CVE-2018-4404

creationtimestamp| type| source ---|---|--- 2018-12-13 19:58:13+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/browser/safariproxyobjecttypeconfusion.rb 2018-12-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45998 2024-05-31...

CVE-2018-8626

creationtimestamp| type| source ---|---|--- 2018-12-12 21:01:49+00:00| seen| https://t.me/defconnews/278 2018-12-12 22:04:26+00:00| seen| https://t.me/canyoupwnme/4862 2018-12-26 17:47:28+00:00| seen| https://t.me/alexmakus/2567 2018-12-26 17:48:20+00:00| seen| https://t.me/antichat/3145 2019-01-...

CVE-2018-8611

creationtimestamp| type| source ---|---|--- 2018-12-12 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=347 2018-12-12 05:50:02+00:00| seen| https://t.me/securixykz/317 2018-12-12 08:38:31+00:00| exploited| https://t.me/SecLabNews/3830 2018-12-12 09:37:10+00:00| seen|...

CVE-2018-17207

creationtimestamp| type| source ---|---|--- 2018-12-11 18:12:09+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/php/wpduplicatorcodeinject.rb 2018-12-12 15:33:01+00:00| published-proof-of-concept| https://t.me/defconnews/257 2025-02-06 03:13:43+00:00...

CVE-2018-10080

creationtimestamp| type| source ---|---|--- 2018-12-11 16:08:58+00:00| seen| MISP/5c0fdf07-0608-4e51-9884-1f070a021402 2018-12-13 08:43:56+00:00| seen| https://t.me/securixykz/328...

CVE-2015-5996

creationtimestamp| type| source ---|---|--- 2018-12-11 16:08:58+00:00| seen| MISP/5c0fdf07-0608-4e51-9884-1f070a021402 2018-12-13 08:43:56+00:00| seen| https://t.me/securixykz/328...

CVE-2018-1002105

creationtimestamp| type| source ---|---|--- 2018-12-07 12:04:22+00:00| published-proof-of-concept| https://t.me/antichat/2932 2018-12-07 13:01:03+00:00| published-proof-of-concept| https://t.me/canyoupwnme/4848 2018-12-07 15:46:04+00:00| seen| MISP/5c0a9495-4b38-4815-a223-767d0a021402 2018-12-09...

CVE-2018-4021

creationtimestamp| type| source ---|---|--- 2018-12-06 17:58:41+00:00| seen| MISP/5c096266-ed20-42e5-a389-515d0a021402...

CVE-2018-4020

creationtimestamp| type| source ---|---|--- 2018-12-06 17:58:41+00:00| seen| MISP/5c096266-ed20-42e5-a389-515d0a021402 2022-01-28 05:51:53+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/125...

CVE-2018-4019

creationtimestamp| type| source ---|---|--- 2018-12-06 17:58:41+00:00| seen| MISP/5c096266-ed20-42e5-a389-515d0a021402 2022-01-28 05:51:53+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/125...

CVE-2018-19908

An issue was discovered in MISP 2.4.9x before 2.4.99. In app/Model/Event.php the STIX 1 import code, an unescaped filename string is used to construct a shell command. This vulnerability can be abused by a malicious authenticated user to execute arbitrary commands by tweaking the original filenam...

Command injection

An issue was discovered in MISP 2.4.9x before 2.4.99. In app/Model/Event.php the STIX 1 import code, an unescaped filename string is used to construct a shell command. This vulnerability can be abused by a malicious authenticated user to execute arbitrary commands by tweaking the original filenam...

CVE-2018-19908

An issue was discovered in MISP 2.4.9x before 2.4.99. In app/Model/Event.php the STIX 1 import code, an unescaped filename string is used to construct a shell command. This vulnerability can be abused by a malicious authenticated user to execute arbitrary commands by tweaking the original filenam...

CVE-2018-19908

Affected software: MISP 2.4.9x (pre-2.4.99). In the STIX 1 import path, the code in app/Model/Event.php uses an unescaped filename string to build a shell command. This enables an authenticated attacker to modify the STIX import filename to inject and execute arbitrary commands. Exploitation deta...

CVE-2018-19908

An issue was discovered in MISP 2.4.9x before 2.4.99. In app/Model/Event.php the STIX 1 import code, an unescaped filename string is used to construct a shell command. This vulnerability can be abused by a malicious authenticated user to execute arbitrary commands by tweaking the original filenam...

CVE-2018-15982

creationtimestamp| type| source ---|---|--- 2018-12-06 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=345 2018-12-06 09:05:42+00:00| exploited| https://t.me/SecLabNews/3784 2018-12-06 11:35:13+00:00| exploited| https://t.me/xakepru/5343 2018-12-06 12:30:32+00:00| exploite...

CVE-2017-12557

creationtimestamp| type| source ---|---|--- 2018-12-03 23:17:23+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hpimcjavadeserialize.rb 2018-12-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45952 2024-01-07 02:31:02+00:00|...

CVE-2018-11770

creationtimestamp| type| source ---|---|--- 2018-11-29 20:08:37+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/sparkunauthrce.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:03+00:00| seen|...

CVE-2018-19207

creationtimestamp| type| source ---|---|--- 2018-11-29 19:43:11+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/wpgdprcomplianceprivesc.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:06+00:00| see...

CVE-2018-19518

creationtimestamp| type| source ---|---|--- 2018-11-27 22:53:35+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/phpimapopenrce.rb 2018-11-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45914 2021-03-01 11:00:27+00:00| seen|...