CVE-2016-6433

creationtimestamp| type| source ---|---|--- 2016-10-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40463 2017-01-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41041 2018-05-29 15:50:33+00:00| seen|...

CVE-2016-1240

creationtimestamp| type| source ---|---|--- 2016-10-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40450 2016-10-03 23:59:19+00:00| seen| https://t.me/FullDisclosure/121 2016-10-26 23:42:50+00:00| seen| https://t.me/FullDisclosure/210 2023-02-06 14:21:33+00:00| seen|...

CVE-2016-0189

creationtimestamp| type| source ---|---|--- 2016-10-02 16:51:25+00:00| seen| MISP/57f12c6a-5864-4abb-8207-5a60646d1a36 2017-08-23 20:52:05+00:00| published-proof-of-concept| https://t.me/SHATOOB/1973 2017-08-30 07:57:15+00:00| seen| MISP/59a66b5f-28b0-45c2-8bf6-06bcbce2ab96 2018-03-27...

CVE-2016-4997

creationtimestamp| type| source ---|---|--- 2016-09-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40435 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilterprivescipv4.rb 2025-02-06 03:13:42+00:00|...

CVE-2016-0800

creationtimestamp| type| source ---|---|--- 2016-09-21 19:52:02+00:00| published-proof-of-concept| https://t.me/bugbountychannel/185 2017-10-09 18:29:26+00:00| seen| https://t.me/informationsecuritychannel/9760 2022-11-07 22:22:31+00:00| seen|...

CVE-2016-3351

creationtimestamp| type| source ---|---|--- 2016-09-14 16:34:32+00:00| exploited| https://t.me/itsecalert/38 2016-09-15 14:32:32+00:00| exploited| https://t.me/xakepru/913 2016-09-16 11:59:44+00:00| seen| MISP/57dbde53-bfe8-4aaa-99b9-03ffbce2ab96 2023-03-09 09:29:35+00:00| seen|...

CVE-2015-5721

Malware Information Sharing Platform MISP before 2.3.90 allows remote attackers to conduct PHP object injection attacks via crafted serialized data, related to TemplatesController.php and populateeventfromtemplateattributes.ctp...

CVE-2015-5720

Multiple cross-site scripting XSS vulnerabilities in the template-creation feature in Malware Information Sharing Platform MISP before 2.3.90 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 add.ctp, 2 edit.ctp, and 3 ajaxification.js...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the template-creation feature in Malware Information Sharing Platform MISP before 2.3.90 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 add.ctp, 2 edit.ctp, and 3 ajaxification.js...

CVE-2015-5719

app/Controller/TemplatesController.php in Malware Information Sharing Platform MISP before 2.3.92 does not properly restrict filenames under the tmp/files/ directory, which has unspecified impact and attack vectors...

Directory traversal

app/Controller/TemplatesController.php in Malware Information Sharing Platform MISP before 2.3.92 does not properly restrict filenames under the tmp/files/ directory, which has unspecified impact and attack vectors...

Design/Logic Flaw

Malware Information Sharing Platform MISP before 2.3.90 allows remote attackers to conduct PHP object injection attacks via crafted serialized data, related to TemplatesController.php and populateeventfromtemplateattributes.ctp...

CVE-2015-5721

Malware Information Sharing Platform MISP before 2.3.90 allows remote attackers to conduct PHP object injection attacks via crafted serialized data, related to TemplatesController.php and populateeventfromtemplateattributes.ctp...

CVE-2015-5719

CVE-2015-5719 affects Malware Information Sharing Platform (MISP) before 2.3.92. The issue is in app/Controller/TemplatesController.php where filenames under tmp/files/ are not properly restricted. CNVD-2016-07269 notes this allows a local attacker to perform a symbolic link attack to overwrite a...

CVE-2015-5720

Malware Information Sharing Platform (MISP) versions prior to 2.3.90 expose multiple cross-site scripting (XSS) vulnerabilities in the template-creation feature. Attack vectors involve add.ctp, edit.ctp, and ajaxification.js, enabling remote attackers to inject arbitrary web script or HTML. The p...

CVE-2015-5720

Multiple cross-site scripting XSS vulnerabilities in the template-creation feature in Malware Information Sharing Platform MISP before 2.3.90 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 add.ctp, 2 edit.ctp, and 3 ajaxification.js...

CVE-2015-5719

app/Controller/TemplatesController.php in Malware Information Sharing Platform MISP before 2.3.92 does not properly restrict filenames under the tmp/files/ directory, which has unspecified impact and attack vectors...

CVE-2015-5721

The vulnerability CVE-2015-5721 affects Malware Information Sharing Platform (MISP) before 2.3.90. A PHP object injection flaw exists via crafted serialized data, related to TemplatesController.php and populate_event_from_template_attributes.ctp. Remote attackers could exploit this to execute cod...

CVE-2016-4655

creationtimestamp| type| source ---|---|--- 2016-08-25 20:59:54+00:00| seen| MISP/57bf5c07-6b40-428e-8f68-4a9a02de0b81 2016-08-26 09:58:27+00:00| seen| MISP/57c0123c-d100-43a8-b874-54a8bce2ab96 2018-06-04 23:30:25+00:00| seen|...

CVE-2016-4657

creationtimestamp| type| source ---|---|--- 2016-08-25 20:59:53+00:00| seen| MISP/57bf5c07-6b40-428e-8f68-4a9a02de0b81 2016-08-26 09:58:54+00:00| seen| MISP/57c0123c-d100-43a8-b874-54a8bce2ab96 2017-03-12 17:11:06+00:00| published-proof-of-concept| https://t.me/alexlitreevchannel/62 2017-03-13...