CVE-2017-16995

creationtimestamp| type| source ---|---|--- 2018-07-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45010 2018-07-11 17:11:02+00:00| published-proof-of-concept| https://t.me/canyoupwnme/4095 2018-07-18 11:41:19+00:00| seen|...

CVE-2018-6961

creationtimestamp| type| source ---|---|--- 2018-07-02 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44959 2018-07-05 08:32:02+00:00| published-proof-of-concept| https://t.me/antichat/1694 2019-12-17 14:15:18+00:00| seen| MISP/5df8e293-8fe4-4dc0-a0c4-4c3502de0b81 2020-10-09...

CVE-2014-0130

creationtimestamp| type| source ---|---|--- 2018-06-30 21:50:00+00:00| published-proof-of-concept| https://t.me/cKure/160 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-05 02:47:53+00:00| seen| https://t.me/arpsyndicate/1372 2024-12-24 20:28:47+00:00| seen|...

CVE-2018-0296

creationtimestamp| type| source ---|---|--- 2018-06-28 09:11:54+00:00| published-proof-of-concept| https://t.me/LearnExploit/24 2018-06-28 10:12:29+00:00| exploited| https://t.me/SecLabNews/2533 2018-06-28 16:36:48+00:00| exploited| https://t.me/xakepru/3962 2018-06-29 04:00:00+00:00| seen|...

CVE-2018-9160

creationtimestamp| type| source ---|---|--- 2018-06-25 22:31:14+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/httpsickragepasswordleak.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:09+00:00|...

Design/Logic Flaw

An issue was discovered in app/Controller/UsersController.php in MISP 2.4.92. An adversary can bypass the brute-force protection by using a PUT HTTP method instead of a POST HTTP method in the login part, because this protection was only covering POST requests...

CVE-2018-12649

An issue was discovered in app/Controller/UsersController.php in MISP 2.4.92. An adversary can bypass the brute-force protection by using a PUT HTTP method instead of a POST HTTP method in the login part, because this protection was only covering POST requests...

CVE-2018-12649

An issue was discovered in app/Controller/UsersController.php in MISP 2.4.92. An adversary can bypass the brute-force protection by using a PUT HTTP method instead of a POST HTTP method in the login part, because this protection was only covering POST requests...

CVE-2018-12649

An issue was discovered in app/Controller/UsersController.php in MISP 2.4.92. An adversary can bypass the brute-force protection by using a PUT HTTP method instead of a POST HTTP method in the login part, because this protection was only covering POST requests...

CVE-2018-12649

CVE-2018-12649 affects MISP 2.4.92 in app/Controller/UsersController.php, where brute-force protection for login only covers POST requests. An adversary can bypass protection by using PUT for login, enabling potential brute-force attempts. The recorded metrics show CVSS v3 base score 9.8 (CRITICA...

CVE-2018-11646

creationtimestamp| type| source ---|---|--- 2018-06-21 21:37:11+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/webkitplus.rb 2025-01-23 20:37:20+00:00| published-proof-of-concept| Telegram/gZVW49kuYoasZTY1tITTGZ5xDPxjlw-c5GyQ-w1Z3p3ssZo 2025-02-...

CVE-2018-4233

creationtimestamp| type| source ---|---|--- 2018-06-19 04:25:59+00:00| published-proof-of-concept| https://t.me/br0wsec/46 2018-06-19 07:51:57+00:00| published-proof-of-concept| https://t.me/antichat/1610 2018-12-13 19:58:13+00:00| seen|...

CVE-2016-5734

creationtimestamp| type| source ---|---|--- 2018-06-18 14:02:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/phpmyadminnullterminationexec.rb 2025-02-06 03:13:42+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:48+00:00...

CVE-2018-10088

creationtimestamp| type| source ---|---|--- 2018-06-18 09:04:01+00:00| seen| MISP/5b2774da-6bb4-46c0-8483-43e102de0b81 2023-03-29 02:14:51+00:00| seen| https://t.me/cibsecurity/60985 2023-05-05 20:05:56+00:00| seen| Telegram/UskLUPPJsW5F-XCtAwXzv2fO1a3ScvfiV6otDT-umY 2023-05-06 00:27:24+00:00|...

CVE-2018-0824

creationtimestamp| type| source ---|---|--- 2018-06-15 22:35:54+00:00| seen| https://t.me/canyoupwnme/3973 2018-10-25 18:31:34+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/escalate/unmarshalcmdexec.rb 2024-08-02 14:37:18+00:00| exploited|...

CVE-2017-118822

creationtimestamp| type| source ---|---|--- 2018-06-14 08:44:21+00:00| seen| MISP/5b221ee1-8dcc-43cc-bb0b-681aac12042b 2020-10-09 14:27:18+00:00| seen| MISP/8775b2b9-aeeb-4fff-b4d1-b4ce5e8db73c...

CVE-2018-5002

creationtimestamp| type| source ---|---|--- 2018-06-07 16:59:13+00:00| seen| https://t.me/SecLabNews/2383 2018-06-08 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=299 2018-06-08 12:04:25+00:00| exploited| https://t.me/informationsecuritychannel/17806 2018-06-08...

CVE-2018-10583

creationtimestamp| type| source ---|---|--- 2018-06-06 16:36:03+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/fileformat/odtbadodt.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:02+00:00| seen|...

CVE-2018-4241

creationtimestamp| type| source ---|---|--- 2018-06-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44849 2020-10-09 14:05:37+00:00| seen| MISP/6d574aa3-3f1c-4275-acc4-bf5bc91f11b6...

CVE-2018-8065

creationtimestamp| type| source ---|---|--- 2018-05-31 20:06:17+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/flexensehttpserverdos.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:09+00:00| seen|...