CVE-2018-0798

creationtimestamp| type| source ---|---|--- 2019-07-03 21:31:08+00:00| exploited| https://t.me/informationsecuritychannel/29050 2019-07-04 20:31:13+00:00| exploited| https://t.me/antichat/5730 2019-07-04 22:14:02+00:00| exploited| https://t.me/canyoupwnme/5705 2019-08-06 09:07:33+00:00| seen|...

CVE-2017-11774

creationtimestamp| type| source ---|---|--- 2019-07-03 05:40:32+00:00| seen| MISP/5d1c3fa4-8548-43ed-931c-48ed950d210f 2019-07-03 08:22:13+00:00| exploited| https://t.me/informationsecuritychannel/29027 2019-07-03 19:40:21+00:00| exploited| https://t.me/BleepingComputer/5401 2019-07-04...

CVE-2019-1619

creationtimestamp| type| source ---|---|--- 2019-06-30 14:49:06+00:00| seen| https://t.me/CyberGovIL/511 2019-07-01 12:04:50+00:00| seen| https://t.me/CyberGovIL/513 2019-09-02 15:56:25+00:00| seen|...

CVE-2019-12477

creationtimestamp| type| source ---|---|--- 2019-06-28 17:20:01+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/suprasmartcloudtvrfi.rb 2024-11-14 06:09:57+00:00| seen| MISP/fa925411-fecf-472d-b553-585ccffeeaf4 2025-02-06 03:13:43+00:00| seen|...

CVE-2019-1620

creationtimestamp| type| source ---|---|--- 2019-06-27 10:42:33+00:00| seen| https://t.me/informationsecuritychannel/28840 2019-06-30 14:49:06+00:00| seen| https://t.me/CyberGovIL/511 2019-07-01 12:04:50+00:00| seen| https://t.me/CyberGovIL/513 2019-09-02 15:56:25+00:00| seen|...

CVE-2019-11708

creationtimestamp| type| source ---|---|--- 2019-06-21 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=401 2019-06-21 11:20:13+00:00| exploited| https://t.me/ctinow/12878 2019-06-21 14:37:08+00:00| seen| https://t.me/SecLabNews/5195 2019-08-15 10:12:54+00:00| exploited|...

CVE-2019-11707

creationtimestamp| type| source ---|---|--- 2019-06-19 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=399 2019-06-19 08:16:43+00:00| exploited| https://t.me/SecLabNews/5167 2019-06-20 12:01:18+00:00| exploited| https://t.me/ctinow/12815 2019-06-20 18:02:35+00:00| seen|...

CVE-2015-0097

creationtimestamp| type| source ---|---|--- 2019-06-18 06:53:33+00:00| published-proof-of-concept| https://t.me/Pen7esting/209 2020-10-09 16:45:56+00:00| seen| MISP/b3670ebe-02cd-42bc-a70a-abbd8349fb0a 2025-08-31 03:13:03+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...

CVE-2016-7193

creationtimestamp| type| source ---|---|--- 2019-06-18 06:53:33+00:00| published-proof-of-concept| https://t.me/Pen7esting/209 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:27:23+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971309 2025-02-23...

CVE-2015-1642

creationtimestamp| type| source ---|---|--- 2019-06-18 06:53:33+00:00| published-proof-of-concept| https://t.me/Pen7esting/209 2021-10-01 10:11:31+00:00| published-proof-of-concept| https://t.me/cKure/7387 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04...

CVE-2019-12868

app/Model/Server.php in MISP 2.4.109 allows remote command execution by a super administrator because the PHP fileexists function is used with user-controlled entries, and phar:// URLs trigger deserialization...

CVE-2019-12868

app/Model/Server.php in MISP 2.4.109 allows remote command execution by a super administrator because the PHP fileexists function is used with user-controlled entries, and phar:// URLs trigger deserialization...

CVE-2019-12181

creationtimestamp| type| source ---|---|--- 2019-06-18 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47009 2019-07-01 21:16:38+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/servuftpserverprepareinstallationprivesc.rb 2019-07-...

CVE-2019-12868

CVE-2019-12868 (MISP 2.4.109) is a remote command execution vulnerability in the PHP component at app/Model/Server.php . The root cause is the use of PHP’s file_exists with user-controlled entries combined with phar:// URLs, which can trigger deserialization and allow a super administrator to exe...

CVE-2019-12868

app/Model/Server.php in MISP 2.4.109 allows remote command execution by a super administrator because the PHP fileexists function is used with user-controlled entries, and phar:// URLs trigger deserialization...

PT-2019-12993 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP version 2.4.109 Description: The issue allows remote command execution by a super administrator due to the use of the PHP file exists function with user-controlled entries. Specifically, phar:// URLs can trigger deserialization, leading ...

CVE-2019-1040

creationtimestamp| type| source ---|---|--- 2019-06-14 09:16:51+00:00| published-proof-of-concept| https://t.me/canyoupwnme/5627 2019-06-14 12:15:26+00:00| published-proof-of-concept| https://t.me/antichat/5409 2019-06-15 11:10:30+00:00| published-proof-of-concept| https://t.me/misteam/97...

CVE-2010-5330

creationtimestamp| type| source ---|---|--- 2019-06-12 00:30:28+00:00| seen| https://t.me/cibsecurity/4851 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:30:35+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971521 2025-02-23 02:10:01+00:00| see...

CVE-2013-7471

creationtimestamp| type| source ---|---|--- 2019-06-12 00:30:27+00:00| seen| https://t.me/cibsecurity/4850 2025-03-03 10:15:47+00:00| seen| MISP/28347c8a-8fa9-4d49-bd73-98a955d83c02 2025-03-04 04:19:36+00:00| seen| MISP/28347c8a-8fa9-4d49-bd73-98a955d83c02 2026-07-16 12:15:02+00:00| seen|...

CVE-2017-18377

creationtimestamp| type| source ---|---|--- 2019-06-12 00:30:26+00:00| published-proof-of-concept| https://t.me/cibsecurity/4848 2020-10-15 15:07:03+00:00| seen| MISP/cbd9bbb3-3f53-4610-9d91-9191ff0a9ca8 2020-10-16 06:56:57+00:00| seen| MISP/25aef508-b116-4d75-84b2-b6ceff906e44 2026-07-16...