CVE-2023-24489

creationtimestamp| type| source ---|---|--- 2023-07-11 02:24:02+00:00| seen| https://t.me/cibsecurity/66316 2023-07-11 04:59:28+00:00| published-proof-of-concept| https://t.me/ptswarm/180 2023-07-11 12:27:02+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/7507 2023-07-11...

CVE-2019-7214

creationtimestamp| type| source ---|---|--- 2023-07-10 23:19:51+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/smartermailrce.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:17+00:00| seen|...

CVE-2020-0911

creationtimestamp| type| source ---|---|--- 2023-07-07 07:00:04+00:00| seen| https://t.me/TopCyberTechNews/354 2023-10-10 10:24:58+00:00| seen| MISP/853d7bf0-0dde-4411-932c-73676b789a57 2024-10-31 15:27:49+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8634 2026-07-29...

CVE-2023-36812

creationtimestamp| type| source ---|---|--- 2023-07-04 12:53:30+00:00| published-proof-of-concept| https://t.me/hunter4good/196 2023-09-07 14:30:28+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5101 2023-09-08 16:06:04+00:00| seen|...

CVE-2023-28324

creationtimestamp| type| source ---|---|--- 2023-07-01 07:15:53+00:00| seen| https://t.me/cibsecurity/65845 2024-09-16 14:34:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8540 2024-09-18 17:40:04+00:00| seen| https://t.me/truesecator/6220 2024-09-22 11:11:47+00:00| seen|...

CVE-2023-37307

In MISP before 2.4.172, titleforlayout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts...

CVE-2023-37306

MISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can obtain sensitive information because of the nature of the error messages...

CVE-2023-37307

In MISP before 2.4.172, titleforlayout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts...

CVE-2023-37306

MISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can obtain sensitive information because of the nature of the error messages...

Design/Logic Flaw

In MISP before 2.4.172, titleforlayout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts...

Information disclosure

MISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can obtain sensitive information because of the nature of the error messages...

CVE-2023-37306

MISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can obtain sensitive information because of the nature of the error messages...

CVE-2023-37306

CVE-2023-37306 pertains to MISP 2.4.172, where server sync mishandles certificate file extensions, causing information disclosure through error messages. The affected component is MISP 2.4.172; root cause is improper handling of certificate extensions during server synchronization. Impact is info...

CVE-2023-37307

CVE-2023-37307 affects MISP before 2.4.172. The issue is improper sanitization of the title_for_layout field in Correlations, CorrelationExclusions, and Layouts, enabling (authenticated) stored cross-site scripting as demonstrated by public advisories and exploits. The NVD/OSV/Red Hat/CNNVD refer...

CVE-2023-37306

MISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can obtain sensitive information because of the nature of the error messages...

PT-2023-25898

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.172 Description The issue arises from the improper sanitization of the title for layout in Correlations, CorrelationExclusions, and Layouts. This could potentially lead to security issues, although specific details...

CVE-2023-37307

In MISP before 2.4.172, titleforlayout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts...

CVE-2023-37306

MISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can obtain sensitive information because of the nature of the error messages...

CVE-2023-37307

In MISP before 2.4.172, titleforlayout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts...

CVE-2021-25372

creationtimestamp| type| source ---|---|--- 2023-06-29 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:34:43+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971842 2025-02-14 21:08:32+00:00| seen| Telegram/pNcH1hEomyEtVJuTE5MpGKbrOFjsQ4TgdHH4vA6bfctz-U42...