5616 matches found
CVE-2023-6553
creationtimestamp| type| source ---|---|--- 2023-12-12 17:10:05+00:00| seen| https://t.me/truesecator/5192 2023-12-14 07:38:31+00:00| published-proof-of-concept| https://t.me/proxybar/1866 2023-12-15 07:34:50+00:00| published-proof-of-concept| https://t.me/darkcommunityofficial/193 2023-12-15...
CVE-2023-6448
creationtimestamp| type| source ---|---|--- 2023-12-11 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-15 08:48:48+00:00| seen| MISP/c578cb44-e440-486d-80a4-8cf6256c1d53 2023-12-24 07:30:47+00:00| seen| https://t.me/arpsyndicate/2159 2024-01-15 09:02:20+00:00| seen|...
CVE-2023-22524
creationtimestamp| type| source ---|---|--- 2023-12-06 16:45:05+00:00| seen| https://t.me/truesecator/5170 2023-12-06 18:10:13+00:00| seen| https://t.me/alexmakus/5195 2023-12-07 11:09:25+00:00| seen| https://t.me/kasperskyb2b/1053 2023-12-14 15:48:07+00:00| published-proof-of-concept|...
MISP cross-site scripting vulnerability (CNVD-2023-9749884)
MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. Cross-site scripting vulnerability exists in versions prior to MISP 2.4.179. The...
CVE-2023-49926
app/Lib/Tools/EventTimelineTool.php in MISP before 2.4.179 allows XSS in the event timeline widget...
Cross site scripting
app/Lib/Tools/EventTimelineTool.php in MISP before 2.4.179 allows XSS in the event timeline widget...
CVE-2023-49926
app/Lib/Tools/EventTimelineTool.php in MISP before 2.4.179 allows XSS in the event timeline widget...
CVE-2023-49926
Summary : CVE-2023-49926 affects MISP prior to 2.4.179, where the event timeline widget is vulnerable to XSS via the file app/Lib/Tools/EventTimelineTool.php. The root cause is insufficient filtering/escaping of user-supplied data in the event timeline tool. Impact (per sources) : Unauthorized ex...
PT-2023-31413 · Misp · Misp
Name of the Vulnerable Software and Affected Versions: MISP versions prior to 2.4.179 Description: The issue allows for XSS in the event timeline widget. This is due to a problem in the app/Lib/Tools/EventTimelineTool.php file. Recommendations: For versions prior to 2.4.179, update to version...
CVE-2023-49926
app/Lib/Tools/EventTimelineTool.php in MISP before 2.4.179 allows XSS in the event timeline widget...
CVE-2023-42916
creationtimestamp| type| source ---|---|--- 2023-11-30 22:15:32+00:00| exploited| https://t.me/informationsecuritychannel/51087 2023-12-01 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1172 2023-12-01 05:28:41+00:00| seen| https://t.me/thehackernews/4217 2023-12-01...
CVE-2023-42917
creationtimestamp| type| source ---|---|--- 2023-11-30 22:15:32+00:00| exploited| https://t.me/informationsecuritychannel/51087 2023-12-01 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1172 2023-12-01 05:28:41+00:00| seen| https://t.me/thehackernews/4217 2023-12-01...
CVE-2023-48365
creationtimestamp| type| source ---|---|--- 2023-11-30 08:45:23+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus28/2023 2023-11-30 17:55:24+00:00| seen| https://t.me/truesecator/5149 2023-12-03 17:01:28+00:00| seen| https://t.me/redfoxsec/24 2023-12-22 11:44:34+00:00| seen|...
CVE-2023-6345
creationtimestamp| type| source ---|---|--- 2023-11-29 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1169 2023-11-29 05:29:22+00:00| exploited| https://t.me/thehackernews/4205 2023-11-29 06:23:17+00:00| exploited| https://t.me/KomunitiSiber/1135 2023-11-29 06:36:13+00:00...
CVE-2023-6020
creationtimestamp| type| source ---|---|--- 2023-11-25 12:14:52+00:00| published-proof-of-concept| Telegram/B3MfWlGpx-qQr-PJTpFgE5RGDaIYA5WKuQnODf6UIO8APlw 2024-03-27 17:30:05+00:00| exploited| https://t.me/truesecator/5575 2024-08-23 09:26:17+00:00| seen|...
CVE-2023-46214
creationtimestamp| type| source ---|---|--- 2023-11-19 07:37:50+00:00| published-proof-of-concept| https://t.me/proxybar/1832 2023-11-19 12:58:41+00:00| published-proof-of-concept| https://t.me/RalfHackerChannel/1418 2023-11-19 14:57:34+00:00| published-proof-of-concept| https://t.me/apsecurity/2...
CVE-2023-43177
creationtimestamp| type| source ---|---|--- 2023-11-17 08:00:07+00:00| published-proof-of-concept| https://t.me/TopCyberTechNews/404 2023-11-18 06:12:36+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9413 2023-12-12 09:30:14+00:00| published-proof-of-concept|...
CVE-2023-48656
An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles order clauses...