CVE-2016-4997

creationtimestamp| type| source ---|---|--- 2016-09-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40435 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilterprivescipv4.rb 2025-02-06 03:13:42+00:00|...

CVE-2016-0800

creationtimestamp| type| source ---|---|--- 2016-09-21 19:52:02+00:00| published-proof-of-concept| https://t.me/bugbountychannel/185 2017-10-09 18:29:26+00:00| seen| https://t.me/informationsecuritychannel/9760 2022-11-07 22:22:31+00:00| seen|...

CVE-2016-3351

creationtimestamp| type| source ---|---|--- 2016-09-14 16:34:32+00:00| exploited| https://t.me/itsecalert/38 2016-09-15 14:32:32+00:00| exploited| https://t.me/xakepru/913 2016-09-16 11:59:44+00:00| seen| MISP/57dbde53-bfe8-4aaa-99b9-03ffbce2ab96 2023-03-09 09:29:35+00:00| seen|...

CVE-2015-5721

Malware Information Sharing Platform MISP before 2.3.90 allows remote attackers to conduct PHP object injection attacks via crafted serialized data, related to TemplatesController.php and populateeventfromtemplateattributes.ctp...

CVE-2015-5720

Multiple cross-site scripting XSS vulnerabilities in the template-creation feature in Malware Information Sharing Platform MISP before 2.3.90 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 add.ctp, 2 edit.ctp, and 3 ajaxification.js...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the template-creation feature in Malware Information Sharing Platform MISP before 2.3.90 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 add.ctp, 2 edit.ctp, and 3 ajaxification.js...

Directory traversal

app/Controller/TemplatesController.php in Malware Information Sharing Platform MISP before 2.3.92 does not properly restrict filenames under the tmp/files/ directory, which has unspecified impact and attack vectors...

CVE-2015-5719

app/Controller/TemplatesController.php in Malware Information Sharing Platform MISP before 2.3.92 does not properly restrict filenames under the tmp/files/ directory, which has unspecified impact and attack vectors...

Design/Logic Flaw

Malware Information Sharing Platform MISP before 2.3.90 allows remote attackers to conduct PHP object injection attacks via crafted serialized data, related to TemplatesController.php and populateeventfromtemplateattributes.ctp...

CVE-2015-5721

Malware Information Sharing Platform MISP before 2.3.90 allows remote attackers to conduct PHP object injection attacks via crafted serialized data, related to TemplatesController.php and populateeventfromtemplateattributes.ctp...

CVE-2015-5721

The vulnerability CVE-2015-5721 affects Malware Information Sharing Platform (MISP) before 2.3.90. A PHP object injection flaw exists via crafted serialized data, related to TemplatesController.php and populate_event_from_template_attributes.ctp. Remote attackers could exploit this to execute cod...

CVE-2015-5720

Malware Information Sharing Platform (MISP) versions prior to 2.3.90 expose multiple cross-site scripting (XSS) vulnerabilities in the template-creation feature. Attack vectors involve add.ctp, edit.ctp, and ajaxification.js, enabling remote attackers to inject arbitrary web script or HTML. The p...

CVE-2015-5719

CVE-2015-5719 affects Malware Information Sharing Platform (MISP) before 2.3.92. The issue is in app/Controller/TemplatesController.php where filenames under tmp/files/ are not properly restricted. CNVD-2016-07269 notes this allows a local attacker to perform a symbolic link attack to overwrite a...

CVE-2015-5720

Multiple cross-site scripting XSS vulnerabilities in the template-creation feature in Malware Information Sharing Platform MISP before 2.3.90 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 add.ctp, 2 edit.ctp, and 3 ajaxification.js...

CVE-2015-5719

app/Controller/TemplatesController.php in Malware Information Sharing Platform MISP before 2.3.92 does not properly restrict filenames under the tmp/files/ directory, which has unspecified impact and attack vectors...

CVE-2016-4655

creationtimestamp| type| source ---|---|--- 2016-08-25 20:59:54+00:00| seen| MISP/57bf5c07-6b40-428e-8f68-4a9a02de0b81 2016-08-26 09:58:27+00:00| seen| MISP/57c0123c-d100-43a8-b874-54a8bce2ab96 2018-06-04 23:30:25+00:00| seen|...

CVE-2016-4657

creationtimestamp| type| source ---|---|--- 2016-08-25 20:59:53+00:00| seen| MISP/57bf5c07-6b40-428e-8f68-4a9a02de0b81 2016-08-26 09:58:54+00:00| seen| MISP/57c0123c-d100-43a8-b874-54a8bce2ab96 2017-03-12 17:11:06+00:00| published-proof-of-concept| https://t.me/alexlitreevchannel/62 2017-03-13...

CVE-2015-8351

creationtimestamp| type| source ---|---|--- 2016-08-23 13:24:04+00:00| seen| MISP/57b5892a-bfd8-49f1-8d6b-4a3d950d210f 2025-08-22 03:00:05+00:00| published-proof-of-concept| Telegram/yRRSYPm0RgGpdp4nWmrwBynYjznhWXtD04IFm92Z71qvTGs 2026-07-29 12:00:33+00:00| seen| https://t.me/CVEhub/12425...

CVE-2015-1397

creationtimestamp| type| source ---|---|--- 2016-08-23 13:20:51+00:00| seen| MISP/57b5892a-bfd8-49f1-8d6b-4a3d950d210f 2025-08-30 21:02:24+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lxnhua7kpl2g...

CVE-2016-6897

creationtimestamp| type| source ---|---|--- 2016-08-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40288 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/wordpressdirectorytraversaldos.rb 2025-02-06...