CVE-2020-10246

CVE-2020-10246 affects MISP 2.4.122 with a reflected XSS vulnerability in URL parameters, specifically in app/View/Users/statistics_orgs.ctp. Root cause: unsanitized URL parameters leading to reflected XSS. Existence of concrete details in connected sources confirms the affected component and fil...

CVE-2020-10247

MISP 2.4.122 has Persistent XSS in the sighting popover tool. This is related to app/View/Elements/Events/View/sightingfield.ctp...

CVE-2020-10247

Vulnerability: CVE-2020-10247 affects MISP 2.4.122, where a Persistent XSS exists in the sighting popover tool (file app/View/Elements/Events/View/sighting_field.ctp). Impact: can store/trigger XSS in user-visible popovers. Root cause: persistent cross-site scripting in the sighting_field.ctp com...

PT-2020-12002 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP version 2.4.122 Description: The issue is related to reflected XSS via unsanitized URL parameters, specifically in the app/View/Users/statistics orgs.ctp file. Recommendations: For MISP version 2.4.122, update to a version that sanitizes...

PT-2020-12003 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP version 2.4.122 Description: The issue is related to a Persistent XSS in the sighting popover tool, specifically in the app/View/Elements/Events/View/sighting field.ctp file. Recommendations: For MISP version 2.4.122, consider disabling...

CVE-2020-10189

creationtimestamp| type| source ---|---|--- 2020-03-07 12:05:02+00:00| published-proof-of-concept| https://t.me/SecLabNews/7045 2020-03-10 07:25:28+00:00| seen| MISP/6315f41b-d131-41bc-8552-324644b65b15 2020-03-13 19:29:46+00:00| seen|...

CVE-2020-0069

creationtimestamp| type| source ---|---|--- 2020-03-03 06:33:39+00:00| exploited| https://t.me/androidMalware/710 2020-03-03 11:00:02+00:00| exploited| https://t.me/SecLabNews/7007 2020-03-04 07:16:40+00:00| exploited| https://t.me/informationsecuritychannel/35588 2020-03-24 16:08:58+00:00|...

Unspecified vulnerability in MISP (CNVD-2020-18630)

MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. MISP suffers from an unspecified vulnerability that stems from the program not taking HTTP...

CVE-2020-8654

creationtimestamp| type| source ---|---|--- 2020-03-02 21:31:51+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/eyesofnetworkautodiscoveryrce.rb 2020-03-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48169 2025-02-06...

CVE-2020-8656

creationtimestamp| type| source ---|---|--- 2020-03-02 21:31:51+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/eyesofnetworkautodiscoveryrce.rb 2020-03-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48169 2025-02-06...

CVE-2020-9465

creationtimestamp| type| source ---|---|--- 2020-03-02 21:31:51+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/eyesofnetworkautodiscoveryrce.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:32+00:00...

CVE-2020-8655

creationtimestamp| type| source ---|---|--- 2020-03-02 21:31:51+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/eyesofnetworkautodiscoveryrce.rb 2020-03-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48169 2021-11-08...

CVE-2020-8657

creationtimestamp| type| source ---|---|--- 2020-03-02 21:31:51+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/eyesofnetworkautodiscoveryrce.rb 2020-03-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48169 2021-11-08...

CVE-2020-1938

creationtimestamp| type| source ---|---|--- 2020-02-28 19:26:21+00:00| published-proof-of-concept| https://t.me/thehackernews/618 2020-03-01 09:32:53+00:00| seen| https://t.me/informationsecuritychannel/35509 2020-03-03 17:01:44+00:00| exploited| https://t.me/SecLabNews/7011 2020-03-04...

CVE-2020-0688

creationtimestamp| type| source ---|---|--- 2020-02-26 12:03:25+00:00| published-proof-of-concept| https://t.me/hybgl/39 2020-02-26 21:36:00+00:00| exploited| https://t.me/BleepingComputer/6860 2020-02-27 09:20:02+00:00| published-proof-of-concept| https://t.me/canyoupwnme/6305 2020-02-27...

CVE-2020-6418

creationtimestamp| type| source ---|---|--- 2020-02-25 13:08:04+00:00| exploited| https://t.me/ctinow/20700 2020-02-25 18:03:55+00:00| exploited| https://t.me/truesecator/214 2020-02-26 02:58:18+00:00| exploited| https://t.me/secinfosex/33 2020-02-27 04:00:00+00:00| seen|...

CVE-2020-8794

creationtimestamp| type| source ---|---|--- 2020-02-25 11:11:12+00:00| seen| https://t.me/antichat/7965 2020-02-25 12:01:48+00:00| exploited| https://t.me/thehackernews/611 2020-03-04 19:41:51+00:00| seen|...

CVE-2020-0668

creationtimestamp| type| source ---|---|--- 2020-02-23 00:04:08+00:00| published-proof-of-concept| https://t.me/hybgl/25 2020-05-07 13:57:22+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve20200668servicetracing.rb 2021-09-21 04:41:55+00:0...

CVE-2015-7611

creationtimestamp| type| source ---|---|--- 2020-02-20 09:52:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/smtp/apachejamesexec.rb 2020-02-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48130 2025-02-06 03:13:42+00:00| seen|...

CVE-2020-0618

creationtimestamp| type| source ---|---|--- 2020-02-19 09:52:19+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/3859 2020-03-12 17:37:06+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/ssrsnavcorrectorviewstate.rb 2020-09-18...