CVE-2020-28861

creationtimestamp| type| source ---|---|--- 2020-12-14 22:39:20+00:00| seen| https://t.me/cibsecurity/20764 2024-11-14 06:07:41+00:00| seen| MISP/4be9e58c-a8cb-4ff2-acc4-d9684559a7e0...

CVE-2020-17141

creationtimestamp| type| source ---|---|--- 2020-12-14 18:55:54+00:00| published-proof-of-concept| https://t.me/cKure/3251 2020-12-14 21:30:35+00:00| published-proof-of-concept| https://t.me/HackerOne/2871 2021-11-08 08:58:18+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2024-10-09...

CVE-2020-17144

creationtimestamp| type| source ---|---|--- 2020-12-14 03:51:28+00:00| published-proof-of-concept| Telegram/hNqHHYmUZ3qL9V1jnqUDMQ7sYfirC6K-HnBKeCLBDTbA 2021-07-02 06:58:55+00:00| seen| MISP/d11a348d-a113-494f-bb63-24caad723c86 2021-11-08 08:58:18+00:00| seen|...

CVE-2020-29574

creationtimestamp| type| source ---|---|--- 2020-12-11 20:35:52+00:00| seen| https://t.me/cibsecurity/20363 2020-12-11 20:46:08+00:00| seen| https://t.me/cibsecurity/20383 2020-12-11 21:25:22+00:00| seen| https://t.me/cibsecurity/20402 2020-12-11 22:04:40+00:00| seen| https://t.me/cibsecurity/204...

CVE-2020-17096

creationtimestamp| type| source ---|---|--- 2020-12-10 02:33:03+00:00| seen| https://t.me/cibsecurity/18399 2020-12-10 02:36:04+00:00| seen| https://t.me/cibsecurity/18419 2020-12-10 02:38:53+00:00| seen| https://t.me/cibsecurity/18431 2020-12-10 03:25:17+00:00| seen| https://t.me/cibsecurity/184...

CVE-2020-25499

creationtimestamp| type| source ---|---|--- 2020-12-10 00:33:06+00:00| seen| https://t.me/cibsecurity/18304 2020-12-10 00:41:08+00:00| seen| https://t.me/cibsecurity/18324 2020-12-10 01:23:10+00:00| seen| https://t.me/cibsecurity/18343 2020-12-10 01:25:34+00:00| seen| https://t.me/cibsecurity/183...

CVE-2020-10977

creationtimestamp| type| source ---|---|--- 2020-12-09 17:40:24+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gitlabfilereadrce.rb 2021-09-21 06:42:47+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/177 2024-10-09...

CVE-2019-20361

creationtimestamp| type| source ---|---|--- 2020-12-09 15:35:21+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wpemailsubnewssqli.rb 2022-06-20 19:53:12+00:00| published-proof-of-concept| https://t.me/LeakingXTeam/20993 2022-06-20...

CVE-2019-3398

creationtimestamp| type| source ---|---|--- 2020-12-09 07:18:56+00:00| seen| MISP/b426aa9c-dc22-4a91-8213-f8d513405423 2021-11-08 08:58:17+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:24:34+00:00|...

CVE-2020-13945

creationtimestamp| type| source ---|---|--- 2020-12-07 22:30:20+00:00| seen| https://t.me/cibsecurity/17209 2022-03-07 15:23:16+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apacheapisixapidefaulttokenrce.rb 2023-12-18 01:40:59+00:00| seen|...

MISP cross-site scripting vulnerability (CNVD-2021-08162)

MISP is an open source software solution for collecting, storing, distributing and sharing cybersecurity metrics and threats related to cybersecurity event analysis and malware analysis. A cross-site scripting vulnerability exists in...

Vulnerability fixed in MISP

CIRCL has fixed a vulnerability in MISP. The vulnerability is located in the handling of templates and allows a malicious party to be able to launch a Cross-Site-Scripting attack XSS and thereby potentially execute arbitrary code in the context of the browser. CIRCL has released updates to fix th...

CVE-2020-29572

app/View/Elements/genericElements/SingleViews/Fields/genericField.ctp in MISP 2.4.135 has XSS via the authkey comment field...

CVE-2020-29572

app/View/Elements/genericElements/SingleViews/Fields/genericField.ctp in MISP 2.4.135 has XSS via the authkey comment field...

Design/Logic Flaw

app/View/Elements/genericElements/SingleViews/Fields/genericField.ctp in MISP 2.4.135 has XSS via the authkey comment field...

CVE-2020-29572

app/View/Elements/genericElements/SingleViews/Fields/genericField.ctp in MISP 2.4.135 has XSS via the authkey comment field...

CVE-2020-29572

CVE-2020-29572 affects MISP 2.4.135, with a cross-site scripting vulnerability in the file app/View/Elements/genericElements/SingleViews/Fields/genericField.ctp via the authkey comment field. The root cause is unsanitized input leading to XSS in the template rendering, enabling arbitrary script e...

MISP 跨站脚本漏洞

MISP is an open source software solution for collecting, storing, distributing and sharing cybersecurity metrics and threats related to cybersecurity event analysis and malware analysis. A cross-site scripting vulnerability exists in...

CVE-2020-8539

creationtimestamp| type| source ---|---|--- 2020-12-01 20:54:10+00:00| seen| https://t.me/cibsecurity/16999 2021-04-23 13:33:46+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/post/android/local/koffee.rb 2025-02-06 03:13:44+00:00| seen|...

CVE-2020-28949

creationtimestamp| type| source ---|---|--- 2020-11-27 06:43:35+00:00| seen| https://t.me/cKure/2991 2020-11-30 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=530 2020-12-03 06:54:15+00:00| seen| Telegram/Guk8DuU3shklMFMRI0YLGr6ZXGDXJelP33OTSQyPGBX5w 2020-12-03...