CVE-2025-66384

app/Controller/EventsController.php in MISP before 2.5.24 has invalid logic in checking for uploaded file validity, related to tmpname...

EUVD-2020-29735

Malware in sbrugna...

EUVD-2018-20556

Malware in sbrugna...

EUVD-2022-31755

Malicious code in bioql PyPI...

CVE-2020-8891

An issue was discovered in MISP before 2.4.121. It did not canonicalize usernames when trying to block a brute-force series of invalid requests...

CVE-2022-23176

creationtimestamp| type| source ---|---|--- 2022-04-14 17:10:02+00:00| exploited| https://t.me/itsecnews/488 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:30:22+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971508 2025-01-30 02:17:49+00:00|...

CVE-2021-38294

creationtimestamp| type| source ---|---|--- 2021-11-18 23:24:22+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/nimbusgettopologyhistorycmdexec.rb 2025-02-06 03:13:45+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23...

CVE-2018-8643

creationtimestamp| type| source ---|---|--- 2021-11-08 08:58:18+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422...

CVE-2020-2509

creationtimestamp| type| source ---|---|--- 2021-04-03 04:19:58+00:00| seen| https://t.me/cKure/4647 2022-12-24 16:06:16+00:00| published-proof-of-concept| https://t.me/dilagrafie/2172 2022-12-24 16:06:16+00:00| published-proof-of-concept| https://t.me/dilagrafie/232 2023-06-14 21:10:04+00:00|...

CVE-2020-10243

creationtimestamp| type| source ---|---|--- 2021-01-07 21:17:36+00:00| published-proof-of-concept| Telegram/ELp7-iIDiecmdH1RYNFuXslf5yrqKKOhnw0CBvUrc8AgfQ 2024-11-14 06:07:32+00:00| seen| MISP/06ccd168-0690-4c84-a9aa-cddc0b87f7ef...

CVE-2018-8045

creationtimestamp| type| source ---|---|--- 2021-01-07 21:17:36+00:00| published-proof-of-concept| Telegram/ELp7-iIDiecmdH1RYNFuXslf5yrqKKOhnw0CBvUrc8AgfQ 2023-10-25 07:54:46+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/22 2024-11-14 06:07:31+00:00| seen|...

CVE-2020-10173

creationtimestamp| type| source ---|---|--- 2020-10-09 13:24:39+00:00| seen| MISP/b14f5ca4-fb33-4da3-ad29-dcaf9e3d3fc4 2020-10-09 13:36:15+00:00| seen| MISP/e439b884-82c9-422e-bee5-4425a48da4c3 2020-10-09 13:38:17+00:00| seen| MISP/401eb7d4-9864-4e3e-bdd7-6243b90979c8 2026-03-18 00:00:00+00:00|...

CVE-2020-25766

An issue was discovered in MISP before 2.4.132. It can perform an unwanted action because of a POST operation on a form that is not linked to the login page...

Design/Logic Flaw

An issue was discovered in MISP 2.4.128. app/Controller/AttributesController.php has insufficient ACL checks in the attachment downloader...

CVE-2020-15412

An issue was discovered in MISP 2.4.128. app/Controller/EventsController.php lacks an event ACL check before proceeding to allow a user to send an event contact form...

CVE-2020-7352

creationtimestamp| type| source ---|---|--- 2020-06-15 14:42:43+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/goggalaxyclientserviceprivesc.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23...

CVE-2020-10198

creationtimestamp| type| source ---|---|--- 2020-04-20 21:16:00+00:00| seen| MISP/900fbe46-8598-42ef-9a36-51739019e010 2020-04-20 21:16:58+00:00| seen| MISP/86efb74f-bd24-48f7-98b0-08d9ce5010e7 2020-10-09 14:05:30+00:00| seen| MISP/dff0a117-d14d-49e3-b750-205c67dd975a...

CVE-2020-8893

An issue was discovered in MISP before 2.4.121. The Galaxy view contained an incorrectly sanitized search string in app/View/Galaxies/view.ctp...

Design/Logic Flaw

An issue was discovered in MISP before 2.4.121. ACLs for discussion threads were mishandled in app/Controller/ThreadsController.php and app/Model/Thread.php...

Code injection

An issue was discovered in MISP before 2.4.121. The Galaxy view contained an incorrectly sanitized search string in app/View/Galaxies/view.ctp...