CVE-2020-14311

creationtimestamp| type| source ---|---|--- 2023-03-02 13:33:13+00:00| seen| MISP/fde9c681-95fa-4561-81cb-2ed3099c8263...

CVE-2023-27372

creationtimestamp| type| source ---|---|--- 2023-02-28 22:32:44+00:00| seen| https://t.me/cibsecurity/59155 2023-06-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51536 2023-06-22 05:41:46+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8529 2023-06-23...

CVE-2020-7851

creationtimestamp| type| source ---|---|--- 2023-02-28 10:06:47+00:00| seen| MISP/7d2290fd-bed6-4075-9661-494056ff3eca 2026-02-06 22:53:02+00:00| seen| MISP/7d2290fd-bed6-4075-9661-494056ff3eca...

CVE-2022-41223

creationtimestamp| type| source ---|---|--- 2023-02-22 06:49:53+00:00| exploited| https://t.me/thehackernews/3079 2023-02-22 12:24:29+00:00| seen| Telegram/2I9R6FliHquwURRb8t5QNFGxrnLnYILqhcQxv35YCmjG 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24...

CVE-2022-48328

app/Controller/Component/IndexFilterComponent.php in MISP before 2.4.167 mishandles orderedurlparams and additionaldelimiters...

CVE-2022-48329

MISP before 2.4.166 unsafely allows users to use the order parameter, related to app/Model/Attribute.php, app/Model/GalaxyCluster.php, app/Model/Workflow.php, and app/Plugin/Assets/models/behaviors/LogableBehavior.php...

CVE-2022-48328

app/Controller/Component/IndexFilterComponent.php in MISP before 2.4.167 mishandles orderedurlparams and additionaldelimiters...

Code injection

app/Controller/Component/IndexFilterComponent.php in MISP before 2.4.167 mishandles orderedurlparams and additionaldelimiters...

Design/Logic Flaw

MISP before 2.4.166 unsafely allows users to use the order parameter, related to app/Model/Attribute.php, app/Model/GalaxyCluster.php, app/Model/Workflow.php, and app/Plugin/Assets/models/behaviors/LogableBehavior.php...

CVE-2022-48328

app/Controller/Component/IndexFilterComponent.php in MISP before 2.4.167 mishandles orderedurlparams and additionaldelimiters...

CVE-2022-48329

CVE-2022-48329 affects MISP before 2.4.166, where the order parameter can be used insecurely. The vulnerability relates to specific PHP components: app/Model/Attribute.php, app/Model/GalaxyCluster.php, app/Model/Workflow.php, and app/Plugin/Assets/models/behaviors/LogableBehavior.php. It has a CV...

CVE-2022-48328

CVE-2022-48328 affects MISP prior to 2.4.167, where the file app/Controller/Component/IndexFilterComponent.php mishandles ordered_url_params and additional_delimiters. The consolidated sources (NVD, Red Hat, OSV, etc.) identify this as a vulnerability with a critical CVSS v3.1 base score of 9.8 (...

CVE-2022-48329

MISP before 2.4.166 unsafely allows users to use the order parameter, related to app/Model/Attribute.php, app/Model/GalaxyCluster.php, app/Model/Workflow.php, and app/Plugin/Assets/models/behaviors/LogableBehavior.php...

CVE-2022-48328

app/Controller/Component/IndexFilterComponent.php in MISP before 2.4.167 mishandles orderedurlparams and additionaldelimiters...

CVE-2022-48329

MISP before 2.4.166 unsafely allows users to use the order parameter, related to app/Model/Attribute.php, app/Model/GalaxyCluster.php, app/Model/Workflow.php, and app/Plugin/Assets/models/behaviors/LogableBehavior.php...

CVE-2022-48328

app/Controller/Component/IndexFilterComponent.php in MISP before 2.4.167 mishandles orderedurlparams and additionaldelimiters...

CVE-2022-48329

MISP before 2.4.166 unsafely allows users to use the order parameter, related to app/Model/Attribute.php, app/Model/GalaxyCluster.php, app/Model/Workflow.php, and app/Plugin/Assets/models/behaviors/LogableBehavior.php...

CVE-2020-15415

creationtimestamp| type| source ---|---|--- 2023-02-19 12:43:33+00:00| published-proof-of-concept| https://t.me/JerusalemElectronicArmy/179 2024-09-30 18:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2025-02-23 02:10:59+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123...

CVE-2022-39952

creationtimestamp| type| source ---|---|--- 2023-02-17 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=974 2023-02-19 08:36:16+00:00| seen| Telegram/xsTtApY3O8LYaQlwSLnV7xep0iYsFMDc8zjy5nUPKpyG 2023-02-20 07:21:35+00:00| published-proof-of-concept| https://t.me/ctinow/9442...

Misp-Extractor - Tool That Connects To A MISP Instance And Retrieves Attributes Of Specific Types (Such As IP Addresses, URLs, And Hashes)

This code connects to a given MISP Malware Information Sharing Platform server and parses a given number of events, writing the IP addresses, URLs, and MD5 hashes found in the events to three separate files. Usage To use this script, you will need to provide the URL of your MISP instance and a...