CVE-2017-13861

creationtimestamp| type| source ---|---|--- 2017-12-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43320 2019-06-02 02:46:11+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/appleios/browser/webkitcreatethis.rb 2020-10-09 14:05:40+00:00|...

CVE-2013-2596

creationtimestamp| type| source ---|---|--- 2017-12-03 11:10:28+00:00| seen| MISP/5a23a972-e6a0-4a05-b505-4e8f02de0b81 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:33:08+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971713 2025-02-23...

CVE-2014-3153

creationtimestamp| type| source ---|---|--- 2017-12-03 11:10:28+00:00| seen| MISP/5a23a972-e6a0-4a05-b505-4e8f02de0b81 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/android/local/futexrequeue.rb 2020-10-09 17:11:57+00:00| seen|...

CVE-2013-2595

creationtimestamp| type| source ---|---|--- 2017-12-03 11:10:28+00:00| seen| MISP/5a23a972-e6a0-4a05-b505-4e8f02de0b81 2020-10-09 17:30:38+00:00| seen| MISP/ca4273b3-6a01-4306-94a5-0e8d010a3fd1 2026-07-26 07:01:56+00:00| seen| https://t.me/KaitNews/6737 2026-07-27 00:01:38+00:00| seen|...

CVE-2013-2597

creationtimestamp| type| source ---|---|--- 2017-12-03 11:10:28+00:00| seen| MISP/5a23a972-e6a0-4a05-b505-4e8f02de0b81 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-03 23:16:09+00:00| seen| https://t.me/arpsyndicate/1054 2024-12-24 20:33:09+00:00| seen|...

CVE-2012-4220

creationtimestamp| type| source ---|---|--- 2017-12-03 11:10:28+00:00| seen| MISP/5a23a972-e6a0-4a05-b505-4e8f02de0b81 2026-07-26 07:01:56+00:00| seen| https://t.me/KaitNews/6737 2026-07-27 00:01:37+00:00| seen| https://t.me/KaitNews/6737...

CVE-2015-1805

creationtimestamp| type| source ---|---|--- 2017-12-03 11:10:28+00:00| seen| MISP/5a23a972-e6a0-4a05-b505-4e8f02de0b81 2025-08-31 03:00:53+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d 2026-07-16 13:00:05+00:00| seen| https://t.me/KaitNews/185 2026-07-17 00:00:51+00:00| seen|...

CVE-2015-3636

creationtimestamp| type| source ---|---|--- 2017-12-03 11:10:28+00:00| seen| MISP/5a23a972-e6a0-4a05-b505-4e8f02de0b81 2018-04-03 20:28:49+00:00| published-proof-of-concept| https://t.me/HackerOne/1819 2018-04-03 21:53:41+00:00| published-proof-of-concept|...

CVE-2017-5816

creationtimestamp| type| source ---|---|--- 2017-11-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43198 2018-01-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43493 2018-05-29 15:50:33+00:00| seen|...

CVE-2017-5817

creationtimestamp| type| source ---|---|--- 2017-11-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43195 2018-01-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43492 2018-05-29 15:50:33+00:00| seen|...

MISP Information Disclosure Vulnerability

MISP is a suite of open source software solutions for collecting, storing, distributing and sharing cybersecurity metrics and threats cybersecurity event analysis and malware analysis. A security vulnerability exists in the 'adminedit' function of the app/Controller/UsersController.php file in MI...

CVE-2017-16946

The adminedit function in app/Controller/UsersController.php in MISP 2.4.82 mishandles the enablepassword field, which allows admins to discover a hashed password by reading the audit log...

CVE-2017-16946

The adminedit function in app/Controller/UsersController.php in MISP 2.4.82 mishandles the enablepassword field, which allows admins to discover a hashed password by reading the audit log...

CVE-2017-16946

CVE-2017-16946 affects MISP version 2.4.82 where the admin_edit function in app/Controller/UsersController.php mishandles the enable_password field, enabling admins to read the audit log and discover a hashed password. The vulnerability description is consistently reported across multiple feeds (...

CVE-2017-16946

The adminedit function in app/Controller/UsersController.php in MISP 2.4.82 mishandles the enablepassword field, which allows admins to discover a hashed password by reading the audit log...

CVE-2017-16994

creationtimestamp| type| source ---|---|--- 2017-11-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43178 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:55+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd...

CVE-2017-6168

creationtimestamp| type| source ---|---|--- 2017-11-19 13:57:33+00:00| seen| https://t.me/canyoupwnme/2682 2017-11-20 13:06:20+00:00| seen| https://t.me/HackerOne/1296 2018-05-29 15:50:33+00:00| seen|...

CVE-2017-11882

creationtimestamp| type| source ---|---|--- 2017-11-15 11:11:01+00:00| exploited| https://t.me/informationsecuritychannel/11068 2017-11-15 18:56:28+00:00| seen| https://t.me/cybershit/173 2017-11-15 21:50:34+00:00| exploited| https://t.me/informationsecuritychannel/11105 2017-11-21 07:39:51+00:00...

CVE-2017-16802

In the sharingGroupPopulateOrganisations function in app/webroot/js/misp.js in MISP 2.4.82, there is XSS via a crafted organisation name that is manually added...

Design/Logic Flaw

In the sharingGroupPopulateOrganisations function in app/webroot/js/misp.js in MISP 2.4.82, there is XSS via a crafted organisation name that is manually added...