:37:18+00:00| seen| https://t.me/ctinow/155548 2024-08-26 23:26:17+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/idsecureauthbypass.rb 2025-02-06 03:13:46+00:00| seen|...
CVE-2023-50918
app/Controller/AuditLogsController.php in MISP before 2.4.182 mishandles ACLs for audit logs...
CVE-2023-50918
app/Controller/AuditLogsController.php in MISP before 2.4.182 mishandles ACLs for audit logs...
Code injection
app/Controller/AuditLogsController.php in MISP before 2.4.182 mishandles ACLs for audit logs...
CVE-2023-50918
MISP prior to 2.4.182 is affected by a vulnerability in app/Controller/AuditLogsController.php where ACLs for audit logs are mishandled. The root cause is improper access control handling for audit logs, potentially enabling unauthorized access or disclosure of audit data. Remediation is to upgra...
CVE-2023-50918
app/Controller/AuditLogsController.php in MISP before 2.4.182 mishandles ACLs for audit logs...
MISP Security Vulnerabilities
MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP versions prior to 2.4.182, which stems from...
CVE-2023-50918
app/Controller/AuditLogsController.php in MISP before 2.4.182 mishandles ACLs for audit logs...
CVE-2023-6553
creationtimestamp| type| source ---|---|--- 2023-12-12 17:10:05+00:00| seen| https://t.me/truesecator/5192 2023-12-14 07:38:31+00:00| published-proof-of-concept| https://t.me/proxybar/1866 2023-12-15 07:34:50+00:00| published-proof-of-concept| https://t.me/darkcommunityofficial/193 2023-12-15...
CVE-2023-6448
creationtimestamp| type| source ---|---|--- 2023-12-11 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-15 08:48:48+00:00| seen| MISP/c578cb44-e440-486d-80a4-8cf6256c1d53 2023-12-24 07:30:47+00:00| seen| https://t.me/arpsyndicate/2159 2024-01-15 09:02:20+00:00| seen|...
CVE-2023-22524
creationtimestamp| type| source ---|---|--- 2023-12-06 16:45:05+00:00| seen| https://t.me/truesecator/5170 2023-12-06 18:10:13+00:00| seen| https://t.me/alexmakus/5195 2023-12-07 11:09:25+00:00| seen| https://t.me/kasperskyb2b/1053 2023-12-14 15:48:07+00:00| published-proof-of-concept|...
MISP cross-site scripting vulnerability (CNVD-2023-9749884)
MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. Cross-site scripting vulnerability exists in versions prior to MISP 2.4.179. The...