CVE-2022-26923

creationtimestamp| type| source ---|---|--- 2022-05-11 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=801 2022-05-12 02:37:16+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2166 2022-05-12 11:01:01+00:00| seen| https://t.me/CyberSecurityTechnologies/5987...

CVE-2022-26925

creationtimestamp| type| source ---|---|--- 2022-05-11 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=801 2022-05-11 08:29:32+00:00| exploited| https://t.me/cKure/9501 2022-05-11 16:04:01+00:00| seen| https://t.me/truesecator/2928 2022-05-17 16:15:03+00:00| exploited|...

CVE-2022-30333

creationtimestamp| type| source ---|---|--- 2022-05-09 12:31:04+00:00| seen| https://t.me/cibsecurity/42166 2022-06-29 05:00:04+00:00| exploited| https://t.me/cKure/9862 2022-06-29 07:20:27+00:00| published-proof-of-concept| https://t.me/TopCyberTechNews/51 2022-06-30 10:57:20+00:00| seen|...

CVE-2022-27925

creationtimestamp| type| source ---|---|--- 2022-05-05 14:03:26+00:00| seen| https://t.me/ptswarm/123 2022-06-22 11:01:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6249 2022-08-12 12:07:32+00:00| exploited| https://t.me/truesecator/3286 2022-08-12 18:43:37+00:00|...

CVE-2022-22960

creationtimestamp| type| source ---|---|--- 2022-05-01 21:40:40+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2076 2022-06-01 19:38:01+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2356 2022-06-02 11:01:01+00:00| published-proof-of-concept|...

CVE-2022-24706

creationtimestamp| type| source ---|---|--- 2022-04-26 14:36:58+00:00| seen| https://t.me/cibsecurity/41424 2022-04-28 17:51:45+00:00| published-proof-of-concept| https://t.me/cKure/9439 2022-04-29 17:20:21+00:00| published-proof-of-concept| https://t.me/ShlezySecChannel/39 2022-05-22...

CVE-2022-29806

creationtimestamp| type| source ---|---|--- 2022-04-26 07:50:55+00:00| seen| https://t.me/cibsecurity/41422 2022-05-04 22:56:15+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/zoneminderlangexec.rb 2025-02-06 03:13:45+00:00| seen|...

CVE-2022-29499

creationtimestamp| type| source ---|---|--- 2022-04-26 07:47:52+00:00| seen| https://t.me/cibsecurity/41421 2022-06-27 19:30:04+00:00| exploited| https://t.me/truesecator/3104 2022-09-13 15:35:06+00:00| exploited| https://t.me/truesecator/3409 2022-09-14 09:47:43+00:00| seen|...

MISP Cross-Site Scripting Vulnerability (CNVD-2022-64091)

MISP is an open source software solution. The product is used to collect, store, distribute, and share network security metrics and has features such as threat network security event analysis and malware analysis. cross-site scripting vulnerability exists in versions prior to MISP 2.4.158, which...

MISP Cross-Site Scripting Vulnerability (CNVD-2022-64092)

MISP is an open source software solution. The product is used to collect, store, distribute, and share network security metrics and has features such as threat network security event analysis and malware analysis. cross-site scripting vulnerability exists in versions prior to MISP 2.4.158, which...

MISP Cross-Site Scripting Vulnerability (CNVD-2022-64093)

MISP is an open source software solution. The product is used to collect, store, distribute, and share network security metrics and has features such as threat network security event analysis and malware analysis. cross-site scripting vulnerability exists in versions prior to MISP 2.4.158, which...

Vulnerabilities fixed in MISP

Vulnerabilities have been fixed in MISP. The vulnerabilities allow a malicious person to perform attacks that result in the following categories of damage: Cross-Site Scripting XSS. Bypassing authentication Remote code execution Administrator/Root rights For these vulnerabilities, at the time of...

MISP Cross-Site Scripting Vulnerability (CNVD-2022-64095)

MISP is an open source software solution. The product is used to collect, store, distribute, and share network security metrics, and has features such as threat network security event analysis and malware analysis. cross-site scripting vulnerabilities exist in versions of MISP prior to 2.4.158,...

MISP Cross-Site Scripting Vulnerability (CNVD-2022-64094)

MISP is an open source software solution. The product is used to collect, store, distribute, and share network security metrics, and has features such as threat network security event analysis and malware analysis. cross-site scripting vulnerabilities exist in versions of MISP prior to 2.4.158,...

CVE-2022-29531

An issue was discovered in MISP before 2.4.158. There is stored XSS in the event graph via a tag name...

CVE-2022-29531

An issue was discovered in MISP before 2.4.158. There is stored XSS in the event graph via a tag name...

CVE-2022-29528

An issue was discovered in MISP before 2.4.158. PHAR deserialization can occur...

CVE-2022-29530

An issue was discovered in MISP before 2.4.158. There is stored XSS in the galaxy clusters...

CVE-2022-29532

An issue was discovered in MISP before 2.4.158. There is XSS in the cerebrate view if one administrator puts a javascript: URL in the URL field, and another administrator clicks on it...

CVE-2022-29533

An issue was discovered in MISP before 2.4.158. There is XSS in app/Controller/OrganisationsController.php in a situation with a "weird single checkbox page."...