CVE-2024-1071

creationtimestamp| type| source ---|---|--- 2024-02-27 06:46:34+00:00| seen| https://t.me/thehackernews/4603 2024-02-27 08:12:34+00:00| seen| https://t.me/KomunitiSiber/1550 2024-02-27 09:12:32+00:00| published-proof-of-concept| Telegram/oUVEUqdL5OMBlDBVeR0Zfuwm2SrJKqWCEK-BgHxBeDkUlQ 2024-02-27...

CVE-2023-33012

creationtimestamp| type| source ---|---|--- 2024-02-21 19:32:40+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/8376 2024-07-03 18:47:21+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/zyxelparseconfigrce.rb 2025-02-06...

CVE-2024-1708

creationtimestamp| type| source ---|---|--- 2024-02-21 17:22:10+00:00| seen| https://t.me/ctinow/189797 2024-02-21 17:31:30+00:00| seen| https://t.me/ctinow/189811 2024-02-22 10:40:05+00:00| exploited| https://t.me/truesecator/5446 2024-02-22 10:40:07+00:00| seen|...

CVE-2023-36661

creationtimestamp| type| source ---|---|--- 2024-02-20 23:56:50+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ivanticonnectsecurercecve202421893.rb 2024-03-18 16:03:48+00:00| seen| MISP/b832113b-e603-406a-ba62-aae9ba13b1b4 2025-02-06...

CVE-2019-18938

creationtimestamp| type| source ---|---|--- 2024-02-20 14:51:24+00:00| seen| https://t.me/ctinow/188539 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:14+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd...

CVE-2024-1512

creationtimestamp| type| source ---|---|--- 2024-02-17 09:21:39+00:00| seen| https://t.me/ctinow/186828 2024-02-17 09:26:22+00:00| seen| https://t.me/ctinow/186839 2024-03-01 11:12:52+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6700 2024-03-01 15:28:28+00:00|...

CVE-2024-21410

creationtimestamp| type| source ---|---|--- 2024-02-13 20:37:02+00:00| seen| https://t.me/ctinow/184168 2024-02-14 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1227 2024-02-14 16:13:10+00:00| seen| https://t.me/itsecnews/4112 2024-02-15 06:21:50+00:00| exploited|...

CVE-2024-21338

creationtimestamp| type| source ---|---|--- 2024-02-13 20:06:41+00:00| seen| https://t.me/ctinow/184106 2024-02-28 20:16:57+00:00| seen| https://t.me/ctinow/195824 2024-02-29 09:56:59+00:00| seen| https://t.me/ctinow/196429 2024-02-29 12:24:27+00:00| exploited| https://t.me/thehackernews/4619...

CVE-2024-21351

creationtimestamp| type| source ---|---|--- 2024-02-13 19:17:25+00:00| seen| https://t.me/ctinow/184062 2024-02-13 19:31:34+00:00| seen| https://t.me/ctinow/184064 2024-02-13 20:06:58+00:00| seen| https://t.me/ctinow/184119 2024-02-13 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e012...

CVE-2024-21412

creationtimestamp| type| source ---|---|--- 2024-02-13 19:17:24+00:00| seen| https://t.me/ctinow/184061 2024-02-13 20:37:03+00:00| seen| https://t.me/ctinow/184169 2024-02-13 20:41:42+00:00| seen| https://t.me/ctinow/184172 2024-02-13 20:41:43+00:00| seen| https://t.me/ctinow/184173 2024-02-13...

CVE-2024-23759

creationtimestamp| type| source ---|---|--- 2024-02-12 23:26:14+00:00| seen| https://t.me/ctinow/183490 2024-02-15 08:17:07+00:00| seen| https://t.me/ctinow/185327 2024-04-19 19:35:28+00:00| seen|...

CVE-2023-6925

creationtimestamp| type| source ---|---|--- 2024-02-12 07:02:31+00:00| seen| https://t.me/ctinow/182913 2025-03-19 15:49:02+00:00| seen| MISP/2bb5c40c-5583-4a30-bc62-81e5a7af21a7...

CVE-2023-50386

creationtimestamp| type| source ---|---|--- 2024-02-09 19:26:59+00:00| seen| https://t.me/ctinow/182212 2024-02-09 23:41:58+00:00| seen| https://t.me/ctinow/182335 2024-02-29 08:59:17+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6691 2024-02-29 13:25:59+00:00|...

CVE-2024-25674

An issue was discovered in MISP before 2.4.184. Organisation logo upload is insecure because of a lack of checks for the file extension and MIME type...

CVE-2024-25675

An issue was discovered in MISP before 2.4.184. A client does not need to use POST to start an export generation process. This is related to app/Controller/JobsController.php and app/View/Events/export.ctp...

Design/Logic Flaw

An issue was discovered in MISP before 2.4.184. Organisation logo upload is insecure because of a lack of checks for the file extension and MIME type...

Code injection

An issue was discovered in MISP before 2.4.184. A client does not need to use POST to start an export generation process. This is related to app/Controller/JobsController.php and app/View/Events/export.ctp...

CVE-2024-21762

creationtimestamp| type| source ---|---|--- 2024-02-09 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1225 2024-02-09 06:40:49+00:00| exploited| https://t.me/thehackernews/4526 2024-02-09 06:59:47+00:00| exploited| https://t.me/KomunitiSiber/1466 2024-02-09 07:19:01+00:00...

CVE-2024-23113

creationtimestamp| type| source ---|---|--- 2024-02-09 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1225 2024-02-09 08:40:20+00:00| seen| https://www.cert.at/de/warnungen/2024/2/kritische-sicherheitslucken-in-fortinet-fortios-updates-verfugbar 2024-02-09 10:14:28+00:00|...

PT-2024-21082 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP versions prior to 2.4.184 Description: An issue was discovered in the organisation logo upload feature due to a lack of checks for the file extension and MIME type, making it insecure. Recommendations: For versions prior to 2.4.184, upda...