CVE-2020-7384

creationtimestamp| type| source ---|---|--- 2020-11-10 09:46:41+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/fileformat/metasploitmsfvenomapktemplatecmdinjection.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-...

CVE-2020-27932

creationtimestamp| type| source ---|---|--- 2020-11-06 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=524 2020-11-06 09:06:43+00:00| exploited| https://t.me/thehackernews/892 2020-11-06 10:46:03+00:00| exploited| https://t.me/truesecator/1121 2020-11-06 15:57:15+00:00|...

CVE-2020-27930

creationtimestamp| type| source ---|---|--- 2020-11-06 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=524 2020-11-06 09:06:43+00:00| exploited| https://t.me/thehackernews/892 2020-11-06 10:46:03+00:00| exploited| https://t.me/truesecator/1121 2020-11-06 15:57:15+00:00|...

CVE-2020-27950

creationtimestamp| type| source ---|---|--- 2020-11-06 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=524 2020-11-06 09:06:43+00:00| exploited| https://t.me/thehackernews/892 2020-11-06 10:46:03+00:00| exploited| https://t.me/truesecator/1121 2020-11-06 15:57:15+00:00|...

CVE-2014-7235

creationtimestamp| type| source ---|---|--- 2020-11-05 16:55:13+00:00| seen| MISP/9fbd6001-b34c-4886-8240-d3e93a433faf 2020-11-05 19:44:38+00:00| seen| MISP/77f74cbc-dd0e-4c6e-a9c4-f15e1a87c0f9 2020-11-05 19:44:38+00:00| seen| MISP/d60bbf52-1b06-4ddd-b894-c1da7f68f083 2020-11-05 19:44:39+00:00|...

CVE-2019-19006

creationtimestamp| type| source ---|---|--- 2020-11-05 14:02:14+00:00| exploited| https://t.me/truesecator/1118 2020-11-05 16:55:13+00:00| seen| MISP/9fbd6001-b34c-4886-8240-d3e93a433faf 2020-11-05 19:44:39+00:00| seen| MISP/77f74cbc-dd0e-4c6e-a9c4-f15e1a87c0f9 2020-11-05 19:44:39+00:00| seen|...

CVE-2020-3556

creationtimestamp| type| source ---|---|--- 2020-11-05 12:29:22+00:00| published-proof-of-concept| https://t.me/informationsecuritychannel/41467 2020-11-06 22:51:34+00:00| seen| https://t.me/cibsecurity/16014 2024-11-14 06:07:10+00:00| seen| MISP/dd7cd495-cd76-48fb-9aee-acfbf13a78cb...

CVE-2020-27955

creationtimestamp| type| source ---|---|--- 2020-11-05 10:36:46+00:00| seen| https://t.me/HackerOne/2820 2020-11-06 13:07:09+00:00| published-proof-of-concept| https://t.me/cKure/2724 2020-11-08 12:40:00+00:00| published-proof-of-concept| https://t.me/canyoupwnme/6666 2021-02-22 15:18:08+00:00|...

CVE-2020-27387

creationtimestamp| type| source ---|---|--- 2020-11-05 07:48:14+00:00| seen| https://t.me/cibsecurity/15854 2020-11-13 12:05:48+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/horizontcmsuploadexec.rb 2022-04-05 20:29:14+00:00| seen|...

CVE-2020-16009

creationtimestamp| type| source ---|---|--- 2020-11-03 10:17:17+00:00| exploited| https://t.me/truesecator/1109 2020-11-03 16:42:14+00:00| seen| https://t.me/NeKaspersky/216 2020-11-03 22:15:14+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2034 2020-11-04 13:01:05+00:0...

CVE-2020-16010

creationtimestamp| type| source ---|---|--- 2020-11-03 07:46:02+00:00| seen| https://t.me/cibsecurity/15799 2020-11-03 10:17:17+00:00| exploited| https://t.me/truesecator/1109 2020-11-03 16:42:14+00:00| seen| https://t.me/NeKaspersky/216 2020-11-04 13:01:05+00:00| seen|...

CVE-2020-28043

MISP through 2.4.133 allows SSRF in the REST client via the usefullpath parameter with an arbitrary URL...

CVE-2020-28043

MISP through 2.4.133 allows SSRF in the REST client via the usefullpath parameter with an arbitrary URL...

Server side request forgery (ssrf)

MISP through 2.4.133 allows SSRF in the REST client via the usefullpath parameter with an arbitrary URL...

CVE-2020-14871

creationtimestamp| type| source ---|---|--- 2020-11-02 19:35:04+00:00| seen| MISP/722231ed-1535-455b-aae2-4705701f1258 2020-11-03 11:47:22+00:00| seen| https://t.me/truesecator/1110 2020-11-04 11:40:09+00:00| seen| https://t.me/CyberGovIL/906 2020-11-04 20:20:53+00:00| seen|...

MISP Server-Side Request Forgery Vulnerability

MISP is an open source software solution for collecting, storing, distributing and sharing cybersecurity metrics and threats related to cybersecurity event analysis and malware analysis. A server-side request forgery vulnerability exists in the REST client in MISP 2.4.133 and earlier versions. An...

CVE-2020-28043

MISP through 2.4.133 allows SSRF in the REST client via the usefullpath parameter with an arbitrary URL...

CVE-2020-28043

MISP up to version 2.4.133 contains a SSRF vulnerability in its REST client via the use_full_path parameter, allowing requests to arbitrary URLs. The root cause is exposure of server-side request construction in the REST client, enabling an attacker to induce the application to reach internal or ...

CVE-2020-17087

creationtimestamp| type| source ---|---|--- 2020-11-01 16:26:01+00:00| exploited| https://t.me/SecLabNews/9161 2020-11-02 10:46:15+00:00| exploited| https://t.me/thehackernews/886 2020-11-05 03:52:26+00:00| seen| https://t.me/SHATOOB/2913 2020-11-11 04:00:00+00:00| seen|...

CVE-2011-4066

creationtimestamp| type| source ---|---|--- 2020-10-28 15:50:03+00:00| seen| MISP/f9d0a6fd-5f30-457d-a3f8-eef9cf2fe3bf...