5403 matches found
Design/Logic Flaw
MISP 2.4.136 has XSS via a crafted URL to the app/View/Elements/globalmenu.ctp user homepage favourite button...
Default credentials
The default setting of MISP 2.4.136 did not enable the requirements aka requirepasswordconfirmation to provide the previous password when changing a password...
Cross site scripting
MISP 2.4.136 has Stored XSS in the galaxy cluster view via a cluster name to app/View/GalaxyClusters/view.ctp...
CVE-2021-3184
MISP 2.4.136 has XSS via a crafted URL to the app/View/Elements/globalmenu.ctp user homepage favourite button...
CVE-2021-3184
MISP 2.4.136 is affected by a Cross-Site Scripting (XSS) vulnerability that arises from a crafted URL targeting the app/View/Elements/global_menu.ctp on the user homepage favourites button. The issue is documented across multiple sources and is confirmed by connected records describing a vulnerab...
CVE-2021-25323
The CVE-2021-25323 issue concerns MISP version 2.4.136 where the default configuration did not require the current password (require_password_confirmation) when changing a password. Root cause: the default setting omits verification of the existing password during password changes. Impact: elevat...
CVE-2021-25323
The default setting of MISP 2.4.136 did not enable the requirements aka requirepasswordconfirmation to provide the previous password when changing a password...
CVE-2021-25324
CVE-2021-25324 affects MISP 2.4.136 with a Stored XSS flaw in the galaxy cluster view (app/View/GalaxyClusters/view.ctp). Root cause details are not fully disclosed in the provided documents, but the vulnerability is described by multiple sources as a cross-site scripting issue that could impact ...
CVE-2021-25324
MISP 2.4.136 has Stored XSS in the galaxy cluster view via a cluster name to app/View/GalaxyClusters/view.ctp...
CVE-2021-25325
MISP 2.4.136 has XSS via galaxy cluster element values to app/View/GalaxyElements/ajax/index.ctp. Reference types could contain javascript: URLs...
CVE-2021-25325
CVE-2021-25325 affects MISP 2.4.136. It enables cross-site scripting via galaxy cluster element values sent to app/View/GalaxyElements/ajax/index.ctp, where reference types may include javascript: URLs. The issue arises from unsanitized input in galaxy elements, enabling an attacker to execute sc...
MISP 跨站脚本漏洞
MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A cross-site scripting vulnerability exists in MISP version 2.4.136, which originates from...
CVE-2020-6207
creationtimestamp| type| source ---|---|--- 2021-01-15 03:33:25+00:00| published-proof-of-concept| Telegram/mzMPJUtI8bSjYe6VDdVcO-nYDGgxJsJcGR3bIyj6eBfmw 2021-01-16 11:50:06+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2506 2021-01-23 09:55:55+00:00|...
CVE-2020-6572
creationtimestamp| type| source ---|---|--- 2021-01-15 00:50:38+00:00| seen| https://t.me/cibsecurity/22187 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:25:54+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971208 2025-02-23 02:10:27+00:00|...
CVE-2020-29015
creationtimestamp| type| source ---|---|--- 2021-01-14 18:49:45+00:00| seen| https://t.me/cibsecurity/22163 2021-06-02 06:43:38+00:00| seen| https://t.me/ptswarm/43 2024-11-14 06:09:42+00:00| seen| MISP/4acf1d49-6b23-4d04-9888-244468b25710...
CVE-2021-1648
creationtimestamp| type| source ---|---|--- 2021-01-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=538 2021-01-13 11:29:49+00:00| seen| https://t.me/NeKaspersky/397 2021-03-11 11:01:04+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2883...
CVE-2021-1647
creationtimestamp| type| source ---|---|--- 2021-01-12 22:58:05+00:00| seen| https://t.me/cibsecurity/22013 2021-01-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=538 2021-01-13 06:13:41+00:00| exploited| https://t.me/thehackernews/979 2021-01-13 10:28:16+00:00|...
CVE-2020-17136
creationtimestamp| type| source ---|---|--- 2021-01-11 22:23:00+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve202017136.rb 2024-10-09 20:01:43+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2490 2025-02-06...
CVE-2020-15662
creationtimestamp| type| source ---|---|--- 2021-01-09 12:07:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2462 2024-11-14 06:07:28+00:00| seen| MISP/44fc9a47-93da-48e7-99e3-ad072a353ab9...