CVE-2019-9082

creationtimestamp| type| source ---|---|--- 2020-04-13 14:35:55+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/thinkphprce.rb 2020-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48333 2021-11-08 08:58:20+00:00| seen|...

CVE-2020-0787

creationtimestamp| type| source ---|---|--- 2020-04-12 20:36:33+00:00| published-proof-of-concept| https://t.me/hybgl/146 2020-06-11 06:14:52+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve20200787bitsarbitraryfilemove.rb 2020-10-09...

CVE-2020-3952

creationtimestamp| type| source ---|---|--- 2020-04-12 06:01:42+00:00| seen| https://t.me/informationsecuritychannel/36785 2020-04-13 15:30:02+00:00| seen| https://t.me/SecLabNews/7342 2020-04-16 09:08:53+00:00| published-proof-of-concept| https://t.me/techpwnews/434 2020-04-16 12:54:03+00:00|...

CVE-2020-5722

creationtimestamp| type| source ---|---|--- 2020-04-10 16:33:40+00:00| exploited| https://t.me/truesecator/456 2020-04-13 09:10:02+00:00| exploited| https://t.me/SecLabNews/7334 2020-10-09 14:02:50+00:00| seen| MISP/3e3792b8-d224-49c1-adcb-cf1dafc6174d 2020-10-15 15:07:04+00:00| seen|...

CVE-2020-6819

creationtimestamp| type| source ---|---|--- 2020-04-06 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=466 2021-11-08 08:58:19+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24...

CVE-2020-6820

creationtimestamp| type| source ---|---|--- 2020-04-06 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=466 2021-11-08 08:58:19+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24...

CVE-2020-11455

creationtimestamp| type| source ---|---|--- 2020-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48297 2020-04-14 17:13:45+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/limesurveyziptraversals.rb 2025-02-06...

CVE-2020-8644

creationtimestamp| type| source ---|---|--- 2020-04-03 14:31:14+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/playsmstemplateinjection.rb 2020-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48335 2021-11-08 08:58:19+00:00...

MISP Information Disclosure Vulnerability (CNVD-2020-23173)

MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in the app/Model/feed.php file in versions of MISP prior t...

CVE-2019-17558

creationtimestamp| type| source ---|---|--- 2020-04-02 16:31:27+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/solrvelocityrce.rb 2020-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48338 2021-02-05 21:43:47+00:00|...

CVE-2018-18326

creationtimestamp| type| source ---|---|--- 2020-04-02 15:06:54+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/dnncookiedeserializationrce.rb 2020-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48336 2025-02-06...

CVE-2018-15812

creationtimestamp| type| source ---|---|--- 2020-04-02 15:06:54+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/dnncookiedeserializationrce.rb 2020-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48336 2025-02-06...

CVE-2018-15811

creationtimestamp| type| source ---|---|--- 2020-04-02 15:06:54+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/dnncookiedeserializationrce.rb 2020-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48336 2021-11-08...

CVE-2018-18325

creationtimestamp| type| source ---|---|--- 2020-04-02 15:06:54+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/dnncookiedeserializationrce.rb 2020-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48336 2021-11-08...

CVE-2017-9822

creationtimestamp| type| source ---|---|--- 2020-04-02 15:06:54+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/dnncookiedeserializationrce.rb 2020-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48336 2020-10-09...

CVE-2020-11458

app/Model/feed.php in MISP before 2.4.124 allows administrators to choose arbitrary files that should be ingested by MISP. This does not cause a leak of the full contents of a file, but does cause a leaks of strings that match certain patterns. Among the data that can leak are passwords from...

CVE-2020-11458

app/Model/feed.php in MISP before 2.4.124 allows administrators to choose arbitrary files that should be ingested by MISP. This does not cause a leak of the full contents of a file, but does cause a leaks of strings that match certain patterns. Among the data that can leak are passwords from...

Code injection

app/Model/feed.php in MISP before 2.4.124 allows administrators to choose arbitrary files that should be ingested by MISP. This does not cause a leak of the full contents of a file, but does cause a leaks of strings that match certain patterns. Among the data that can leak are passwords from...

CVE-2020-11458

app/Model/feed.php in MISP before 2.4.124 allows administrators to choose arbitrary files that should be ingested by MISP. This does not cause a leak of the full contents of a file, but does cause a leaks of strings that match certain patterns. Among the data that can leak are passwords from...

CVE-2020-11458

CVE-2020-11458 affects MISP versions prior to 2.4.124, where app/Model/feed.php allows administrators to select arbitrary files to ingest. This does not expose full file contents but can leak strings matching patterns, including passwords from database.php or GPG passphrases from config.php. Rele...