CVE-2024-44000

creationtimestamp| type| source ---|---|--- 2024-09-05 14:18:45+00:00| published-proof-of-concept| https://t.me/WARLOCKDARKARMYOFFICIALS/4554 2024-09-05 16:31:47+00:00| published-proof-of-concept| Telegram/iqzr0evsZIMMy3NnASIGxZl2nBENTlvbGPIFKVphLoM3UsM 2024-09-06 03:57:32+00:00|...

CVE-2024-45509

In MISP through 2.4.196, app/Controller/BookmarksController.php does not properly restrict access to bookmarks data in the case where the user is not an org admin...

CVE-2024-45509

In MISP through 2.4.196, app/Controller/BookmarksController.php does not properly restrict access to bookmarks data in the case where the user is not an org admin...

CVE-2024-45509

In MISP through 2.4.196, app/Controller/BookmarksController.php does not properly restrict access to bookmarks data in the case where the user is not an org admin...

CVE-2024-45509

In MISP up to 2.4.196, there is an access control vulnerability in app/Controller/BookmarksController.php that allows non-org-admin users to access bookmarks data. Root cause: insufficient restriction for non-admin users in the BookmarksController. Impact: exposure of bookmarks data with confiden...

PT-2024-31669 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP versions 2.4.196 and earlier Description: The issue concerns improper access restriction to bookmarks data in MISP when the user is not an org admin, specifically within the app/Controller/BookmarksController.php file. Recommendations: F...

CVE-2024-45509

In MISP through 2.4.196, app/Controller/BookmarksController.php does not properly restrict access to bookmarks data in the case where the user is not an org admin...

CVE-2024-43917

creationtimestamp| type| source ---|---|--- 2024-08-29 17:53:42+00:00| seen| https://t.me/cvedetector/4411 2024-09-28 07:20:44+00:00| seen| https://t.me/CyberBulletin/976 2024-09-28 09:34:33+00:00| seen| https://t.me/CyberBulletin/25859 2024-09-28 10:56:34+00:00| published-proof-of-concept|...

CVE-2024-43425

creationtimestamp| type| source ---|---|--- 2024-08-28 09:02:28+00:00| published-proof-of-concept| Telegram/sV1gHuMmsF6Obkl4pHuEINogRh1QzHPw2lXaflMTbK27AeDb 2024-08-29 09:08:14+00:00| published-proof-of-concept| https://t.me/HackingInsights/11532 2024-08-29 14:20:05+00:00|...

CVE-2024-7965

creationtimestamp| type| source ---|---|--- 2024-08-27 06:51:31+00:00| exploited| https://t.me/thehackernews/5480 2024-08-27 07:16:14+00:00| exploited| Telegram/DqkT5EqFU3fzN5AmQYNYjKx3-CfOMxfm2wAsdilE9sjdLvx 2024-08-27 08:29:34+00:00| exploited|...

CVE-2024-24809

creationtimestamp| type| source ---|---|--- 2024-08-26 14:44:44+00:00| seen| https://t.me/truesecator/6131 2024-08-29 09:08:08+00:00| seen| https://t.me/HackingInsights/11505 2024-08-30 16:48:36+00:00| seen| Telegram/2SeTCIiHBvCs4LVhVvK9AryaSJ2WidRT7xDqlZDi98wEGdQ 2024-09-24 09:29:35+00:00| seen|...

CVE-2024-31214

creationtimestamp| type| source ---|---|--- 2024-08-26 14:44:44+00:00| seen| https://t.me/truesecator/6131 2024-08-29 09:08:08+00:00| seen| https://t.me/HackingInsights/11505 2024-08-30 16:48:36+00:00| seen| Telegram/2SeTCIiHBvCs4LVhVvK9AryaSJ2WidRT7xDqlZDi98wEGdQ 2024-09-24 09:29:35+00:00| seen|...

CVE-2024-45256

creationtimestamp| type| source ---|---|--- 2024-08-26 09:31:40+00:00| seen| https://t.me/cvedetector/4103 2024-10-15 15:35:55+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/byobunauthrce.rb 2025-02-06 03:13:46+00:00| seen|...

CVE-2024-6670

creationtimestamp| type| source ---|---|--- 2024-08-24 09:50:28+00:00| published-proof-of-concept| https://t.me/HackingInsights/11136 2024-08-30 01:25:57+00:00| seen| https://t.me/cvedetector/4481 2024-08-30 20:28:51+00:00| published-proof-of-concept| https://t.me/proxybar/2254 2024-08-30...

CVE-2024-39717

creationtimestamp| type| source ---|---|--- 2024-08-22 21:53:48+00:00| exploited| https://t.me/cvedetector/3947 2024-08-24 00:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-08-24 09:11:44+00:00| exploited| https://t.me/thehackernews/5471 2024-08-24 10:09:40+00:00| exploited|...

CVE-2024-7971

creationtimestamp| type| source ---|---|--- 2024-08-22 00:06:47+00:00| seen| https://t.me/cvedetector/3829 2024-08-22 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1356 2024-08-22 07:29:01+00:00| exploited| https://t.me/thehackernews/5457 2024-08-22 08:50:04+00:00|...

CVE-2024-4548

creationtimestamp| type| source ---|---|--- 2024-08-21 14:03:13+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/diaenergiesqli.rb 2025-02-06 03:13:46+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:11:04+00:00| seen|...

CVE-2024-7954

creationtimestamp| type| source ---|---|--- 2024-08-21 13:15:03+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/spipporteplumeprevisurce.rb 2024-08-23 21:19:06+00:00| seen| https://t.me/cvedetector/4034 2024-09-08 11:06:23+00:00|...

CVE-2024-41145

creationtimestamp| type| source ---|---|--- 2024-08-21 12:30:05+00:00| seen| https://t.me/truesecator/6115 2024-12-19 01:25:10+00:00| seen| https://t.me/cvedetector/13281 2025-09-15 13:28:32+00:00| seen| MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f 2025-09-16 03:45:04+00:00| seen|...

CVE-2024-43106

creationtimestamp| type| source ---|---|--- 2024-08-21 12:30:05+00:00| seen| https://t.me/truesecator/6115 2024-12-19 01:25:01+00:00| seen| https://t.me/cvedetector/13273 2025-09-15 13:28:32+00:00| seen| MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f 2025-09-16 03:45:04+00:00| seen|...