CVE-2018-6926

In app/Controller/ServersController.php in MISP 2.4.87, a server setting permitted the override of a path variable on certain Red Hed Enterprise Linux and CentOS systems where rhshellfix was enabled, and consequently allowed site admins to inject arbitrary OS commands. The impact is limited by th...

CVE-2017-9232

creationtimestamp| type| source ---|---|--- 2018-02-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44023 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/jujurunagentprivesc.rb 2025-02-06 03:13:43+00:00|...

CVE-2017-18046

creationtimestamp| type| source ---|---|--- 2018-02-11 13:20:49+00:00| seen| MISP/5a8042be-fe8c-4071-a140-414502de0b81 2025-03-15 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-03-15 2026-03-23 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...

CVE-2018-6376

creationtimestamp| type| source ---|---|--- 2018-02-09 18:12:17+00:00| seen| https://t.me/canyoupwnme/3223 2021-01-07 21:17:36+00:00| published-proof-of-concept| Telegram/ELp7-iIDiecmdH1RYNFuXslf5yrqKKOhnw0CBvUrc8AgfQ 2023-10-25 07:54:46+00:00| published-proof-of-concept|...

CVE-2017-11467

creationtimestamp| type| source ---|---|--- 2018-02-02 15:26:37+00:00| exploited| https://t.me/SecLabNews/1444 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/orientdbexec.rb 2020-10-09 15:17:37+00:00| seen|...

CVE-2018-4878

creationtimestamp| type| source ---|---|--- 2018-02-02 07:54:56+00:00| exploited| https://t.me/SecLabNews/1435 2018-02-03 11:51:46+00:00| exploited| https://t.me/informationsecuritychannel/12804 2018-02-03 13:10:56+00:00| exploited| https://t.me/informationsecuritychannel/12807 2018-02-03...

CVE-2016-1542

creationtimestamp| type| source ---|---|--- 2018-02-01 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43939 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/bmcserverautomationrscdnshrce.rb 2025-02-06...

CVE-2016-1543

creationtimestamp| type| source ---|---|--- 2018-02-01 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43939 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/bmcserverautomationrscdnshrce.rb 2025-02-06...

CVE-2018-5711

creationtimestamp| type| source ---|---|--- 2018-01-22 12:56:46+00:00| published-proof-of-concept| https://t.me/news4hack/31 2024-11-14 06:07:44+00:00| seen| MISP/a57f7f1a-11dd-462d-81cd-6cf385407046 2026-07-26 00:00:11+00:00| seen| Telegram/bNjb-vyQBQI1oInEWRCRvDmKkFJUwtCpxCihTDPD4pQKrg 2026-07-...

CVE-2014-4444

creationtimestamp| type| source ---|---|--- 2018-01-18 09:06:56+00:00| seen| MISP/5a60639d-e498-4c86-b6ad-1fea950d210f 2018-03-14 14:23:11+00:00| seen| MISP/5aa93037-4a24-4259-a3c0-425b950d210f...

CVE-2018-0802

creationtimestamp| type| source ---|---|--- 2018-01-12 22:03:40+00:00| published-proof-of-concept| https://t.me/canyoupwnme/3025 2018-03-22 14:09:48+00:00| seen| MISP/5ab3b89e-7514-41b4-b842-402f02de0b81 2018-03-27 09:03:26+00:00| seen| MISP/5aba062a-8118-4885-afe0-469402de0b81 2018-03-27...

CVE-2017-15318

creationtimestamp| type| source ---|---|--- 2018-01-09 09:34:13+00:00| seen| MISP/5a548a90-fc94-4911-a970-400202de0b81...

CVE-2016-5535

creationtimestamp| type| source ---|---|--- 2018-01-05 01:08:45+00:00| seen| MISP/5a4ecbf4-1b24-4a5f-9f4d-4b7c98036464 2024-01-01 06:02:47+00:00| seen| https://t.me/arpsyndicate/2302 2026-07-26 07:02:20+00:00| seen| https://t.me/KaitNews/425 2026-07-27 00:01:56+00:00| seen| https://t.me/KaitNews/...

CVE-2016-3510

creationtimestamp| type| source ---|---|--- 2018-01-05 01:08:45+00:00| seen| MISP/5a4ecbf4-1b24-4a5f-9f4d-4b7c98036464 2019-04-01 19:20:28+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/weblogicdeserializemarshalledobject.rb 2023-11-10...

CVE-2015-4852

creationtimestamp| type| source ---|---|--- 2018-01-05 01:08:44+00:00| seen| MISP/5a4ecbf4-1b24-4a5f-9f4d-4b7c98036464 2019-03-26 22:18:44+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/weblogicdeserializerawobject.rb 2019-03-28 00:00:00+00:00|...

CVE-2017-3248

creationtimestamp| type| source ---|---|--- 2018-01-05 01:08:44+00:00| seen| MISP/5a4ecbf4-1b24-4a5f-9f4d-4b7c98036464 2018-09-19 17:28:51+00:00| seen| MISP/5ba281fe-cc88-4bf3-a9ef-3c290a021402 2019-04-01 23:24:03+00:00| seen|...

CVE-2017-16666

creationtimestamp| type| source ---|---|--- 2018-01-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43430 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/xplicoexec.rb 2024-06-22 09:27:44+00:00|...

CVE-2018-3811

creationtimestamp| type| source ---|---|--- 2018-01-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43420 2024-06-22 09:33:24+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/35 2024-11-14 06:07:30+00:00| seen| MISP/fb459eb4-e55f-4828-b2f7-b9f8f11ef3c9...

CVE-2017-5255

creationtimestamp| type| source ---|---|--- 2018-01-01 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43413 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/epmp1000pingcmdshell.rb 2018-05-29 15:50:33+00:00| see...

CVE-2017-7411

creationtimestamp| type| source ---|---|--- 2017-12-19 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43374 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/tuleaprestunserializeexec.rb 2025-02-06...