5403 matches found
Open redirect
In MISP 2.4.102, an authenticated user can view sightings that they should not be eligible for. Exploiting this requires access to the event that has received the sighting. The issue affects instances with restrictive sighting settings event only / sighting reported only...
CVE-2019-9482
In MISP 2.4.102, an authenticated user can view sightings that they should not be eligible for. Exploiting this requires access to the event that has received the sighting. The issue affects instances with restrictive sighting settings event only / sighting reported only...
CVE-2019-9482
In MISP 2.4.102, an authenticated user can view sightings that they should not be eligible for. Exploiting this requires access to the event that has received the sighting. The issue affects instances with restrictive sighting settings event only / sighting reported only...
CVE-2019-9482
In MISP 2.4.102, an authenticated user can view sightings they should not be eligible for. Exploitation requires access to the event that received the sighting and affects instances with restrictive sighting settings (event only / sighting reported only). The vulnerability is categorized as an in...
CVE-2017-7255
creationtimestamp| type| source ---|---|--- 2019-02-27 17:24:14+00:00| exploited| https://t.me/informationsecuritychannel/25068 2020-10-09 17:08:43+00:00| seen| MISP/a2e00c4b-411d-4373-9822-cf89ee87052f...
CVE-2018-20250
creationtimestamp| type| source ---|---|--- 2019-02-21 09:29:06+00:00| exploited| https://t.me/DC8044Info/97 2019-02-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46552 2019-03-20 05:01:35+00:00| exploited| https://t.me/informationsecuritychannel/25668 2019-04-10 17:08:04+00:0...
CVE-2019-6340
creationtimestamp| type| source ---|---|--- 2019-02-21 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=366 2019-02-21 10:04:49+00:00| seen| https://t.me/SecLabNews/4314 2019-02-21 16:28:00+00:00| seen| https://t.me/CyberGovIL/361 2019-02-22 14:49:00+00:00| seen|...
CVE-2018-17888
creationtimestamp| type| source ---|---|--- 2019-02-20 15:25:22+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/nuuocmsbruteforce.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:06+00:00| seen|...
CVE-2018-17936
creationtimestamp| type| source ---|---|--- 2019-02-20 13:59:43+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/nuuo/nuuocmsfu.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:06+00:00| seen|...
CVE-2018-17934
creationtimestamp| type| source ---|---|--- 2019-02-20 13:16:34+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/nuuocmsfiledownload.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:06+00:00| seen|...
CVE-2019-1003000
creationtimestamp| type| source ---|---|--- 2019-02-19 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46427 2019-02-20 11:38:16+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/2325 2019-03-18 12:37:31+00:00| seen|...
MISP 2.4.97 SQL Injection / Command Injection
--coding:utf-8-- Exploit Title: SQL command execution via command injection in STIX module Date: 2019-17-02 Exploit Author: Tm9jdGlz Vendor Homepage: https://www.misp-project.org/ Software link: https://www.misp-project.org/download/ Version: 2.4.90 - 2.4.99 Tested on: 2.4.97 CVE: CVE-2018-19908...
MISP 2.4.97 - SQL Command Execution via Command Injection in STIX Module
MISP 2.4.97 - SQL Command Execution via Command Injection in STIX Module --coding:utf-8-- Exploit Title: SQL command execution via command injection in STIX module Date: 2019-17-02 Exploit Author: Tm9jdGlz Vendor Homepage: https://www.misp-project.org/ Software link:...
MISP 2.4.97 - SQL Command Execution via Command Injection in STIX Module Exploit
Exploit for php platform in category web applications --coding:utf-8-- Exploit Title: SQL command execution via command injection in STIX module Exploit Author: Tm9jdGlz Vendor Homepage: https://www.misp-project.org/ Software link: https://www.misp-project.org/download/ Version: 2.4.90 - 2.4.99...
MISP 2.4.97 - SQL Command Execution via Command Injection in STIX Module
--coding:utf-8-- Exploit Title: SQL command execution via command injection in STIX module Date: 2019-17-02 Exploit Author: Tm9jdGlz Vendor Homepage: https://www.misp-project.org/ Software link: https://www.misp-project.org/download/ Version: 2.4.90 - 2.4.99 Tested on: 2.4.97 CVE: CVE-2018-19908...
CVE-2019-6527
creationtimestamp| type| source ---|---|--- 2019-02-13 15:31:18+00:00| seen| MISP/5c6437b8-9200-4ca6-9b7b-6fc50a021402...
CVE-2019-6533
creationtimestamp| type| source ---|---|--- 2019-02-13 15:31:18+00:00| seen| MISP/5c6437b8-9200-4ca6-9b7b-6fc50a021402...
CVE-2019-7385
creationtimestamp| type| source ---|---|--- 2019-02-13 14:45:38+00:00| seen| MISP/5c642cfd-8f6c-4a7e-b68b-6ed10a021402...