MISP 跨站脚本漏洞

MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A cross-site scripting vulnerability exists in MISP version 2.4.167. An attacker exploits...

PT-2023-19368 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP version 2.4.167 Description: The issue allows for XSS via a network history name in the app/webroot/js/action table.js file. Recommendations: For MISP version 2.4.167, consider disabling the action table.js script until a patch is...

PT-2023-19369 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP version 2.4.167 Description: The issue concerns incorrect access control in the ACLComponent.php file for the decaying import function. This affects the app/Controller/Component/ACLComponent.php component. Recommendations: For MISP versi...

CVE-2023-24026

In MISP 2.4.167, app/webroot/js/event-graph.js has an XSS vulnerability via an event-graph preview payload...

CVE-2023-24028

In MISP 2.4.167, app/Controller/Component/ACLComponent.php has incorrect access control for the decaying import function...

CVE-2023-24026

In MISP 2.4.167, app/webroot/js/event-graph.js has an XSS vulnerability via an event-graph preview payload...

CVE-2023-24028

In MISP 2.4.167, app/Controller/Component/ACLComponent.php has incorrect access control for the decaying import function...

CVE-2023-24027

In MISP 2.4.167, app/webroot/js/actiontable.js allows XSS via a network history name...

CVE-2023-22809

creationtimestamp| type| source ---|---|--- 2023-01-18 20:21:07+00:00| seen| https://t.me/cibsecurity/56682 2023-01-19 14:49:11+00:00| seen| https://t.me/proxybar/1303 2023-01-19 22:34:18+00:00| published-proof-of-concept| https://t.me/crackcodes/2324 2023-01-21 01:03:31+00:00|...

CVE-2022-41903

creationtimestamp| type| source ---|---|--- 2023-01-18 16:10:08+00:00| seen| https://t.me/truesecator/3955 2023-01-19 12:11:09+00:00| seen| MISP/81745fb9-5708-474a-970d-c009efdc14a7 2023-01-19 14:59:30+00:00| seen| https://t.me/ctinow/87892 2023-01-19 15:21:31+00:00| published-proof-of-concept|...

CVE-2022-23521

creationtimestamp| type| source ---|---|--- 2023-01-18 16:10:08+00:00| seen| https://t.me/truesecator/3955 2023-01-19 12:11:10+00:00| seen| MISP/eab08996-dae5-4549-af05-7d51a85fe0cc 2023-01-19 15:21:31+00:00| published-proof-of-concept| https://t.me/crackcodes/2317 2023-01-22 13:04:27+00:00| seen...

CVE-2023-21887

creationtimestamp| type| source ---|---|--- 2023-01-18 02:26:32+00:00| seen| https://t.me/cibsecurity/56642 2023-11-15 17:01:59+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5993 2024-03-12 11:57:05+00:00| exploited| https://t.me/theninjaway1337/1421 2024-12-19 13:09:26+00:00| seen...

CVE-2023-0179

creationtimestamp| type| source ---|---|--- 2023-01-17 13:25:30+00:00| seen| https://t.me/sysodmins/16917 2023-01-19 15:21:31+00:00| published-proof-of-concept| https://t.me/crackcodes/2317 2023-01-21 14:20:39+00:00| published-proof-of-concept| https://t.me/crackcodes/2358 2023-01-21...

CVE-2023-0297

creationtimestamp| type| source ---|---|--- 2023-01-17 10:44:03+00:00| published-proof-of-concept| Telegram/n2KULA0ZDBe9JouPZU60255ZIS84-JTUnhcVpFqDs4kxwAQ 2023-01-17 10:49:34+00:00| published-proof-of-concept| https://t.me/proxybar/1299 2023-01-21 12:55:20+00:00| published-proof-of-concept|...

CVE-2023-0315

creationtimestamp| type| source ---|---|--- 2023-01-16 07:23:44+00:00| seen| https://t.me/cibsecurity/56529 2023-02-01 11:03:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7663 2023-02-22 18:26:24+00:00| seen|...

CVE-2023-23488

creationtimestamp| type| source ---|---|--- 2023-01-15 09:28:44+00:00| seen| https://t.me/DailyToolz/582 2023-01-16 17:30:07+00:00| seen| https://t.me/truesecator/3945 2023-01-19 15:57:30+00:00| seen|...

CVE-2022-47966

creationtimestamp| type| source ---|---|--- 2023-01-13 19:02:18+00:00| seen| https://t.me/ctinow/86860 2023-01-17 11:48:32+00:00| published-proof-of-concept| https://t.me/thehackernews/2959 2023-01-17 14:32:08+00:00| seen| https://t.me/ctinow/87322 2023-01-17 15:37:02+00:00| seen|...

CVE-2023-21768

creationtimestamp| type| source ---|---|--- 2023-01-11 00:34:47+00:00| seen| https://t.me/cibsecurity/56273 2023-03-08 16:03:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/3893 2023-03-08 21:11:41+00:00| published-proof-of-concept|...

CVE-2023-21674

creationtimestamp| type| source ---|---|--- 2023-01-10 21:37:05+00:00| exploited| https://t.me/ctinow/86042 2023-01-11 02:37:31+00:00| exploited| https://t.me/ctinow/86111 2023-01-11 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=943 2023-01-11 12:38:43+00:00| exploited|...

CVE-2022-44877

creationtimestamp| type| source ---|---|--- 2023-01-05 19:40:32+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/6905 2023-01-06 02:19:20+00:00| seen| https://t.me/cibsecurity/56025 2023-01-06 08:11:28+00:00| published-proof-of-concept| https://t.me/proxybar/1261 2023-01-07...