CVE-2024-53948

creationtimestamp| type| source ---|---|--- 2024-12-09 16:22:17+00:00| seen| https://t.me/cvedetector/12394 2025-09-16 23:16:38+00:00| seen| MISP/be792712-f638-4d7d-b62d-4f5032e86764 2025-09-18 16:44:36+00:00| seen| MISP/be792712-f638-4d7d-b62d-4f5032e86764...

CVE-2024-54674

app/View/GalaxyClusters/clusterexportmispgalaxy.ctp in MISP through 2.5.2 has stored XSS when exporting custom clusters into the misp-galaxy format...

CVE-2024-54675

app/webroot/js/workflows-editor/workflows-editor.js in MISP through 2.5.2 has stored XSS in the editor interface for an ad-hoc workflow...

CVE-2024-45841

creationtimestamp| type| source ---|---|--- 2024-12-04 15:02:29+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113595157623757307 2024-12-05 11:21:47+00:00| exploited| https://t.me/itsecnews/4902 2024-12-05 12:50:32+00:00| seen| https://t.me/cvedetector/12066 2024-12-05...

CVE-2024-54674

app/View/GalaxyClusters/clusterexportmispgalaxy.ctp in MISP through 2.5.2 has stored XSS when exporting custom clusters into the misp-galaxy format...

CVE-2024-54674

app/View/GalaxyClusters/clusterexportmispgalaxy.ctp in MISP through 2.5.2 has stored XSS when exporting custom clusters into the misp-galaxy format...

CVE-2024-54674

CVE-2024-54674 affects MISP up to version 2.5.2, where a stored XSS flaw exists in the cluster export path (app/View/GalaxyClusters/cluster_export_misp_galaxy.ctp) when exporting custom clusters to the misp-galaxy format. The vulnerability stems from stored XSS in the export routine; no exploitat...

CVE-2024-54675

app/webroot/js/workflows-editor/workflows-editor.js in MISP through 2.5.2 has stored XSS in the editor interface for an ad-hoc workflow...

CVE-2024-54674

app/View/GalaxyClusters/clusterexportmispgalaxy.ctp in MISP through 2.5.2 has stored XSS when exporting custom clusters into the misp-galaxy format...

CVE-2024-54675

CVE-2024-54675 affects MISP up to version 2.5.2, with a stored cross-site scripting (XSS) flaw in the editor interface (app/webroot/js/workflows-editor/workflows-editor.js) used for ad-hoc workflows. The root cause is a stored XSS vulnerability in the editor that can impact users who load the aff...

MISP 安全漏洞

MISP is an open source software solution from MISP Open Source. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP 2.5.2 and earlier versions,...

CVE-2024-54675

app/webroot/js/workflows-editor/workflows-editor.js in MISP through 2.5.2 has stored XSS in the editor interface for an ad-hoc workflow...

CVE-2024-54675

app/webroot/js/workflows-editor/workflows-editor.js in MISP through 2.5.2 has stored XSS in the editor interface for an ad-hoc workflow...

CVE-2024-42449

creationtimestamp| type| source ---|---|--- 2024-12-03 21:45:08+00:00| seen| https://infosec.exchange/users/edwardk/statuses/113591078514826699 2024-12-04 01:42:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113592013388424843 2024-12-04 04:12:24+00:00| seen|...

CVE-2024-11680

creationtimestamp| type| source ---|---|--- 2024-11-21 17:59:45+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/projectsendunauthrce.rb 2024-11-26 09:58:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113548665618022004 2024-11-27...

CVE-2024-47407

creationtimestamp| type| source ---|---|--- 2024-11-21 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-326-07 2025-02-11 08:32:04+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/mypromgrcmd.rb 2025-02-11...

CVE-2024-11320

creationtimestamp| type| source ---|---|--- 2024-11-21 10:11:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113520403781165691 2024-12-01 12:59:15+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9279 2024-12-02 03:04:28+00:00| published-proof-of-concept|...

CVE-2024-28185

creationtimestamp| type| source ---|---|--- 2024-11-20 22:41:34+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/judge0sandboxescapecve202428189.rb 2025-02-06 03:13:46+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23...

CVE-2024-28189

creationtimestamp| type| source ---|---|--- 2024-11-20 22:41:34+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/judge0sandboxescapecve202428189.rb 2025-02-06 03:13:46+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23...

CVE-2024-48990

creationtimestamp| type| source ---|---|--- 2024-11-20 18:45:21+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9102 2024-11-21 13:05:05+00:00| seen| https://t.me/truesecator/6456 2024-11-22 00:03:09+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9121 2024-11-22...