5403 matches found
CVE-2017-1000353
creationtimestamp| type| source ---|---|--- 2020-09-22 10:43:28+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/jenkinsclideserialization.rb 2020-10-09 16:14:59+00:00| seen| MISP/830935ed-e522-4e00-9ce7-61f03acd871e 2020-10-09 16:23:16+00:00|...
MISP Link Jumping Vulnerability
MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP versions prior to 2.4.132. The vulnerability stems...
CVE-2020-17506
creationtimestamp| type| source ---|---|--- 2020-09-21 20:38:44+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/articaproxyauthbypassservicecmdspeformcommandinjection.rb 2024-11-14 06:07:09+00:00| seen| MISP/c5be76fc-667f-4614-a326-c9b2726c0902...
CVE-2020-7460
creationtimestamp| type| source ---|---|--- 2020-09-19 20:38:57+00:00| published-proof-of-concept| https://t.me/HackerOne/2743 2022-07-19 05:12:18+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1687 2023-11-02 19:17:43+00:00| seen|...
CVE-2018-18556
creationtimestamp| type| source ---|---|--- 2020-09-19 13:26:48+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/ssh/vyosrestrictedshellprivesc.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:06+00:00|...
CVE-2020-25766
An issue was discovered in MISP before 2.4.132. It can perform an unwanted action because of a POST operation on a form that is not linked to the login page...
CVE-2020-25766
An issue was discovered in MISP before 2.4.132. It can perform an unwanted action because of a POST operation on a form that is not linked to the login page...
Code injection
An issue was discovered in MISP before 2.4.132. It can perform an unwanted action because of a POST operation on a form that is not linked to the login page...
CVE-2020-25766
An issue was discovered in MISP before 2.4.132. It can perform an unwanted action because of a POST operation on a form that is not linked to the login page...
CVE-2020-25766
CVE-2020-25766 affects MISP prior to 2.4.132. Root cause: a POST operation on a form not linked to the login page can trigger an unwanted action. Affects versions before 2.4.132; documented impact includes possible unauthorized action with low attack complexity (network vector) and no authenticat...
CVE-2020-12109
creationtimestamp| type| source ---|---|--- 2020-09-18 14:58:24+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/tplinkncxxxbonjourcommandinjection.rb 2024-11-14 06:07:14+00:00| seen| MISP/31e52c3d-a86d-4dbc-b75d-9d1508fba5b9 2025-02-06...
CVE-2020-17132
creationtimestamp| type| source ---|---|--- 2020-09-16 20:41:14+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/exchangeecpdlppolicy.rb 2020-12-23 13:09:12+00:00| exploited| https://t.me/CyberGovIL/1021 2020-12-23 14:15:56+00:00| exploited|...
CVE-2020-16875
creationtimestamp| type| source ---|---|--- 2020-09-16 20:41:14+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/exchangeecpdlppolicy.rb 2020-12-23 13:09:12+00:00| exploited| https://t.me/CyberGovIL/1021 2020-12-23 14:15:56+00:00| exploited|...
CVE-2020-15920
creationtimestamp| type| source ---|---|--- 2020-09-16 15:35:56+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/midasolutionseframeworkajaxreqrce.rb 2025-02-02 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities -...
CVE-2019-0230
creationtimestamp| type| source ---|---|--- 2020-09-14 20:55:04+00:00| seen| https://t.me/cibsecurity/14642 2020-12-23 17:47:29+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/struts2multievalognl.rb 2021-01-10 20:25:14+00:00|...
CVE-2020-15802
creationtimestamp| type| source ---|---|--- 2020-09-10 10:23:38+00:00| seen| https://t.me/truesecator/920 2020-09-10 12:14:16+00:00| seen| https://t.me/cKure/2162 2020-09-10 23:40:58+00:00| seen| https://t.me/thehackernews/836 2020-09-11 07:15:07+00:00| published-proof-of-concept|...
CVE-2020-9839
creationtimestamp| type| source ---|---|--- 2020-09-04 21:04:03+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/cfprefsdracecondition.rb 2020-09-08 11:12:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1712 2025-02-06...
Mihari - A Helper To Run OSINT Queries & Manage Results Continuously
Mihari is a helper to run queries & manage results continuously. Mihari can be used for C2, landing page and phishing hunting. How it works Mihari makes a query against Shodan, Censys, VirusTotal, SecurityTrails, etc. and extracts artifacts IP addresses, domains, URLs and hashes from the results...
CVE-2020-3566
creationtimestamp| type| source ---|---|--- 2020-08-31 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=507 2020-08-31 12:08:04+00:00| seen| https://t.me/icscert/337 2020-08-31 16:28:28+00:00| exploited| https://t.me/informationsecuritychannel/40069 2020-08-31 17:21:12+00:0...