MISP Marked Data Restriction Bypass Vulnerability

MISP is an open source software solution for collecting, storing, distributing and sharing cybersecurity metrics and threats related to cybersecurity event analysis and malware analysis. A tag data limit bypass vulnerability exists in app/Controller/TagsController.php in MISP 2.4.118. An attacker...

CVE-2019-19379

In app/Controller/TagsController.php in MISP 2.4.118, users can bypass intended restrictions on tagging data...

CVE-2019-19379

In app/Controller/TagsController.php in MISP 2.4.118, users can bypass intended restrictions on tagging data...

Design/Logic Flaw

In app/Controller/TagsController.php in MISP 2.4.118, users can bypass intended restrictions on tagging data...

CVE-2019-19379

The CVE-2019-19379 entry concerns MISP version 2.4.118 where the vulnerability resides in app/Controller/TagsController.php, allowing an attacker to bypass intended restrictions on tagging data. The connected documents confirm the affected component (TagsController.php) and the impact (restrictio...

CVE-2019-19379

In app/Controller/TagsController.php in MISP 2.4.118, users can bypass intended restrictions on tagging data...

CVE-2019-1322

creationtimestamp| type| source ---|---|--- 2019-11-14 15:02:06+00:00| seen| https://t.me/canyoupwnme/6135 2019-11-15 19:29:39+00:00| published-proof-of-concept| https://t.me/canyoupwnme/6143 2019-11-16 12:53:34+00:00| published-proof-of-concept| https://t.me/DC8044Info/473 2019-12-18...

CVE-2019-11409

creationtimestamp| type| source ---|---|--- 2019-11-13 17:44:06+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/fusionpbxoperatorpanelexeccmdexec.rb 2019-11-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47697 2025-02-06...

CVE-2019-9055

creationtimestamp| type| source ---|---|--- 2019-11-13 14:45:46+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cmsmsobjectinjectionrce.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:19+00:00| seen...

CVE-2019-16113

creationtimestamp| type| source ---|---|--- 2019-11-12 21:52:58+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/bludituploadimagesexec.rb 2019-11-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47699 2020-06-04 18:18:28+00:00|...

CVE-2019-1429

creationtimestamp| type| source ---|---|--- 2019-11-12 20:21:26+00:00| exploited| https://t.me/ctinow/17594 2019-11-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=434 2019-11-13 20:30:12+00:00| exploited| https://t.me/CyberGovIL/624 2019-11-22 00:00:00+00:00| exploited...

CVE-2019-1225

creationtimestamp| type| source ---|---|--- 2019-11-08 10:29:26+00:00| seen| MISP/5dc3d86a-32a4-41c7-90f7-4ca0950d210f...

CVE-2019-1224

creationtimestamp| type| source ---|---|--- 2019-11-08 10:29:26+00:00| seen| MISP/5dc3d86a-32a4-41c7-90f7-4ca0950d210f...

CVE-2019-1223

creationtimestamp| type| source ---|---|--- 2019-11-08 10:29:26+00:00| seen| MISP/5dc3d86a-32a4-41c7-90f7-4ca0950d210f...

CVE-2019-8625

creationtimestamp| type| source ---|---|--- 2019-11-08 10:29:26+00:00| seen| MISP/5dc3d86a-32a4-41c7-90f7-4ca0950d210f 2024-03-15 08:41:40+00:00| seen| https://t.me/ctinow/208515 2024-03-15 10:11:54+00:00| seen| https://t.me/ctinow/208580...

CVE-2019-8733

creationtimestamp| type| source ---|---|--- 2019-11-08 10:29:26+00:00| seen| MISP/5dc3d86a-32a4-41c7-90f7-4ca0950d210f 2024-03-15 09:11:25+00:00| seen| https://t.me/ctinow/208528 2024-03-15 10:46:32+00:00| seen| https://t.me/ctinow/208611 2024-03-15 10:46:33+00:00| seen| https://t.me/ctinow/20861...

CVE-2019-8719

creationtimestamp| type| source ---|---|--- 2019-11-08 10:29:26+00:00| seen| MISP/5dc3d86a-32a4-41c7-90f7-4ca0950d210f 2024-03-15 09:11:22+00:00| seen| https://t.me/ctinow/208525 2024-03-15 10:16:31+00:00| seen| https://t.me/ctinow/208588 2024-03-15 10:46:29+00:00| seen| https://t.me/ctinow/20860...

CVE-2019-8735

creationtimestamp| type| source ---|---|--- 2019-11-08 10:29:26+00:00| seen| MISP/5dc3d86a-32a4-41c7-90f7-4ca0950d210f 2024-03-15 09:11:26+00:00| seen| https://t.me/ctinow/208529 2024-03-15 11:16:46+00:00| seen| https://t.me/ctinow/208618 2024-03-15 11:16:48+00:00| seen| https://t.me/ctinow/20861...

CVE-2019-8763

creationtimestamp| type| source ---|---|--- 2019-11-08 10:29:26+00:00| seen| MISP/5dc3d86a-32a4-41c7-90f7-4ca0950d210f 2024-03-15 09:41:24+00:00| seen| https://t.me/ctinow/208552 2024-03-15 11:46:43+00:00| seen| https://t.me/ctinow/208653 2024-03-15 11:46:44+00:00| seen| https://t.me/ctinow/20865...

CVE-2019-8745

creationtimestamp| type| source ---|---|--- 2019-11-08 10:29:26+00:00| seen| MISP/5dc3d86a-32a4-41c7-90f7-4ca0950d210f 2024-03-15 09:11:27+00:00| seen| https://t.me/ctinow/208530 2024-03-15 11:16:49+00:00| seen| https://t.me/ctinow/208620 2024-03-15 11:16:51+00:00| seen| https://t.me/ctinow/20862...