Cross site scripting

In MISP before 2.4.105, the app/View/Layouts/default.ctp default layout template has a Reflected XSS vulnerability...

CVE-2019-10254

In MISP before 2.4.105, the app/View/Layouts/default.ctp default layout template has a Reflected XSS vulnerability...

CVE-2019-10254

In MISP before 2.4.105, the app/View/Layouts/default.ctp default layout template has a Reflected XSS vulnerability...

CVE-2019-10254

CVE-2019-10254 (MISP) : A Reflected XSS vulnerability exists in the default layout template (app/View/Layouts/default.ctp) of MISP prior to version 2.4.105. The issue arises in the default.ctp template and enables injection of arbitrary web script/HTML. Public references in the CVE describe the a...

CVE-2019-5420

creationtimestamp| type| source ---|---|--- 2019-03-24 00:55:47+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/2446 2019-05-01 13:45:07+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/railsdoubletap.rb 2019-05-02...

CVE-2019-4061

creationtimestamp| type| source ---|---|--- 2019-03-20 12:24:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/ibmbigfixsitespackagesenum.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:16+00:00| seen...

CVE-2019-1003029

creationtimestamp| type| source ---|---|--- 2019-03-18 12:37:31+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/jenkinsmetaprogramming.rb 2019-05-05 19:20:03+00:00| seen| MISP/5ccf3134-ea64-43c1-a356-f9f3950d210f 2022-07-31 07:01:12+00:00|...

CVE-2018-1000861

creationtimestamp| type| source ---|---|--- 2019-03-18 12:37:31+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/jenkinsmetaprogramming.rb 2019-05-13 08:12:02+00:00| seen| MISP/5ccf3134-ea64-43c1-a356-f9f3950d210f 2019-09-13 14:05:15+00:00|...

CVE-2019-5418

creationtimestamp| type| source ---|---|--- 2019-03-16 08:53:20+00:00| published-proof-of-concept| https://t.me/antichat/4013 2019-03-16 09:52:54+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/2416 2019-03-19 10:46:25+00:00| published-proof-of-concept| https://t.me/antichat/40...

CVE-2018-20735

creationtimestamp| type| source ---|---|--- 2019-03-15 18:31:19+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/bmcpatrolcmdexec.rb 2019-03-18 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46556 2025-02-06 03:13:43+00:00| seen|...

CVE-2019-9624

creationtimestamp| type| source ---|---|--- 2019-03-15 13:42:10+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/webminuploadexec.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:19+00:00| seen|...

CVE-2019-0797

creationtimestamp| type| source ---|---|--- 2019-03-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=371 2019-03-13 10:23:16+00:00| exploited| https://t.me/CyberGovIL/381 2019-03-13 11:06:25+00:00| seen| https://t.me/ctinow/9125 2019-03-13 15:20:45+00:00| exploited|...

CVE-2019-0808

creationtimestamp| type| source ---|---|--- 2019-03-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=371 2019-03-13 10:23:16+00:00| exploited| https://t.me/CyberGovIL/381 2019-03-14 15:48:43+00:00| published-proof-of-concept| https://t.me/SecLabNews/4478 2019-03-15...

CVE-2019-8903

creationtimestamp| type| source ---|---|--- 2019-03-12 21:39:30+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/totaljstraversal.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:19+00:00| seen|...

CVE-2018-18809

creationtimestamp| type| source ---|---|--- 2019-03-08 00:21:34+00:00| seen| https://t.me/cibsecurity/2947 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:33:37+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971751 2025-02-14 10:05:59+00:00| see...

CVE-2019-9213

creationtimestamp| type| source ---|---|--- 2019-03-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46502 2020-01-22 13:18:14+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/rdsatomicfreeopnullpointerderefprivesc.rb 2020-01-23...

CVE-2019-9194

creationtimestamp| type| source ---|---|--- 2019-03-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46481 2019-03-11 20:19:00+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/elfinderphpconnectorexiftrancmdinjection.rb 2019-03-...

CVE-2019-5786

creationtimestamp| type| source ---|---|--- 2019-03-01 23:16:24+00:00| seen| https://t.me/ctinow/8740 2019-03-06 10:58:20+00:00| exploited| https://t.me/thehackernews/213 2019-03-06 11:57:04+00:00| exploited| https://t.me/SecLabNews/4419 2019-03-06 18:07:21+00:00| exploited|...

CVE-2019-8943

creationtimestamp| type| source ---|---|--- 2019-03-01 08:59:30+00:00| published-proof-of-concept| https://t.me/antichat/3785 2019-03-01 09:58:50+00:00| seen| https://t.me/thebugbountyhunter/2368 2019-04-04 20:32:00+00:00| seen|...

CVE-2019-9482

In MISP 2.4.102, an authenticated user can view sightings that they should not be eligible for. Exploiting this requires access to the event that has received the sighting. The issue affects instances with restrictive sighting settings event only / sighting reported only...